[Dovecot] dovecot.rawlog for imap-login
I'm trying to see what users are sending for login. I added the rawlog binary in front of the imap-login in the config file. I'm not seeing any rawlogs. I added the dovecot.rawlog in the dovecot user directory (since that's what the imap-login process seems to run as) and it's permission are wide open. Still nothing.
Help?
Tere.
I'm trying to see what users are sending for login. I added the rawlog binary in front of the imap-login in the config file. I'm not seeing any rawlogs. I added the dovecot.rawlog in the dovecot user directory (since that's what the imap-login process seems to run as) and it's permission are wide open. Still nothing.
You are not alone:(. I tried also everything, still no raw log. Has anybody ever have luck to see raw log -s?
-- Sysadmin
On Thu, 2006-04-20 at 11:06 -0400, Jared wrote:
I'm trying to see what users are sending for login. I added the rawlog binary in front of the imap-login in the config file. I'm not seeing any rawlogs. I added the dovecot.rawlog in the dovecot user directory (since that's what the imap-login process seems to run as) and it's permission are wide open. Still nothing.
This isn't possible because of how imap-login works internally. Only way is to use ethereal, ngrep or something else.
Timo Sirainen wrote:
On Thu, 2006-04-20 at 11:06 -0400, Jared wrote:
I'm trying to see what users are sending for login. I added the rawlog binary in front of the imap-login in the config file. I'm not seeing any rawlogs. I added the dovecot.rawlog in the dovecot user directory (since that's what the imap-login process seems to run as) and it's permission are wide open. Still nothing.
This isn't possible because of how imap-login works internally. Only way is to use ethereal, ngrep or something else.
Anyway to modify it so it will work?
On Fri, 2006-04-21 at 09:08 -0400, Jared wrote:
Timo Sirainen wrote:
On Thu, 2006-04-20 at 11:06 -0400, Jared wrote:
I'm trying to see what users are sending for login. I added the rawlog binary in front of the imap-login in the config file. I'm not seeing any rawlogs. I added the dovecot.rawlog in the dovecot user directory (since that's what the imap-login process seems to run as) and it's permission are wide open. Still nothing.
This isn't possible because of how imap-login works internally. Only way is to use ethereal, ngrep or something else.
Anyway to modify it so it will work?
Sure there's a way, but it's not exactly simple. I don't think they're really compatible, so you'll get pretty much the same results with ngrep (although SSL/TLS is a problem there).
participants (3)
-
Jared
-
Sysadmin
-
Timo Sirainen