NAME

       postfix2dlf_pre - preprocess postfix logfiles for postfix2dlf_main

SYNOPSIS

       postfix2dlf_pre dumpfile

DESCRIPTION

       postfix2dlf_pre expect a postfix logfile on STDIN.  It prints preprocessed logfile lines
       to STDOUT and creates a Berkeley DB holding a mapping from hostname-queueid to number-of-
       lines-with-this-id.  dumpfile can be e.g.  /tmp/dump, ../../var/dump or dump.

DEVELOPERS

       One can use the lr_anondump tool to view the contents of the dumpfile.

       E.g. run

        $ zcat postfix.log.gz | ./postfix2dlf_pre /tmp/stem > /tmp/pre
        $ lr_anondump /tmp/stem
        $ ./postfix2dlf_main /tmp/stem < /tmp/pre > /tmp/post

       .

EXAMPLE

       The raw log file

        Dec 1 04:02:56 internetsrv postfix/pickup[20919]: 693A3578E:
         uid=0 from=<root>
        Dec 1 04:02:56 internetsrv postfix/cleanup[20921]: 693A3578E:
         message-id=<john.doe.1@example.com>
        Dec 1 04:02:57 internetsrv postfix/qmgr[20164]: 693A3578E:
         from=<john.doe.2@example.com>, size=617 (queue active)
        Dec 1 04:02:58 internetsrv postfix/local[20924]: 693A3578E:
         to=<john.doe.2@example.com>, relay=local, delay=3, status=sent
         (forwarded as E325C578D)

       will get converted to

        dlfid internetsrv693A3578E from_relay_host localhost from_relay_ip
         127.0.0.1 logrelay internetsrv queueid 693A3578E time 1007175776
         type pickup
        dlfid internetsrv693A3578E logrelay internetsrv msgid
         <john.doe.1@example.com> queueid 693A3578E time 1007175776 type cleanup
        dlfid internetsrv693A3578E from_domain example.com from_relay_host
         localhost from_relay_ip 127.0.0.1 from_user john.doe.2 logrelay
         internetsrv queueid 693A3578E size 617 time 1007175777 type qmgr
        delay 3 dlfid internetsrv693A3578E logrelay internetsrv queueid
         693A3578E stat sent time 1007175778 to_domain example.com
         to_relay_host localhost to_relay_ip 127.0.0.1 to_user john.doe.2
         type local xstat (forwarded_as_e325c578d)

EXAMPLES

       postfix2dlf_pre will be rarely used on its own: it is called by postfix2dlf(1).  Refer to
       the postfix2dlf manpage for examples and usage information.

SEE ALSO

       postfix2dlf(1), postfix2dlf_main(1), sendmail2dlf(1), qmail2dlf(1), exim2dlf(1)

VERSION

       $Id: postfix2dlf_pre.in,v 1.13 2006/07/23 13:16:34 vanbaal Exp $

COPYRIGHT

       Copyright (C) 2002 Stichting LogReport Foundation LogReport@LogReport.org

       This program is free software; you can redistribute it and/or modify it under the terms of
       the GNU General Public License as published by the Free Software Foundation; either
       version 2 of the License, or (at your option) any later version.

       This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;
       without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
       See the GNU General Public License for more details.

       You should have received a copy of the GNU General Public License along with this program
       (see COPYING); if not, check with http://www.gnu.org/copyleft/gpl.html.

AUTHOR

       Joost van Baal