> Hi, > > New user on the list, please direct me to the proper place if > I got it wrong. > > Setup: postfix with SA, using spamc and spamd > Logfile: (slightly anonymized and edited for length) > > Prelude connection from localhost [127.0.0.1] at port 3132 > Prelude info: setuid to spamcheck succeeded > Prelude processing message <[EMAIL PROTECTED]> for x:y > Prelude identified spam (8.3/5.0) for x:y in 0.0 seconds, 6280 bytes. > > My gut feeling tells me I cannot rely on the 3rd and 4th line being always consecutive. > > What I'd like to be able to do is to search for "identified spam" and, using the message-ID, find the related messages > from postfix. > > Q: am I right and if so, what is (a|the) common way of doing what I want? > Q: is there a reason for not combining the info in the 3rd and 4th row?
You could have a look at spamstats : http://www.gryzor.com/tools I had the same question and started working on that script :-) It is written in perl, parses the mail logfile and attempts to correlate informations from spamd and the mailer to generate (amongst others) per-recipient statistics. Vincent ------------------------------------------------------- This SF.net email is sponsored by: ObjectStore. If flattening out C++ or Java code to make your application fit in a relational database is painful, don't do it! Check out ObjectStore. Now part of Progress Software. http://www.objectstore.net/sourceforge _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk