SED

https://www.regextester.com/1946

G8 = P(G1,G3)
G9 = P(G3,G4)

LH

sort NH-3ND-R6506E-D-1Cfg  | uniq | sed 's/[0-9]*//g' | sort | uniq | sed '/^$/d' > /tmp/x
我初步看了一下共有162条语法规则(见附件'rule_lists.txt')。


$ egrep -i 'ip access-list extended' NH-3ND-R6506E-D-1Cfg  | wc -l
54 个

$ sort NH-3ND-R6506E-D-1Cfg  | uniq -c | awk '{ if ($1>1) { print $0 }}' | wc -l
634条一模一样的语句

$ sort NH-3ND-R6506E-D-1Cfg  | uniq | sed 's/[0-9]*//g' | sort | uniq | wc -l => 162条语法规则

$ sort NH-3ND-R6506E-D-1Cfg  | sed 's/[0-9]/./g' | sort | uniq  | less

V2


一共是54个access-list,634条一模一样的语句
我的计划是分组进行转换,得先测试一下。




sed 's#ip access-list extended#acl advanced name#g' < NH-3ND-R6506E-D-1Cfg > v1
$ sed 's#any any#ANYDOUBLE ANYTDOUBLE#g' < v1 > v2
$ sed 's#any#ANYSINGLE#g' < v2 > v3
$ sed 's#ANYSINGLE$#destination any#g' < v3 > v4
$ sed 's#ANYSINGLE host#any destination#g' < v4 > v5
$ sed 's#deny   ip host#rule deny ip source#g' < v5 > v6
$ sed 's#deny   ip#rule deny ip source#g' < v6 > v7
$ sed 's#deny.*tcp#rule deny tcp source#g' < v7 > v8
$ sed 's#eq#eqSINGLE#g' < v8 > v9
$ sed '/eqSINGLE.........$/s#eqSINGLE#destination-port eq#g' < v9 > v10
$ sed '/eqSINGLE.......$/s#eqSINGLE#destination-port eq#g' < v10 > v11
$ sed '/eqSINGLE......$/s#eqSINGLE#destination-port eq#g' < v11 > v12
$ sed '/eqSINGLE.....$/s#eqSINGLE#destination-port eq#g' < v12 > v13
$ sed '/eqSINGLE....$/s#eqSINGLE#destination-port eq#g' < v13 > v14
$ sed '/eqSINGLE...$/s#eqSINGLE#destination-port eq#g' < v14 > v15
$ sed 's#ANYSINGLE eqSINGLE#any source-port eq destination#g' < v15 > v16
$ sed '/ftp-data/s#ANYSINGLE range#destination  any destination-port range#g' < v16 > v17
$ sed '/tcp/s#ANYSINGLE range#any source-port range destination#g' < v17 > v18
$ sed '/udp host/s#ANYSINGLE range#0 destination any destination-port range#g' < v18 > v19
$ sed '/udp/s#ANYSINGLE range#destination any destination-port range#g' < v19 > v20
$ sed 's#permit icmp host#rule permit icmp source#g' < v20 > v21
$ sed 's#ANYDOUBLE ANYTDOUBLE#any destination any#g' < v21 > v22

$ sed '/permit icmp source.*host/s#$# 0#g' < v22 > v23
$ sed '/permit icmp source.*host/s#host#0 destination#g' < v23 > v24
$ sed 's#^.permit icmp ANYSINGLE#rule permit icmp source any destination#g' < v24 > v25 
$ sed 's#^.permit icmp#rule permit icmp source#g' < v25 > v26
$ sed '/permit icmp source.*host/s#$# 0#g' < v26 > v27
$ sed '/permit icmp source.*host/s#host#destination#g' < v27 > v28

$ sed 's#permit ip ANYSINGLE#rule permit ip source any destination#g' < v28 > v29
$ sed 's#permit ip host#rule permit ip source#g' < v29 > v30
$ sed '/rule permit ip source.*host/s#$# 0#g' < v30 > v31
$ sed '/rule permit ip source.*host/s#host#0 destination#g' < v31 > v32
$ sed '/rule permit ip source.*destination.*any/s#destination any#0 destination any#g' < v32 > v33
$ sed '/permit ip any destination...../s#$# 0#g' < v33 > v34
$ sed '/^.permit ip.*host/s#$# 0#g' <  v34  > v35
$ sed '/^.permit ip.*host/s#host#destination#g' <   v35 > v36
$ sed '/^.permit ip/s#permit ip#rule permit ip source#g' < v36 > v37

# permit TCP
$ sed '/^.permit tcp any source.*host/s#$# 0#g' < v37 > v38
$ sed 's#^.permit tcp#rule permit tcp source#g' < v38 > v39
$ sed '/ANYSINGLE dest/s#ANYSINGLE#destination any#g' < v39 > v40
$ sed 's#rule permit tcp source ANYSINGLE#rule permit tcp source any destination#g' < v40 > v41

$ sed 's#rule permit tcp source host#rule permit tcp source#g' < v41 > v42
$ sed '/rule permit tcp source....*eqSINGLE.*host/s#host#destination#g' < v42 > v43
$ sed '/rule permit tcp source....*eqSINGLE.*destination/s#eqSINGLE#source-port eq#g' < v43 > v44
$ sed '/eqSINGLE www/s#eqSINGLE www#source-port eq www destination#g' < v44  > v45
$ sed '/eqSINGLE 9080/s#eqSINGLE 9080#source-port eq 9080 destination#g' < v45 > v46
$ sed '/eqSINGLE 443/s#eqSINGLE 443#source-port eq 443 destination#g' < v46 > v47
$ sed 's#eqSINGLE 8080#source-port eq 8080 destination#g' < v47 > v48

