Solved. Thanks,
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Serhan Sevim Sent: Thursday, February 27, 2003 3:08 PM To: [EMAIL PROTECTED] Subject: [IMGate] Re: pflogsumm.pl message size Can somebody send me their a small portion of log files ? I want to copy that maillog file and try to parse it with my pflogsumm. If it recognizes the message size then I will try to compare both logfiles (mine and yours) and see the differences between. That way, I could be able to find what the problem is. PS : My postfix version is postfix-1.1.7-2 Thank you for any input. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Cybertime Hostmaster Sent: Thursday, February 27, 2003 1:46 PM To: [EMAIL PROTECTED] Subject: [IMGate] Re: pflogsumm.pl message size > I upgraded to the latest version but still no luck, > But one thing, I changed the location of the log file from /var/log/maillog > to /usr/log/maillog after the OS installtion. I accidentally formatted the > /var partition too small so in order to prevent partition fill-up, I changed > the location for the main log file. This does not matter to pflogsumm. It only parses what is passed to it. > Logrotate is suppose to run weekly, Logrotate is supposed to run constantly. It then rotates the logs according to your schedule. Nightly is very common. Some rotate the logs even more rapidly than that, or off the size of the log file. > Has logrotate anything to do with pflogsumm ? Logrotate? Not directly. This is a problem with what data you feed pflogsumm. Lets say you rotate every night. A message comes in at 11:59:37, and leaves at 00:00:15. The logging would be spit between two log files by the rotation. So the breaking up of the logs causes some oddities. But if you are running a current postfix you MUST run the experimental pflogsumm. Any other version can not parse the changes in the Postfix logs. --Eric
