Fresh version at http://www.cozy.org/silverspoon/.
If you compile up the test program
big then you can use it to glean out a list of items that occur (aprox) a certain number of times. For example if “
yesterday -ip” dumps the log of yesterday’s web server traffic with just the IP addresses, then: “
yesterday -ip | big -c 50 > bl50” will show you the IP addresses that dropped by 50 or more times. Or you can then do “
yesterday -ip | big -c 40 -b bl50” to see the ones that dropped by from 40 to 50 times. The “
-b” switch stands for black list and all items in that set are discarded.