From: Derek Smith <derekbellnersmith@...>
Date: 2010-03-22T11:23:53+09:00
Subject: A regexp?

Hi All!

Thank you in advance! :)

I am parsing through /var/log/mail.log via regexp and I need to skip
date lines that are NOT followed by to|from|connect.  Here is my code:

mailog        = "/var/log/mail.log"

    File.open(mailog, 'r+') do |mlog|
        if mlog.flock(File::LOCK_SH) == 0
            File.foreach mailog do |line|
                ##p(line.chomp.scan(/^(.{15})\s+(\S+)\s+(\S+)\s+(.+)$/).first)
                datestr = (line.chomp.scan(/^.{15}/))
                mailmsg =
(line.chomp.scan(/^.?connect\sto.*|to=.*|host.*$/))
                puts datestr
                puts mailmsg
            end
        else
            string = 'LOCK_SH was not obtained on /var/log/maillog!'
        end ### END if ###

        mlog.flock(File::LOCK_UN)

    end ### END do mlog ###

The output of this code is below and I DO NOT want, can skip the output
such as
Mar 21 18:58:08
Mar 21 18:58:08
Mar 21 18:58:08

I only want ouput IF the date is followed by to=|connect\sto.*|host.*


to=<colossus1821@juno.com>, relay=mx.dca.untd.com[64.136.44.37]:25,
delay=177323, delays=177322/0.02/1.8/0, dsn=4.0.0, status=deferred (host
mx.dca.untd.com[64.136.44.37] refused to talk to me: 550 Access
denied...0b30748490a5c4c48900e4e9912059c0e18d1d24dd45d1896d5150b1f17551f975b124c9b1b12499b11974d1d44099f4d135f440c46d305d...)
Mar 21 18:58:08
Mar 21 18:58:08
Mar 21 18:58:08
to=<scottw@webav.com>, relay=none, delay=187566,
delays=187536/0.05/30/0, dsn=4.4.1, status=deferred (connect to
webav.com[74.117.116.83]:25: Operation timed out)
Mar 21 18:58:08
to=<stevew@webav.com>, relay=none, delay=187566,
delays=187535/0.02/30/0, dsn=4.4.1, status=deferred (connect to
webav.com[74.117.116.83]:25: Operation timed out)
Mar 21 18:58:08
Mar 21 18:58:08
to=<ssams@phoenixformations.com>, relay=none, delay=187576,
delays=187546/0.02/30/0, dsn=4.4.1, status=deferred (connect to
mail.phoenixformations.com[69.61.147.50]:25: Operation timed out)
-- 
Posted via http://www.ruby-forum.com/.