> I upgraded to the latest version but still no luck, > But one thing, I changed the location of the log file from /var/log/maillog > to /usr/log/maillog after the OS installtion. I accidentally formatted the > /var partition too small so in order to prevent partition fill-up, I changed > the location for the main log file.
This does not matter to pflogsumm. It only parses what is passed to it. > Logrotate is suppose to run weekly, Logrotate is supposed to run constantly. It then rotates the logs according to your schedule. Nightly is very common. Some rotate the logs even more rapidly than that, or off the size of the log file. > Has logrotate anything to do with pflogsumm ? Logrotate? Not directly. This is a problem with what data you feed pflogsumm. Lets say you rotate every night. A message comes in at 11:59:37, and leaves at 00:00:15. The logging would be spit between two log files by the rotation. So the breaking up of the logs causes some oddities. But if you are running a current postfix you MUST run the experimental pflogsumm. Any other version can not parse the changes in the Postfix logs. --Eric
