OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: extracting smtp traffic from logs
From: Len Conrad (lconradGo2France.com)
Date: Sat Apr 01 2000 - 08:14:38 CST

> > date, time, to:localuser, to:localdomain, from:localuser,
> from:localdomain,
> > bytes-transported, in/out
>
>Pflogsumm.pl (written by myself) does all of this (and quite a bit
>more) except that it doesn't distinguish or limit "by domain", as it
>were.

I don't expect any reporting tool to be able to anticipate all the reports,
standard and ad hoc, that will be imagined.

So that's why I'm just looking, eg from pflogsum or derivations, just for a
delimited "smpt traffic" file that would be imported into an SQL database
where the reporting faciliities are plentiful.

My primary interest is "traffic volume accounting" so customers hosting
apps (web servers, ftp servers, lists, mail) with us can be billed for traffic.

We're running all of our mail (mail and lists) through 2 postfix gateways,
so we've gotta find a way to extract the traffic in postifix logs into
SQL-importable files.

Len