OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: extracting smtp traffic from logs
From: Stefan `Sec` Zehl (sec42.org)
Date: Sat Apr 01 2000 - 16:28:02 CST

On Sat, Apr 01, 2000 at 08:51:44AM -0500, Jim Seymour wrote:
> "Miguel A.L. Paraz" <mapiphil.net> wrote:
> >
> > Speaking of which, I wrote a little Perl script that reports on REJECT's
> > only, and categorizes them. Let me know if you would like a copy.
>
> It's funny you should mention that. I find myself in most cases
> scrolling past the traffic reports that pflogsumm.pl generates down to
> the bounce/reject/warning/error reports 99 times out of a hundred. So
> I've been thinking of adding a switch to pflogsumm to do basically
> that: emit only the "exception" reports. (Tho one can presently
> achieve much the same end by simply specifying "-u 0 -h 0", so maybe
> there's no point.)

I've modified our local copy of pflogsumm and moved all the
'interesting/relevant' reports (i.e. rejects and that) to the top. This
way I see them at once, but can access the other statistics if needed
simply by scrolling down.

CU,
    Sec 

-- 
Currently it is not possible, but it would be possible to write to code
to make this possible.