From: Bennett T. <be...@ra...> - 2002-12-26 19:18:05
|
Assuming (a) that the IP addr from which that connect attempt originated was 166.190.111.2, (b) that the preceeding text strings ("auth", "/mail/domain.com/username/.") always occur litterally just as they did in that line, and (c) that there's always a trailing number of some value in parentheses, then I believe this $pat will do you: my $pat = '^(... .. ..:..:..) \S+ pop3\[\d+\]:\s+-' . ' auth, /mail/domain\.com/username/\.(\d+\.\d+\.\d+\.\d+) \(\d+\)$'; -Bennett |