Date: Fri,  9 Jul 93 04:30:14 PDT
From: Advanced Amateur Radio Networking Group <tcp-group@ucsd.edu>
Errors-To: TCP-Group-Errors@UCSD.Edu
Reply-To: TCP-Group@UCSD.Edu
Precedence: Bulk
Subject: TCP-Group Digest V93 #175
To: tcp-group-digest


TCP-Group Digest            Fri,  9 Jul 93       Volume 93 : Issue  175

Today's Topics:
                   NOS log file processing scripts
                           NOS mailbox size
                              Subscribe

Send Replies or notes for publication to: <TCP-Group@UCSD.Edu>.
Subscription requests to <TCP-Group-REQUEST@UCSD.Edu>.
Problems you can't solve otherwise to brian@ucsd.edu.

Archives of past issues of the TCP-Group Digest are available
(by FTP only) from UCSD.Edu in directory "mailarchives".

We trust that readers are intelligent enough to realize that all text
herein consists of personal comments and does not represent the official
policies or positions of any party.  Your mileage may vary.  So there.
----------------------------------------------------------------------

Date: Thu, 8 Jul 1993 14:20:01 -0600
From: ke9yq@ke9yq.ampr.org (Bob Van Valzah, ke9yq)
Subject: NOS log file processing scripts
To: Adam Robertson - Network Officer DIT <aroberts@csunb.mit.csu.edu.au>,

At  2:33 PM 7/7/93 +1000, Adam Robertson - Network Officer DIT
<aroberts@csunb.mit.csu.ed wrote:
>Hi all, Just doing some cleaning on the gateway, and decided to remove my
>old nos log file (its over 1Mb now).
>
>I have decided to do some processing on it to find out some stats about my
>gateway. (Number or starts, number of SMTP sent jobs etc)

Thought you might like to see the script I use to process log files on the
gateway here.  I'm mostly interested in who's using the gateway and in what
way, so the output is tuned to answer those questions.

Disclaimer:  This is a quick hack of a shell script that misbehaves in such
ways as using temp files in the current directory and not removing them
when done.  It runs for me on SunOS 4.1.3 and parses GRI 2.0M format
logfiles.

It's only 65 lines long, so I'll paste the source in here after the
signature.  If you want a copy without the tabs expanded, it's available
via anonymous from ke9yq.ampr.org (a.k.a. ke9yq.imsa.edu).

73, Bob, ke9yq

#!/bin/sh
awk '
$6 == "-"       {next}
$6 ~ /^[0-9.]+:[0-9smtp]+$/ {
        split($6, flds, ":")
        ip = flds[1]
        logents[ip]++
        if ($8 == "open") {
                opens[ip]++
                if ($9 == "Finger") fingeropens[ip]++
                else if ($9 == "FTP") ftpopens[ip]++
                else if ($9 == "MBOX") mboxopens[ip]++
                else if ($9 == "SMTP") smtpopens[ip]++
                else if ($9 == "POP3") pop3opens[ip]++
                else print "bum open: " $0 > "/dev/tty"
        }
        if ($8 == "close") {
                closes[ip]++
        }
        if ($8 == "MBOX") {
                if ($9 == "Login:") mboxlogin[ip]++
                else if ($9 == "sysop:") mboxsysop[ip]++
                else if ($9 == "Zap:")   mboxsysop[ip]++
                else print "bum mbox: " $0 > "/dev/tty"
        }
        if ($8 == "SMTP") {
                if ($9 == "sent") smtpsent[ip]++
                else print "bum smtp: " $0 > "/dev/tty"
        }
        if ($8 == "NNTP") {
                # Ignore nntp for now
        }
        {next}
}
#print any clinkers
{print "bum field 6: " $0 > "/dev/tty"}
END {
        for (ip in logents) {
                printf "%s %d %d %d %d %d %d %d %d %d\n", ip, logents[ip], pop3o
pens[ip], fingeropens[ip], ftpopens[ip], mboxopens[ip], smtpopens[ip], smtpsent[
ip], mboxlogin[ip], mboxsysop[ip]
        }
}
' $* |\
sort -n > ls.ip
awk '{printf "-x %s +pfset=0x2020\n", $1}' ls.ip > ls.dig
dig -f ls.dig | awk '
/^$/ {NR=0; next}
NR>1 {next}
{print}
' > ls.dn
paste ls.dn ls.ip |\
# Format report
awk '
BEGIN {
        hdrfmt = "%-25s %7s %4s %4s %3s %4s %5s %5s %6s %6s\n"
        rptfmt = "%-25s %7d %4d %4d %3d %4d %5d %5d %6d %6d\n"
        printf hdrfmt, "Host", "Logents", "POP3", "Fing", "FTP", "MBOX", "SMTPi"
, "SMTPo", "Logins", "Sysops"
        printf hdrfmt, "====", "=======", "====", "====", "===", "====", "====="
, "=====", "======", "======"
}
{
        if ($3 == "opcode:")
                printf rptfmt, $10, $11, $12, $13, $14, $15, $16, $17, $18, $19
        else
                printf rptfmt,  $3,  $5,  $6,  $7,  $8,  $9, $10, $11, $12, $13
}
'

