#!/bin/sh
sed -e '/Soft/d' -e '/FileName/d' -e '/protoId/d' 0100055F_Detail.txt >temp
cat temp|perl -ne '{s/--/ /g;s/:/ /g;print;}'>temp_1
echo 次数, 源IP >result.csv
cat temp_1|awk -F ' ' '{print$2}'|sort|uniq -c|sort -r |head -20 >>result.csv
echo ------------------------------------------------------------>>result.csv
echo 次数, 目的IP >>result.csv
cat temp_1|awk -F ' ' '{print$4}'|sort|uniq -c|sort -r |head -20 >>result.csv
echo ------------------------------------------------------------>>result.csv
echo 次数, 源端口 >>result.csv
cat temp_1|awk -F ' ' '{print$3}'|sort|uniq -c|sort -r |head -20 >>result.csv
echo ------------------------------------------------------------>>result.csv
echo 次数, 目的端口 >>result.csv
cat temp_1|awk -F ' ' '{print$5}'|sort|uniq -c|sort -r |head -20 >>result.csv
sed -i 's/./,/8' result.csv
echo ------------------------------------------------------------>>result.csv
grep honeypotsrc 0100055F_Detail.txt >>result.csv
grep honeypotdst 0100055F_Detail.txt >>result.csv
rm -f temp
rm -f temp_1