----- Original Message ----- From: "John Doe" <jdmls@xxxxxxxxx> To: "Frog" <frog@xxxxxxxx> Sent: Friday, 20 March, 2009 11:19:12 GMT +00:00 GMT Britain, Ireland, Portugal Subject: Re: Extracting selected data from logfile From: Frog <frog@xxxxxxxx> > Thank you Chris for the suggestion. It helped enormously. I have extracted the > data I was looking for by using the following: > tail -n 5000 access.log | grep "403" | awk '{print $1}' | uniq -d > file.txt Watch out, grep "403" will grab ab403cd and such... JD Good point JD! I'm going to use TCP_DENIED instead. Regards, Frog