##########################################################################
# $Id$
##########################################################################
########################################################
# The imap script was written by:
# Pawe³ Go³aszewski <blues@gda.pl>
########################################################
#####################################################
## Copyright (c) 2008 Pawe³ Go³aszewski
## Covered under the included MIT/X-Consortium License:
## http://www.opensource.org/licenses/mit-license.php
## All modifications and contributions by other persons to
## this script are assumed to have been donated to the
## Logwatch project and thus assume the above copyright
## and licensing terms. If you want to make contributions
## under your own copyright or a different license this
## must be explicitly stated in the contribution an the
## Logwatch project reserves the right to not accept such
## contributions. If you have made significant
## contributions to this script and want to claim
## copyright please contact logwatch-devel@lists.sourceforge.net.
#########################################################
my $Debug = $ENV{'LOGWATCH_DEBUG'};
my $Detail = $ENV{'LOGWATCH_DETAIL_LEVEL'};
if ( $Debug >= 5 ) {
print STDERR "\n\nDEBUG \n\n";
}
while (defined($ThisLine = <STDIN>)) {
if (
($ThisLine =~ /^Initializing */) or
($ThisLine =~ /^spgetpwnam: can't find user: */) or
($ThisLine =~ /^couriertls: read: Connection reset by peer/ ) or
# timeouts are reported in some other scripts - maybe it should be here too?
($ThisLine =~ /^couriertls: read: Connection timed out/ ) or
($ThisLine =~ /^LOGOUT, ip=\[.*\], rcvd=\d+, sent=\d+$/) or
($ThisLine =~ /^Disconnected, ip=\[.*\]/) or
# uw-imapd
($ThisLine =~ /^Moved \d+ bytes of new mail to.*$/) or
($ThisLine =~ /^Unexpected client disconnect, while reading line.*$/)
) {
# Don't care about these...
} elsif ( ($User, $Host) = ( $ThisLine =~ /^Login user=(.*?) host=(.*\[.*\])$/ ) ) {
$Login{$User}{$Host}++;
} elsif ( ($User, $Host) = ( $ThisLine =~ /^LOGIN, user=(.*?), ip=\[([^ ,]+)\](?:, port=\[\d+\])?, protocol=IMAP$/o ) ) {
$Login{$User}{$Host}++;
} elsif ( ($User,$Host) = ( $ThisLine =~ /^Authenticated user=(.*) host=(.*\[.*\]).*$/ ) ) {
$Login{$User}{$Host}++;
} elsif ( ($User,$Host) = ( $ThisLine =~ /^Preauthenticated user=(.*) host=(.*)$/ ) ) {
$Login{$User}{$Host}++;
} elsif ( ($Host) = ( $ThisLine =~ /^imap service init from (.*)$/ ) ) {
$ConnectionNonSSL{$Host}++;
$Connection{$Host}++;
} elsif ( ($Host) = ( $ThisLine =~ /^imaps SSL service init from (.*)$/ ) ) {
$ConnectionSSL{$Host}++;
$Connection{$Host}++;
} elsif ( ($Host) = ( $ThisLine =~ /^Connection, ip=\[(.*)\]$/o ) ) {
$Connection{$Host}++;
# } elsif ( ($User,$Downloaded,$DownloadSize,$Left,$LeftSize) = ( $ThisLine =~ /^Stats: (.*?) (.*?) (.*?) (.*?) (.*?)$/) ) {
# $DownloadedMessages{$User} += $Downloaded;
# $DownloadedMessagesSize{$User} += $DownloadSize;
# $MessagesLeft{$User} = $Left;
# $MboxSize{$User} = $LeftSize;
# } elsif ( ($User,$Host) = ( $ThisLine =~ /^authentication failed for user (.*?) - (.*)/ ) ) {
# $LoginFailed{"$Host ($User)"}++;
} elsif ( ($User, $Host) = ( $ThisLine =~ /^Logout user=(.*?) host=(.*\[.*\])$/) ) {
$Logout{$User}{$Host}++;
$Logout2{$User}++;
# More generic pattern for uw-imapd
} elsif ( ($User, $Host) = ( $ThisLine =~ /^Logout user=(.*?) host=(.*)$/) ) {
