I know this is an old message I'm responding to, but I just noticed that the
latest version of Sawmill at www.sawmill.net includes support for processing
Declude Spam, Declude Virus, and something called Declude Log Format. It
also supports iMail Log Format, iMail Log Format (Alternate), and
i've tried a few
none give that possibilty
so i'm using the tip scott gave me
the folks of dlanalyzer are working on a virus log analyzer
i have asked for that feature
a simmilar report by sender adress (for non forging viruses) is also needed
(for dial up users without fixed ip adresses)
hope