perl -ne "print if /cmd\.exe/" access.log