首页 > 试题广场 >

Nginx日志分析4-查询某个IP的详细访问情况

[编程题]Nginx日志分析4-查询某个IP的详细访问情况

热度指数：6835 时间限制：C/C++ 1秒，其他语言2秒空间限制：C/C++ 256M，其他语言512M
算法知识视频讲解

假设Nginx的日志存储在nowcoder.txt里，内容如下：

192.168.1.20 - - [21/Apr/2020:14:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.21 - - [21/Apr/2020:15:27:49 +0800] "GET /2/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.22 - - [21/Apr/2020:21:27:49 +0800] "GET /3/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.23 - - [21/Apr/2020:22:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.24 - - [22/Apr/2020:15:27:49 +0800] "GET /2/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.25 - - [22/Apr/2020:15:26:49 +0800] "GET /3/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.20 - - [23/Apr/2020:08:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.21 - - [23/Apr/2020:09:20:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.22 - - [23/Apr/2020:10:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.22 - - [23/Apr/2020:10:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.20 - - [23/Apr/2020:14:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.21 - - [23/Apr/2020:15:27:49 +0800] "GET /2/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.22 - - [23/Apr/2020:15:27:49 +0800] "GET /3/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.25 - - [23/Apr/2020:16:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.24 - - [23/Apr/2020:20:27:49 +0800] "GET /2/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.25 - - [23/Apr/2020:20:27:49 +0800] "GET /3/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.20 - - [23/Apr/2020:20:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.21 - - [23/Apr/2020:20:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.22 - - [23/Apr/2020:20:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.22 - - [23/Apr/2020:22:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.21 - - [23/Apr/2020:23:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"

现在需要编写shell脚本查询192.168.1.22的详细访问次数情况，按访问频率降序排序。你的脚本应该输出：

4 /1/index.php
2 /3/index.php

输入描述:

输出描述:

示例1

输入

192.168.1.20 - - [21/Apr/2020:14:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.21 - - [21/Apr/2020:15:27:49 +0800] "GET /2/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.22 - - [21/Apr/2020:21:27:49 +0800] "GET /3/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.23 - - [21/Apr/2020:22:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.24 - - [22/Apr/2020:15:27:49 +0800] "GET /2/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.25 - - [22/Apr/2020:15:26:49 +0800] "GET /3/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.20 - - [23/Apr/2020:08:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.21 - - [23/Apr/2020:09:20:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.22 - - [23/Apr/2020:10:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.22 - - [23/Apr/2020:10:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.20 - - [23/Apr/2020:14:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.21 - - [23/Apr/2020:15:27:49 +0800] "GET /2/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.22 - - [23/Apr/2020:15:27:49 +0800] "GET /3/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.25 - - [23/Apr/2020:16:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.24 - - [23/Apr/2020:20:27:49 +0800] "GET /2/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.25 - - [23/Apr/2020:20:27:49 +0800] "GET /3/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.20 - - [23/Apr/2020:20:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.21 - - [23/Apr/2020:20:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.22 - - [23/Apr/2020:20:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.22 - - [23/Apr/2020:22:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
192.168.1.21 - - [23/Apr/2020:23:27:49 +0800] "GET /1/index.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"

输出

4 /1/index.php
2 /3/index.php

算法知识视频讲解

Bash

王飞-6

shell

declare -A map
while read line
    do
        tmp=($line)
        [ ${tmp[0]} == "192.168.1.22" ] && ((map["${tmp[6]}"]++))
    done < nowcoder.txt
function InsertSort(){
	tmp=()
	for ve in ${map[*]}
	    do
	        tmp[${#tmp[*]}]=$ve
	        printf "${tmp[${#tmp[*]}]}"
	    done
	q=${#tmp[*]}
	for ((i=0;i<$q;i++))
	    do
	        for ((j=$i+1;j<$q;j++))
	            do
	                if [ ${tmp[$i]} -lt ${tmp[$j]} ];then
	                    t=${tmp[$i]}
	                    tmp[$i]=${tmp[$j]}
	                    tmp[$j]=$t
	                fi
	            done
	    done
}
InsertSort
for ((i=0; i<$q; i++))
    do
        for ve in ${!map[*]}
            do
                if [ ${tmp[$i]} -eq ${map[$ve]} ];then
                    echo "${map[$ve]} $ve"
                fi
            done
    done

awk

awk '{
    if ($1 == "192.168.1.22") {
        a[$7]++
    }
} END {
    for (i in a){
        printf("%d %s\n",a[i], i)
    }
}' | sort -r

发表于 2021-11-26 11:08:58 回复(1)

Bash

MarrioYu

awk '/192.168.1.22/{print $7}' 2.log | sort | uniq -c | sort -r | awk '{print $1,$2}'

发表于 2021-12-03 14:50:44 回复(0)

