egrep '^2001-09-27 1[56]:' logfile would do the trick. Jerry. At 12:39 28/09/01 +0100, you wrote: >hi, if i have logs formatted as follows > >2001-09-27 15:16:27 207.232.107.45 >2001-09-27 16:16:27 208.181.198.60 >2001-09-27 16:16:27 208.181.198.60 >2001-09-27 16:16:27 208.181.198.60 > >what is a quick way of getting all the logs for the timeframe 15:00 ->