Re: Another question about logs...

2 msg	postfix + gmail + multiusers
2 msg	strange question regarding lmtp
3 msg	Updated amavisd-new; can't send/receive mail
8 msg	RPM 'n stuff
7 msg	DSN setup
4 msg	Local Users on Virtual Domains?
5 msg	postfix + courier + active directory 2003
12 msg	Fail to test postfix
2 msg	Global groups
7 msg	About creating database
3 msg	Misunderstanding of transport map format VS mas...
2 msg	Problems Backscatter
5 msg	question about receive_override_options
4 msg	specific whitelisting
3 msg	Real unknown host ???

Another question about logs...
\ Payne (13 Jun 2007)
. \ mouss (13 Jun 2007)

4 msg	fallback_relay not getting used
3 msg	Maildir
6 msg	Outgoing Mail Copy
1 msg	Close to getting SASL and SMTP AUTH on OS X wor...

Subject:	Re: Another question about logs...
Group:	Postfix-users
From:	mouss
Date:	13 Jun 2007

Payne wrote:
> Hi,
>
> Can someone please help me out? I got a user that saying he isn't
> getting any mail when he check he account. I am using postfix and
> popd3 and can see when people are checking their acccount, because I
> see this in the log.
>
>
> 1
> 2
> 3
> 4
> 5
> 6
> 7
> 8
> 9
> 10
> 11
> 12
> 13
>
>
>
>
> Jun
> 13
> 14:22:37
> popper[10435]:
> Stats:
> payne
> 8
> 46160
> 0
> 0
> 34.158.afsnetworks.com
> 216.235.158.34
> [pop_updt.c:296]
>
>
>
>
>
> I know that the following means...
>
> 1 = Month
> 2 = Date
> 3 = Time
> 4 = agent
> 5 = Stats Comment ( Never Changes)
> 6 = Userid
> 7 = Number of message pop'ed
> 8 = Total for all messsages that were popped.
> 9 = ?
> 10 = ?
> 11 = RDNS lookup of host
> 12 = IP
> 13 = pop something

there is no 1, 2 ,... 13 in log lines. the format of unix log lines is:
Month day time host program[pid]: text

the '[pid]' part is not always available (kernel messages, internal
syslog messages, ... [if you use 'logger' the pid field is not present,
and the 'program' field depends on command lines args, and may be set to
the user name....]). The 'text' part has no fixed format: the program
says what it wants.

>
> What I don't know is feilds 9, 10. I have googled it but no lucked.
> The reason I am asking I am working with my logs to create a report so
> that I can tell the use, I know for X day he got Y number of messages
> for a total of Z bytes.
>
> I know he getting mail because I see were procmail is senting to his
> Mail Dir.

if mail is delivered but user doesn't see it, then this is a problem of
the pop server configuration. obviously, the pop server needs to check
mail using the same place where mail was delivered.