path: root/imapd

########################################################
# Please file all bug reports, patches, and feature
# requests under:
#      https://sourceforge.net/p/logwatch/_list/tickets
# Help requests and discusion can be filed under:
#      https://sourceforge.net/p/logwatch/discussion/
########################################################

########################################################
# The imap script was written by:
#    Paweł Gołaszewski <blues@gda.pl>
########################################################

#####################################################
## Copyright (c) 2008 Paweł Gołaszewski
## Covered under the included MIT/X-Consortium License:
##    http://www.opensource.org/licenses/mit-license.php
## All modifications and contributions by other persons to
## this script are assumed to have been donated to the
## Logwatch project and thus assume the above copyright
## and licensing terms.  If you want to make contributions
## under your own copyright or a different license this
## must be explicitly stated in the contribution an the
## Logwatch project reserves the right to not accept such
## contributions.  If you have made significant
## contributions to this script and want to claim
## copyright please contact logwatch-devel@lists.sourceforge.net.
#########################################################

my $Debug = $ENV{'LOGWATCH_DEBUG'};
my $Detail = $ENV{'LOGWATCH_DETAIL_LEVEL'};

if ( $Debug >= 5 ) {
    print STDERR "\n\nDEBUG \n\n";
}

while (defined($ThisLine = <STDIN>)) {
   if (
      ($ThisLine =~ /^Initializing */) or
      ($ThisLine =~ /^spgetpwnam: can't find user: */) or
      ($ThisLine =~ /^couriertls: read: Connection reset by peer/ ) or
      ($ThisLine =~ /^ip=\[[0-9a-f:.]+\], couriertls: connect: error:[0-9A-F]+:SSL routines:(ssl3_get_record:(http request|wrong version number)|tls_early_post_process_client_hello:(version too low|unknown protocol))$/ ) or
      # timeouts are reported in some other scripts - maybe it should be here too?
      ($ThisLine =~ /^(ip=\[[0-9a-f:.]+\], )?couriertls: (accept|read): Connection timed out/ ) or
      ($ThisLine =~ /^LOGOUT, ip=\[.*\], rcvd=\d+, sent=\d+$/) or
      ($ThisLine =~ /^Disconnected, ip=\[.*\]/) or
      # uw-imapd
      ($ThisLine =~ /^Moved \d+ bytes of new mail to.*$/) or
      ($ThisLine =~ /^Unexpected client disconnect, while reading line.*$/) or
      ($ThisLine =~ /^ip=\[[:a-f0-9.]+], (couriertls: (accept|connect): Success|Unexpected SSL connection shutdown\.)$/)
   ) {
      # Don't care about these...
   } elsif ( ($User, $Host) = ( $ThisLine =~ /^Login user=(.*?) host=(.*\[.*\])$/ ) ) {
      $Login{$User}{$Host}++;
   } elsif ( ($User, $Host) = ( $ThisLine =~ /^LOGIN, user=(.*?), ip=\[([^ ,]+)\](?:, port=\[\d+\])?, protocol=IMAP, starttls=1$/o ) ) {
      $Login{$User}{$Host}++;
   } elsif ( ($User,$Host) = ( $ThisLine =~ /^Authenticated user=(.*) host=(.*\[.*\]).*$/ ) ) {
      $Login{$User}{$Host}++;
   } elsif ( ($User,$Host) = ( $ThisLine =~ /^Preauthenticated user=(.*) host=(.*)$/ ) ) {
      $Login{$User}{$Host}++;
   } elsif ( ($Host) = ( $ThisLine =~ /^imap service init from (.*)$/ ) ) {
      $ConnectionNonSSL{$Host}++;
      $Connection{$Host}++;
   } elsif ( ($Host) = ( $ThisLine =~ /^imaps SSL service init from (.*)$/ ) ) {
      $ConnectionSSL{$Host}++;
      $Connection{$Host}++;
   } elsif ( ($Host) = ( $ThisLine =~ /^Connection, ip=\[(.*)\]$/o ) ) {
      $Connection{$Host}++;
#   } elsif ( ($User,$Downloaded,$DownloadSize,$Left,$LeftSize) = ( $ThisLine =~ /^Stats: (.*?) (.*?) (.*?) (.*?) (.*?)$/) ) {
#      $DownloadedMessages{$User} += $Downloaded;
#      $DownloadedMessagesSize{$User} += $DownloadSize;
#      $MessagesLeft{$User} = $Left;
#      $MboxSize{$User} = $LeftSize;
#   } elsif ( ($User,$Host) = ( $ThisLine =~ /^authentication failed for user (.*?) - (.*)/ ) ) {
#      $LoginFailed{"$Host ($User)"}++;
   } elsif ( (undef,$Host,undef) = ( $ThisLine =~ /^LOGIN FAILED, method=\S+, ip=\[(::ffff:)?([^\[\]]+)\](, .*)?$/) ) {
      $LoginFailed{"$Host"}++;
   } elsif ( ($User, $Host) = ( $ThisLine =~ /^Logout user=(.*?) host=(.*\[.*\])$/) ) {
      $Logout{$User}{$Host}++;
      $Logout2{$User}++;
   # More generic pattern for uw-imapd
   } elsif ( ($User, $Host) = ( $ThisLine =~ /^Logout user=(.*?) host=(.*)$/) ) {
      $Logout{$User}{$Host}++;
      $Logout2{$User}++;
   } elsif ( ($dummy, $User, $Host, $DownloadSize1, $DownloadSize2) = ( $ThisLine =~ /^(LOGOUT|TIMEOUT|DISCONNECTED), user=(.*?), ip=\[([^ ,]+)\](?:, port=\[\d+\])?, headers=(\d+), body=(\d+)/o ) ) {
      $Logout{$User}{$Host}++;
      $Logout2{$User}++;
      $DownloadedMessagesSize{$User} += $DownloadSize1 + $DownloadSize2;
      if ( ( $ThisLine =~ /, starttls=1/o ) ) {
         $ConnectionSSL{$Host}++;
      } else {
         $Connection{$Host}++;
      }
   } elsif ( ($User,$Host) = ( $ThisLine =~ /^Autologout user=(.*) host=(.*\[.*\])$/ ) ) {
      $AutoLogout{$User}{$Host}++;
      $Logout{$User}{$Host}++;
      $Logout2{$User}++;
   } elsif ( ($Reason,$User,$Host) = ( $ThisLine =~ /^Killed (.*) user=(.*) host=(.*\[.*\])$/ ) ) {
      $Logout{$User}{$Host}++;
      $Logout2{$User}++;
      $KilledSession{$User}{$Reason}++;
   } elsif (
      (($User,$Host) = ( $ThisLine =~ /^Broken pipe, while reading line user=(.*) host=(.*\[.*\])$/ )) or
      (($User,$Host) = ( $ThisLine =~ /^Command stream end of file, while reading line user=(.*) host=(.*\[.*\])$/ )) or
      (($User,$Host) = ( $ThisLine =~ /^Connection (?:reset by peer|timed out), while reading line user=(.*) host=(.*\[.*\])$/ )) or
      (($User,$Host) = ( $ThisLine =~ /^No route to host, while reading line user=(.*) host=(.*\[.*\])$/ )) or
      (($User,$Host) = ( $ThisLine =~ /^Unexpected client disconnect, while reading line user=(.*) host=(.*\[.*\])$/ ))
   ) {
      $Logout{$User}{$Host}++;
      $Logout2{$User}++;
      $SocketErrors{$Host}++;
   } else {
      # Report any unmatched entries...
      # remove PID from named messages

