localshowuserfromip



#!/bin/sh
#
# /usr/local/sbin/localshowuserfromip
# Copyright 2007-2008 Jonas Smedegaard <dr@jones.dk>
#
# $Id: localshowuserfromip,v 1.4 2008-02-03 22:09:07 jonas Exp $
#
# List recent identifiable users from some IP address
#
#searchstring="$1"
#egrep_before="$2"
#egrep_after="$3"
#sed_shortline="${4:-$sed_longline}"
#sed_msgid="$5"
#sed_qid="$6"
#sed_username="$7"
#sed_longline="${8:-s/^\(.\{15\}\) [^:]*: /\1 /}"
#
# TODO: Find multiple kinds of entries - like this one too:
# 9FC17B802: client=084202203102.customer.alfanett.no[84.202.203.102], sasl_method=PLAIN, sasl_username=kr
#

set -e
localshowlogentries "$1" \
    'dovecot: .*: Login: .*, rip=(' \
    '), lip=' \
    's/^\(.\{15\}\) [^:]*: \([^-]*\)-login: Login: user=</\1 (\2) /;s/>, .*$//' \
    '' \
    '' \
    's/^.* user=<//;s/>, .*$//'

exit 0