Home/ Questions/Q 7841051
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-02T16:00:52+00:00

I can’t seem to identify where the syntax error is ..I’ve tried to these

  • 0

I can’t seem to identify where the syntax error is ..I’ve tried to these 2 statements but nothing gets written to the ‘BlockedIPs’ file. Can someone please help? Thanks!

awk '/ (TCP|UDP) / { split($5, addr, /:/); cmd = "/Users/user1/Scripts/geoiplookup " addr[1] | awk '{print $4, $5, $6}'; cmd | getline rslt; close(cmd); print $1, $2, $3, rslt }' < "$IP_PARSED" >> "$BlockedIPs"


awk '/ (TCP|UDP) / { split($5, addr, /:/); cmd = "/Users/user1/Scripts/geoiplookup " addr[1] " | awk '{print $4, $5, $6}'" ; cmd | getline rslt; close(cmd); print $1, $2, $3, rslt }' < "$IP_PARSED" >> "$BlockedIPs"
Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Your problem is primarily with quoting and stems from the fact that you’re trying to call AWK from within an AWK one-liner. It’s certainly possible, but getting the quoting right would be very tricky.

    It would be much better if you retrieved the complete output of geoiplookup into a variable then did a split() to get just the data you need. Something like:

    awk '/ (TCP|UDP) / { split($5, addr, /:/); cmd = "/Users/user1/Scripts/geoiplookup " addr[1]; cmd | getline rslt; split(rslt, r); close(cmd); print $1, $2, $3, r[4], r[5], r[6] }' < "$IP_PARSED" >> "$BlockedIPs"
    • 0