You should get 'swatch' which generates perl scripts to parse thru
any log file.
You should be able to get it by anonymous ftp from Sierra.Stanford.EDU
> From Firewalls-Owner @
com Tue Feb 8 16:02:56 1994
> To: Firewalls @
> Subject: SOCKS report perl scripts?
> From: Roger Masse's the named <roj @
> X-Mts: smtp
> Has anyone any information on the existance of some perl
> or shell scripts that parse through the sockd syslog entries and
> come up with a weekly or daily usage report based on user and host?
> Roger Masse, Digital