home | help 
clfsplit(1)			    logtools			     clfsplit(1)

NAME
     clfsplit - split Common-Log Format web logs based on IP address

SYNOPSIS
     clfsplit  [--help]  [-i  input]  -d defaultfile -f file -s spec [-f file -s
     spec]

DESCRIPTION
     The clfsplit will split up large CLF format web logs based on  IP	address.
     This is for creating separate log analysis passes for internal and external
     users of web pages.

OVERVIEW
     The defaultfile parameter specifies where data goes if it doesn't match any
     of the IP ranges.	This could be /dev/null depending on your aims.

     The  -i input parameter gives the file to take input from (default standard
     input).

     The -f file parameter must be given before the list of IP addresses.

     The spec parameter is the IP addresses that go to the file in question.  It
     is of the form start[-end][:start[-end]] where start and  end  specify  the
     start  and  ends of ranges of IPs.  Also the CIDR notation can be used or a
     single IP address.  If there is a large number of IP  ranges  then  a  file
     name can be given which contains a set of IP ranges, one range per line.

EXIT STATUS
     0 No errors

     1 Bad parameters

     2 Can't open input

     3 Can't open/write to output file

     4 Can't open and read from spec file

AUTHOR
     This  program, its manual page, and the Debian package were written by Rus-
     sell Coker <russell@coker.com.au>.

SEE ALSO
     clfmerge(1),clfdomainsplit(1)

Russell Coker <russell@coker.com.au>  0.06			     clfsplit(1)
home | help