sed -i 's#eqSINGLE 4001#source-port eq 4001 destination#g' v55
sed -i 's#eqSINGLE 9200#source-port eq 9200 destination#g' v55 
sed -i 's#eqSINGLE 2005#source-port eq 2005 destination#g' v55 
sed -i 's#eqSINGLE 7080#source-port eq 7080 destination#g' v55 
sed -i 's#eqSINGLE 587#source-port eq 587 destination#g' v55 
sed -i 's#eqSINGLE 465#source-port eq 465 destination#g' v55 
sed -i 's#eqSINGLE 995#source-port eq 995 destination#g' v55 
sed -i 's#eqSINGLE 1500#source-port eq 1500 destination#g' v55 
sed -i 's#eqSINGLE 9588#source-port eq 9588 destination#g' v55
sed -i 's#eqSINGLE 9099#source-port eq 9099 destination#g' v55
sed -i 's#eqSINGLE 9090#source-port eq 9090 destination#g' v55
sed -i 's#eqSINGLE 8411#source-port eq 8411 destination#g' v55
sed -i 's#eqSINGLE 8180#source-port eq 8180 destination#g' v55
sed -i 's#eqSINGLE 3389#source-port eq 3389 destination#g' v55 
sed -i 's#eqSINGLE 9999#source-port eq 9999 destination#g' v55 
sed -i 's#eqSINGLE 9088#source-port eq 9088 destination#g' v55 
sed -i 's#eqSINGLE 7000#source-port eq 7000 destination#g' v55 
sed -i 's#eqSINGLE 8087#source-port eq 8087 destination#g' v55 
sed -i 's#eqSINGLE 8580#source-port eq 8580 destination#g' v55 
sed -i 's#eqSINGLE 9091#source-port eq 9091 destination#g' v55 
sed -i 's#eqSINGLE 8449#source-port eq 8449 destination#g' v55 
sed -i 's#eqSINGLE 6003#source-port eq 6003 destination#g' v55 
sed -i 's#eqSINGLE 9000#source-port eq 9000 destination#g' v55 
sed -i 's#eqSINGLE 1198#source-port eq 1198 destination#g' v55 
sed -i 's#eqSINGLE 2181#source-port eq 2181 destination#g' v55 
sed -i 's#eqSINGLE 13783#source-port eq 13783 destination#g' v55 
sed -i 's#eqSINGLE 13720#source-port eq 13720 destination#g' v55 
sed -i 's#eqSINGLE 13780#source-port eq 13780 destination#g' v55
sed -i 's#eqSINGLE 1556#source-port eq 1556 destination#g' v55 
sed -i 's#eqSINGLE 8821#source-port eq 8821 destination#g' v55 
sed -i 's#eqSINGLE 446#source-port eq 446 destination#g' v55 
sed -i 's#eqSINGLE 8280#source-port eq 8280 destination#g' v55 
sed -i 's#eqSINGLE 8085#source-port eq 8085 destination#g' v55 
sed -i 's#eqSINGLE 8086#source-port eq 8086 destination#g' v55 
sed -i 's#eqSINGLE 22 #source-port eq 22 destination #g' v55 
sed -i 's#eqSINGLE 6666#source-port eq 6666 destination#g' v55 
sed -i 's#eqSINGLE 5555#source-port eq 5555 destination#g' v55 
sed -i 's#eqSINGLE 7777#source-port eq 7777 destination#g' v55 
sed -i 's#eqSINGLE 2668#source-port eq 2668 destination#g' v55 
sed -i 's#eqSINGLE 9081#source-port eq 9081 destination#g' v55 
sed -i 's#eqSINGLE 34049#source-port eq 34049 destination#g' v55 
sed -i 's#eqSINGLE 3422#source-port eq 3422 destination#g' v55 
sed -i 's#eqSINGLE 9889#source-port eq 9889 destination#g' v55 
sed -i 's#eqSINGLE 8380#source-port eq 8380 destination#g' v55
sed -i 's#eqSINGLE 13782#source-port eq 13782 destination#g' v55 
sed -i 's#eqSINGLE 61616#source-port eq 61616 destination#g' v55 
sed -i 's#eqSINGLE 9586#source-port eq 9586 destination#g' v55 
sed -i 's#eqSINGLE 6000#source-port eq 6000 destination#g' v55 
sed -i 's#eqSINGLE 7788#source-port eq 7788 destination#g' v55 
sed -i 's#eqSINGLE 1523#source-port eq 1523 destination#g' v55 
sed -i 's#eqSINGLE 135#source-port eq 135 destination#g' v55 
sed -i 's#eqSINGLE 7890#source-port eq 7890 destination#g' v55 
sed -i 's#eqSINGLE 8082#source-port eq 8082 destination#g' v55 
sed -i 's#eqSINGLE 5556#source-port eq 5556 destination#g' v55 
sed -i 's#eqSINGLE 5566#source-port eq 5566 destination#g' v55 
sed -i 's#eqSINGLE 6677#source-port eq 6677 destination#g' v55 
sed -i 's#eqSINGLE pop3#source-port eq pop3 destination#g' v55 
sed -i 's#eqSINGLE smtp#source-port eq smtp destination#g' v55 
sed -i 's#eqSINGLE 3973#source-port eq 3973 destination#g' v55 
sed -i 's#eqSINGLE 5757#source-port eq 5757 destination#g' v55 
sed -i 's#eqSINGLE 2011#source-port eq 2011 destination#g' v55 
sed -i 's#eqSINGLE 8443#source-port eq 8443 destination#g' v55 
sed -i 's#eqSINGLE 9083#source-port eq 9083 destination#g' v55 
sed -i 's#eqSINGLE 8081#source-port eq 8081 destination#g' v55
sed -i 's#eqSINGLE 555#source-port eq 555 destination#g' v55 
sed -i 's#eqSINGLE 27017#source-port eq 27017 destination#g' v55 
sed -i 's#eqSINGLE 8040#source-port eq 8040 destination#g' v55 
sed -i 's#eqSINGLE 445#source-port eq 445 destination#g' v55 
sed -i 's#eqSINGLE 139#source-port eq 139 destination#g' v55 
sed -i 's#eqSINGLE 8088#source-port eq 8088 destination#g' v55 
sed -i 's#eqSINGLE 81#source-port eq 81 destination#g' v55 
sed -i 's#eqSINGLE 4444#source-port eq 4444 destination#g' v55 
sed -i 's#eqSINGLE 8379#source-port eq 8379 destination#g' v55 
sed -i 's#eqSINGLE 7379#source-port eq 7379 destination#g' v55 
sed -i 's#eqSINGLE 6379#source-port eq 6379 destination#g' v55 
sed -i 's#eqSINGLE 5379#source-port eq 5379 destination#g' v55 
sed -i 's#eqSINGLE 11212#source-port eq 11212 destination#g' v55 
sed -i 's#eqSINGLE 13081#source-port eq 13081 destination#g' v55 
sed -i 's#eqSINGLE 5800#source-port eq 5800 destination#g' v55 
sed -i 's#eqSINGLE 5500#source-port eq 5500 destination#g' v55 
sed -i 's#eqSINGLE 9082#source-port eq 9082 destination#g' v55 
sed -i 's#eqSINGLE 6891#source-port eq 6891 destination#g' v55 
sed -i 's#eqSINGLE 351#source-port eq 351 destination#g' v55 
$ sed -i 's#eqSINGLE 9443#source-port eq 9443 destination#g' v55
$ sed -i 's#eqSINGLE 1521#source-port eq 1521 destination#g' v55
$ sed -i 's#eqSINGLE 1433#source-port eq 1433 destination#g' v55
$ grep 'eqSINGLE' v55 | wc -l
19

$ sed '/rule permit tcp source.*host/s#host#destination#g' < v48 > v49
$ sed 's#source-port eq domain#0 source-port eq domain#g' < v49 > v50


 sed -n 's#permit udp host#rule permit udp source#p' v57
 sed -n 's#permit udp host#rule permit udp source#p' v57 | wc -l
 sed 's#permit udp host#rule permit udp source#g' < v57 > v58
 wc -l v58
 sed -n 's#^.permit udp#rule permit udp source#p' < v58
 sed 's#^.permit udp#rule permit udp source#g' < v58 > v59
 sed -n '/0 source-port eq domain/s#host#destination#p' < v59
 sed '/0 source-port eq domain/s#host#destination#g' < v59 > v60
 sed -n '/0 source-port eq domain/s#host#destination#p' < v60
 sed -n '/0 source-port eq domain destination/p' < v60
 sed -n '/rule permit udp sour.*0 source-port eq domain destination.*1/p' < v60
 sed -n '/rule permit udp sour.*0 source-port eq domain destination.*1/s#$# 0#p' < v60
 wc -l v60
 wc -l NH-3ND-R6506E-D-1Cfg
 sed -i '/rule permit udp sour.*0 source-port eq domain destination.*1/s#$# 0#g' v60
 wc -l v60
 sed -n '/destination destination/s#destination destination#destination#p' < v60
 sed -n '/destination destination/s#$# 0#p' < v60
 sed -i '/destination destination/s#$# 0#g' v60
 wc -l v60 
 sed -n '/destination destination/s#destination destination#destination#p' < v60
 sed -i '/destination destination/s#destination destination#destination#g' < v60
 wc -l v60 
 sed -n '/destination destination/s#destination destination#destination#p' < v60
 sed -i '/destination destination/s#destination destination#destination#g' v60
 sed -n 's#destination destination#destination#p' v60
 sed -n '/rule permit udp sour.*0 source-port eq domain destination.*1/s#$# 0#p' v60
 wc -l v60
 wps 思科转译华三ACL脚本-20181122.docx&
 wc -l v60
 less v60 
 grep 'destination any 0' v60 
 sed -n '/destination any 0/s#destination any#p' v60 
 sed -n 's#any 0$#any#p' v60 
 sed -n 's#any 0$#any#p' v60  | wc -l
 grep 'destination any 0' v60 | wc -l
 sed -n 's#any 0$#any#p' v60 
 sed -i 's#any 0$#any#g' v60 
 less v60 
 grep host v60 
 grep host v60  | wc -l
 grep host v60  | less
 grep host v60  
 sed -n '/rule permit tcp source'.*range/p' 
 sed -n '/rule permit tcp source.*range/p' v60 
 sed -n '/rule permit tcp source.*range.*host/p' v60 
 sed -n '/rule permit tcp source.*range.*host/p' v60  |wc -l
 sed -n '/rule permit tcp source.*range.*host/p' v60
 sed -n '/rule permit tcp source.*range.*host/s#$# 0#p' v60
 sed '/rule permit tcp source.*range.*host/s#$# 0#g' < v60 
 sed '/rule permit tcp source.*range.*host/s#$# 0#g' < v60 | wc -l
 sed '/rule permit tcp source.*range.*host/s#$# 0#g' < v60 > v61
 grep host v60 
 sed -n '/rule permit tcp source.*range.*host/p' v61
 sed -n '/rule permit tcp source.*host/p' v61
 sed -n '/rule permit tcp source.*host/s#$# 0#p' < v60 
 sed -n '/rule permit tcp source.*host/s#$# 0#p' < v60 | less
 sed -n '/rule permit tcp source.*host/s#$# 0#p' < v60 | wc -l
 sed '/rule permit tcp source.*host/s#$# 0#g' < v60 > v61
 sed -n '/rule permit tcp source.*host.*range/s#$# 0#p' < v61
 sed -n '/rule permit tcp source.*host.*range/s#0$##p' < v61
 sed -n '/rule permit tcp source.*host.*range/s#0$# #p' < v61
 sed -n '/rule permit tcp source.*host.*range/s#0$##p' < v61
 sed -n '/rule permit tcp source.*host.*range/s#0$##p' < v61| less
 sed -n '/rule permit tcp source.*host.*range/s#0$##p' < v61| wc -l
 sed '/rule permit tcp source.*host.*range/s#0$##g' < v61 > v62
 sed -n '/rule permit tcp source.*host/p' v62 
 sed -n '/rule permit tcp source.*host/s#host#0 destination#p' v62 
 sed -n '/rule permit tcp source.*host/s#host#0 destination#p' v62 | grep range
 sed -n '/rule permit tcp source.*host/s#host#0 destination#p' v62 
 sed -n '/rule permit tcp source.*host/s#host#0 destination#p' v62 | grep range
 sed -n '/rule permit tcp source.*host/s#host#0 destination#p' v62 | grep range| wc -l
 sed -n '/rule permit tcp source.*host/s#host#0 destination#p' v62 
 sed '/rule permit tcp source.*host/s#host#0 destination#g' < v62 > v63
 sed -n '/rule permit tcp source.*host/p' v63
 sed -n '/rule permit tcp source.*destination/p' v63
 sed -n '/rule permit tcp source.*destination /p' v63
 sed -n '/rule permit tcp source.*destination.*range/p' v63
 sed -n '/rule permit tcp source.*range.*destination/p' v63
 sed -n '/rule permit tcp source.*range.*destination/p' v63 | wc -l
 sed -n '/rule permit tcp source.*range.*destination/p' v63 | less
 sed '/rule permit tcp source.*range.*destination/g' v63| wc -l
 sed -n '/rule permit tcp source.*range.*destination/s#0 destination #destination #p' v63 | less
 sed '/rule permit tcp source.*range.*destination/s#0 destination #destination #g' < v63 > v64
 sed -n '/rule permit tcp source.*range.*destination/p' < v64
 sed -n '/rule permit tcp source.*range.*destination/p' < v64| wc -l
 sed -n '/rule permit tcp source.*range.*destination/p' < v64|less
 sed -n '/rule permit tcp source.*range.*destination/p' < v64 
 sed -n '/rule permit tcp source.*range.*destination/p' < v64 | grep range
 sed -n '/rule permit tcp source.*range.*destination/s#range#0 source-port range#p' < v64 | grep range
 sed -n '/rule permit tcp source.*range.*destination/s#range#0 source-port range#p' < v64 | wc -l
 sed '/rule permit tcp source.*range.*destination/s#range#0 source-port range#g' < v64 > v65
 sed -n '/rule permit tcp source.*range.*destination/p' < v65 | grep range
 sed -n '/rule permit tcp source.*0.0.0.*range.*destination/p' < v65 | grep range
 sed -n '/rule permit tcp source.*0.0.0.*range.*destination/p' < v65 | grep range| wc -l
 sed -n '/rule permit tcp source.*0.0.0.*range.*destination/p' < v65 
 sed -n '/rule permit tcp source.*0.0.0.*range.*destination/s#0 source-port#source-port#p' < v65 
 sed '/rule permit tcp source.*0.0.0.*range.*destination/s#0 source-port#source-port#g' < v65 > v66
 sed -n '/rule permit tcp source.*destination /p' v66 
 sed -n '/rule permit tcp source.*source-port.*destination /p' v66 
 sed -n '/rule permit tcp source.*source-port.*destination /p' v66 | wc -l
 sed -n '/rule permit tcp source...........source-port.*destination /p' v66
 sed -n '/rule permit tcp source.............source-port.*destination /p' v66
 sed -n '/rule permit tcp source..............source-port.*destination /p' v66
 sed -n '/rule permit tcp source...........source-port.*destination /p' v66
 sed -n '/rule permit tcp source............source-port.*destination /p' v66
 sed -n '/rule permit tcp source............ source-port.*destination /p' v66
 sed -n '/rule permit tcp source............. source-port.*destination /p' v66
 sed -n '/rule permit tcp source.............. source-port.*destination /p' v66
 sed -n '/rule permit tcp source............... source-port.*destination /p' v66
 sed -n '/rule permit tcp source................ source-port.*destination /p' v66
 sed -n '/rule permit tcp source................. source-port.*destination /p' v66
 sed -n '/rule permit tcp source.................. source-port.*destination /p' v66
 sed -n '/rule permit tcp source................... source-port.*destination /p' v66
 sed -n '/rule permit tcp source...........source-port.*destination /p' v66
