Weblog entry #1 for trollll

Recommendation for a mail log analyzer?
Posted by trollll on Fri 18 Jul 2008 at 05:08
I have webalizer installed, dutifully churning through my apache logs, but nothing for my postfix logs. I've done a bit of searching around, but haven't really turned up much beyond AWStats (not sure I want to go that route just yet) and some rather ancient Perl scripts.

What do you use?

 

Comments on this Entry

Posted by Steve (80.68.xx.xx) on Fri 18 Jul 2008 at 11:56
[ Send Message | View Steve's Scratchpad | View Weblogs ]

[ Parent | Reply to this comment ]

Posted by trollll (67.102.xx.xx) on Fri 18 Jul 2008 at 16:40
[ Send Message | View Weblogs ]
You know, I searched the site a bit (before using Google, even) and didn't find that article somehow... Thanks! Going to try it out.

[ Parent | Reply to this comment ]

Posted by trollll (67.102.xx.xx) on Sat 19 Jul 2008 at 04:06
[ Send Message | View Weblogs ]
Works well (nice and fast, too)! Some wonky numbers for the first attempt (0k for 6000+ emails yesterday), but hoping it'll smooth out as it goes through each day.

Holy hell, I get more spam thrown at my server than I realized. Looks like one out of ten makes it to inboxes, and about ten to twenty percent of THAT generally proves real... Gives a very nice breakdown by domain, though.

Thanks again!

[ Parent | Reply to this comment ]

Posted by Anonymous (79.196.xx.xx) on Fri 18 Jul 2008 at 19:20
#apt-cache show pflogsumm

Description: Postfix log entry summarizer
pflogsumm is designed to provide an over-view of postfix
activity, with just enough detail to give the administrator
a "heads up" for potential trouble spots.
.
Homepage: http://jimsun.linxnet.com/postfix_contrib.html

[ Parent | Reply to this comment ]

Posted by Anonymous (202.7.xx.xx) on Sat 19 Jul 2008 at 00:06
I liked isoqlog and its webpage output, but found that sometimes it seems to bork and every few days the message count is '0', or it counts the right number of messages but the total size is '0'. Otherwise, quite useful.

pflogsumm is ok, I haven't done much with it other than spit out gigantic emails each morning... anyone using it and outputting it to html?

You can also configure awstats to parse mail files and report on them.

[ Parent | Reply to this comment ]

Posted by trollll (67.102.xx.xx) on Sat 19 Jul 2008 at 17:46
[ Send Message | View Weblogs ]
I also got the correct number of messages, but 0k in size. Hoping that'll start working, but may need to poke around in the available options to see if I can coax it into telling the truth.

[ Parent | Reply to this comment ]

Posted by diveli (202.7.xx.xx) on Sun 20 Jul 2008 at 07:43
[ Send Message | View Weblogs ]
Good luck on that front (anonymous poster was me above)! I had no luck and found no pattern in that occurrence. For me it didn't just go away, I'm no C programmer so gave up. Was completely random in its errors. Unfortunately it doesn't look to be actively developed (last release, 2005?!).

[ Parent | Reply to this comment ]