I think I know what he means, because I've considered the same thing myself, for a moment or two.
He wants to parse his maillog file to throw away everything but the "processing message <message_id> and the "identified spam" lines. Then he can go back and look at <message_id> for troubleshooting purposes. He has a feeling that he can't count on the "identified spam" line always immediately following the "processing message" line. He'd like to throw away everything but those two lines. Basically, I guess he's asking for a report in the format: "Identified spam (29.6 points) in message <[EMAIL PROTECTED]>" ... ... ... (more of same) Fair disclosure: Idunno how to do that. -tom -----Original Message----- From: Tony Earnshaw [mailto:[EMAIL PROTECTED] Sent: Wednesday, May 28, 2003 8:42 AM To: SpamAssassin Talk Cc: Alex van den Bogaerdt Subject: Re: [SAtalk] Best way to process the log? tir, 27.05.2003 kl. 17.13 skrev Alex van den Bogaerdt: > Setup: postfix with SA, using spamc and spamd > Logfile: (slightly anonymized and edited for length) > > Prelude connection from localhost [127.0.0.1] at port 3132 > Prelude info: setuid to spamcheck succeeded > Prelude processing message <[EMAIL PROTECTED]> for x:y > Prelude identified spam (8.3/5.0) for x:y in 0.0 seconds, 6280 bytes. > > My gut feeling tells me I cannot rely on the 3rd and 4th line being > always consecutive. > > What I'd like to be able to do is to search for "identified spam" and, > using the message-ID, find the related messages from postfix. > > Q: am I right and if so, what is (a|the) common way of doing what I want? > Q: is there a reason for not combining the info in the 3rd and 4th row? Alex, I'd like to help, since no-one answered, you're Dutch ("sniff, sniff Nobody loves me") and anyway I've been through the whole gamut of learning Postscript and SA, from filter to spampd to amavisd-new. I can make SA-Exim 4 work perfectly well, for everything and a lot more, in every case. But I don't know what the hell you're talking about. Your English is good enough for passing exams in England, so it's not that. Could you please be a bit more specific? "identified spam" means that spamd found spam (verb transitive) what do lines and rows have to do with anything? Line and row numbers? 3rd and 4th are *always* consecutive, whether you like it or not. What's the following supposed to mean? > What I'd like to be able to do is to search for "identified spam" and, > using the message-ID, find the related messages from postfix. And so on. Best, Tony -- Tony Earnshaw http://www.billy.demon.nl Mail: [EMAIL PROTECTED] ------------------------------------------------------- This SF.net email is sponsored by: ObjectStore. If flattening out C++ or Java code to make your application fit in a relational database is painful, don't do it! Check out ObjectStore. Now part of Progress Software. http://www.objectstore.net/sourceforge _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk ------------------------------------------------------- This SF.net email is sponsored by: ObjectStore. If flattening out C++ or Java code to make your application fit in a relational database is painful, don't do it! Check out ObjectStore. Now part of Progress Software. http://www.objectstore.net/sourceforge _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