 sed -n '/rule permit tcp source........... source-port.*destination /p' v66
 sed -n '/rule permit tcp source........... source-port eq.*destination /s' v66
 sed -n '/rule permit tcp source........... source-port eq.*destination /p' v66
 sed -n '/rule permit tcp source............ source-port eq.*destination /p' v66
 sed -n '/rule permit tcp source............. source-port eq.*destination /p' v66
 sed -n '/rule permit tcp source............ source-port eq.*destination /p' v66
 sed -n '/rule permit tcp source............ source-port.*destination /p' v66
 sed -n '/rule permit tcp source............. source-port.*destination /p' v66
 sed -n '/rule permit tcp source............. source-port.*destination /p' v66| wc -l
 sed -n '/rule permit tcp source............ source-port.*destination /p' v66
 sed -n '/rule permit tcp source........... source-port.*destination /p' v66
 sed -n '/rule permit tcp source............ source-port.*destination /p' v66
 sed -n '/rule permit tcp source............ source-port.*destination /p' v66 | grep '\.5'
 sed -n '/rule permit tcp source........... source-port.*destination /p' v66 | grep '\.5'
 sed -n '/rule permit tcp source........... source-port.*destination /p' v66
 sed -n '/rule permit tcp source........... source-port.*destination /s#source-port#0 source-port#p' v66
 sed -i '/rule permit tcp source........... source-port.*destination /s#source-port#0 source-port#g' v66
 sed -n '/rule permit tcp source........... source-port.*destination /p' v66
 sed -n '/rule permit tcp source............ source-port.*destination /p' v66
 sed -n '/rule permit tcp source............. source-port.*destination /p' v66
 sed -n '/rule permit tcp source.............. source-port.*destination /p' v66
 sed -n '/rule permit tcp source.............. source-port.*destination /p' v66 | wc -l
 sed -n '/rule permit tcp source............... source-port.*destination /p' v66 | wc -l
 sed -n '/rule permit tcp source............... source-port.*destination /p' v66
 sed -n '/rule permit tcp source................ source-port.*destination /p' v66
 sed -n '/rule permit tcp source................ source-port.*destination /p' v66 | wc -l
 sed -n '/rule permit tcp source................ source-port.*destination /p' v66 | less
 sed -n '/rule permit tcp source............... source-port.*destination /p' v66 | less
 sed -n '/rule permit tcp source.............. source-port.*destination /p' v66 | less
 sed -n '/rule permit tcp source.............. source-port.*destination /p' v66 | wc -l
 sed -n '/rule permit tcp source.............. source-port.*destination /p' v66 | less
 sed -n '/rule permit tcp source............. source-port.*destination /p' v66 | less
 sed -n '/rule permit tcp source............ source-port.*destination /p' v66 | less
 sed -n '/rule permit tcp source............ source-port.*destination /s#source-port#0 source-port#p' v66 
 sed '/rule permit tcp source............ source-port.*destination /s#source-port#0 source-port#p' < v66
 sed -n '/rule permit tcp source............ source-port.*destination /s#source-port#0 source-port#p' < v66
 sed '/rule permit tcp source............ source-port.*destination /s#source-port#0 source-port#g' < v66 > v67
 sed -n '/rule permit tcp source............ source-port.*destination /p' v67
 sed -n '/rule permit tcp source............. source-port.*destination /p' <v67
 sed '/rule permit tcp source............ source-port.*destination /s#source-port#0 source-port#p' < v67 
 sed -n '/rule permit tcp source............ source-port.*destination /s#source-port#0 source-port#p' < v67 
 sed -n '/rule permit tcp source............. source-port.*destination /s#source-port#0 source-port#p' < v67 
 sed -n '/rule permit tcp source............. source-port.*destination /s#source-port#0 source-port#p' < v67 | wc -l
 sed '/rule permit tcp source............. source-port.*destination /s#source-port#0 source-port#g' < v67 > v68
 sed -n '/rule permit tcp source............. source-port.*destination /s#source-port#0 source-port#p' < v68 
 sed -n '/rule permit tcp source.............. source-port.*destination /s#source-port#0 source-port#p' < v68 
 sed '/rule permit tcp source.............. source-port.*destination /s#source-port#0 source-port#g' < v68 > v69
 sed -n '/rule permit tcp source.............. source-port.*destination /s#source-port#0 source-port#p' < v69 
 sed -n '/rule permit tcp source............... source-port.*destination /s#source-port#0 source-port#p' < v69 
 sed '/rule permit tcp source............... source-port.*destination /s#source-port#0 source-port#g' < v69 > v70
 sed -n '/rule permit tcp source............... source-port.*destination /s#source-port#0 source-port#p' < v70 
 sed -n '/rule permit tcp source................ source-port.*destination /s#source-port#0 source-port#p' < v70 
 sed -n '/rule permit tcp source................. source-port.*destination /s#source-port#0 source-port#p' < v70 
 sed -n '/rule permit tcp source................ source-port.*destination /s#source-port#0 source-port#p' < v70 
 sed '/rule permit tcp source................ source-port.*destination /s#source-port#0 source-port#g' < v70 > v71
 sed -n '/rule permit tcp source................ source-port.*destination /s#source-port#0 source-port#p' < v71
 sed -n '/rule permit tcp source................. source-port.*destination /s#source-port#0 source-port#p' < v71
 sed -n '/rule permit tcp source................. source-port.*destination /s# 0 0 source-port#0 source-port#p' < v71
 sed -n '/rule permit tcp source................. source-port.*destination /s# 0 0 source-port# 0 source-port#p' < v71
 sed -n '/rule permit tcp source................. source-port.*destination /s# 0 0 source-port# 0 source-port#p' < v71 | less
 sed -n '/rule permit tcp source................. source-port.*destination /s# 0 0 source-port# 0 source-port#p' < v71 | wc -l
 sed -n '/rule permit tcp source................. source-port.*destination /s# 0 0 source-port# 0 source-port#p' < v71 | grep '0 source
 sed -n '/rule permit tcp source................. source-port.*destination /s# 0 0 source-port# 0 source-port#p' < v71 | grep '0 source'
 sed '/rule permit tcp source................. source-port.*destination /s# 0 0 source-port# 0 source-port#g' < v71 > v72
 sed -n '/rule permit tcp source................. source-port.*destination /s# 0 0 source-port# 0 source-port#p' < v72 
 sed -n '/rule permit tcp source.................. source-port.*destination /s# 0 0 source-port# 0 source-port#p' < v72 
 sed -n '/rule permit tcp source.................. source-port.*destination /s# 0 0 source-port# 0 source-port#p' < v72  | wc -l
 sed -n '/rule permit tcp source.................. source-port.*destination /s# 0 0 source-port# 0 source-port#p' < v72 
 sed -n '/rule permit tcp source.................. source-port.*destination /s# 0 0 source-port# 0 source-port#p' < v72 | grep '0 source