      $ThisLine =~ s/^(client [.0-9]+)\S+/$1/;
      chomp($ThisLine);
      $OtherList{$ThisLine}++;
   }
   $LastLine = $ThisLine;
}

################################################


if ( ( $Detail >= 0 ) and (keys %LoginFailed)) {
   print    "\n\n[IMAPd] Login failures:".
            "\n=========================".
            "\n                                                        Host  |          # ".
            "\n------------------------------------------------------------- | -----------";

   $ConnCount = 0;
   foreach $Host (sort keys %LoginFailed) {
      $Conns = $LoginFailed{$Host};
      $HostLength = length($Host);
      $HostSpaceLength = 61 - $HostLength;
      $CountLength = length("$Conns");
      $CountSpaceLength = 12 - $CountLength;
      print "\n" ." " x $HostSpaceLength . $Host . " |" . " " x $CountSpaceLength .  $Conns . "";
      $ConnCount += $Conns;
   }
   $CountLength = length("$ConnCount");
   $CountSpaceLength = 75 - $CountLength;
   print "\n" . "-" x 75;
   print "\n" . " " x $CountSpaceLength . "$ConnCount\n\n\n";
}

if ( ( $Detail >= 5 ) and (keys %Connection)) {
   print     "\n[IMAPd] Connections:".
             "\n=========================".
             "\n                                  Host | Connections |    SSL   |   Total  ".
             "\n-------------------------------------- | ----------- | -------- | ---------";

