postfix log format

[Jittinan Suwanrueangsri]

Hi everybody

 

Are there any postfix log format documents so I can understand meaning of each column in raw log ?

 

Sincerely,

Jittinan Suwanureangsri

[Wietse Venema]

jittinan suwanrueangsri:
> Hi everybody
>
> Are there any postfix log format documents so I can understand meaning of
> each column in raw log ?

Postfix logging is not yet documented - it is one of those ancient
pieces of version "zero" code that was meant to be replaced by real
code that is properly configurable.

By now it is time to start thinking of postfix-lite.

        Wietse

[Jittinan Suwanrueangsri]

Hi All

I want to know message size of an email which was send through postfix.A part of raw log is shown as below 

Apr  8 14:22:02 MailSecure03 postfix/smtpd[32388]: BA1CE38965: client=mail.example.com[x.x.x.x]

Apr  8 14:22:03 MailSecure03 postfix/cleanup[32070]: BA1CE38965: message-id=<[hidden email]>

Apr  8 14:22:03 MailSecure03 postfix/qmgr[19685]: BA1CE38965: from=<[hidden email]>, size=1087, nrcpt=2 (queue active)

Apr  8 14:22:04 MailSecure03 postfix/smtp[32608]: BA1CE38965: to=<[hidden email]>, relay=127.0.0.1[127.0.0.1]:10025, delay=1.7, delays=1/0/0/0.68, dsn=2.0.0, status=sent (250 OK, sent 49DC509B_360_15637_1 62D8438973)

Apr  8 14:22:04 MailSecure03 postfix/smtp[32608]: BA1CE38965: to=<[hidden email]>, relay=127.0.0.1[127.0.0.1]:10025, delay=1.7, delays=1/0/0/0.68, dsn=2.0.0, status=sent (250 OK, sent 49DC509B_360_15637_1 62D8438973)

Apr  8 14:22:04 MailSecure03 postfix/qmgr[19685]: BA1CE38965: removed

Apr  8 14:22:04 MailSecure03 postfix/smtpd[32589]: 62D8438973: client=localhost.localdomain[127.0.0.1]

Apr  8 14:22:04 MailSecure03 postfix/cleanup[32080]: 62D8438973: message-id=<[hidden email]>

Apr  8 14:22:04 MailSecure03 postfix/qmgr[19685]: 62D8438973: from=<[hidden email]>, size=1636, nrcpt=2 (queue active)

Apr  8 14:22:04 MailSecure03 postfix/smtp[32417]: 62D8438973: to=<[hidden email]>, relay=y.y.y.y[y.y.y.y]:25, delay=0.19, delays=0.04/0/0.04/0.1, dsn=2.6.0, status=sent (250 2.6.0  <[hidden email]> Queued mail for delivery)

Apr  8 14:22:04 MailSecure03 postfix/smtp[32417]: 62D8438973: to=<[hidden email]>, relay=y.y.y.y[y.y.y.y]:25, delay=0.19, delays=0.04/0/0.04/0.1, dsn=2.6.0, status=sent (250 2.6.0  <[hidden email]> Queued mail for delivery)

Apr  8 14:22:04 MailSecure03 postfix/qmgr[19685]: 62D8438973: removed

1.Does the word size mean size of email message ? 

2.Size is not specified unit ,Does it mean Byte ?

3.I found 2 rows which show size but which row is actual size of a message? (1087,1636)

 

Jittinan Suwanrueangsri

2009/4/7 Wietse Venema <[hidden email]>

jittinan suwanrueangsri:

> Hi everybody
>
> Are there any postfix log format documents so I can understand meaning of
> each column in raw log ?

Postfix logging is not yet documented - it is one of those ancient
pieces of version "zero" code that was meant to be replaced by real
code that is properly configurable.

By now it is time to start thinking of postfix-lite.

       Wietse

[Magnus Bäck]

On Wed, April 8, 2009 12:14 pm, jittinan suwanrueangsri said:

> I want to know message size of an email which was send through postfix.A
> part of raw log is shown as below
>
> Apr  8 14:22:02 MailSecure03 postfix/smtpd[32388]: BA1CE38965: client=
> mail.example.com[x.x.x.x]
> Apr  8 14:22:03 MailSecure03 postfix/cleanup[32070]: BA1CE38965:
> message-id=<[hidden email]>
> Apr  8 14:22:03 MailSecure03 postfix/qmgr[19685]: BA1CE38965: from=<
> [hidden email]>, size=1087, nrcpt=2 (queue active)

[...]

> Apr  8 14:22:04 MailSecure03 postfix/qmgr[19685]: 62D8438973: from=<
> [hidden email]>, size=1636, nrcpt=2 (queue active)

[...]

> 1.Does the word size mean size of email message ?

Yes.

> 2.Size is not specified unit ,Does it mean Byte ?

Yes.

> 3.I found 2 rows which show size but which row is actual size of a
> message?
> (1087,1636)

The first size is before the content filter and the second size is after
the content filter. An SMTP content filter will add two Received: headers
plus any headers the content filter itself adds, so a size increase of 450
bytes is reasonable.

Please do not top-post.

--
Magnus Bäck
[hidden email]

[kj-12]

Wietse Venema wrote:
> Postfix logging is not yet documented - it is one of those ancient
> pieces of version "zero" code that was meant to be replaced by real
> code that is properly configurable.
>  
If it's not broken, don't fix it. :)

Working with qmail all day, I really appreciate the postfix log format.

--kj