 sed -n '/rule permit tcp source.................. source-port.*destination /s# 0 0 source-port# 0 source-port#p' < v72 | grep '0 source

 sed -n '/rule permit tcp source.................. source-port.*destination /s# 0 0 source-port# 0 source-port#p' < v72 | grep '0 source

 sed -n '/rule permit tcp source.................. source-port.*destination /s# 0 0 source-port# 0 source-port#p' < v72 
 sed -n '/rule permit tcp source.................. source-port.*destination /s# 0 0 source-port# 0 source-port#p' < v72 | grep '0 source'
 sed '/rule permit tcp source.................. source-port.*destination /s# 0 0 source-port# 0 source-port#g' < v72 > v73
 wc -l v73
 sed -n '/rule permit tcp source.................. source-port.*destination /s# 0 0 source-port# 0 source-port#p' < v73 
 sed -n '/rule permit tcp source................... source-port.*destination /s# 0 0 source-port# 0 source-port#p' < v73 
 sed -n '/rule permit tcp source.................... source-port.*destination /s# 0 0 source-port# 0 source-port#p' < v73 
 sed -n '/rule permit tcp source................. source-port.*destination /s# 0 0 source-port# 0 source-port#p' < v73 
 sed -n '/rule permit tcp source................ source-port.*destination /s# 0 0 source-port# 0 source-port#p' < v73 
 sed -n '/rule permit tcp source................ source-port.*destination /s# 0 0 source-port# 0 source-port#p' < v73 | wc -l
 sed -n '/rule permit tcp source................ source-port.*destination /s# 0 0 source-port# 0 source-port#p' < v73 | grep '0 source'
 grep ' 0 0 source-p' v73 
 grep ' 0 0 source-p' v73  | wc -l
 sed -n '/rule permit tcp source................ source-port.*destination /s# 0 0 source-port# 0 source-port#p' < v73 | wc -l
 grep ' 0 0 source-p' v73  
 sed -n 's# 0 0 source-port#0 source-port#p' < v73 
 sed -n 's# 0 0 source-port#0 source-port#p' < v73  | wc -l
 sed -n 's# 0 0 source-port# 0 source-port#p' < v73  | wc -l
 sed -n '/rule permit tcp source................ source-port.*destination /s# 0 0 source-port# 0 source-port#p' < v73 | wc -l
 sed -n 's# 0 0 source-port# 0 source-port#p' < v73 
 sed -i 's# 0 0 source-port# 0 source-port#g' v73 
 sed -n 's# 0 0 source-port# 0 source-port#p' < v73 
 sed -i 's# 0 0 source-port# 0 source-port#g' v73 
 sed -n 's# 0 0 source-port# 0 source-port#p' < v73 
 sed -n 's#0 0 source-port# 0 source-port#p' < v73 
 sed -n 's#0 0 source-port# 0 source-port#p' < v73  | wc -l
 grep ' 0 0 source-p' v73
 wc -l v73
 sed -n 's#0 0 source-port# 0 source-port#p' < v73 
 sed -n '/rule permit tcp source.*destination/p' < v73 
 grep 'permit tcp host ' NH-3ND-R6506E-D-1Cfg
 grep 'permit tcp host ' NH-3ND-R6506E-D-1Cfg | less
 grep 'rule permit tcp source.*any ' v73 
 grep 'rule permit tcp source.*any$' v73 
 grep 'rule permit tcp source...... any$' v73 
 grep 'rule permit tcp source....... any$' v73 
 grep 'rule permit tcp source........ any$' v73 
 grep 'rule permit tcp source.......... any$' v73 
 grep 'rule permit tcp source............ any$' v73 
 grep 'rule permit tcp source............... any$' v73 
 grep 'rule permit tcp source.................. any$' v73 
 grep 'rule permit tcp source.................... any$' v73 
 grep 'rule permit tcp source....................... any$' v73 
 grep 'rule permit tcp source.......................... any$' v73 
 grep 'rule permit tcp source............................. any$' v73 
 grep 'rule permit tcp source................................ any$' v73 
 grep 'rule permit tcp source................................... any$' v73 
 grep 'rule permit tcp source.................................... any$' v73 
 grep 'rule permit tcp source....................................... any$' v73 
 grep 'rule permit tcp source.................................... any$' v73 
 grep 'rule permit tcp source.................................. any$' v73 
 grep 'rule deny ip source..................................$' v73 
 grep 'rule deny ip source.*destination' v73 
 grep 'rule deny ip source.*destination.*' v73 
 grep 'rule deny ip source.*' v73 
 sed -n '/rule deny ip source.*host/p' v73 
 sed -n '/rule deny ip source.*host/s#$# 0#p' v73 
 sed '/rule deny ip source.*host/s#$# 0#g' < v73 > v74
 sed -n '/rule deny ip source.*host/p' v74
 sed -n '/rule deny ip source.*host/s#$# 0#p' v74 
 sed -n '/rule deny ip source.*host/s#host#0 destination#p' v74 
 sed '/rule deny ip source.*host/s#host#0 destination#g' < v74 > v75
 sed -n '/rule deny ip source.*host/p' v75 
 sed -n '/rule deny tcp source.*host/p' v75 
 sed -n '/rule deny tcp source/p' v75 
 sed -n '/rule deny tcp source.*eq/p' v75 
 grep ANYSINGLE v75 
 sed -n '/rule deny tcp source.*eq/s#ANYSINGLE#any destination#p' <v75 
 sed -i '/rule deny tcp source.*eq/s#ANYSINGLE#any destination#g' v75 
 sed -n '/rule deny tcp source.*eq/p' v75 
 sed -n '/rule deny tcp source any.*eq/p' v75 
 sed -n '/rule deny tcp source any.*eq/s#destination-port#0 destination-port#p' v75 
 sed '/rule deny tcp source any.*eq/s#destination-port#0 destination-port#g' < v75 > v76
 sed -n '/rule deny tcp source any.*eq/s#destination-port#0 destination-port#p' v76 
 sed -n '/rule deny tcp source any.*eq/s#destination-port#destination-port#p' v76 
 sed -n '/rule deny tcp source any.*eq/s#destination-port#destination-port#p' v76 -n
 sed -n '/rule deny tcp source any.*eq/s#destination-port#destination-port#p' v76 -l
 sed -n '/rule deny tcp source any.*eq/s#destination-port#destination-port#p' v76 
 grep 'rule deny tcp source any destination' v76 
 grep -n 'rule deny tcp source any destination' v76 
 sed -n 's#destination any 0 destination-port#destination any 0 destination-port#g' < v76 
 grep -n 'rule deny tcp source any destination' v76 
 sed -n 's#destination any 0 destination-port#destination any 0 destination-port#p'  < v76 
 sed -n 's#destination any 0 destination-port#destination any destination-port#p'  < v76 
 grep -n 'rule deny tcp source any destination' v76 
 sed -i 's#destination any 0 destination-port#destination any destination-port#g'  < v76 
 sed -n 's#destination any 0 destination-port#destination any destination-port#g'  < v76 
 sed -n 's#destination any 0 destination-port#destination any destination-port#p' v76 
 sed -i 's#destination any 0 destination-port#destination any destination-port#g' < v76 
 sed -i 's#destination any 0 destination-port#destination any destination-port#g'  v76 
 sed -n 's#destination any 0 destination-port#destination any destination-port#p' v76 
 grep -n 'rule deny tcp source any destination' v76 
 sed '721s#0 destination-port#destination-port#p' < v76 
 sed -n '721s#0 destination-port#destination-port#p' < v76 
 sed -i '721s#0 destination-port#destination-port#g' v76 
 grep -n 'rule deny tcp source any destination' v76 
 sed -i '724s#0 destination-port#destination-port#p' v76 
 wc -l v76 
 vi +724 v76 
 grep -n 'rule deny tcp source any destination' v76 
 vi +724 v76 
 grep -n 'rule deny tcp source any destination' v76 
 vi +724 v76 
 grep -n 'rule deny tcp source any destination' v76 
 grep  'rule deny tcp source any destination' v76 
 grep  'rule deny tcp source.*destination' v76 
 grep  'rule deny tcp source.*destination-port' v76 
 grep  'rule deny tcp source.*range' v76 
 grep -n  'rule deny tcp source.*range' v76 
 vi +707 v76
 wc -l v76
 grep -n 'destination..' v76
 grep -n 'destination.. ' v76
 grep -n 'destination. ' v76
 sed -n '623s#destination8#destination#p' v76
 sed -i '623s#destination8#destination#p' v76
 grep -n 'destination. ' v76
 sed -n 's#destination. #destination#p' v76
 sed -n 's#destination. #destination #p' v76
 sed -i 's#destination. #destination #g' v76
 grep -n 'destination. ' v76
 grep -n 'destination.. ' v76
 sed -n '619s#destination81#destination#p' v76b
 sed -n '619s#destination81#destination#p' v76
 sed -n '619s#destination81#destination#' v76
 sed -n '619s#destination81#destination#p' v76
 grep 'rule permit tcp source.*source-port eq' v76
 grep -n 'destination.. ' v76
 vi +655 v76
 grep 'rule permit tcp source .......... source-port eq' v76
 grep 'rule permit tcp source ..........source-port eq' v76
 grep 'rule permit tcp source ............ source-port eq' v76
 grep 'rule permit tcp source ............. source-port eq' v76
 grep -n 'rule permit tcp source ............. source-port eq' v76
 grep -n 'rule permit tcp source .............. source-port eq' v76
 sed -n '/rule permit tcp source .............. source-port eq/s#source-port #0 source-port #p' v76
 sed '/rule permit tcp source .............. source-port eq/s#source-port #0 source-port #g' < v76 > v77
 sed -n '/rule permit tcp source .............. source-port eq/s#source-port #0 source-port #p' v76
 sed -n '/rule permit tcp source ............. source-port eq/s#source-port #0 source-port #p' v76
 sed -n '/rule permit tcp source ............ source-port eq/s#source-port #0 source-port #p' v76
 sed -n '/rule permit tcp source ............ source-port eq/s#source-port #0 source-port #p' v77
 sed -n 's#0 0 source-port# 0 source-port#p' < v77
 sed -n 's# 0 0 source-port# 0 source-port#p' < v77
 sed -n 's# 0 0 source-port# 0 source-port#p' < v77| less
 sed -n 's# 0 0 source-port# 0 source-port#p' < v77| wc -l
 sed -i 's# 0 0 source-port# 0 source-port#g' v77
 sed -n 's# 0 0 source-port# 0 source-port#p' < v77
 sed -n 's# 0 0 source-port# 0 source-port#p' v77
 sed -n 's#0 0 source-port# 0 source-port#p' v77