Bash

牛客717186338号

grep -E "192.168.1.22"|awk -F " " '{print $7}'|sort|uniq -c|awk '{print $1,$2}' 继续生产垃圾代码

发表于 2022-07-29 10:17:41 回复(0)

感性的小章鱼说等下个版本吧

grep "192.168.1.22" | awk '{print $7}' | sort | uniq -c | sort -r | awk '{print $1,$2}'

发表于 2022-06-28 14:25:45 回复(0)

。。。。201906060046228

#!/bin/bash

cat nowcoder.txt |grep 192.168.1.22|awk -F" " '{print $7}'|sort |uniq -c|awk '{print $1,$2}'

发表于 2024-02-27 10:43:28 回复(0)

Bash

Charseki

#!/bin/bash

declare -A map

while read line; do
    arr=($line)
    if [[ ${arr[0]} =~ 192.168.1.22 ]]; then
        ((map["${arr[6]}"]++))
    fi
done < nowcoder.txt

for ip in ${!map[@]}; do
    echo ${map[${ip}]}' '${ip}
done | sort -nr

发表于 2023-10-12 15:52:40 回复(0)

无痕*

grep 192.168.1.22 | awk '{map[$7]++}END{for(j in map) printf("%d %s\n",map[j],j)}' | sort -nk1r

发表于 2023-09-22 18:09:30 回复(0)

bash

吃鸡是吃不到的

cat nowcoder.txt |grep 192.168.1.22|awk '{print $7}'|sort|uniq -c |sed -e 's/^ *//'

发表于 2023-08-17 21:25:25 回复(0)

bash

Halo653224

cat nginx_ip04.txt | grep 192.168.1.22 | awk '{print $7}' | sort | uniq -c

发表于 2023-06-23 23:03:44 回复(0)

Bash

牛客935924829号

grep '192.168.1.22' nowcoder.txt|awk '{print $7}'|sort|uniq -c|awk '{print $1,$2}'

发表于 2022-09-14 16:33:46 回复(0)

Bash

牛客995180755号

awk数组+sort

awk '{
    if($1 ~ /192\.168\.1\.22/){
        a[$7]++
    }
}
END{
    for(i in a){
        print(a[i]" "i)
    }    
}' nowcoder.txt | sort -nr

发表于 2022-08-27 22:50:34 回复(0)

Bash

久梦柒

awk '/^192.168.1.22/{ip[$7]++}END{for(i in ip) print ip[i],i}' nowcoder.txt|sort -r

发表于 2022-08-22 16:58:26 回复(0)

Bash

牛客190660620号

grep "192.168.1.22" nowcoder.txt | awk '{print $7}' |  sort -k 1,1 | uniq -c | awk '{print $1,$2}'

发表于 2022-08-11 20:21:02 回复(0)

Bash

温柔有点恬

grep '192.168.1.22' nowcoder.txt | cut -d " " -f 7 | sort | uniq -c | sort -r | awk '{print $1,$2}'

发表于 2022-07-26 18:54:23 回复(0)

Bash

河边小石子

awk '$1~/192.168.1.22/{print $7}' nowcoder.txt|awk '{a[$1]+=1}END{for(i in a)print a[i],i}'|sort -rn

发表于 2022-07-25 22:22:06 回复(0)

Bash

科学养兔

grep '192.168.1.22'|awk '{print $7}'|sort|uniq -c|awk '{print $1,$2}'

发表于 2022-07-21 14:18:41 回复(0)

Bash

麦子小肥

sed -n '/192.168.1.22/p' nowcoder.txt|awk '{print $7}'|sort|uniq -c|xargs -n2

发表于 2022-07-01 15:38:24 回复(0)

Bash

已注销

awk '$1=="192.168.1.22"{print $7}'|sort|uniq -c|sed 's/^ *//g'

发表于 2022-06-24 15:28:34 回复(0)

Bash

Liypoi

awk '/192.168.1.22/{print $7}' nowcoder.txt | sort | uniq -c | awk '{print $1,$2}'

发表于 2022-06-11 19:56:13 回复(0)

Bash

JianYue

awk -F " " '{if($1=="192.168.1.22") sum[$7]+=1}END{for(x in sum){
print sum[x], x
}}' | sort -r -k 1

发表于 2022-05-10 18:50:57 回复(0)

提交观点

问题信息

难度：

35条回答 10收藏 783浏览

通过挑战的用户

查看代码

牛客90548...

2022-09-15 20:16:57
殿小下大人

2022-09-14 23:44:46
冰心灵果冻

2022-09-14 20:00:27
牛客93592...

2022-09-14 16:32:50
小鸿鸿

2022-09-14 15:08:06

Nginx日志分析4-查询某个IP的详细访问情况

输入描述:

输出描述:

输入

输出

awk数组+sort

问题信息

热门推荐

通过挑战的用户

相关试题