#!/bin/sh # # Make top-50 of incorrect FTP login attempts. # # # Usage: ziptest [ files ] # tmpfile=/tmp/tmp.$$ num=50; case $# in 0) files=`echo /var/adm/messages*` ;; *) files="$@"; ;; esac echo "Reading $files\n"; # # foreach file (/var/adm/messages.3 /var/adm/messages.2 /var/adm/messages.1 /var/adm/messages.0 /var/adm/messages) # grep "FTP LOGIN" $file >> u2 # end # grep "FTP LOGIN" $files | nawk '{ print $NF; }' | sort -o $tmpfile echo "**** TOP $num ****" uniq -c $tmpfile | sort +rn | head -$num echo "**** Alphabetic ****" uniq -c $tmpfile rm $tmpfile