Add Apache Bytes - Revision history

Smsldoo at 16:14, 6 March 2015

2015-03-06T16:14:38Z

Smsldoo at 16:02, 6 March 2015

2015-03-06T16:02:49Z

Smsldoo: Created page with "Category:One Liners ==Overview== This one liner is designed to add up the apache send or receive byte size for a specific time period and return the IPs that use the most..."

2015-03-06T15:58:27Z

Created page with "Category:One Liners ==Overview== This one liner is designed to add up the apache send or receive byte size for a specific time period and return the IPs that use the most..."

New page

[[Category:One Liners]]
==Overview==

This one liner is designed to add up the apache send or receive byte size for a specific time period and return the IPs that use the most.

==Script==

<source lang='bash'>
daterange='06/Mar/2015:09'; \
domlog='/usr/local/apache/domlogs/petitesy/petitesymphony.com'; \
for ip in $(grep $daterange $domlog | awk '{print $1}' | sort | uniq |sort); \
do grep $daterange $domlog | grep $ip | awk "{total+=\$10}END{printf \"%15s: %'d\n\", $ip, total}"; \
done | sort -n -k 2 | tail
</source>

==What to change==
daterange; Date range is the partial date you would like to search for.
For example 06/Mar/2015:09 will match the 9th hour of March 6th 2015.
06/Mar/2015:09:20 will match 9:20 on March 6th 2015.

domlog; This is the specific domlog file you would like to look at. Technically you can set this to a wild card, but the awk will need to be adjusted to take in to account the file name.

If you have a custom domlog setup with received bytes in its own column you can change the command to add up that column instead:

<source lang='bash'>
daterange='06/Mar/2015:09'; \
domlog='/usr/local/apache/domlogs/petitesy/petitesymphony.com'; \
for ip in $(grep $daterange $domlog | awk '{print $1}' | sort | uniq |sort); \
do grep $daterange $domlog | grep $ip | awk "{total+=\$7}END{printf \"%15s: %'d\n\", $ip, total}"; \
done | sort -n -k 2 | tail
</source>

Obviously this depends on what column you are wanting to add up.

@@ Line 27: / Line 27: @@
 domlog='/usr/local/apache/domlogs/petitesy/petitesymphony.com'; \
 for ip in $(grep $daterange $domlog | awk '{print $1}' | sort | uniq |sort); \
-    do grep $daterange $domlog | grep $ip | awk "{total+=\$7}END{printf \"%15s: %'d\n\", \"$ip\", total}"; \
+    do grep $daterange $domlog | grep $ip | awk "{total+=\$6}END{printf \"%15s: %'d\n\", \"$ip\", total}"; \
 done | sort -n -k 2 | tail
 </source>
 Obviously this depends on what column you are wanting to add up.