[ BTW - I did se Mail::Toaster and I am currently researching it, but it doesn't hurt to ask ... not too painfully anyways... ]
I have a huge set of logs (from many mail servers) that each have logs in this format:
Apr 4 17:23:51 chasecreek postfix/smtpd[4265]: [ID 197553 mail.info] A778E1375E: client=localhost[127.0.0.1]
Apr 4 17:23:51 chasecreek postfix/cleanup[4267]: [ID 197553 mail.info] A778E1375E: message-id=<[EMAIL PROTECTED]>
Apr 4 17:23:51 chasecreek postfix/qmgr[16273]: [ID 197553 mail.info] A778E1375E: from=<[EMAIL PROTECTED]>, size=1096, nrcpt=1 (queue active)
Apr 4 17:24:00 chasecreek postfix/smtp[4268]: [ID 197553 mail.info] A778E1375E: to=<[EMAIL PROTECTED]>, relay=205.152.59.17[205.152.59.17], delay=9, status=sent (250 Message received: [EMAIL PROTECTED])
Apr 4 17:24:00 chasecreek postfix/qmgr[16273]: [ID 197553 mail.info] A778E1375E: removed
I would like to find all tracking IDs (ex: A778E1375) and make a "control break" resport processed by From: (ex: from=<[EMAIL PROTECTED]>) and list all the To: (ex: to=<[EMAIL PROTECTED]> recipients...
I am shooting for something like:
A778E1375E from=<[EMAIL PROTECTED]> ::
Apr 4 msg size=1096 to=<[EMAIL PROTECTED]>
via relay=205.152.59.17[205.152.59.17]
Apr 4 msg size=1096 to=<[EMAIL PROTECTED]>
via relay=205.152.59.17[205.152.59.17]
Apr 4 msg size=1096 to=<[EMAIL PROTECTED]>
via relay=205.152.59.17[205.152.59.17]
... et al ...Total: 3 msg using ~3000 bytes.
This control break Total is per "from="; then a general break=down of report totals at the end?
Has anyone seen a CPAN module for this? Or maybe wrote a home grown solution?
Thx; -Sx-
PS - in this example I used the same SMTP data line three times... I am trying to track a set of user patterns thru the Postfix SMTP server...
-- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] <http://learn.perl.org/> <http://learn.perl.org/first-response>
