I tried to run courier-analog 0.13 with a logfile produced by Courier-IMAP
4.0.6 (as it is included in OpenSUSE 10.1) -- it does not work.
Looks like Courier-IMAP 4.0.6 has changed its logfile format:
Mar 24 04:45:17 kjidder couriertcpd: LOGOUT,
[EMAIL PROTECTED], ip=[::ffff:83.
216.232.83], top=0, retr=0, time=3, stls=1
The attached patch helps courier-analog to detect all logins at least as
pop3-logins.
Will you provide a newer version of courier-analog?
Best regards,
Peer
--- /usr/local/bin/courier-analog 2007-03-24 16:25:12.000000000
+0100
+++ ./courier-analog 2007-03-24 17:13:33.000000000 +0100
@@ -1214,12 +1214,12 @@
my $logrecord=[$line, $linenum];
- if (/^(...............)[^:]*(imapd|pop3d)(-ssl)?[\[\]\d]*:\s*(.*)/)
+ if (/^(...............)[^:]*(couriertcpd|imapd|pop3d)(-ssl)?
[\[\]\d]*:\s*(.*)/)
{
my ($timestamp,$service,$msg)=($1,$2,$4);
my $conn= $service eq "imapd" ? \%CONN_IMAP:\%CONN_POP3;
- if ($msg =~ /user=(.*), ip=\[([^\]]*)\], (headers|top)=(\d+),
(body|retr)=(\d+)(, time=(\d+))?(, starttls=1)?/)
+ if ($msg =~ /user=(.*), ip=\[([^\]]*)\], (headers|top)=(\d+),
(body|retr)=(\d+)(, time=(\d+))?(, stls=1)?/)
{
my ($login,$ip,$headers,$body,$seconds,$tls)=($1,$2,$4,$6,$8,
$9);
--
Heinlein Professional Linux Support GmbH
Linux: Akademie - Support - Hosting
http://www.heinlein-support.de
Besuchen Sie uns: CeBIT 2007: Stand G64/3 im LinuxPark!
Zwangsangaben lt. §35a HGB:
HRB 93818 B / Amtsgericht Berlin-Charlottenburg,
Geschäftsführer: Peer Heinlein -- Sitz: Berlin
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Courier-imap mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-imap
