in reply to CISCO Log file pattern matching (again!)

There's two things.

The first is that you don't allow numbers in the domain name and in the example there are numbers.

The second is that the 53 before the arrow isn't matched anywhere.

Struan

  • Comment on Re: CISCO Log file pattern matching (again!)

Replies are listed 'Best First'.
Re: Re: CISCO Log file pattern matching (again!)
by shenme (Priest) on Aug 25, 2003 at 08:02 UTC
    The reformatting that splits long lines caught you:
    +   .   .   .   .   .   list 101 denied icmp 10.4.12.2
    +53 -> 10.7.151.48 :8/0:, 1 packet

    The '53' was actually a continuation of "10.4.12.253".   (Well, I'm pretty sure anyway ... it's 4am here ... ;-)