用脚本来查询vsftp的登录情况,包括登录成功和登录失败,方法为脚本 [参数]
#! /bin/bash case $1 in help) echo " login) search login log; fail ) search fail login log; " ;; login) cat /var/log/vsftpd.log |sed -n '/.*LOGIN/'p |awk '{print $8,$9,$10,$12}' |uniq -c |sort -n |awk 'BEGIN{print "occurrence user ip\n------------------------------------------------------------"}{print -"\t"$1"\t""\t"$2"\t""\t"$5}' ;; fail) cat /var/log/vsftpd.log |sed -n '/.*FAIL LOGIN/'p |awk '{print $8,$9,$10,$12}' |uniq -c |sort -n |awk 'BEGIN{print "occurrence user ip\n------------------------------------------------------------"}{print -"\t"$1"\t""\t"$2"\t""\t"$5}' ;; *) echo "error! please login or fail" ;; esac