[root@mail:~]$ cat maillog | grep -i sasl | grep reindl | tail -n 2 Mar 9 15:00:22 mail postfix/smtpd[7582]: 0BA7FE9: client=rh.thelounge.net[10.0.0.99], sasl_method=PLAIN, sasl_username=h.rei...@thelounge.net Mar 9 16:23:45 mail postfix/smtpd[8877]: 614CEE8: client=rh.thelounge.net[10.0.0.99], sasl_method=PLAIN, sasl_username=h.rei...@thelounge.net
[root@mail:~]$ cat maillog | grep 614CEE8 Mar 9 16:23:45 mail postfix/smtpd[8877]: 614CEE8: client=rh.thelounge.net[10.0.0.99], sasl_method=PLAIN, sasl_username=h.rei...@thelounge.net Mar 9 16:23:45 mail postfix/cleanup[8918]: 614CEE8: message-id=<4d779b81.3050...@thelounge.net> Mar 9 16:23:45 mail postfix/qmgr[19091]: 614CEE8: from=<h.rei...@thelounge.net>, size=2543, nrcpt=1 (queue active) Mar 9 16:23:45 mail postfix/lmtp[8303]: 614CEE8: to=<strip...@thelounge.net>, relay=127.0.0.1[127.0.0.1]:24, delay=0.15, delays=0.03/0/0/0.12, dsn=2.0.0, status=sent (215 Recipient <strip...@thelounge.net> OK) Mar 9 16:24:15 mail postfix/qmgr[19091]: 614CEE8: removed Am 09.03.2011 16:52, schrieb Mauro: > On 9 March 2011 15:46, Patrick Ben Koetter <p...@state-of-mind.de> wrote: >> * Mauro <mrsan...@gmail.com>: >>> On 9 March 2011 14:04, Noel Jones <njo...@megan.vbhcs.org> wrote: >>>> On 3/9/2011 6:57 AM, Mauro wrote: >>>>> >>>>> I my logs I have: >>>>> >>>>> >>>>> Feb 13 06:27:57 mail1-xen postfix/qmgr[8336]: BF683A28247: >>>>> from=<..............> >>>>> >>>>> That number BF683A28247 is a unique number? >>>> >>>> The postfix queueid identifies a single message while it's in the queue. >>>> The queueid is created from the queue file inode number and microsecond >>>> CPU >>>> time. >>>> >>>> The queueid is unique while that message exists; only one message at a time >>>> may have a specific queueid. >>>> >>>> Once the message exits the queue, that queueid can be reused at any time. >>>> >>>> I've seen a queueid reused within 30 minutes. Don't count on it being >>>> unique for any period of time. >>> >>> I need to know in one year who sent at who. >>> I have logs for the year and records are like: >>> >>> Feb 13 06:27:57 mail1-xen postfix/qmgr[8336]: BF683A28247: >>> from=<..............> >>> Feb 13 06:28:13 mail1-xen postfix/qmgr[8336]: BF683A28247: >>> to=<..............> >>> >>> What element I can use to identify who sent at who in the logs files? >> >> Create you own tag. Use the WARN function in Postfix access (5) to generate a >> log entry. > > I have already logs of one year, I should parse these logs to identify > who sent at who. -- Mit besten Grüßen, Reindl Harald the lounge interactive design GmbH A-1060 Vienna, Hofmühlgasse 17 CTO / software-development / cms-solutions p: +43 (1) 595 3999 33, m: +43 (676) 40 221 40 icq: 154546673, http://www.thelounge.net/
signature.asc
Description: OpenPGP digital signature