$ sed -n '/rule permit tcp source.*0.0.3 0 destination /s#0 destination#destination#p' v78

awk '{ print $6 }' < v77 | grep '0.0.0' | sort | uniq -c
    247 0.0.0.1
     15 0.0.0.127
    168 0.0.0.15
      2 0.0.0.25
    917 0.0.0.255
    132 0.0.0.3
     91 0.0.0.31
    121 0.0.0.63
    116 0.0.0.7


$ sed -i '/rule permit tcp source................range/s#range#0 source-port range#g' v79

$ sed -n '/rule permit tcp source..............range/s#ftp-data 22#ftp-data 22 destination#p' v79
rule permit tcp source 114.80.87.49 range ftp-data 22 destination 10.101.201.0 0.0.0.255
$ sed -i '/rule permit tcp source..............range/s#ftp-data 22#ftp-data 22 destination#g' v79
$ sed -n '/rule permit tcp source.............range/p' v78
rule permit tcp source 172.16.1.41 range ftp-data telnet 10.101.201.10 0.0.0.1
rule permit tcp source 10.6.154.88 range ftp-data 22 10.101.201.0 0.0.0.255
$ sed -n '/rule permit tcp source.............range/s#ftp-data 22#ftp-data 22 destination#p' v79
rule permit tcp source 10.6.154.88 range ftp-data 22 destination 10.101.201.0 0.0.0.255
$ sed -i '/rule permit tcp source.............range/s#ftp-data 22#ftp-data 22 destination#g' v79
$ sed -n '/rule permit tcp source.............range/s#ftp-data telnet#ftp-data telnet destination#p' v79
rule permit tcp source 172.16.1.41 range ftp-data telnet destination 10.101.201.10 0.0.0.1
$ sed -i '/rule permit tcp source.............range/s#ftp-data telnet#ftp-data telnet destination#g' v79

$ sed '/rule permit tcp source.............range/s#range#0 source-port range#g' v79 > v80
$ sed -n '/rule permit tcp source..............range/s#range#0 source-port range#p' v80

$ sed -n '/rule permit tcp source.*0.0.*destination ............$/s#$# 0#p' v82

$ sed '/rule permit tcp source.*destination ...........$/s#$# 0#g' v81 > v82

$ sed '/rule permit tcp source.............destination any$/s#destination any#0 destination any#g' v80 > v81

