Hi Matthias... I know you probably don't want to hear this, but I still get the same results. I'm with you, I'm sure the regexp is wrong, but I don't know perl so I'm not helping I'm sure.
I made sure that all of the code was on one line in vim too, but still the same results. Shall I post my log lines again to see if you guys can match the regexp? Just in case that's a yes: Jan 22 09:05:08 sara-too spamd[6599]: connection from localhost [127.0.0.1] at port 39783 Jan 22 09:05:08 sara-too spamd[14936]: info: setuid to filter succeeded Jan 22 09:05:08 sara-too spamd[14936]: processing message <[EMAIL PROTECTED]> for filter:500. Jan 22 09:05:10 sara-too spamd[14936]: identified spam (8.2/5.0) for filter:500 in 1.9 seconds, 1756 bytes. --JM > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Matthias Fuhrmann > Sent: Thursday, January 22, 2004 1:36 PM > To: SATalk list > Subject: RE: [SAtalk] stats > > On Thu, 22 Jan 2004, Bob Apthorpe wrote: > > [...] > > based on sa-stats.pl 1.3 i did a quick fix (yes again...) > > all u have to do is this: > > cut all line between > > # Agh... this is ugly. > > [...] <<< delete all these lines here > > #Split line into components > > and replace it with this one: > > if > (m/^(\w{3})\s(\d+)\s+(\d\d):(\d\d):(\d\d)\s+\w+\s+spamd\[\d+\] > :\s+(clean\smessage|identified\sspam)\s\(([-0-9.]+)\/([-0-9.]+)\)\s > for\s\(\w+\):\d+\sin\s[0-9.]+\sseconds,\s+[0-9]+\sbytes\./x) { ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk