Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

These are tools to analyze SpamAssassin logs and generate reports. Generally, they take syslog data logged by the 'spamd' server as input.

  • Wiki Markup
    \[http://logreport.org/lire/or/email.php logreport.org\] apparently has a syslog analyzer that can grok [SpamAssassin] logs:
    \\
  • Wiki Markup\[http://people.ee.ethz.ch/~dws/software/mailgraph/ mailgraph\]: Generates graphs from syslogs. \[http://www. stat.ee.ethz.ch/mailgraph.cgi demo\] available. \\
  • Wiki Markup
    \[http://mailscannermrtg.sourceforge.net/mailscanner-mrtg/ mailscanner-mrtg\] -- \[http://mailscannermrtg.sourceforge.net/mailscanner-mrtg/ demo\] available
    \\
  • Wiki Markup
    \[http://mailwatch.sourceforge.net/ mailwatch\] -- no demo, but the previous link has screenshots
    \\
  • Wiki Markup
    \[http://www.monkeynoodle.org/comp/tools/spam monkeynoodle.org\] spamassassin MRTG scripts: Scans the maillog/syslog and feeds the SA results into a format from which MRTG is used to create graphs. \[http://www.monkeynoodle.org/mrtg/felix.html demo\] available
    \\
  • Wiki Markup
    \[http://munin.sf.net/ munin\]: Munin is a tool for graphing all sorts of information about one or more servers and displaying it in a web interface. It uses the execellent RRDTool (written by Tobi Oetiker) and is written in Perl.  \[http://www.linpro.no/projects/munin/example/ilmari.org/marvin.home.ilmari.org-spamstats.html demo\] available
    \\
  • Wiki Markup
    \[http://www.inter7.com/mrtg.html qmailmrtg\] -- \[http://www.sk-branik.si/qmailmrtg example\] available
    \\
  • mailscanner-mrtgdemo available
  • mailwatch – no demo, but the previous link has screenshots
  • monkeynoodle.org spamassassin MRTG scripts: Scans the maillog/syslog and feeds the SA results into a format from which MRTG is used to create graphs. demo available
  • sa-stats for 3.3 Not updated since 3.0 (or earlier) This works OK for 3.2.5, but you might benefit by changing the default log file location, and start time (try "yesterday"). --top=10 seems to produce unlimited output. The script doesn't seem to analyse usefulness of particular rules, but the performance figures might be helpful.
  • munin: Munin is a tool for graphing all sorts of information about one or more servers and displaying it in a web interface. It uses the excellent RRDTool (written by Tobi Oetiker) and is written in Perl. demo available
  • PostConf – Postfix and SA management and content analysis (free and commercial)
  • Perl Monk's rewrite of Mike's Stat Script
  • qmailmrtgexample available
  • sa-stats.pl (Dallas Engelken's version) : Generates a report in text or HTML from a spamd log file or from syslog. not to be confused with the Wiki Markup\[http://www.rulesemporium.com/programs/sa-stats.txt sa-stats.pl (Dallas Engelken's version)\] : Generates a report in text or HTML from a spamd log file or from syslog. not to be confused with the "sa-stats.pl" in the [SpamAssassin] distribution; it's entirely different \\different. Rules Emporium is no longer available. There's a copy of version 0.93 available here
  • Wiki Markup\[http://nossie.addicts.nl/projects/sa-exim-stats/ sa-exim-stats\] : Generates rrdtool graphs from sa-exim log files. \\
  • Wiki Markup\[http://www.ini.ethz.ch/~stephan/software/spamdstats.tar.bz2 spamdstats\]: Continuously parses spamd's log file in the background and stores various data in one Berkely DB file to be read by a second script. \\
  • Wiki Markup
    \[http://www.while.homeunix.net/mailstats/ vispan\] --  \[http://hosting.boys-brigade.org.uk/mrtg demo\] available
    \\
  • vispandemo available
  • Wiki Markup\[http://www.agrav.net/software sa-daily-report\]: Generates and mails a report of all the email quarantined as spam the previous day, to allow checking for false postitives. \\false positives.
  • spamness: An extension for Mozilla Thunderbird that gives visual feedback on each message's SpamAssassin score and offers links back to the rules database section of this wiki.

If you plan to parse spamd's syslog output, some helpful notes can be found at SpamdSyslogFormat.CategorySoftware