cat mirrors.ocf.berkeley.edu_access.log mirrors.ocf.berkeley.edu_access.log.1 | awk '( ~ /(2|3)../) { split ($7, a, /\//); dists[a[2]]+= $(NF-1) + $NF } END { for (i in dists) { if (dists[i] > 1000) { print i, dists[i]; } } }'