   $ConnCount = 0;
   $SSLConn = 0;
   $TotalConn = 0;
   foreach $Host (sort keys %Connection) {
      $Total = $Connection{$Host};
      if (defined ($ConnectionNonSSL{$Host})) {
         $Conns = $ConnectionNonSSL{$Host};
      } else {
         $Conns = 0;
      }
      if (defined ($ConnectionSSL{$Host})) {
         $SSL = $ConnectionSSL{$Host};
      } else {
         $SSL = 0;
      }
      $HostLength = length($Host);
      $HostSpaceLength = 38 - $HostLength;
      $CountLength = length("$Conns");
      $CountSpaceLength = 12 - $CountLength;
      $SSLLength = length("$SSL");
      $SSLSpaceLength = 9 - $SSLLength;
      $TotalLength = length("$Total");
      $TotalSpaceLength = 10 - $TotalLength;
      print "\n" ." " x $HostSpaceLength . $Host . " |" . " " x $CountSpaceLength .  $Conns .
            " |" . " " x $SSLSpaceLength . $SSL . " |" . " " x $TotalSpaceLength . $Total;
      $NonSSLCount += $Conns;
      $SSLCount += $SSL;
      $TotalCount += $Total;
   }
   $NonSSLLength = length("$NonSSLCount");
   $NonSSLSpaceLength = 52 - $NonSSLLength;
   $SSLLength = length("$SSLCount");
   $SSLSpaceLength = 9 - $SSLLength;
   $TotalLength = length("$TotalCount");
   $totalSpaceLength = 10 - $TotalLength;
   print "\n" . "-" x 75;
   print "\n" . " " x $NonSSLSpaceLength . $NonSSLCount . " |" . " " x $SSLSpaceLength . $SSLCount .
                " |" . " " x $totalSpaceLength . $TotalCount . "\n\n\n";
}



if (keys %Logout2) {
   print     "\n[IMAPd] Logout stats:".
             "\n====================".
             "\n                                   User | Logouts | Downloaded |  Mbox Size".
             "\n--------------------------------------- | ------- | ---------- | ----------";

   $ConnCount = 0;
   $SizeAll = 0;
   $DownAll = 0;
   foreach $User (sort keys %Logout2) {
      $Conns = $Logout2{$User};
      $UserLength = length($User);
      $UserSpaceLength = 39 - $UserLength;
      $CountLength = length("$Conns");
      $CountSpaceLength = 8 - $CountLength;
      $Down = $DownloadedMessagesSize{$User};
      if (! defined $Down) {
         $Down = 0; #Hack
      }
      $DownSpaceLength = 11 - length($Down);
      #$Size = $MboxSize{$User};
      $Size = 0; #Hack
      $SizeSpaceLength = 11 - length($Size);
      print "\n" ." " x $UserSpaceLength . $User . " |" . " " x $CountSpaceLength .  $Conns . " |" .
                  " " x $DownSpaceLength . $Down . " |" . " " x $SizeSpaceLength . $Size;
      $ConnCount += $Conns;
      $SizeAll += $Size;
      $DownAll += $Down;
   }
   $CountLength = length("$ConnCount");
   $CountSpaceLength = 49 - $CountLength;
   $DownLength = length($DownAll);
   $DownSpaceLength = 11 - $DownLength;
   $SizeLength = length($SizeAll);
   $SizeSpaceLength = 11 - $SizeLength;
   print "\n" . "-" x 75;
   print "\n" . " " x $CountSpaceLength . "$ConnCount" . " |" . " " x $DownSpaceLength . $DownAll . " |" .
                " " x $SizeSpaceLength  .  $SizeAll    . "\n\n\n";
}


if ( ( $Detail >= 10 ) and (keys %Login)) {
   print "\n[IMAPd] Successful Logins:\n";
   $LoginCount = 0;
   foreach my $User (sort keys %Login) {
      print "  User $User: \n";
      $UserCount = 0;
      foreach $Host (keys %{$Login{$User}}) {
         $HostCount = $Login{$User}{$Host};
         print "    From $Host: $HostCount Time(s)\n";
         $UserCount += $HostCount;
      }
      $LoginCount += $UserCount;
      print "  Total $UserCount Time(s)\n";
      print "\n";
   }
   print "Total $LoginCount successful logins\n\n";
}

if ( ( $Detail >= 10 ) and (keys %AutoLogout)) {
   print "\nAutologout:\n";
   foreach $User (sort {$a cmp $b} keys %AutoLogout) {
      print "   $User:\n";
      foreach $Host (sort {$a cmp $b} keys %{$AutoLogout{$User}}) {
         print "      $Host: $AutoLogout{$User}{$Host} Time(s)\n";
      }
   }
}

if ( ( $Detail >= 10 ) and (keys %KilledSession)) {
   print "\nKilled IMAP sessions:\n";
   foreach $User (sort {$a cmp $b} keys %KilledSession) {
      print "   $User:\n";
      foreach $Reason (sort {$a cmp $b} keys %{$KilledSession{$User}}) {
         print "      $Reason: $KilledSession{$User}{$Reason} Time(s)\n";
      }
   }
}

if ( ( $Detail >= 10 ) and (keys %SocketErrors)) {
   print "\nSocket Errors in connections with:\n";
   foreach $Host (sort {$a cmp $b} keys %SocketErrors) {
      print "   $Host: $SocketErrors{$Host} Time(s)\n";
   }
}

if (keys %OtherList) {
   print "\n**Unmatched Entries**\n";
   foreach $line (sort {$a cmp $b} keys %OtherList) {
      print "   $line: $OtherList{$line} Time(s)\n";
   }
}

exit(0);


# vi: shiftwidth=3 tabstop=3 syntax=perl et
# Local Variables:
# mode: perl
# perl-indent-level: 3
# indent-tabs-mode: nil
# End: