ports/mail/assp/files/assplog.pl.in

#!%%PREFIX%%/bin/perl
# assplog.pl
#	ASSP log pretty-printer
#

# xterm foreground color codes
$black	 = "30";
$red	 = "31";
$green	 = "32";
$yellow	 = "33";
$blue	 = "34";
$magenta = "35";
$cyan	 = "36";
$white	 = "37";

$columns = $ENV{"COLUMNS"};
$columns = 120 if (!$columns || $columns < 120);

$lines = $ENV{"LINES"};
$lines = 50 if (!$lines);

if (!open (LOG, "tail -500f %%ASSP_LOG%%/maillog.txt |")) {
	print STDERR "assplog: cannot open ASSP log\n";
	exit(1);
}

$ipwide = 0;
while (<LOG>) {
	chop;
	undef $l;
	($l->{date}, $l->{time}, $l->{rest}) = split(/\s+/, $_, 3);
	$patt = ".*[0-9][0-9][0-9][0-9][0-9]-[0-9][0-9][0-9][0-9][0-9]";
	if ($l->{rest} =~ m,^($patt)\s,) {
		($l->{msgid}, $l->{rest}) = $l->{rest} =~ m,^($patt)\s+(.*)$,;
	}
	$patt = "\\[[^]]+]";
	if ($l->{rest} =~ m,^($patt)\s,) {
		($l->{code}, $l->{rest}) = $l->{rest} =~ m,^($patt)\s+(.*)$,;
	}
	$patt = "[0-9]+\\.[0-9]+\\.[0-9]+\\.[0-9]+|(:?[0-9a-fA-F]*){0,7}:[0-9a-fA-F]+";
	if ($l->{rest} =~ m,^($patt)\s,) {
		($l->{cliIP}, $x, $l->{rest}) = $l->{rest} =~ m,^($patt)\s+(.*)$,;
	}
	$patt = "<([^@>]+@[^@>]+)?>";
	if ($l->{rest} =~ m,^($patt)\s,) {
		($l->{sender}, $x, $l->{rest}) = $l->{rest} =~ m,^($patt)\s+(.*)$,;
	}
	$l->{code} = "[BlockReport]"	if ($l->{rest} =~ /blocked email report/);
	$l->{code} = "[Connection]"	if ($l->{rest} =~ /Connection idle for [0-9]+ secs - timeout/);
	$l->{code} = "[DenyStrict]"	if ($l->{rest} =~ /denied by denySMTPConnections strict:/);
	$l->{code} = "[SenderBaseErr]"	if ($l->{rest} =~ / Foreign Country/);
	$l->{code} = "[SpamReport]"	if ($l->{rest} =~ /^(H|Sp)am-Report:|email: (sp|h)amreport/);
	$l->{code} = "[MaxErrors]"	if ($l->{rest} =~ /max errors \([0-9]+\) exceeded -- dropping connection/);
	$l->{code} = "[Connection]"	if ($l->{rest} =~ /no recipients left -- dropping connection/);
	$l->{code} = "[Connection]"	if ($l->{rest} =~ /not delayed /);
	$l->{code} = "[RWL]"		if ($l->{rest} =~ /Received-RWL: whitelisted from/);
	$l->{code} = "[Delayed]"	if ($l->{rest} =~ /recipient delayed:/);
	$l->{code} = "[SPF]"		if ($l->{rest} =~ /Regex:SPFstrict/);
	$l->{code} = "[SenderBase]"	if ($l->{rest} =~ / Regex:WhiteOrg/);
	$l->{code} = "[SenderBaseInfo]"	if ($l->{rest} =~ /SenderBase Info/);
	$l->{code} = "[Connection]"	if ($l->{rest} =~ /\[SMTP Status]/);
	$l->{code} = "[SenderBase]"	if ($l->{rest} =~ /White Organization\/Domain in SenderBase:/);
	$l->{code} = "[WhiteAddition]"	if ($l->{rest} =~ /whitelist addition/);
	$l->{code} = "[WhiteDeletion]"	if ($l->{rest} =~ /whitelist deletion/);
	if ($l->{code}) {
		next if ($l->{code} =~ /\[SMTP Error]/);
		next if ($l->{code} =~ /\[SMTP Reply]/);
		next if ($l->{code} =~ /\[spam found]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[Attachment]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[Backscatter]/);
		$l->{color} = $red	if ($l->{code} =~ /\[Bayesian]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[BlackDomain]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[BlackHELO]/);
		$l->{color} = $white	if ($l->{code} =~ /\[BlockReport]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[BombBlack]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[BombData]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[BombHeader]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[BombRaw]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[BombScript]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[BombSender]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[BounceAddress]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[Collect]/);
		$l->{color} = $black	if ($l->{code} =~ /\[Connection]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[CountryCode]/);
		$l->{color} = $cyan	if ($l->{code} =~ /\[Delayed]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[DenyIP]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[DenyStrict]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[DNSBL]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[Extreme]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[ForgedHELO]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[ForgedLocalSender]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[FromMissing]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[History]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[InternalAddress]/);
