Mydoom

[Peter Peters]

On Wed, 28 Jan 2004 14:42:01 +0000, you wrote:


>grep MailScanner * | grep "Found the" | awk '{ print $9 }' | sort | uniq -c | sort -nr | head -10

>     22 W32/Swen at MM
>      1 awk               <-- ??? no idea why

What I usually do in these cases is checking what I get with just
grep MailScanner * | grep "Found the"

When the numbes are not to high you can look for it manually. If this
doesn't give some logline with awk on the 9-th position you can do
grep MailScanner * | grep "Found the" | awk '{ print $9 }'

Perhaps awk gives some error message that is piped into sort.

--
Peter Peters, senior netwerkbeheerder
Dienst Informatietechnologie, Bibliotheek en Educatie (ITBE)
Universiteit Twente,  Postbus 217,  7500 AE  Enschede
telefoon: 053 - 489 2301, fax: 053 - 489 2383, http://www.utwente.nl/civ