Hi all, sorry for the ofllowing long mail.
I'm running tcpserver with the -v option and splogger to catch stuff.
I run qmail-send as follows:
csh -cf 'qmail-start ./Maildir/ splogger qmail &'
and i run smtpd as follows:
/usr/local/bin/tcpserver -v -D -lcia.com.au -b30 -H -R -c100 -x/var/qmail/tc
p.smtp.cdb -u71 -g65534 0 sm
tp /var/qmail/bin/qmail-smtpd 2>&1 | /var/qmail/bin/splogger smtpd &
Syslog has a line pointing mail.* to /var/log/mail.log
Consequently, here is a snippet of my mail.log file:
ov 12 10:55:12 newmi5 splogger: 942364512.563582 tcpserver: end 19025 status
0
Nov 12 10:55:12 newmi5 splogger: 942364512.606325 starting delivery 43168:
msg 38869 to remote dgoldney@
csu.edu.au
Nov 12 10:55:12 newmi5 splogger: 942364512.606648 status: local 1/10 remote
5/20
Nov 12 10:55:13 newmi5 splogger: 942364513.013454 tcpserver: pid 19042 num
10 from 208.210.124.59
Nov 12 10:55:13 newmi5 splogger: 942364513.014911 tcpserver: ok 19042
cia.com.au:203.17.36.17:25 :208.21
0.124.59::3221
Nov 12 10:55:13 newmi5 splogger: 942364513.563590 new msg 38870
Nov 12 10:55:13 newmi5 splogger: 942364513.563991 info msg 38870: bytes
57672 from <[EMAIL PROTECTED]
et> qp 19040 uid 3487
Nov 12 10:55:13 newmi5 splogger: 942364513.611796 starting delivery 43169:
msg 38870 to local allistar_t
[EMAIL PROTECTED]
Nov 12 10:55:13 newmi5 splogger: 942364513.612124 status: local 2/10 remote
5/20
Nov 12 10:55:13 newmi5 splogger: 942364513.612363 delivery 43167: success:
/_SEARCHING:_.qmail-securegat
e:net-a:twigg/did_0+1+0/qp_19040/
Nov 12 10:55:13 newmi5 splogger: 942364513.612575 status: local 1/10 remote
5/20
Nov 12 10:55:13 newmi5 splogger: 942364513.612770 end msg 38859
I'm assuming that there aer two things coming up in my log:
1. The incoming smtpd connections that qmail-smtpd is dealing with, and
2. The qmail-send program which is deciding whether to spawn qmail-lspawn or
qmail-rspawn for outgoing mails.
Now, if my assumption is right, can anyone else think of any other handy
information to log?
And, can anyone suggest how i use qmail-analog to parse my mail.log file?
Running matchup < /var/log/mail.log just cats the mail.log file and gives me
no useful information :(
Thanks for your help!
Regards,
Marc-Adrian Napoli
Connect Infobahn Australia
+61 2 92811750
