Login or Register to Ask a Question and Join Our Community

Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

argomail2dlf(1) [debian man page]

ARGOMAIL2DLF.IN(1)					  LogReport's Lire Documentation					ARGOMAIL2DLF.IN(1)

NAME

       argomail2dlf - converts ArGoSoft Mail Server log files to the email DLF format

SYNOPSIS

       argomail2dlf

DESCRIPTION

       argomail2dlf converts a ArGoSoft Mail Server log file to email DLF format. Information on the ArGoSoft Mail Server can be found on
       http://www.argosoft.com/applications/mailserver/. The generic email DLF format is described in email.xml.

       This DLF converter was developed and tested with the ArGoSoft Mail Server Pro. It could work with the Free and Plus versions, but it wasn't
       tested.

LOGGING CONFIGURATION

       To operate properly with Lire, you have to make sure that the following logging features are enabled:

	   - Log SMTP commands.
	   - Log SMTP conversations.
	   - Log to File.

       The other two options (Log POP Commands and Log Web Commands) aren't needed and can be left unchecked.

LIMITATIONS

       Due to the limitations in the logging system of ArGoSoft Mail Server, the following information isn't available:

	   - size of messages
	   - message's ID

       Also, since ArGoSoft doesn't log "queue identifier" (that is an identifier that can be used to track the delivery of a message across the
       different components), we have to rely on heuristics and assumed invariants to track the messages. We use the sender and recipient
       addresses to track the messages.

       Delivery in order
	   We assume that ArGoSoft Mail Server will deliver its messages in the order it received them.

       One recipient delivery
	   We assume that ArGoSoft Mail Server will only deliver to one recipient at a time. That is that if a message was adressed to two
	   recipients to the same remote demain, it will use two connections to deliver this message.

       Local delivery happens immediately
	   We assume that local delivery (and forward) will happen right after the 354 or 250 status code is logged. We have to rely on this,
	   because the log messages related to forwarding don't mention the sender.

       Unknown messages were delivered through the web
	   Messages that are delivered but weren't sent through SMTP are presumed to come from the webmail relay (sent through the web interface).
	   They could also have been sent before the start of the log file.

EXAMPLES

       To process a log as produced by argomail

	$ argomail2dlf < mail.log

       argomail2dlf will be rarely used on its own, but is more likely called by lr_log2report:

	$ lr_log2report argomail < /var/log/mail.log

SEE ALSO

       exim2dlf(1), postfix2dlf(1), sendmail2dlf(1), qmail2dlf(1)

VERSION

       $Id: argomail2dlf.in,v 1.10 2006/07/23 13:16:34 vanbaal Exp $

COPYRIGHT

       Copyright (C) 2000, 2001 Stichting LogReport Foundation LogReport@LogReport.org

       This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by
       the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

       This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of
       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more details.

       You should have received a copy of the GNU General Public License along with this program (see COPYING); if not, check with
       http://www.gnu.org/copyleft/gpl.html.

CREDITS

       We would like to thanks denon from denon.cx for contributing sample log files and helping debug this DLF converter.

AUTHOR

       Francis J. Lacoste <flacoste@logreport.org>

Lire 2.1.1							    2006-07-23							ARGOMAIL2DLF.IN(1)

Check Out this Related Man Page

WELF_PROXY2DLF.IN(1)					  LogReport's Lire Documentation				      WELF_PROXY2DLF.IN(1)

NAME

       welf_proxy2dlf - convert logs in WebTrends Enhanced Log Format to proxy DLF

SYNOPSIS

       welf_proxy2dlf file

DESCRIPTION

       welf_proxy2dlf converts firewall logs in the WebTrends Enhanced Log Format into the proxy DLF.

       That format is defined at the following URL: http://www.netiq.com/partners/technology/welf.asp

       This converter also supports the SonicWall extensions.

       A list of firewall products that supports that format can be found at the following URL: http://www.netiq.com/products/fwr/compatible.asp

EXAMPLES

       To process a log as produced by a WebTrends proxy:

	$ welf_proxy2dlf < welf-proxy.log

       welf_proxy2dlf will be rarely used on its own, but is more likely called by lr_log2report:

	$ lr_log2report welf_proxy < /var/log/welf-proxy.log

IMPLEMENTATION NOTES

       Welf log files contains information about many applications: proxies, packet filters, IDS. IDS and packet filters information is handled by
       the firewall superservice, whereas the proxy information is handled by the proxy supersevice.

       This converter will only convert records with a proto, src and dst field. All other records are ignored (they won't be ignored by the
       firewall superservice).

SEE ALSO

       Lire::WELF(3) welf2dlf(1)

AUTHORS

       Francis J. Lacoste <flacoste@logreport.org>

VERSION

       $Id: welf_proxy2dlf.in,v 1.8 2006/07/23 13:16:36 vanbaal Exp $

COPYRIGHT

       Copyright (C) 2001 Stichting LogReport Foundation LogReport@LogReport.org

       This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by
       the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

       This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of
       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more details.

       You should have received a copy of the GNU General Public License along with this program (see COPYING); if not, check with
       http://www.gnu.org/copyleft/gpl.html.

Lire 2.1.1							    2006-07-23						      WELF_PROXY2DLF.IN(1)
Man Page