postfix log format

classic Classic list List threaded Threaded
5 messages Options
Reply | Threaded
Open this post in threaded view
|

postfix log format

Jittinan Suwanrueangsri
Hi everybody
 
Are there any postfix log format documents so I can understand meaning of each column in raw log ?
 
Sincerely,
Jittinan Suwanureangsri
Reply | Threaded
Open this post in threaded view
|

Re: postfix log format

Wietse Venema
jittinan suwanrueangsri:
> Hi everybody
>
> Are there any postfix log format documents so I can understand meaning of
> each column in raw log ?

Postfix logging is not yet documented - it is one of those ancient
pieces of version "zero" code that was meant to be replaced by real
code that is properly configurable.

By now it is time to start thinking of postfix-lite.

        Wietse
Reply | Threaded
Open this post in threaded view
|

Re: postfix log format

Jittinan Suwanrueangsri
Hi All

I want to know message size of an email which was send through postfix.A part of raw log is shown as below 

Apr  8 14:22:02 MailSecure03 postfix/smtpd[32388]: BA1CE38965: client=mail.example.com[x.x.x.x]
Apr  8 14:22:03 MailSecure03 postfix/cleanup[32070]: BA1CE38965: message-id=<[hidden email]>
Apr  8 14:22:03 MailSecure03 postfix/qmgr[19685]: BA1CE38965: from=<[hidden email]>, size=1087, nrcpt=2 (queue active)
Apr  8 14:22:04 MailSecure03 postfix/smtp[32608]: BA1CE38965: to=<[hidden email]>, relay=127.0.0.1[127.0.0.1]:10025, delay=1.7, delays=1/0/0/0.68, dsn=2.0.0, status=sent (250 OK, sent 49DC509B_360_15637_1 62D8438973)
Apr  8 14:22:04 MailSecure03 postfix/smtp[32608]: BA1CE38965: to=<[hidden email]>, relay=127.0.0.1[127.0.0.1]:10025, delay=1.7, delays=1/0/0/0.68, dsn=2.0.0, status=sent (250 OK, sent 49DC509B_360_15637_1 62D8438973)
Apr  8 14:22:04 MailSecure03 postfix/qmgr[19685]: BA1CE38965: removed
Apr  8 14:22:04 MailSecure03 postfix/smtpd[32589]: 62D8438973: client=localhost.localdomain[127.0.0.1]
Apr  8 14:22:04 MailSecure03 postfix/cleanup[32080]: 62D8438973: message-id=<[hidden email]>
Apr  8 14:22:04 MailSecure03 postfix/qmgr[19685]: 62D8438973: from=<[hidden email]>, size=1636, nrcpt=2 (queue active)
Apr  8 14:22:04 MailSecure03 postfix/smtp[32417]: 62D8438973: to=<[hidden email]>, relay=y.y.y.y[y.y.y.y]:25, delay=0.19, delays=0.04/0/0.04/0.1, dsn=2.6.0, status=sent (250 2.6.0  <[hidden email]> Queued mail for delivery)
Apr  8 14:22:04 MailSecure03 postfix/smtp[32417]: 62D8438973: to=<[hidden email]>, relay=y.y.y.y[y.y.y.y]:25, delay=0.19, delays=0.04/0/0.04/0.1, dsn=2.6.0, status=sent (250 2.6.0  <[hidden email]> Queued mail for delivery)
Apr  8 14:22:04 MailSecure03 postfix/qmgr[19685]: 62D8438973: removed

1.Does the word size mean size of email message ? 
2.Size is not specified unit ,Does it mean Byte ?
3.I found 2 rows which show size but which row is actual size of a message? (1087,1636)
 
Jittinan Suwanrueangsri


2009/4/7 Wietse Venema <[hidden email]>
jittinan suwanrueangsri:
> Hi everybody
>
> Are there any postfix log format documents so I can understand meaning of
> each column in raw log ?

Postfix logging is not yet documented - it is one of those ancient
pieces of version "zero" code that was meant to be replaced by real
code that is properly configurable.

By now it is time to start thinking of postfix-lite.

       Wietse

Reply | Threaded
Open this post in threaded view
|

Re: postfix log format

Magnus Bäck
On Wed, April 8, 2009 12:14 pm, jittinan suwanrueangsri said:

> I want to know message size of an email which was send through postfix.A
> part of raw log is shown as below
>
> Apr  8 14:22:02 MailSecure03 postfix/smtpd[32388]: BA1CE38965: client=
> mail.example.com[x.x.x.x]
> Apr  8 14:22:03 MailSecure03 postfix/cleanup[32070]: BA1CE38965:
> message-id=<[hidden email]>
> Apr  8 14:22:03 MailSecure03 postfix/qmgr[19685]: BA1CE38965: from=<
> [hidden email]>, size=1087, nrcpt=2 (queue active)

[...]

> Apr  8 14:22:04 MailSecure03 postfix/qmgr[19685]: 62D8438973: from=<
> [hidden email]>, size=1636, nrcpt=2 (queue active)

[...]

> 1.Does the word size mean size of email message ?

Yes.

> 2.Size is not specified unit ,Does it mean Byte ?

Yes.

> 3.I found 2 rows which show size but which row is actual size of a
> message?
> (1087,1636)

The first size is before the content filter and the second size is after
the content filter. An SMTP content filter will add two Received: headers
plus any headers the content filter itself adds, so a size increase of 450
bytes is reasonable.

Please do not top-post.

--
Magnus Bäck
[hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: postfix log format

kj-12
In reply to this post by Wietse Venema
Wietse Venema wrote:
> Postfix logging is not yet documented - it is one of those ancient
> pieces of version "zero" code that was meant to be replaced by real
> code that is properly configurable.
>  
If it's not broken, don't fix it. :)

Working with qmail all day, I really appreciate the postfix log format.

--kj