I wrote a sendmail parser for afterglow (afterglow.sourceforge.net), which you can find at: http://cvs.sourceforge.net/viewcvs.py/afterglow/afterglow/src/perl/parsers/ Sendmail is kind of tricky because an email is represented as two entries which you need to merge together. The script does not input the data into a DB, but that part can be added quite easily. -raffy > Is there a tool that does a good job of this? I can write a tool to do it, > but I don't want to recreate the wheel if I don't have to. > > TIA -raffy -- Raffael Marty, GCIA, CISSP raffael.marty@private Senior Security Engineer Solutions Team @ ArcSight Inc. 5 Results Way Cupertino, CA 95014 (408) 864-2662 _______________________________________________ LogAnalysis mailing list LogAnalysis@private http://lists.shmoo.com/mailman/listinfo/loganalysis
This archive was generated by hypermail 2.1.3 : Tue Nov 08 2005 - 13:02:11 PST