Re: [cobalt-users] The Code-Red Worm is attacking... GOD it's attacking.

[Andre Bonhote <anbonhote@xxxxxxxxxxxxxxx>]

Hi Diana!

On Fri, Jul 20, 2001 at 12:37:46AM -0400, Diana Brake wrote:
 
> I get the basic part, what I was wondering is where in the command string 
> does it define one hour...

Nowhere. It's not filtering for the hours.

If you want to find out how many attacks hit your machine for example
between one o'clock and 1:59:59, you can pipe grep's output into another
grep:

grep '\.ida' /var/log/httpd/access | grep '20/Jul/2001:01' | wc -l

The last portion of the second grep (the :01) matches every line which
was written within this timespan.

If you're interested in such things, read Usenet Newsgroups, like
comp.unix.shell

HTH

André

-- 
André Bonhôte
IP Engineer
Email:  anbonhote@xxxxxxx

Colt Telecom AG - Switzerland
Muertschenstrasse 27
CH - 8048 Zurich
Phone:  (++41) +1 5 600 600
Fax:    (++41) +1 5 600 610
Web:    http://www.colt.ch