Mimedefang Log reporting

[Wytze van der Raay]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Olga Aygelson wrote:

| I'm I'm using lire to process my sendmail log on a FreeBSD machine.
|  (have lire-2.0.1_2, mimedefang-2.43_2)
| I unable to build correct log report using existing schemas & I tried
| to build new one ( it attached in this message)
| I created new converter ( not sure it correct, I'm not familiar with
| perl, just tried to change existing spamassassin converter for my
| format)
| I not completed with reports' configurations yet
| I'm trying to debug & understand where the problem, but can not find
| it, what I need to change more to get correct reports.
| (I attached schema & converter)

| ...
| Can be my tries are completely nonsense, but I can not find answer not
| in documentation, not in forum.
| If I'm trying to get result with existing configuration I get error message:
| --Parsing log file using spamassassin DLF Converter...
| --lr_log2report: ERROR error while sending data to old dlf converter:
| Broken pipe

If I understand your e-mail correctly, you are trying to change the DLF
schema 'spamfilter.xml' to match your particular input format. This is
not the way the Lire framework works ...
The DLF schema provides a description for all subsequent processing
(analysis, report formatting etc.) of the data, but it does not provide
automatically a parser for your raw input data. Instead of modifying
the DLF schema, you should probably write a new converter (or modify
an existing one) to convert your log data format into the standardized
format described by spamfilter.xml. For an example on how to do that,
you could take a look at some of my old messages describing a crude
solution for a similar problem: processing MailScanner-generated
spamassassin log data:
	http://logreport.org/contact/lists/questions/msg00391.php
	http://logreport.org/contact/lists/questions/msg00437.php
	http://logreport.org/contact/lists/questions/msg00439.php

You also stated "I created new converter" and "I attached schema &
converter", but I didn't see any converter code attached to your
message. But that is the approach which should work for you. You
will need to do a little perl programming for that though.

Regards,
Wytze van der Raay
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFB/gICqs+zhiEbbu8RAskxAKCM/ptjAGpFaSFtu2lJ+TRSxUjC8wCfRbNq
bI4qAUeh1etQJsz3Z/i9sos=
=EOkf
-----END PGP SIGNATURE-----

-- 
To UNSUBSCRIBE, email to questions-request at logreport.org with a subject of 
"unsubscribe". Trouble? Send an email with subject "help" to 
questions-request at logreport.org