sendmail log files on solaris 8

[Joost van Baal]

Hi Arnaud,

On Fri, Nov 09, 2001 at 01:16:26PM +0100, Arnaud Gaillard wrote:
> 
> Thanks for your yesterday answers. We are using the version 8.10.1 on
> Solaris and the looging is done through the syslog, it seems that the field
> we had to remove is a syslog generated field.
> You can now add to your list that lire compile successfully on Solaris 8,
> but for now I cannot get the html work for  now. (I think it will take a
> little bit more time).

Installing the needed tools is indeed 'interesting'...  However, jade is
no longer needed to generate html output.  You might want to try our
latest cvs snapshot.  Francis just uploaded a new one to
http://logreport.org/pub/cvs-snapshots .

> Anyway it seems that those type of line are not
> understand, Here the example of the 2 type of line:
> 
> 
> email all lr_tag-20011109085638-8029 sendmail2dlf warning skipping line 'Nov
> 4 03:01:20 imrldmz3 sendmail[5696]: fA421KT05696: SYSERR(root):
> collect: I/O error on connection from wk9z1.corner.ch,
> from=<alertmail at gartner.com>: Connection reset by wk9z1.corner.ch': fromline
> without a
> size field

Such a warning won't harm much.

> email all lr_tag-20011109094152-8097 sendmail2dlf warning Lire::Syslog::new:
> bogus stuff 'Oct 28 23:11:55 imrldmz1 sendmail[790]: [ID ruleset=check_rcpt,
> arg1=<webmaster at swissflirt.ch>, relay=[195.24.84.165], reject=550 5.7.1
> <webmaster at swissflirt.ch>... Relaying denied. IP name lookup failed
> [195.24.84.165]': cannot parse

This looks like a K-line in your sendmail.cf (a Key File Declaration) in
the syslog class.  Are you using the Solaris-supplied sendmail?  Or did
you install and configure sendmail yourself?  Are you using Log Level 9
(this is set in your sendmail.cf.)?

(BTW, I think something went wrong when you pasted the logline in your
email message.  The [ID tag is not closed.  Could you paste the complete
line?)

> As soon as I will have more time I will have a look to your perl script that
> analyze the log and I hope I will be able to help you.

The sendmail2dlf script has been greatly improved in latest snapshot, so
you might want to prefer looking at that one.  And: it handles your
[ID ...] stamps.

Bye,

Joost

-- 
Joost van Baal              . .           http://www.logreport.org/
                           .   .
/^LogReport$/               . .               joostvb at logreport.org

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.logreport.org/pipermail/questions/attachments/20011119/b8638eae/attachment.bin