Hi Bob...
Thanks for the suggestions. I downloaded the latest sa-stats.pl from
www.sf.net CVS (v1.3) and tried as you suggested, but I'm still getting
all zeros.
Details...
My mail logs are at /var/log/mail/maillog.
Here's a sample of a log line concerning spamd:
Jan 22 09:00:49 sara-too spamd[6599]: connection from localhost
[127.0.0.1] at port 39780
Jan 22 09:00:49 sara-too spamd[14917]: info: setuid to filter succeeded
Jan 22 09:00:49 sara-too spamd[14917]: processing message
<[EMAIL PROTECTED]> for filter:500.
Jan 22 09:00:52 sara-too spamd[14917]: clean message (-97.2/5.0) for
filter:500 in 2.8 seconds, 6762 bytes.
Here's the report I get from sa-stats.pl:
sara-too root # ./sa-stats.pl -s "midnight"
Report Title : SpamAssassin - Spam Statistics
Report Date : 2004-01-22
Period Beginning : Thu Jan 22 00:00:00 2004
Period Ending : Fri Jan 23 00:00:00 2004
Reporting Period : 24.00 hrs
--------------------------------------------------
Note: 'ham' = 'nonspam'
Total spam rejected : 0 ( 0.00%)
Total ham accepted : 0 ( 0.00%)
-------------------
Total emails processed: 0 ( 0/hr)
Average spam threshold : 0.00
Average spam score : 0.00
Average ham score : 0.00
(so and so forth with all 0's).
Are we sure it's not a problem with the parsing of my log? I'm not a
perl master, so I have no idea. But hopefully this is enough evidence
to see what the problem might be.
As for modifications... In the "it would be nice" category I have... The
ability to dump this output to an HTML file (probably easy to do without
tweaking the script regardless) and the ability to see the top ten spam
receivers (available as a command-line switch since we wouldn't the
organizational public to see that one).
Thanks for all of your time and help.
--JM
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Bob Apthorpe
> Sent: Thursday, January 22, 2004 7:48 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [SAtalk] stats
>
> Hi,
> sa-stats.pl needs a little help figuring out the date range
> it needs to analyze.
>
> Assuming your mail logs are at /var/log/maillog, you have
> permissions to read them, and you want to analzye today's
> traffic, you could use
>
> sa-stats.pl -s "2004-01-22 00:00:00"
>
> sa-stats.pl -s "today midnight"
>
> or
>
> sa-stats.pl -s "midnight"
>
> My logs are under /var/log/mail so I use:
>
> sa-stats.pl -l /var/log/mail -s "2004-01-22 00:00:00"
>
> I've been hacking sa-stats.pl and contributing patches back
> to the dev team so if there's something you want to see in
> sa-stats.pl, let me know.
>
> hth,
>
> -- Bob
-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
