Question

是否容易印刷IP_Address:port# ? 由于我刚到塞德的指挥所去,港口被 stripped除。

input file example

Apr 6 14:20:41 TCP 178.255.83.1:80 in

preferred output like this

Apr 6 14:20:41 TCP 178.255.83.1:80 in United Kingdom

egrep -w  TCP|UDP  $Denied_IPs |
sed  s/:[^:]* in/ in/; s/:[^:]* out/ out/  |
awk  {cmd="echo "$5" | code | fgrep  Country:  | cut -c 16-43";
      cmd | getline rslt;
      close(cmd);
      print $1" "$2" "$3" "$4" "$5" "$6" "rslt}  >> "$IP2COUNTRY"

Answer 1

The sed command is stripping the port explicitly. Given that that is all the sed command is doing, simply remove it from the expression.

这样就能够以一种不乐观的方式执行。特别是在删除<条码>后,<条码>,<条码>>>> 可在<代码>wk上加方括号:

awk  / (TCP|UDP) / {
       split($5, addr, /:/);
       cmd = "echo " addr[1] " | code | fgrep Country: | cut -c 16-43";
       cmd | getline rslt;
       close(cmd);
       print $1, $2, $3, $4, $5, $6, rslt
     }  < "$Denied_IPs" >> "$IP2COUNTRY"

我可以提供帮助,但认为在<条码>上援引<条码><>/代码>。可优化。

(我也删除了<代码>上的单一引文。) 国家:没有用处,如果需要had<>/em>,则实际上会打断文字,因为整件已经用单一文字包装。

input file example

preferred output like this

友情链接