On 6/23/2004 12:10 PM, Eric A. Hall wrote:

> I like the structured data but it would be really great if these were
> presented in a macro array like RECEIEVED[0] or the like.

ps--These need to be the original unstructured headers since they will
reflect product-specific formatting. For example, look at this one:

|  Received: from [207.65.71.20] (ferret.corp.ntrg.com [207.65.71.20])
|       (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
|       (Client CN "Eric A. Hall", Issuer "Network Technology Research
|       Group Certificate Authority" (verified OK))
|       by goose.ehsco.com (Postfix ) with ESMTP id A6C1313921;
|       Wed, 23 Jun 2004 12:11:45 -0500 (CDT)

That has everything I need in it (ESMTP, "verified" TLS, ADDR/DNS/EHLO
matching, etc.), but to really get juicy with this stuff we need raw
access to the original unstructured header.

-- 
Eric A. Hall                                        http://www.ehsco.com/
Internet Core Protocols          http://www.oreilly.com/catalog/coreprot/

Reply via email to