[PLUG] Question

Abraham Zwygart ziggy at anodizing.com
Wed Apr 24 18:18:33 UTC 2002


Hi all,

I have a script that list all users that try to logon a linux pop3 email server
incorrectly.
It sorts (by logon and address) and emails the list to me.  I would like to take it
one
step further, and that is to only list each person once with the number of times
they had a failed login.

sample of the output:
user=usera           host=[##.##.##.1]     Apr 23 11:09:53
user=usera           host=[##.##.##.1]     Apr 23 11:10:04
user=usera           host=[##.##.##.1]     Apr 23 11:10:40
user=usera           host=[##.##.##.1]     Apr 23 11:10:50
user=userb           host=[##.##.##.2]     Apr 22 06:43:39
user=userb           host=[##.##.##.2]     Apr 22 12:02:57
user=userb           host=[##.##.##.2]     Apr 22 12:03:02
user=userc           host=[##.##.##.3]     Apr 24 10:38:29

would like:
user=usera           host=[##.##.##.1]   faild logins=4
user=userb           host=[##.##.##.2]   faild logins=3
user=userc           host=[##.##.##.3]   faild logins=1

The count needs to change when the user name and ip address change.
Is there a easy script command that can do this?

Thanks
Abraham Z.

--
+-----------------------------------------------------------------------------
| Abraham Zwygart                        Senior Programmer Analyst/
| SAPA Anodizing Inc.                             Database Administrator
| 7933 N. E. 21st Avenue                Email: ziggy at anodizing.com
| Portland, OR 97211
| Phone: (503) 972-1404 x 1232     Fax:   (503) 972-1408
|
| The thoughts, comments, and opinions expressed herein are mine
| and do not reflect those of my employer, or anyone else.
+-----------------------------------------------------------------------------







More information about the PLUG mailing list