Grep by range of date from file creation in directory

Shell Programming and Scripting
1

Hi Expert,

Need your scripting and finding data so that it help me to find the culprit of this memory usage error.
Data provided here is a sample.

Process Snapshot directory: /var/spool/processes-snapshot

webdev9o9[93]% pwd
/var/spool/processes-snapshot

webdev9o9[97]% ls -lrct
-rw-r--r-- 1 root root 632 Sep 20 23:18 32590
-rw-r--r-- 1 root root 619 Sep 20 23:18 32586
-rw-r--r-- 1 root root 632 Sep 20 23:18 32577
-rw-r--r-- 1 root root 577 Sep 20 23:18 32573
-rw-r--r-- 1 root root 619 Sep 20 23:18 32562
-rw-r--r-- 1 root root 576 Sep 20 23:18 32559
-rw-r--r-- 1 root root 577 Sep 20 23:18 32549
-rw-r--r-- 1 root root 632 Sep 20 23:18 31010

What I want to achieve?

  1. I would like to know base on /var/spool/processes-snapshot directory, where could I grep from certain time to certain time?

example from 20:00 t0 23:58 ?

  1. And inside that file contain certain value that also could me, how could I grep by UID but showing by date of creation, then filter by range that I wanted?

e.g from certain time to certain time too?

sample output that I would like to have:
./24970:Uid: 10054 10054 10054 10054 Sep 20 23:18

webdev9o9 [98]% grep -r 10054 .
./24970:Uid: 10054 10054 10054 10054
./20861:Uid: 10054 10054 10054 10054
./30237:Uid: 10054 10054 10054 10054
./27920:Uid: 10054 10054 10054 10054
./15283:Uid: 10054 10054 10054 10054
./16827:Uid: 10054 10054 10054 10054
./7598:Uid: 10054 10054 10054 10054
./22903:Uid: 10054 10054 10054 10054
./20724:Uid: 10054 10054 10054 10054

webdev9o9[128]% cat 32590
Mon Sep 20 23:23:01 PDT 2010
Name: du
State: S (sleeping)
SleepAVG: 88%
Tgid: 32590
Pid: 32590
PPid: 32586
TracerPid: 0
Uid: 10054 10054 10054 10054
Gid: 1000 1000 1000 1000
FDSize: 64
Groups: 1000 5129 5130 8041
VmSize: 11648 kB
VmLck: 0 kB
VmRSS: 3296 kB
VmData: 1080 kB
VmStk: 2528 kB
VmExe: 317 kB
VmLib: 1479 kB
StaBrk: 00655000 kB
Brk: 006fa000 kB
StaStk: 7fbffffc90 kB
Threads: 1
SigPnd: 0000000000000000
ShdPnd: 0000000000000000
SigBlk: 0000000000000002
SigIgn: 0000000000000000
SigCgt: 0000000000012000
CapInh: 0000000000000000
CapPrm: 0000000000000000
CapEff: 0000000000000000

Thank you.
Reggy

2 
cd /var/spool/processes-snapshot

ls -lrct |while read LINE
do

  awk -v min=2000 -v max=2359 '
     NR==1{split($4,a,":");h=a[1]a[2];y=$2 FS $3 FS a[1] ":" a[2]}
     /^Uid: /{if (h>=min&&h<=max) print FILENAME,$0,y}
     ' $LINE
done
3

Hi rdcwayx,

Sorry for being so noob.

Could you please explain about above script? Thanks.

4

Is the command fine?

the awk command take date from first line , take the uid from the Uid: line,then print with filename.