		$l->{color} = $blue	if ($l->{code} =~ /\[InvalidAddress]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[InvalidHELO]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[IPfrequency]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[IPperDomain]/);
		$l->{color} = $white	if ($l->{code} =~ /\[Local]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[MalformedAddress]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[MaxErrors]/);
		$l->{color} = $green	if ($l->{code} =~ /\[MessageOK]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[MessageScore]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[MissingMX]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[MsgID]/);
		$l->{color} = $green	if ($l->{code} =~ /\[NoProcessing]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[Organization]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[OversizedHeader]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[PenaltyBox]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[Penalty]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[PTRinvalid]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[PTRmissing]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[RelayAttempt]/);
		$l->{color} = $green	if ($l->{code} =~ /\[RWL]/);
		$l->{color} = $green	if ($l->{code} =~ /\[SenderBase]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[SenderBaseErr]/);
		$l->{color} = $black	if ($l->{code} =~ /\[SenderBaseInfo]/);
		$l->{color} = $black	if ($l->{code} =~ /\[SpamReport]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[SPF]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[SpoofedSender]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[SRS]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[SuspiciousHelo]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[Trap]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[URIBL]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[VIRUS]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[ValidHELO]/);
		$l->{color} = $white	if ($l->{code} =~ /\[WhiteAddition]/);
		$l->{color} = $white	if ($l->{code} =~ /\[WhiteDeletion]/);
		$l->{color} = $white	if ($l->{code} =~ /\[Whitelisted]/);
		$l->{color} = $magenta	if ($l->{code} =~ /\[WhitelistOnly]/);
		$ipwide-- if ($ipwide == 2 && $lines2 > $lines-1);
		$ipwide-- if ($ipwide == 1 && $lines1 > $lines-1);
		if ($l->{cliIP} =~ /:/ && length($l->{cliIP}) > 20) {
			$ipwide = 2 if ($ipwide < 2);
			$lines2 = 0;
		}
		elsif ($l->{cliIP} =~ /:/) {
			$ipwide = 1 if ($ipwide < 1);
			$lines1 = 0;
		}
		if ($ipwide == 2) {
			$cols = $columns - 9 - 1 - 8 - 1 - 39 - 1 - 18 - 1 - 28 - 1;
			printf "$l->{date} $l->{time} \033[1;$l->{color}m%-39s %-18s %-28.28s %-${cols}.${cols}s\033[0m\n", $l->{cliIP}, $l->{code}, $l->{sender}, $l->{rest};
		}
		elsif ($ipwide == 1) {
			$cols = $columns - 9 - 1 - 8 - 1 - 20 - 1 - 18 - 1 - 28 - 1;
			printf "$l->{date} $l->{time} \033[1;$l->{color}m%-20s %-18s %-28.28s %-${cols}.${cols}s\033[0m\n", $l->{cliIP}, $l->{code}, $l->{sender}, $l->{rest};
		}
		else {
			$cols = $columns - 9 - 1 - 8 - 1 - 15 - 1 - 18 - 1 - 28 - 1;
			printf "$l->{date} $l->{time} \033[1;$l->{color}m%-15s %-18s %-28.28s %-${cols}.${cols}s\033[0m\n", $l->{cliIP}, $l->{code}, $l->{sender}, $l->{rest};
		}
		$lines1++;
		$lines2++;
	}
	elsif ($l->{rest} =~ /^Admin/) {
		$l->{color} = $yellow;
		$cols = $columns - 9 - 1 - 8 - 1;
		printf "$l->{date} $l->{time} \033[1;$l->{color}m%-${cols}.${cols}s\033[0m\n", $l->{rest};
		$lines1++;
		$lines2++;
	}
	else {
		next if ($l->{rest} =~ /converting to SSL$/);
		next if ($l->{rest} =~ /^found .* in VERIFY-cache$/);
		next if ($l->{rest} =~ /IP-Score/);
		next if ($l->{rest} =~ /MessageScore/);
		next if ($l->{rest} =~ /Name Server .* ResponseTime/);
		next if ($l->{rest} =~ /New connection on the secure SSL port/);
		next if ($l->{rest} =~ /\[SMTP Error]/);
		next if ($l->{rest} =~ /\[SMTP Reply]/);
		next if ($l->{rest} =~ /\[spam found]/);
		next if ($l->{rest} =~ /^to: .* found .* in VERIFY-cache$/);
		next if ($l->{rest} =~ /^VRFY added .* to VRFY-\/LDAPlist$/);
		$l->{color} = $black;
		$cols = $columns - 9 - 1 - 8 - 1;
		printf "$l->{date} $l->{time} \033[1;$l->{color}m%-${cols}.${cols}s\033[0m\n", $l->{rest};
		$lines1++;
		$lines2++;
	}
}

close(LOG);
exit(0);