$Logout{$User}{$Host}++;
$Logout2{$User}++;
} elsif ( ($dummy, $User, $Host, $DownloadSize1, $DownloadSize2) = ( $ThisLine =~ /^(LOGOUT|TIMEOUT|DISCONNECTED), user=(.*?), ip=\[([^ ,]+)\](?:, port=\[\d+\])?, headers=(\d+), body=(\d+)/o ) ) {
$Logout{$User}{$Host}++;
$Logout2{$User}++;
$DownloadedMessagesSize{$User} += $DownloadSize1 + $DownloadSize2;
if ( ( $ThisLine =~ /, starttls=1/o ) ) {
$ConnectionSSL{$Host}++;
} else {
$Connection{$Host}++;
}
} elsif ( ($User,$Host) = ( $ThisLine =~ /^Autologout user=(.*) host=(.*\[.*\])$/ ) ) {
$AutoLogout{$User}{$Host}++;
$Logout{$User}{$Host}++;
$Logout2{$User}++;
} elsif ( ($Reason,$User,$Host) = ( $ThisLine =~ /^Killed (.*) user=(.*) host=(.*\[.*\])$/ ) ) {
$Logout{$User}{$Host}++;
$Logout2{$User}++;
$KilledSession{$User}{$Reason}++;
} elsif (
(($User,$Host) = ( $ThisLine =~ /^Broken pipe, while reading line user=(.*) host=(.*\[.*\])$/ )) or
(($User,$Host) = ( $ThisLine =~ /^Command stream end of file, while reading line user=(.*) host=(.*\[.*\])$/ )) or
(($User,$Host) = ( $ThisLine =~ /^Connection (?:reset by peer|timed out), while reading line user=(.*) host=(.*\[.*\])$/ )) or
(($User,$Host) = ( $ThisLine =~ /^No route to host, while reading line user=(.*) host=(.*\[.*\])$/ )) or
(($User,$Host) = ( $ThisLine =~ /^Unexpected client disconnect, while reading line user=(.*) host=(.*\[.*\])$/ ))
) {
$Logout{$User}{$Host}++;
$Logout2{$User}++;
$SocketErrors{$Host}++;
} else {
# Report any unmatched entries...
# remove PID from named messages
$ThisLine =~ s/^(client [.0-9]+)\S+/$1/;
chomp($ThisLine);
$OtherList{$ThisLine}++;
}
$LastLine = $ThisLine;
}
################################################
if ( ( $Detail >= 0 ) and (keys %LoginFailed)) {
print "\n\n[IMAPd] Login failures:".
"\n=========================".
"\n Host (user) | # ".
"\n------------------------------------------------------------- | -----------";
$ConnCount = 0;
foreach $Host (sort keys %LoginFailed) {
$Conns = $LoginFailed{$Host};
$HostLength = length($Host);
$HostSpaceLength = 61 - $HostLength;
$CountLength = length("$Conns");
$CountSpaceLength = 12 - $CountLength;
print "\n" ." " x $HostSpaceLength . $Host . " |" . " " x $CountSpaceLength . $Conns . "";
$ConnCount += $Conns;
}
$CountLength = length("$ConnCount");
$CountSpaceLength = 75 - $CountLength;
print "\n" . "-" x 75;
print "\n" . " " x $CountSpaceLength . "$ConnCount\n\n\n";
}
if ( ( $Detail >= 5 ) and (keys %Connection)) {
print "\n[IMAPd] Connections:".
"\n=========================".
"\n Host | Connections | SSL | Total ".
"\n-------------------------------------- | ----------- | -------- | ---------";
$ConnCount = 0;
$SSLConn = 0;
$TotalConn = 0;
foreach $Host (sort keys %Connection) {
$Total = $Connection{$Host};
if (defined ($ConnectionNonSSL{$Host})) {
$Conns = $ConnectionNonSSL{$Host};
} else {
$Conns = 0;
}
if (defined ($ConnectionSSL{$Host})) {
$SSL = $ConnectionSSL{$Host};
} else {
$SSL = 0;
}
$HostLength = length($Host);
$HostSpaceLength = 38 - $HostLength;
$CountLength = length("$Conns");
$CountSpaceLength = 12 - $CountLength;
$SSLLength = length("$SSL");
$SSLSpaceLength = 9 - $SSLLength;
$TotalLenght = length("$Total");
$TotalSpaceLength = 10 - $TotalLenght;
print "\n" ." " x $HostSpaceLength . $Host . " |" . " " x $CountSpaceLength . $Conns .
