Perl script: digit matching..(urgent)

[terranceyaul]

I'm wrote a program to read the Snort log file, the program i apply File::Tail function to continue retrieve information of the updated log file..
so the display is like this

Mar 30 01:49:57 2011) 03/30-01:49:50.607858 119.40.116.196:80 -> 192.168.242.133:34628
TCP:34628-80 (Wed Mar 30 01:49:57 2011) TCP TTL:128 TOS:0x0 ID:34869 IpLen:20 DgmLen:40
TCP:34629-80 (Wed Mar 30 01:49:57 2011) 03/30-01:49:51.309716 119.40.116.196:80 -> 192.168.242.133:34629
UDP:41415-53 (Wed Mar 30 01:49:57 2011) 03/30-01:49:47.220999 192.168.242.2:53 -> 192.168.242.133:41415
UDP:44705-53 (Wed Mar 30 01:49:57 2011) 03/30-01:49:47.427011 192.168.242.2:53 -> 192.168.242.133:44705
UDP:50539-53 (Wed Mar 30 01:49:57 2011) 03/30-01:49:47.213455 192.168.242.2:53 -> 192.168.242.133:50539
TCP:34628-80 (Wed Mar 30 01:49:57 2011) ***AP**F Seq: 0x2F3E700A  Ack: 0x2359814F  Win: 0xFAF0  TcpLen: 20
TCP:34629-80 (Wed Mar 30 01:49:57 2011) TCP TTL:128 TOS:0x0 ID:34871 IpLen:20 DgmLen:40
UDP:41415-53 (Wed Mar 30 01:49:57 2011) UDP TTL:128 TOS:0x0 ID:34859 IpLen:20 DgmLen:65
UDP:44705-53 (Wed Mar 30 01:49:57 2011) UDP TTL:128 TOS:0x0 ID:34861 IpLen:20 DgmLen:153
UDP:50539-53 (Wed Mar 30 01:49:57 2011) UDP TTL:128 TOS:0x0 ID:34857 IpLen:20 DgmLen:179
 

I want to match the IP address so i had work like this:

foreach(@pending) {
    if (@pending =~ /((\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}):(\d{1,5}))/) {
        print $_-> {"input"}." (".localtime(time).") ".$1->read;
    }
}
 

But it's seem not work. nothing to print out?any one please help me

use File::Tail;
 
chdir( "/var/log/snort");
 
foreach my $fol(glob "..*.*") {
 
    print "Opening $fol\n";
 
    chdir("/var/log/snort/$fol");
 
    foreach my $subfile(glob "*:*"){
        print "opening $subfile\n";
        push(@files,File::Tail->new(name=>"$subfile",debug=>$debug));
    }
 
    while (1) {
        ($nfound,$timeleft,@pending) = File::Tail::select(undef,undef,undef,$timeout,@files);
 
        unless ($nfound) {
            print "Nothing to print \n";
 
        } else {
            foreach (@pending) {
                if (/([.\d]+):\d -> ([.\d]+):\d/) {
                    print $_->{"input"}." (".localtime(time).") ".$2 -> read;
                }
            }
        }
    }
 

[miller]

Read the documentation for File::Tail again as it appears you're using it wrong. The @pending array in the example provided does not immediately contain the next lines of your input files, but instead objects that must be accessed. Just look at the example more closely.

- Miller