(root@dns1!/home/rain) tcpdump -l -n -s 0 '(net 205.217.13.0/24 or net 208.155.122.0/24 or net 209.219.101.0/24 or net 209.219.104.0/24 or net 208.148.72.0/24 or net 208.171.8.0/24) and not arp' | sed -u -r 's, ([0-9]+)\.([0-9]+)\.([0-9]+)\.([0-9]+)(\.[0-9]*), \1.\2.\3.\4,g;s,:,,g' | awk '{if ($3=="208.148.72.240") {q=$5} else {q=$3} print "SELECT COALESCE(MAX(UserName),'\''"q"'\'') FROM accounting WHERE FramedAddress='\''"q"'\'' ORDER BY LogDate DESC,LogTime DESC LIMIT 1;";fflush();}' | mysql -nNB -hking -uvopradius -p$PASS vopradius | uniq