Softpanorama (slightly skeptical) Open Source Software Educational Society

May the source be with you, but remember the KISS principle ;-) Softpanorama Search

MTA Log Analysers

ExiBomb Mail

ExiBomb is a system designed to monitor email traffic on an Exim-based MTA server. The interface is written in PHP. It reads the mail logs in a tail method and stores all relevant data in a MySQL database.The script reading the logs was developed in Perl.

sawmill.net - UNIX Sendmail Log Analyzer

Sawmill is a UNIX Sendmail log analyzer (it also support 686 other log formats). It can process log files in UNIX Sendmail format, and generate dynamic statistics from them, analyzing and reporting events. Sawmill can parse UNIX Sendmail logs, import them into a SQL database (or its own built-in database), aggregate them, and generate dynamically filtered reports, all through a web interface. Sawmill can perform UNIX Sendmail analysis on any platform, including Window, Linux, FreeBSD, OpenBSD, Mac OS, Solaris, other UNIX, and more.

Sawmill stores the following fields in its database for UNIX Sendmail, generates reports for each field, and allows dynamic filtering on any combination of these fields:

	Field		Internal Name
	from		from
	to		to
	server		server
	daemon		daemon
	mailer		mailer
	stat		stat
	class		class
	priority		pri
	protocol		proto
	relay		relay
	reject		reject

Sawmill stores the following numerical fields in its database for UNIX Sendmail, aggregating them and including them as columns in most reports:

	Numerical Field		Internal Name
	messages		messages
	size		size
	delay		delay
	xdelay		xdelay
	number of recipients		nrcpts

Sawmill also supports 686 other log formats; see Sawmill Features for a list containing UNIX Sendmail and all the other supported formats.

Anteater

Anteater is a log analyser for MTA logfiles (such as those produced by sendmail and postfix). The tool is written in 100% C++ and is very easy to customize. Input, output, and the analysis are modular class objects with a clear interface. Currently, there are modules for reading the syslog format of sendmail and postfix that do up to eight useful analyses and write the result in plain ASCII or HTML, to stdout or to files.

SMA - Sendmail log analyser

(Oct 16, 2003) SMA is no longer developed by me. If you feel like you want to take over the development, please contact me. I still try to answer your questions but I do not make any fixes/enchancements. Thank you for your interest!!

(Oct 16, 2003) Latest is 1.4 - source code only

SMA is a program that analyses sendmail log entries. The key features of SMA are

• Fast (written in C)
• Portable
• Free (BSD-style licensing)

See the output as HTML or ASCII.

SMA features

• Support for all recent sendmail versions (UNIX/NT)
• Flexible output formatting - HTML, ASCII and Custom Log
• Regular expression filtering of messages
• Multiple hosts in a same report

Todo list

• Documentation
• Nice SMA logo
• (graphical?) frontend with scheduling

Changelog

SMA release history. More detailed changelog may be found from the file README.

Download

SMA source and Win32 binaries.

You can also find SMA by following the links below

• OpenBSD ports collection (Thanks Jim Geovedi)
• debian package (Thanks Fabian Fagerholm).
• RPM package (Thanks Carles Arjona).
• FreeBSD ports collection (Thanks Dirk Meyer)

Documentation

• SMA FAQ
• README file from the latest SMA distribution
• SMA manual page
• sma.conf from the latest SMA distribution may also contain useful information

Mirrors

• Home: www.klake.org (Finland)
• Mirror: www.saunalahti.fi (Finland)

Feedback

Bug reports, diffs, discussion, etc.: .