How can I extract the source IP from the following log format?
16:13:40.860435 IP 192.54.112.34.domain > 61.220.8.179.61415: 32341- 0/5/6 (207)
All I'm interested in is the 192.54.112.34 IP address?
Thanks....
Umm, use the Interactive Field Extractor? I would write in more detail on creating your own regex, but seeing as I recall you asking the same kind of question before it seems you would benefit from using the IFX.
The IFX does not show the 192.54.112.34.domain or the 61.220.8.179.61415: 32341 fields. Why is that?