On 9 March 2011 15:46, Patrick Ben Koetter <p...@state-of-mind.de> wrote: > * Mauro <mrsan...@gmail.com>: >> On 9 March 2011 14:04, Noel Jones <njo...@megan.vbhcs.org> wrote: >> > On 3/9/2011 6:57 AM, Mauro wrote: >> >> >> >> I my logs I have: >> >> >> >> >> >> Feb 13 06:27:57 mail1-xen postfix/qmgr[8336]: BF683A28247: >> >> from=<..............> >> >> >> >> That number BF683A28247 is a unique number? >> > >> > The postfix queueid identifies a single message while it's in the queue. >> > The queueid is created from the queue file inode number and microsecond >> > CPU >> > time. >> > >> > The queueid is unique while that message exists; only one message at a time >> > may have a specific queueid. >> > >> > Once the message exits the queue, that queueid can be reused at any time. >> > >> > I've seen a queueid reused within 30 minutes. Don't count on it being >> > unique for any period of time. >> >> I need to know in one year who sent at who. >> I have logs for the year and records are like: >> >> Feb 13 06:27:57 mail1-xen postfix/qmgr[8336]: BF683A28247: >> from=<..............> >> Feb 13 06:28:13 mail1-xen postfix/qmgr[8336]: BF683A28247: >> to=<..............> >> >> What element I can use to identify who sent at who in the logs files? > > Create you own tag. Use the WARN function in Postfix access (5) to generate a > log entry.
I have already logs of one year, I should parse these logs to identify who sent at who.
