log

more /var/log/httpd/access_log.20110428 | awk '{print $1}'| uniq -c | sort -n | uniq -c | sort -rn

効率悪い・・・
変更

more /var/log/httpd/access_log.20110428 | awk '{print $1}'|sort -n |
uniq -c | sort -nr > 20110428.log

ちょいと12時頃にアクセス多めなIP発見・・・
丸裸にしてやんよ　調べてみよう

tail -n 10000000 /var/log/httpd/access_log.20110428 | grep 2011:12 | grep ip | awk '{print $1,$4,$5,$11}'|
uniq -c > 20110428_h12.log