Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 15 Jul 2003 00:49:15 +0930
From:      "Rob" <listone@deathbeforedecaf.net>
To:        <hawkeyd@visi.com>, "questions at FreeBSD" <freebsd-questions@freebsd.org>
Subject:   Re: sed(1) regular expression gurus
Message-ID:  <00b001c34a1b$4ad17800$a4b826cb@goo>
References:  <20030714140816.GA27439@sheol.localdomain>

next in thread | previous in thread | raw e-mail | index | archive | help
OK, here's a solution using awk - may be possible in sed, but awk has
more control statements for this kind of thing:

awk --posix -F'[^0-9A-Za-z.]+' '
  $1 ~ /by/ { result = $2
    for (i=3; i<=NF; i++) {
      if ($i ~ /^([0-9]+\.){3}[0-9]+$/) {
        result = result " " $i
      }
    }
  print result
  }'

* Use the field separator to throw away anything that isn't a number,
letter or periodic - don't have to worry about brackets anymore
* Match lines starting with 'by' and save the second word (which should
be a hostname)
* Check the following words - if they match an IP address, they're saved
too
* Then print the result!

There may be 'neater' ways of doing it, but it's the most concise
example I could come up with.

You need to include the --posix option to get the '{3}' notation to work
(peculiar to GNU awk).

----- Original Message -----
From: "D J Hawkey Jr" <hawkeyd@visi.com>
Subject: Attn: sed(1) regular expression gurus


> Hi all.
>
> I'm getting really frustrated by a seemingly simple problem. I'm doing
> this under FreeBSD 4.5.
>
> Given these portions of an e-mail's multi-line Received header as
tests:
>
>   by some.host.at.a.com (Postfix) with ESMTP id 3A4E07B03
>   by some.host.at.a.com (8.11.6) ESMTP;
>   by some.host.at.a.different.com (8.11.6p2/8.11.6) ESMTP;
>   by some.host.at.another.com ([123.4.56.789]) id 3A4E07B03
>   by some.host.at.yet.another.com (123.4.56.789) id 3A4E07B03
>
> I want to isolate the addresses (one for the 1st through 3rd, two for
> the 4th and 5th). Here's the sed(1) command I'm playing with:
>
>   echo "by nospam.mc.mpls.visi.com (Postfix) with ESMTP id 3A4E07B03"
\
>       |sed -E \
>         -e "s/by[[:space:]]+//" \
>         -e
"s/(\((\[?([0-9]{1,3}\.){3}[0-9]{1,3}\]?){0}\)|id|with|E?SMTP).*//"
>
> In all cases, the parenthetical word is returned, when only the last
> two should return the parenthetical word. The idea behind the first
> branch of the second sed(1) command is to match anything that isn't a
> "digits.digits.digits.digits" pattern. I've tried simpler expressions
> like "\(\[?[^0-9.]+\]?\)", but it fails on the third example.
>
> What the devil am I doing wrong?? Am I exercizing known bugs in GNU's
> sed(1)? Can anyone dream up a different solution - please, no Perl,
but
> awk(1) is fine.
>
> Thanks,
> Dave
>
> --
>   ______________________
______________________
>   \__________________   \    D. J. HAWKEY JR.   /
__________________/
>      \________________/\     hawkeyd@visi.com    /\________________/
>                       http://www.visi.com/~hawkeyd/
>
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
"freebsd-questions-unsubscribe@freebsd.org"
>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?00b001c34a1b$4ad17800$a4b826cb>