 sed -n '/rule permit tcp source.*0.0.0.* range.*0.255$/s#range ftp-data 22#range ftp-data 22 destination#p' v83
 sed '/rule permit tcp source.*0.0.0.* range.*0.255$/s#range ftp-data 22#range ftp-data 22 destination#g' v83  > v84
 sed -n '/rule permit tcp source.*0.0.0.* range.*0.255$/s#range ftp-data 22#range ftp-data 22 destination#p' v84
 sed -n '/rule permit tcp source.*0.0.0.* range.*0.255$/p' v83
 sed -n '/rule permit tcp source.*0.0.0.* range.*0.255$/s#range ftp-data ftp#range ftp-data ftp destination#p' v84
 sed -n '/rule permit tcp source.*0.0.0.* range.*0.255$/s#range ftp-data 22#source-port range ftp-data 22 destination#p' v83
 sed '/rule permit tcp source.*0.0.0.* range.*0.255$/s#range ftp-data 22#source-port range ftp-data 22 destination#g' v83 > v84
 sed -n '/rule permit tcp source.*0.0.0.* range.*0.255$/s#range ftp-data ftp#source-port range ftp-data ftp destination#p' v84
 sed -n '/rule permit tcp source.*0.0.0.* range.*0.255$/s#range ftp-data ftp#source-port range ftp-data ftp destination#p' v84
 sed -i '/rule permit tcp source.*0.0.0.* range.*0.255$/s#range ftp-data ftp#source-port range ftp-data ftp destination#g' v84
 sed -n '/rule permit tcp source.*0.0.0.* range.*0.255$/p' v83
 sed -n '/rule permit tcp source.*0.0.0.* range.*0.255$/p' v83
 sed -n '/rule permit tcp source.*0.0.0.* range.*0.255$/s#range ftp 22#source-port range ftp 22 destination#p'  v84
 sed -i '/rule permit tcp source.*0.0.0.* range.*0.255$/s#range ftp 22#source-port range ftp 22 destination#g'  v84
 sed -n '/rule permit tcp source.*0.0.0.* range.*0.255$/s#range 8080 8888#source-port range 8080 8888 destination#p'  v84
 sed -i '/rule permit tcp source.*0.0.0.* range.*0.255$/s#range 8080 8888#source-port range 8080 8888 destination#g'  v84
 sed -n '/rule permit tcp source.*0.0.0.* range.*0.255$/s#range 44441 44443#source-port range 44441 44443 destination#p'  v84
 sed -i '/rule permit tcp source.*0.0.0.* range.*0.255$/s#range 44441 44443#source-port range 44441 44443 destination#g'  v84
 sed -n '/rule permit tcp source.*0.0.0.* range.*0.255$/p' v83
 sed -n '/rule permit tcp source.*0.0.0.* range.*0.255$/p' v84
 sed -i '/rule permit tcp source.*0.0.0.* range.*0.255$/s#range 10021 10023#source-port range 10021 10023 destination#g'  v84
 sed -i '/rule permit tcp source.*0.0.0.* range.*0.255$/s#range 5000 5100#source-port range 5000 5100 destination#g'  v84
 sed -n '/rule permit tcp source.*0.0.0.* range.*0.255$/p' v84
 sed -i '/rule permit tcp source.*0.0.0.* range.*0.255$/s#range 9586 9588#source-port range 9586 9588 destination#g'  v84
 sed -n '/rule permit tcp source.*0.0.0.* range.*0.255$/p' v84
 sed -i '/rule permit tcp source.*0.0.0.* range.*0.255$/s#range 8094 8095#source-port range 8094 8095 destination#g'  v84
 sed '/rule permit ip source .*.0.0.255.*255$/s#0.0.0.255 10#0.0.0.255 destinatioin 10#p' v84
 sed '/rule permit ip source .*.0.0.255 .*255$/s#0.0.0.255 10#0.0.0.255 destinatioin 10#p' v84
 sed -n '/rule permit ip source .*.0.0.255 .*255$/s#0.0.0.255 10#0.0.0.255 destinatioin 10#p' v84
 sed '/rule permit ip source .*.0.0.255 .*255$/s#0.0.0.255 10#0.0.0.255 destinatioin 10#g' v84 > v85
 sed -n '/rule permit ip source .*.0.0.31 .*255$/s#0.0.0.255 10#0.0.0.255 destinatioin 10#p' v84
 sed -n '/rule permit ip source .*.0.0.31 .*255$/s#0.0.0.255 10#0.0.0.255 destinatioin 10#p' v85
 sed -n '/rule permit ip source .*.0.0.31 .*255$/p' v85
 sed -n '/rule permit ip source .*.0.0.31 .*255$/s#0.0.0.31 10#0.0.0.31 destinatioin 10#p' v85
 sed -i '/rule permit ip source .*.0.0.31 .*255$/s#0.0.0.31 10#0.0.0.31 destinatioin 10#g' v85
 sed '/rule permit ip source .*.0.255.255 .*255$/s#0.0.0.31 10#0.0.0.31 destinatioin 10#p' v85
 sed -n '/rule permit ip source .*.0.255.255 .*255$/s#0.0.0.31 10#0.0.0.31 destinatioin 10#p' v85
 sed -n '/rule permit ip source .*.0.255.255 .*255$/s#0.0.255.255 10#0.0.0.31 destinatioin 10#p' v85
 sed -n '/rule permit ip source .*.0.255.255 .*255$/s#255.255 10#255.255 destinatioin 10#p' v85
 sed -n '/rule permit ip source .*.0.255.255 .*255$/p' v85
 sed '/rule permit ip source .*.0.255.255 .*255$/p' v85
 sed -n '/rule permit ip source .*.0.255.255 .*255$/p' v85
 sed -n '/rule permit ip source .*.255.255 .*255$/p' v85
 sed -n '/rule permit ip source .*.255.255 .*255$/s#255.255 10#255.255 destinatioin 10#p' v85
 sed -i '/rule permit ip source .*.255.255 .*255$/s#255.255 10#255.255 destinatioin 10#g' v85
 sed -n '/rule permit ip source .*.0.255.255 .*255$/p' v85
 sed '/rule permit ip source .*.0.255.255 .*255$/p' v85
 sed -n '/rule permit ip source .*.0.255.255 .*255$/p' v85
 sed -n '/rule permit ip source .*.255 .*255$/p' v85
 sed -n '/rule permit ip source .*. .*255$/p' v85
 sed -n '/rule permit ip source .*. .*255$/s#10.101.186.0 0.0.0.255#10.101.186.0 0 destination 0.0.0.255/p' v85
 sed -n '/rule permit ip source .*. .*255$/s#10.101.186.0 0.0.0.255#10.101.186.0 0 destination 0.0.0.255#p' v85
 sed -n '/rule permit ip source .*. .*255$/s#10.101.186.0 0.0.0.255#0 destination 10.101.186.0  0.0.0.255#p' v85
 sed -n '/rule permit ip source .*. .*255$/p' v85
 sed -n '/rule permit ip source 10 .*. .*255$/p' v85
 sed -n '/rule permit ip source 10.*. .*255$/p' v85
 sed -n '/rule permit ip source 10.*. .*255$/p' v85 | wc -l
 sed -n '/rule permit ip source 10.*. .*255$/p' v85
 sed -n '/rule permit ip source 10.*. 10.*255$/p' v85
 sed -n '/rule permit ip source 10.*. 10.*255$/p' v85  | wc -l
 sed -n '/rule permit ip source 10.*. 10.* .*255$/p' v85
 sed -n '/rule permit ip source 10.*. 10.101* .*255$/p' v85
 sed -n '/rule permit ip source 10.*. 10.101.* .*255$/p' v85
 sed -n '/rule permit ip source 10.*. 10.101.* .*255$/p' v85 | wc -l
 sed -n '/rule permit ip source 10.*. 10.101.* .*255$/p' v85
 sed -n '/rule permit ip source 10.*.10.101.* .*0.0.0.255$/p' v85
 sed -n '/rule permit ip source 10..........10.101.* .*0.0.0.255$/p' v85
 sed -n '/rule permit ip source 10...........10.101.* .*0.0.0.255$/p' v85
 sed -n '/rule permit ip source 10............10.101.* .*0.0.0.255$/p' v85
 sed -n '/rule permit ip source 10...........10.101.* .*0.0.0.255$/p' v85
 sed -n '/rule permit ip source 10...........10.101.* .*0.0.0.255$/s#10.101.186#0 destination 10.101.186#p' v85
 sed -n '/rule permit ip source 10...........10.101.* .*0.0.0.255$/s#10.101.186#0 destination 10.101.186#p' v85
 sed -i '/rule permit ip source 10...........10.101.* .*0.0.0.255$/s#10.101.186#0 destination 10.101.186#g' v85
 sed -n '/rule permit tcp source.*0.0.255.* destination-port eq 22$/s#0.0.0.255 10#0.0.0.255 destination 10#p' v85
 sed -i '/rule permit tcp source.*0.0.255.* destination-port eq 22$/s#0.0.0.255 10#0.0.0.255 destination 10#g' v85
 sed -n '/rule permit tcp source.*0.0.255.* destination-port eq 22$/s#0.0.0.31 10#0.0.0.31 destination 10#p' v85
 sed -i '/rule permit tcp source.*0.0.255.* destination-port eq 22$/s#0.0.0.31 10#0.0.0.31 destination 10#g' v85
 sed -n '/rule permit tcp source.*0.0.255.* destination-port eq 22$/s#10.101.67.0 0#10.101.67.0 destination 0#p' v85
 sed  's#destinatioin#destination#p' v85
 sed -n  's#destinatioin#destination#p' v85
 sed -i  's#destinatioin#destination#g' v85
 sed -n '/source-port eq destination/s#source-port eq destination#source-port eq#p' v85
 sed -n '/source-port eq destination/s#source-port eq destination#source-port eq#p' v85 | sort
 sed '/source-port eq destination/s#source-port eq destination#source-port eq#g' < v85
 sed '/any source-port eq destination/s#source-port eq destination#source-port eq#g' < v85 > v86