------------------------------

Date: Thu, 08 Jul 1993 08:38:35 -0400
From: ashok@biochemistry.BIOC.CWRU.Edu (Ashok Aiyar)
Subject: NOS mailbox size
To: tcp-group@ucsd.edu

There appears to be a limitation of the mailbox size to about 1 megabyte.  
This is not normally a problem, except when someone receives a lot of large 
files and is out on vacation, as one of the users of my NOS box is.

Is there some relatively painless way that this limit can be increased to 2 
- 3 times that size?

Thanks,
Ashok
--
Ashok Aiyar                        Mail: ashok@biochemistry.cwru.edu
Department of Biochemistry                       Tel: (216) 368-3300
CWRU School of Medicine, Cleveland, Ohio         Fax: (216) 368-4544
MIME Enclosures OK

------------------------------

Date: Fri, 09 Jul 93 00:29:49 GMT
From: paul@topsy.demon.co.uk (Paul Turvey)
Subject: Subscribe
To: tcp-group@ucsd.edu

subsribe: paul@topsy.demon.co.uk

  ==========================================================================
  | Paul Turvey  "Modestly, unique"       Amateur: g1pjj@gb7zaa.#34.uk.eu  |
  | Email: paul@topsy.demon.co.uk         Amprnet: paul@g1pjj.ampr.org     |
  ==========================================================================

------------------------------

Date: Thu, 8 Jul 93 08:54:13 -0400
From: tcp-digest-relay@UCSD.EDU
***** UNDELIVERABLE MAIL sent to edb, being returned by bigmac!edb *****
mail: Error # 8 'Invalid recipient' encountered on system bigmac

Received: from ucsd.edu by bigmac.cns.BrockU.CA via SMTP (920110.SGI/911001.SGI.UNSUPPORTED.PROTOTYPE)
 for edb id AA00341; Thu, 8 Jul 93 08:54:11 -0400
Received: by ucsd.edu; id AA25840
 sendmail 5.67/UCSD-2.2-sun
 Thu, 8 Jul 93 04:30:16 -0700
Received: by ucsd.edu; id AA25836
 sendmail 5.67/UCSD-2.2-sun
 Thu, 8 Jul 93 04:30:15 -0700 for /usr/lib/sendmail -oc -odq -oi -ftcp-digest-relay tcp-digest-list
Message-Id: <9307081130.AA25836@ucsd.edu>
Date: Thu,  8 Jul 93 04:30:14 PDT
From: Advanced Amateur Radio Networking Group <tcp-group@ucsd.edu>
Errors-To: TCP-Group-Errors@UCSD.Edu
Reply-To: TCP-Group@UCSD.Edu
Precedence: Bulk
Subject: TCP-Group Digest V93 #174
To: tcp-group-digest@UCSD.EDU


TCP-Group Digest            Thu,  8 Jul 93       Volume 93 : Issue  174

Today's Topics:
                                 info

Send Replies or notes for publication to: <TCP-Group@UCSD.Edu>.
Subscription requests to <TCP-Group-REQUEST@UCSD.Edu>.
Problems you can't solve otherwise to brian@ucsd.edu.

Archives of past issues of the TCP-Group Digest are available
(by FTP only) from UCSD.Edu in directory "mailarchives".

We trust that readers are intelligent enough to realize that all text
herein consists of personal comments and does not represent the official
policies or positions of any party.  Your mileage may vary.  So there.
----------------------------------------------------------------------

Date: Wed, 7 Jul 1993 15:26:25 -0400
From: jae1@CS1.CC.Lehigh.EDU (JOEL A. B. ELSTON)
Subject: info
To: tcp-group@ucsd.edu

info

------------------------------

End of TCP-Group Digest V93 #174
******************************

------------------------------

End of TCP-Group Digest V93 #175
******************************
******************************