>oh so you do a log rotation every day ?
of course, at 00:00. in your high volume case, a necessity. in pflogsumm, if a couple lines of the adjacent day leak into current day's maillog, pflogsumm will show per-hour averages over 2 days, rather than per-hour totals per 1 days. fix that using --today >hmm where can i change that and how do i get it to save it longer than the >5 instances it has today ? If linux, it's a hellish feature called logrotate. If FreeBSD, it's a no brainer called newsyslog. Len
