1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
|
#!/usr/bin/perl -w
##########################################################################
# $Id: in.qpopper,v 1.10 2003/12/15 18:09:23 kirk Exp $
##########################################################################
########################################################
# This was written and is maintained by:
# Kenneth Porter <shiva@well.com>
#
# Please send all comments, suggestions, bug reports,
# etc, to shiva@well.com.
########################################################
$Detail = $ENV{'LOGWATCH_DETAIL_LEVEL'} || 0;
while (defined($ThisLine = <STDIN>)) {
if ( ($ThisLine =~ /xsender/) or
( $ThisLine =~ /.drac.:/ ) or
( $ThisLine =~ /Timing/ ) or
( $ThisLine =~ /-ERR \[AUTH\]/ ) or
( $ThisLine =~ /canonical name of client/ ) or
( $ThisLine =~ /I\/O error flushing output to client/ ) or
( $ThisLine =~ /-ERR SIGHUP or SIGPIPE flagged/ ) or
( $ThisLine =~ /-ERR POP hangup/ ) or
( $ThisLine =~ /-ERR POP EOF or I\/O Error/ ) or
( $ThisLine =~ /-ERR \[IN-USE\] / ) or
( $ThisLine =~ /Incorrect octet count/ ) ) {
# We don't care about these
}
## Stats: <UserID> 0 0 0 0 <Host> <IP>
elsif (($UserID, $NumDeleted, $BytesDeleted, $NumLeft, $BytesLeft) = ( $ThisLine =~ /Stats: ([^ ]+) ([^ ]+) ([^ ]+) ([^ ]+) ([^ ]+)/ )) {
$Stats{$UserID}{"Times"}++;
$Stats{$UserID}{"NumDel"} += $NumDeleted;
$Stats{$UserID}{"BytesDel"} += $BytesDeleted;
$Stats{$UserID}{"NumLeft"} = $NumLeft;
$Stats{$UserID}{"BytesLeft"} = $BytesLeft;
}
elsif (($UserID) = ($ThisLine =~ /^\[AUTH\] Failed attempted login to ([^ ]+) from host/ )) {
$FailedLogin{$UserID}++;
}
elsif ( $ThisLine =~ s/^connect from ([^ ]+)$/$1/ ) {
$Connections{$ThisLine}++;
}
elsif ( $ThisLine =~ s/^\(v[0-9.]+\) POP login by user "?[^ ]+"? at \([^ ]+\) ([^ ]+)$/$1/ ) {
$Connections{$ThisLine}++;
}
elsif ( $ThisLine =~ s/^apop \"(.*)\".*/$1/ ) {
$ApopConnections{$ThisLine}++;
}
else {
# Report any unmatched entries...
chomp($ThisLine);
$OtherList{$ThisLine}++;
}
}
if ( (keys %Connections) and ($Detail >= 10) ) {
print "\nPlaintext Connections:\n";
foreach $ThisOne (keys %Connections) {
print " " . $Connections{$ThisOne} . " from " . $ThisOne;
}
}
if ( (keys %ApopConnections) and ($Detail >= 10) ) {
print "\nAPOP Connections:\n";
foreach $ThisOne (keys %ApopConnections) {
print " " . $ApopConnections{$ThisOne} . " from " . $ThisOne;
}
}
if ((keys %Stats) and ($Detail >= 10)) {
print "\nUser Statistics:\n";
print " | Deleted | Kept |\n";
print "User Name Times | Num KBytes | Num KBytes |\n";
foreach $UserID (sort {$Stats{$b}{"BytesDel"}<=>$Stats{$a}{"BytesDel"}} keys %Stats)
{
printf("%-15s %5d | %5d %6d | %5d %6d |\n", $UserID, $Stats{$UserID}{"Times"}, $Stats{$UserID}{"NumDel"}, $Stats{$UserID}{"BytesDel"}/1024, $Stats{$UserID}{"NumLeft"}, $Stats{$UserID}{"BytesLeft"}/1024);
$Times += $Stats{$UserID}{"Times"};
$NumDel += $Stats{$UserID}{"NumDel"};
$BytesDel += $Stats{$UserID}{"BytesDel"};
$NumLeft += $Stats{$UserID}{"NumLeft"};
$BytesLeft += $Stats{$UserID}{"BytesLeft"};
}
print "------------------------+----------------+----------------+\n";
printf("TOTALS %5d | %5d %6d | %5d %6d |\n", $Times, $NumDel, $BytesDel/1024, $NumLeft, $BytesLeft/1024);
}
if (keys %FailedLogin) {
print "\nFailed Logins:\n";
foreach $UserID (sort {$FailedLogin{$b}<=>$FailedLogin{$a} } keys %FailedLogin) {
print " $UserID: $FailedLogin{$UserID} time(s).\n";
}; # foreach
}; # if
if (keys %OtherList) {
print "\n**Unmatched Entries**\n";
foreach $line (sort {$OtherList{$b}<=>$OtherList{$a} } keys %OtherList)
{
print " $line: $OtherList{$line} Time(s)\n";
}
}
exit(0);
# vi: shiftwidth=3 tabstop=3 et
|
