This is what I have in qmail.init (correponding to cyclog):
| setuser $LOGUSER cyclog $FILESIZE $FILENO $LOGDIR &
And this inside a log file:
948989145.602145 starting delivery 97: msg 524301 to local [EMAIL PROTECTED]
948989145.602184 status: local 1/10 remote 0/20
948989145.615594 delivery 97: deferral:
Unable_to_chdir_to_maildir._(#4.2.1)/
948989145.615632 status: local 0/10 remote 0/20
948994507.612565 starting delivery 98: msg 524297 to local [EMAIL PROTECTED]
948994507.612603 status: local 1/10 remote 0/20
948994507.612624 starting delivery 99: msg 524300 to local [EMAIL PROTECTED]
948994507.612657 status: local 2/10 remote 0/20
948994507.612678 starting delivery 100: msg 524293 to local [EMAIL PROTECTED]
948994507.612711 status: local 3/10 remote 0/20
948994507.613345 starting delivery 101: msg 524294 to local [EMAIL PROTECTED]
948994507.613377 status: local 4/10 remote 0/20
> > (I wish that D. J. Bernstein, the programmer of qmailanalog, reads this
> > mailing list so he improves the documentation)
>
> Well, compared to his other documentation, qmail-analog's is a little
> murky. But most of what I wrote came from qmailanalog-0.70/doc/MATCHUP.
>
> > As my logs are created using cyclog I don't need to execute the awk, I
> > suppose.
>
> Right, the awk is only there to strip the timestamp which syslog adds.
>
> > Well, now I have in /var/log two directories: qmail and qmail-smtpd.
Even if
> > this seems a stupid question, the files stored in qmail are of the
outgoing
> > mails and inside qmail-smtpd are of the incoming mails?
>
> The qmail log will still contain info about messages received by smtp.
> The smptd log is a log of the smtpd process itself, and contains little
info
> about the actual mail handled.
>
> > In both directories I have several files starting with "@", how do I
"parse"
> > all of them with qmailanalog?
>
> What is your logging setup? What's in those files?
