shell熟的兄弟请进，如何统计日志里面访问次数最多的IP

bbskuang

shell熟的兄弟请进，如何统计日志里面访问次数最多的IP

比如：

TCP    192.168.0.97:1052      60.28.216.15:80        CLOSE_WAIT
TCP    192.168.0.97:1436      219.133.60.243:8000    CLOSE_WAIT
TCP    192.168.0.97:1624      72.14.235.101:443      CLOSE_WAIT
TCP    192.168.0.97:1773      192.168.0.2:8000       ESTABLISHED
TCP    192.168.0.97:2181      207.46.110.37:1863     ESTABLISHED
TCP    192.168.0.97:2187      64.4.37.41:1863        ESTABLISHED
TCP    192.168.0.97:2188      207.46.27.162:1863     ESTABLISHED
TCP    192.168.0.97:2406      219.133.49.80:443      CLOSE_WAIT
TCP    192.168.0.97:4127      192.168.0.165:2120     ESTABLISHED
TCP    192.168.0.97:4142      192.168.0.165:2138     ESTABLISHED
TCP    192.168.0.97:4147      219.133.63.142:443     CLOSE_WAIT



要统计连接最多的前5个IP，SHELL语句要怎么写？先拜谢了。

wd_afei

awk '{print $3}' | awk -F: '{print $1}' | sort | unic -c

frogfay

awk '{print $3}' | awk -F: '{print $1}' | sort | uniq -c|sort -r|head -n 5