I ran your regex over my sendmail logs and it behaved
pretty much as expected. The only lines it missed were
emails directed at multiple recipients, like so:
Jul 19 02:43:29 zoom1 sendmail[26193]: CAA26174: to=<XXX@aol.com>,<YYY@aol.com>,<ZZZ@aol.com>, ctladdr=<XXX@TelePath.Com> (13408/40), delay=00:01:14, xdelay=00:00:01, mailer=esmtp, relay=zd.mx.aol.com. [152.163.224.101], stat=Sent (OK)
Modifying the regex a bit cleared that up and I didn't get
any more anomalous behavior. Here's the test code I used:
#!/usr/bin/perl
while (<STDIN>)
{
# Only match lines that have a " to=" in them.
# The leading space is important because many
# lines have a "proto="
if (/ to=/)
{
#($to_addr = $_) =~ s/.* to=([^,]+), .*/$1/;
($to_addr = $_) =~ s/.* to=(.+?), .*/$1/;
print "$to_addr";
}
}
-Matt
-
Are you posting in the right place? Check out Where do I post X? to know for sure.
-
Posts may use any of the Perl Monks Approved HTML tags. Currently these include the following:
<code> <a> <b> <big>
<blockquote> <br /> <dd>
<dl> <dt> <em> <font>
<h1> <h2> <h3> <h4>
<h5> <h6> <hr /> <i>
<li> <nbsp> <ol> <p>
<small> <strike> <strong>
<sub> <sup> <table>
<td> <th> <tr> <tt>
<u> <ul>
-
Snippets of code should be wrapped in
<code> tags not
<pre> tags. In fact, <pre>
tags should generally be avoided. If they must
be used, extreme care should be
taken to ensure that their contents do not
have long lines (<70 chars), in order to prevent
horizontal scrolling (and possible janitor
intervention).
-
Want more info? How to link
or How to display code and escape characters
are good places to start.
|