You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Igor Chudov <ic...@Algebra.Com> on 2006/04/25 16:44:51 UTC
Cleaning up spamd's syslog output
Spamd outputs the following into syslog:
Apr 25 09:42:30 ak74 spamd[1703]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60902
Apr 25 09:42:30 ak74 spamd[1703]: spamd: processing message <20...@ak74.algebra.com> for root:500
Apr 25 09:42:30 ak74 spamd[1703]: spamd: clean message (-1.4/5.0) for root:500 in 0.1 seconds, 738 bytes.
Apr 25 09:42:30 ak74 spamd[1703]: spamd: result: . -1 - ALL_TRUSTED scantime=0.1,size=738,user=root,uid=500,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60902,mid=<20...@ak74.algebra.com>,autolearn=disabled
Apr 25 09:42:30 ak74 spamd[8267]: prefork: child states: II
Out of all that, the only message that I want to see is:
Apr 25 09:42:30 ak74 spamd[1703]: spamd: result: . -1 - ALL_TRUSTED scantime=0.1,size=738,user=root,uid=500,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60902,mid=<20...@ak74.algebra.com>,autolearn=disabled
I know that the flag is -D and that I have to pick the "channels" that
I am interested in, but the spamd man page does not explain which
ones stand for what. Anyone knows? Thanks!!!
i
Re: Cleaning up spamd's syslog output
Posted by Igor Chudov <ic...@Algebra.Com>.
On Tue, Apr 25, 2006 at 10:59:07AM -0400, Matt Kettler wrote:
> Igor Chudov wrote:
> > Spamd outputs the following into syslog:
> >
> > Apr 25 09:42:30 ak74 spamd[1703]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60902
> > Apr 25 09:42:30 ak74 spamd[1703]: spamd: processing message <20...@ak74.algebra.com> for root:500
> > Apr 25 09:42:30 ak74 spamd[1703]: spamd: clean message (-1.4/5.0) for root:500 in 0.1 seconds, 738 bytes.
> > Apr 25 09:42:30 ak74 spamd[1703]: spamd: result: . -1 - ALL_TRUSTED scantime=0.1,size=738,user=root,uid=500,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60902,mid=<20...@ak74.algebra.com>,autolearn=disabled
> > Apr 25 09:42:30 ak74 spamd[8267]: prefork: child states: II
> >
> > Out of all that, the only message that I want to see is:
> >
> > Apr 25 09:42:30 ak74 spamd[1703]: spamd: result: . -1 - ALL_TRUSTED scantime=0.1,size=738,user=root,uid=500,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60902,mid=<20...@ak74.algebra.com>,autolearn=disabled
> >
> > I know that the flag is -D and that I have to pick the "channels" that
> > I am interested in, but the spamd man page does not explain which
> > ones stand for what. Anyone knows? Thanks!!!
>
>
> No.. -D will make your problem WORSE. This turns on the debug output, in
> addition to the regular stuff. You definitely don't want that.
>
> (try running spamassassin --lint -D for a sample of what the debug output looks
> like)
>
> So as for your problem.. What version of SA are you running?
>
> The "processing message" bit concerns me, because that message was only in the
> code for SA 2.40-2.44.
~==>spamd --help 2>&1 | head
SpamAssassin Server version 3.1.1
running on Perl 5.8.8
with SSL support (IO::Socket::SSL 0.97)
For more details, use "man spamd".
Usage:
spamd [options]
~==>whereis spamd
spamd: /usr/bin/spamd /usr/share/man/man1/spamd.1 /usr/share/man/man1/spamd.1.gz
~==>ls -l `which spamd`
-r-xr-xr-x 1 root root 84984 Apr 20 06:26 /usr/bin/spamd
So... any idea how to reduce amount of output... I have a server that
processes many emails, and this output adds up.
i
Re: Cleaning up spamd's syslog output
Posted by Matt Kettler <mk...@evi-inc.com>.
Igor Chudov wrote:
> Spamd outputs the following into syslog:
>
> Apr 25 09:42:30 ak74 spamd[1703]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60902
> Apr 25 09:42:30 ak74 spamd[1703]: spamd: processing message <20...@ak74.algebra.com> for root:500
> Apr 25 09:42:30 ak74 spamd[1703]: spamd: clean message (-1.4/5.0) for root:500 in 0.1 seconds, 738 bytes.
> Apr 25 09:42:30 ak74 spamd[1703]: spamd: result: . -1 - ALL_TRUSTED scantime=0.1,size=738,user=root,uid=500,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60902,mid=<20...@ak74.algebra.com>,autolearn=disabled
> Apr 25 09:42:30 ak74 spamd[8267]: prefork: child states: II
>
> Out of all that, the only message that I want to see is:
>
> Apr 25 09:42:30 ak74 spamd[1703]: spamd: result: . -1 - ALL_TRUSTED scantime=0.1,size=738,user=root,uid=500,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60902,mid=<20...@ak74.algebra.com>,autolearn=disabled
>
> I know that the flag is -D and that I have to pick the "channels" that
> I am interested in, but the spamd man page does not explain which
> ones stand for what. Anyone knows? Thanks!!!
No.. -D will make your problem WORSE. This turns on the debug output, in
addition to the regular stuff. You definitely don't want that.
(try running spamassassin --lint -D for a sample of what the debug output looks
like)
So as for your problem.. What version of SA are you running?
The "processing message" bit concerns me, because that message was only in the
code for SA 2.40-2.44.
Re: Cleaning up spamd's syslog output
Posted by Theo Van Dinter <fe...@apache.org>.
On Tue, Apr 25, 2006 at 09:44:51AM -0500, Igor Chudov wrote:
> I know that the flag is -D and that I have to pick the "channels" that
> I am interested in, but the spamd man page does not explain which
> ones stand for what. Anyone knows? Thanks!!!
-D will add debug output, but has nothing to do with the normal logging that
goes to syslog. To change that, you'd have to modify code.
As for what channels exist -- they are dynamic, so there isn't a single list
that can be provided. However, there are some common ones that could be added
to the documentation.
I created a ticket about it:
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4879
--
Randomly Generated Tagline:
"When it is not necessary to make a decision, it is necessary not to make a
decision." - From www.slashdot.org