Hi,

in this case it would be good to have an example file of your logs to be able to see what you want to do and where the problem is.

But, if I understand the intent of the program right you have a certain pattern to identify session starts and you have a certain pattern to identify session continuation entries. Why don't you do it in one rush?

It seems that you can always identify a line by a session id. As soon as you hit a line you decide whether it's a session start or session cont line. If it's a session start you do somthing like:

my %sessions;
$sessions{$id}->{'start'}->{'line'} = $lineno;
$sessions{$id}->{'start'}->{'timestamp'} = $timestamp;

[download]

For every cont entry you do the following:

$sessions{$id}->{'last'}->{'line'} = $lineno;
$sessions{$id}->{'last'}->{'timestamp'} = $timestamp;

[download]

assuming that the timestamps in the log file a monotonous rising. In the end you have a hash %sessions where every key is a session-id and with the value hash you can do all calculations you want.

Am I wrong in my assumptions?

Regards
McA

In reply to Re: Suspect FH issues by McA
in thread Suspect FH issues by kdmurphy001

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.