Sendmail log

[Joost van Baal]

Hi Arnaud,

On Thu, Nov 08, 2001 at 05:53:27PM +0100, Arnaud Gaillard wrote:
> 
> I have finished to compile Lire on Solaris 8, but it failed to give me a
> report for my sendmail log. 
> I using the following line to create the report:
> 
> ./lr_run lr_log2report -o txt error email sendmail < /export/log/syslog
> >/tmp/sendmail.report
> 
> It gave me a report but with about everything missing, and with the
> following error at the generation:
> 
> email all lr_tag-20011108163549-7521 lr_dlf2xml warning Argument
> "smtp2.orangemail.ch" isn't numeric in add at
> /usr/local/logreport/share/perl5/Lire/AsciiDlf/GroupOp.pm line 144,
> <DLF> chunk 78673.
<snip>

> Nov  7 09:00:25 imrldmz1 sendmail[849]: [ID 801593 mail.info]
> fA780OU00847: to=<je at orangemail.ch>, delay=00:00:01, xdelay=00:00:00,
> mailer=esmtp, pri=128178, relay=smtp.orangemail.ch. [192.168.20.4],
> dsn=2.0.0, stat=Sent (Message received: GMF6WR00.DUH)
> Nov  7 09:00:41 imrldmz1 sendmail[864]: [ID 801593 mail.info]
> fA780fU00864: from=<bidconfirm at ebay.de>, size=1975, class=0, nrcpts=1,
> msgid=<200111070804.fA7848u20675 at damar.ebay.com>, proto=SMTP,
> daemon=MTA, relay=miles.ebay.com [216.33.156.140]
<snip>

> The sendmail log we are using is in the syslog and has the Loglevel 9
> format here is an example:

The '[ID 801593 mail.info]' things are not recognised by our parser.
Which version of sendmail are you running?  Our parser should be
able to recognise LogLevel 9 sendmail 8.10.x and 8.11.x.

A quick and dirty workaround is this:

 grep 'sendmail\[' < /export/log/syslog | cut -d' ' -f1-5,10- | \
   ./lr_run lr_log2report -o txt error email sendmail >/tmp/sendmail.report

The grepping for sendmail can be omitted if sendmail is the only service
writing to /export/log/syslog, of course.

I'm very interested in the exact sendmail version you're using, that'll
help us adding support for this specific kind of sendmail logfile.

Bye,

Joost

-- 
Joost van Baal              . .           http://www.logreport.org/
                           .   .
/^LogReport$/               . .               joostvb at logreport.org

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.logreport.org/pipermail/questions/attachments/20011108/f329b622/attachment.bin