I am trying to ingest the opensmtpd log output. There is some structure
provided by the key=value pairing, but it is not dependable. Unusual
strings from endpoints results in values not being well formed:
Missing a leading '"' in "user":
2025-06-14T21:33:07.232784+00:00 hostname smtpd[1867116]:
932be1ac2e6b70ee smtp authentication
user=\M-c\M^C\M^G\M-c\M^C\M-" result=permfail
Extra '"' unescaped in "command":
2025-06-16T12:32:23.149249+00:00 hostname smtpd[1867116]:
932bff85d05a8170 smtp failed-command
command="ehlo lhisdf"" result="501 5.5.4 Invalid command ..."
I would like to raise this an an issue, and ask if the maintainers
have an interest in improving this, and/or what type of improvements
(simple escapes? json?) they might accept from the community.
--
Mark Lawrence
