#! /bin/sh seen=/tmp/seen$$ new=/tmp/new$$ unseen=/tmp/unseen$$ touch $seen while true; do grep reject /var/log/syslog | grep 'to=' | \ sed 's/.*from=<\([^>]*\)>.*/\1/' | sort -u > $new comm -13 $seen $new > $unseen sort $seen $unseen > $new mv $new $seen if [ -s $unseen ]; then cat $unseen else echo -n . fi sleep 60 done