 sed -n '/source-port eq destination/s#source-port eq destination#source-port eq#p' v85 | sort
 sed -n '/any source-port eq destination/s#source-port eq destination#source-port eq#p' v85 | sort
 sed -n '/any source-port eq destination/s#source-port eq destination#source-port eq#p' v85 | wc -l
 sed '/any source-port eq destination/s#source-port eq destination#source-port eq#g' v85 > v86
 sed '/any source-port eq destination/s#any source-port eq www 0#any source-port eq www#p' v86
 sed -n '/any source-port eq destination/s#any source-port eq www 0#any source-port eq www#p' v86
 sed '/any source-port eq destination/s#any source-port eq www 0#any source-port eq www#p' v86
 sed -n '/any source-port eq destination/s#any source-port eq www 0#any source-port eq www#p' v86
 sed -n '/any source-port eq destination/s#source-port eq destination#source-port eq#p' v85
 sed -n '/any source-port eq destination/s#source-port eq destination#source-port eq#p' v85 | sort
 sed -n '/any source-port eq/s#any source-port eq www 0#any source-port eq www#p' v86
 sed -i '/any source-port eq/s#any source-port eq www 0#any source-port eq www#g' v86
 sed -n '/any source-port eq destination/s#any source-port eq www 0#any source-port eq www#p' v86
 sed -n '/any source-port eq/s#any source-port eq www 0#any source-port eq www#p' v86
 sed -n '/any source-port eq/p' v86
 sed -n '/any source-port eq/p' v86 | wc -l
 sed -n '/any source-port eq/p' v86 | sort
 sed -n '/any source-port eq/s#any source-port eq www#any source-port eq www destination#p' v86
 sed -i '/any source-port eq/s#any source-port eq www#any source-port eq www destination#g' v86
 sed -n '/any source-port eq/p' v86 | sort
 sed -n '/any source-port eq/s#any source-port eq 9999#any source-port eq 9999 destination#p' v86
 sed -i '/any source-port eq/s#any source-port eq 9999#any source-port eq 9999 destination#g' v86
 sed -i '/any source-port eq/s#any source-port eq 9588#any source-port eq 9588 destination#g' v86
 sed -i '/any source-port eq/s#any source-port eq 9586#any source-port eq 9586 destination#g' v86
 sed -i '/any source-port eq/s#any source-port eq 9580#any source-port eq 9580 destination#g' v86
 sed -i '/any source-port eq/s#any source-port eq 8180#any source-port eq 8180 destination#g' v86
 sed -i '/any source-port eq/s#any source-port eq 8080#any source-port eq 8080 destination#g' v86
 sed -i '/any source-port eq/s#any source-port eq 7001#any source-port eq 7001 destination#g' v86
 sed -n '/any source-port eq/p' v86 | sort
 sed -i '/any source-port eq/s#any source-port eq 6800#any source-port eq 6800 destination#g' v86
 sed -i '/any source-port eq/s#any source-port eq 5566#any source-port eq 5566 destination#g' v86
 sed -n '/any source-port eq/p' v86 | sort
 sed -i '/any source-port eq/s#any source-port eq 5556#any source-port eq 5556 destination#g' v86
 sed -i '/any source-port eq/s#any source-port eq 443#any source-port eq 443 destination#g' v86
 sed -n '/any source-port eq/p' v86 | sort
 sed -n 's# destination destination# destination#p' v86
 sed -i 's# destination destination# destination#g' v86
 sed -n '/source-port eq ftp.*1$/s#source-port eq ftp#0 source-port eq ftp destination#p' v86
 sed -n '/source-port eq ftp.*1$/s#source-port eq ftp #0 source-port eq ftp destination #p' v86
 sed '/source-port eq ftp.*1$/s#source-port eq ftp #0 source-port eq ftp destination #g' v86 > v87
 sed -n '/source-port eq ftp.*1$/s#source-port eq ftp-data #0 source-port eq ftp-data destination #p' v87
 sed -i '/source-port eq ftp.*1$/s#source-port eq ftp-data #0 source-port eq ftp-data destination #g' v87
 sed 's# 0 0 # 0#p' v87
 sed -n 's# 0 0 # 0#p' v87
 sed -n 's# 0 0 # 0 #p' v87
 sed 's# 0 0 # 0#p' v87
 sed 's# 0 0 # 0#p' v87 | wc -l
 sed -n 's# 0 0 # 0#p' v87 | wc -l
 sed -n 's# 0 0 # 0 #p' v87 | wc -l
 sed -n 's# 0 0 # 0 #p' v87
 sed -i 's# 0 0 # 0 #g' v87
 sed -n '/rule permit tcp source.* range ..... .....$/s#range# destination range#p' v87
 sed -n '/rule permit tcp source.* range ..... .....$/s#range#destination range#p' v87
 sed '/rule permit tcp source.* range ..... .....$/s#range#destination range#g' v87 > v88
 sed -n '/rule permit tcp source.* range .... ....$/s#range#destination range#p' v88
 sed -i '/rule permit tcp source.* range .... ....$/s#range#destination range#g' v88
 sed -n '/rule permit tcp source.* range ... ...$/s#range#destination range#p' v88
 sed -i '/rule permit tcp source.* range ... ...$/s#range#destination range#g' v88
 sed -n '/rule permit tcp source.* range ... ...$/s#range#destination range#p' v88
 sed -n '/rule permit tcp source.* range ..... .....$/s#range#destination-port range#p' v87
 sed '/rule permit tcp source.* range ..... .....$/s#range#destination-port range#g' v87 > v88
 sed -n '/rule permit tcp source.* range .... ....$/s#range#destination-port range#p' v87
 sed -n '/rule permit tcp source.* range .... ....$/s#range#destination-port range#p' v88
 sed -i '/rule permit tcp source.* range .... ....$/s#range#destination-port range#g' v88
 sed -n '/rule permit tcp source.* range ... ...$/s#range#destination-port range#p' v88
 sed -i '/rule permit tcp source.* range ... ...$/s#range#destination-port range#g' v88
 sed -n '/rule permit tcp source.* range ... ...$/s#10.109.57.6 0.0.0.1#10.109.57.6 destination 0.0.0.1#p' v88
 sed -n '/rule permit tcp source.*range ... ...$/s#10.109.57.6 0.0.0.1#10.109.57.6 destination 0.0.0.1#p' v88
 sed -n '/rule permit tcp source.* range .... ....$/s#range#destination-port range#p' v88
 sed -n '/rule permit tcp source.* range .... ....$/s#109.57.6 0#109.57.6 destination 0#p' v88
 sed -n '/rule permit tcp source.* range ... ...$/s#range#destination-port range#p' v88
 sed -n '/rule permit tcp source.* range .... ....$/s#range#destination-port range#p' v88
 sed -n '/rule permit tcp source.* range ..... .....$/s#0.0.0.255 10.101.100.0#0.0.0.255 destination 10.101.100.0#p' v88
 sed -i '/rule permit tcp source.* range ..... .....$/s#0.0.0.255 10.101.100.0#0.0.0.255 destination 10.101.100.0#g' v88
 sed -n '/rule permit tcp source.* range .... ....$/s#0.0.0.255 10.#0.0.0.255 destination 10.#p' v88
 sed -i '/rule permit tcp source.* range .... ....$/s#0.0.0.255 10.#0.0.0.255 destination 10.#g' v88
 sed -n '/rule permit tcp source.* range .... ....$/s#0.0.0.15 10#0.0.0.15 destination 10#p' v88
 sed -i '/rule permit tcp source.* range .... ....$/s#0.0.0.15 10#0.0.0.15 destination 10#g' v88
 sed -n '/rule permit tcp source.* range .... ....$/s#10.109.57.6 0.0#10.109.57.6 destination 0.0#p' v88
 sed -n '/rule permit tcp source.* range .... ....$/s#10.109.10.0 0.0#10.109.10.0 destination 0.0#p' v88
 sed -n '/rule permit tcp source.* range .... ....$/s#10.109.10.0 0.0.0.63#10.109.10.0 destination 0.0.0.63#p' v88
 sed -i '/rule permit tcp source.* range .... ....$/s#10.109.10.0 0.0.0.63#10.109.10.0 destination 0.0.0.63#g' v88
 sed -n '/rule permit tcp source.*10.109.* range .... ....$/s#109.57.6 0#109.57.6 destination 0#p' v88
 sed -n '/rule permit tcp source 10.109.* range .... ....$/s#109.57.6 0#109.57.6 destination 0#p' v88
 sed -n '/rule permit tcp source 10.109.* range .... ....$/s#10.109.57#0 destination 10.109.57#p' v88
 sed -i '/rule permit tcp source 10.109.* range .... ....$/s#10.109.57#0 destination 10.109.57#g' v88


$ sed '/.*rule deny tcp source.*0.0.0.255 10.*/s#0.255 10.#0.255 destination 10.#g' v89 > v90

désert/SED (last edited 2018-11-27 03:10:24 by localhost)