" |" . " " x $SSLSpaceLength . $SSL . " |" . " " x $TotalSpaceLength . $Total;
$NonSSLCount += $Conns;
$SSLCount += $SSL;
$TotalCount += $Total;
}
$NonSSLLength = length("$NonSSLCount");
$NonSSLSpaceLength = 52 - $NonSSLLength;
$SSLLength = length("$SSLCount");
$SSLSpaceLength = 9 - $SSLLength;
$TotalLength = length("$TotalCount");
$totalSpaceLength = 10 - $TotalLength;
print "\n" . "-" x 75;
print "\n" . " " x $NonSSLSpaceLength . $NonSSLCount . " |" . " " x $SSLSpaceLength . $SSLCount .
" |" . " " x $totalSpaceLength . $TotalCount . "\n\n\n";
}
if (keys %Logout2) {
print "\n[IMAPd] Logout stats:".
"\n====================".
"\n User | Logouts | Downloaded | Mbox Size".
"\n--------------------------------------- | ------- | ---------- | ----------";
$ConnCount = 0;
$SizeAll = 0;
$DownAll = 0;
foreach $User (sort keys %Logout2) {
$Conns = $Logout2{$User};
$UserLength = length($User);
$UserSpaceLength = 39 - $UserLength;
$CountLength = length("$Conns");
$CountSpaceLength = 8 - $CountLength;
$Down = $DownloadedMessagesSize{$User};
if (! defined $Down) {
$Down = 0; #Hack
}
$DownSpaceLength = 11 - length($Down);
#$Size = $MboxSize{$User};
$Size = 0; #Hack
$SizeSpaceLength = 11 - length($Size);
print "\n" ." " x $UserSpaceLength . $User . " |" . " " x $CountSpaceLength . $Conns . " |" .
" " x $DownSpaceLength . $Down . " |" . " " x $SizeSpaceLength . $Size;
$ConnCount += $Conns;
$SizeAll += $Size;
$DownAll += $Down;
}
$CountLength = length("$ConnCount");
$CountSpaceLength = 49 - $CountLength;
$DownLength = length($DownAll);
$DownSpaceLength = 11 - $DownLength;
$SizeLength = length($SizeAll);
$SizeSpaceLength = 11 - $SizeLength;
print "\n" . "-" x 75;
print "\n" . " " x $CountSpaceLength . "$ConnCount" . " |" . " " x $DownSpaceLength . $DownAll . " |" .
" " x $SizeSpaceLength . $SizeAll . "\n\n\n";
}
if ( ( $Detail >= 10 ) and (keys %Login)) {
print "\n[IMAPd] Successful Logins:\n";
$LoginCount = 0;
foreach my $User (sort keys %Login) {
print " User $User: \n";
$UserCount = 0;
foreach $Host (keys %{$Login{$User}}) {
$HostCount = $Login{$User}{$Host};
print " From $Host: $HostCount Time(s)\n";
$UserCount += $HostCount;
}
$LoginCount += $UserCount;
print " Total $UserCount Time(s)\n";
print "\n";
}
print "Total $LoginCount successful logins\n\n";
}
if ( ( $Detail >= 10 ) and (keys %AutoLogout)) {
print "\nAutologout:\n";
foreach $User (sort {$a cmp $b} keys %AutoLogout) {
print " $User:\n";
foreach $Host (sort {$a cmp $b} keys %{$AutoLogout{$User}}) {
print " $Host: $AutoLogout{$User}{$Host} Time(s)\n";
}
}
}
if ( ( $Detail >= 10 ) and (keys %KilledSession)) {
print "\nKilled IMAP sessions:\n";
foreach $User (sort {$a cmp $b} keys %KilledSession) {
print " $User:\n";
foreach $Reason (sort {$a cmp $b} keys %{$KilledSession{$User}}) {
print " $Reason: $KilledSession{$User}{$Reason} Time(s)\n";
}
}
}
if ( ( $Detail >= 10 ) and (keys %SocketErrors)) {
print "\nSocket Errors in connections with:\n";
foreach $Host (sort {$a cmp $b} keys %SocketErrors) {
print " $Host: $SocketErrors{$Host} Time(s)\n";
}
}
if (keys %OtherList) {
print "\n**Unmatched Entries**\n";
foreach $line (sort {$a cmp $b} keys %OtherList) {
print " $line: $OtherList{$line} Time(s)\n";
}
}
exit(0);
# vi: shiftwidth=3 tabstop=3 syntax=perl et
# Local Variables:
# mode: perl
# perl-indent-level: 3
# indent-tabs-mode: nil
# End: