| #!/bin/sh | |
| # check_forensic <forensic log file> | |
| # check the forensic log for requests that did not complete | |
| # output the request log for each one | |
| F=$1 | |
| cut -f 1 -d '|' $F > /tmp/fc-all.$$ | |
| grep + < /tmp/fc-all.$$ | cut -c2- | sort > /tmp/fc-in.$$ | |
| grep -- - < /tmp/fc-all.$$ | cut -c2- | sort > /tmp/fc-out.$$ | |
| # use -i instead of -I for GNU xargs | |
| join -v 1 /tmp/fc-in.$$ /tmp/fc-out.$$ | xargs -I xx egrep "^\\+xx" $F | |
| rm /tmp/fc-all.$$ /tmp/fc-in.$$ /tmp/fc-out.$$ |