AWStats maillog-Auswertung

thomas65

Registered User
Hallo,
ich habe Probleme mit der Konfiguration von AWStats. Und zwar möchte ich mein maillog auch auswerten. Ich verstehe aber den Aufbau der maillog-Datei nicht. Hier mal ein Ausschnitt der Datei:

Code:
Oct  4 19:09:12 km22311-02 relaylock: /var/qmail/bin/relaylock: mail from 82.101.169.84:62835 (not defined)
Oct  4 19:09:13 km22311-02 qmail-queue[30147]: mail: all addreses are uncheckable - need to skip scanning (by deny mode)
Oct  4 19:09:13 km22311-02 qmail-queue[30147]: scan: the message(drweb.tmp.AYYJKg) sent by hans@mueller.com to help@meinedomain.de should be passed without checks, because contains uncheckable addresses
Oct  4 19:09:13 km22311-02 qmail: 1159981753.863213 new msg 23712567
Oct  4 19:09:13 km22311-02 qmail: 1159981753.863410 info msg 23712567: bytes 2083 from <hans@mueller.com> qp 30148 uid 2020
Oct  4 19:09:13 km22311-02 qmail: 1159981753.877593 starting delivery 66: msg 23712567 to local 4-help@meinedomain.de
Oct  4 19:09:13 km22311-02 qmail: 1159981753.877673 status: local 1/10 remote 0/20
Oct  4 19:09:13 km22311-02 qmail-queue[30150]: mail: all addreses are uncheckable - need to skip scanning (by deny mode)
Oct  4 19:09:13 km22311-02 qmail-queue[30150]: scan: the message(drweb.tmp.biquRK) sent by hans@mueller.com to kontakt@meinedomain.de should be passed without checks, because contains uncheckable addresses
Oct  4 19:09:13 km22311-02 qmail: 1159981753.934368 new msg 23712571
Oct  4 19:09:13 km22311-02 qmail: 1159981753.934462 info msg 23712571: bytes 2190 from <hans@mueller.com> qp 30151 uid 110
Oct  4 19:09:13 km22311-02 qmail: 1159981753.940623 starting delivery 67: msg 23712571 to local 4-kontakt@meinedomain.de
Oct  4 19:09:13 km22311-02 qmail: 1159981753.940687 status: local 2/10 remote 0/20
Oct  4 19:09:13 km22311-02 qmail: 1159981753.940746 delivery 66: success: did_0+1+0/qp_30150/
Oct  4 19:09:13 km22311-02 qmail: 1159981753.941013 status: local 1/10 remote 0/20
Oct  4 19:09:13 km22311-02 qmail: 1159981753.941069 end msg 23712567
Oct  4 19:09:13 km22311-02 spamd[11524]: got connection over /tmp/spamd_full.sock 
Oct  4 19:09:13 km22311-02 spamd[11524]: handle_user: unable to find user 'kontakt@meinedomain.de'! 
Oct  4 19:09:13 km22311-02 spamd[11524]: processing message <01c6e7cf$b18a3870$3f00a8c0@poste018> for kontakt@meinedomain.de:110. 
Oct  4 19:09:16 km22311-02 spamd[11524]: clean message (5.1/7.0) for kontakt@meinedomain.de:110 in 2.2 seconds, 2190 bytes. 
Oct  4 19:09:16 km22311-02 spamd[11524]: result: .  5 - HTML_50_60,HTML_MESSAGE,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,URIBL_SBL scantime=2.2,size=2190,mid=<01c6e7cf$b18a3870$3f00a8c0@poste018>,autolearn=no 
Oct  4 19:09:16 km22311-02 qmail: 1159981756.120794 delivery 67: success: did_1+0+2/did_0+0+1/
Oct  4 19:09:16 km22311-02 qmail: 1159981756.121067 status: local 0/10 remote 0/20
Oct  4 19:09:16 km22311-02 qmail: 1159981756.121194 end msg 23712571

In der awstats-conf Datei muss ich jetzt das Format so angeben:

Code:
# Enter here your log format (Must match your web server config. See setup
# instructions in documentation to know how to configure your web server to
# have the required log format).
# Possible values: 1,2,3,4 or "your_own_personalized_log_format"
# 1 - Apache or Lotus Notes/Domino native combined log format (NCSA combined/XLF/ELF log format)
# 2 - IIS or ISA format (IIS W3C log format). See FAQ-COM115 For ISA.
# 3 - Webstar native log format.
# 4 - Apache or Squid native common log format (NCSA common/CLF log format)
#     With LogFormat=4, some features (browsers, os, keywords...) can't work.
# "your_own_personalized_log_format" = If your log is ftp, mail or other format,
#     you must use following keys to define the log format string (See FAQ for
#     ftp, mail or exotic web log format examples):
#   %host             Client hostname or IP address (or Sender host for mail log)
#   %host_r           Receiver hostname or IP address (for mail log)
#   %lognamequot      Authenticated login/user with format: "john"
#   %logname          Authenticated login/user with format: john
#   %time1            Date and time with format: [dd/mon/yyyy:hh:mm:ss +0000] or [dd/mon/yyyy:hh:mm:ss]
#   %time2            Date and time with format: yyyy-mm-dd hh:mm:ss
#   %time3            Date and time with format: Mon dd hh:mm:ss or Mon dd hh:mm:ss yyyy
#   %time4            Date and time with unix timestamp format: dddddddddd
#   %methodurl        Method and URL with format: "GET /index.html HTTP/x.x"
#   %methodurlnoprot  Method and URL with format: "GET /index.html"
#   %method           Method with format: GET
#   %url              URL only with format: /index.html
#   %query            Query string (used by URLWithQuery option)
#   %code             Return code status (with format for web log: 999)
#   %bytesd           Size of document in bytes
#   %refererquot      Referer page with format: "http://from.com/from.htm"
#   %referer          Referer page with format: http://from.com/from.htm
#   %uabracket        User agent with format: [Mozilla/4.0 (compatible, ...)]
#   %uaquot           User agent with format: "Mozilla/4.0 (compatible, ...)"
#   %ua               User agent with format: Mozilla/4.0_(compatible...)
#   %gzipin           mod_gzip compression input bytes: In:XXX
#   %gzipout          mod_gzip compression output bytes & ratio: Out:YYY:ZZpct.
#   %gzipratio        mod_gzip compression ratio: ZZpct.
#   %deflateratio     mod_deflate compression ratio with format: (ZZ)
#   %email            EMail sender (for mail log)
#   %email_r          EMail receiver (for mail log)
#   %virtualname      Web sever virtual hostname. Use this tag when same log
#                     contains data of several virtual web servers. AWStats
#                     will discard records not in SiteDomain nor HostAliases
#   %cluster          If log file is provided from several computers (merged by
#                     logresolvemerge.pl), use this to define cluster id field.
#   %extraX           Another field that you plan to use for building a
#                     personalized report with ExtraSection feature (See later).
#   If your log format has some fields not included in this list, use:
#   %other            Means another not used field
#   %otherquot        Means another not used double quoted field
#
# Examples for Apache combined logs (following two examples are equivalent):
# LogFormat = 1
# LogFormat = "%host %other %logname %time1 %methodurl %code %bytesd %refererquot %uaquot"
#
# Example for IIS:
# LogFormat = 2
#
LogFormat=1

Der erste Parameter müsste %time3 sein. Anschliessend kommt mein Servername. Das wäre dann wohl %host. Aber weiter weiß ich nicht. Was sind das alles für Parameter? Hat einer von euch vielleicht AWStats für maillogs konfiguriert und kann mir weiter helfen?
 
Back
Top