QUESTION $1$:

$(10$ points$)$

Write a command to count the number of firewall events in the file.

Your command should exclude the header using a simple regular

expression.

Notice that the firewall event fields are delineated by a single space and contain the following

data points; date, time, action, protocol, src$-$ip$,$ dst$-$ip$,$ src$-$port, dst$-$port, size

QUESTION $2$:

$(10$ points$)$

Write a command to count the number of unique values in the src$-$ip

field.

The date field follows the format YYYY$-$MM$-$DD; the month and day values are padded to $2$

characters.

QUESTION $3$:

$(20$ points$)$

Write a command to count the number of events that match these

conditions;

$-$ The event occurred in August, $2018$ OR on July $4$th $2018$

$2018-08-$xx OR $2018-07-04$

$-$ The dst$-$port field is either $80$ or $443$

$-$ the action field is ACCEPT