2006-02-04, 07:34 PM
2006-02-04, 08:19 PM
Hum, quick'n'dirty:
Code:
grep -v "\- \-" access.log|cut -d' ' -f1|uniq
Short explanation:
grep -v "\- \-" access.log: shows only access lines that are authenticated
cut -d' ' -f1: prints the first field of the space separated line (which is the IP address in the logs)
uniq: removes all duplicate IP addresses
2006-02-04, 08:44 PM
they will turn up in the normal logs, 200 = successful login, 401 = failed login