https://htyp.org/mw/index.php?action=history&feed=atom&title=Postfix%2Fmail.log Postfix/mail.log - Revision history 2026-07-03T04:44:36Z Revision history for this page on the wiki MediaWiki 1.45.3 https://htyp.org/mw/index.php?title=Postfix/mail.log&diff=21635&oldid=prev Woozle: Created page with "==Notes== Not sure if there's any official documentation of the format, so this is reverse-engineered. Sample lines (raw): <pre>Feb 15 09:25:43 cloud2 dovecot: imap-login: Lo..." 2016-02-15T14:46:47Z <p>Created page with &quot;==Notes== Not sure if there&#039;s any official documentation of the format, so this is reverse-engineered. Sample lines (raw): &lt;pre&gt;Feb 15 09:25:43 cloud2 dovecot: imap-login: Lo...&quot;</p> <p><b>New page</b></p><div>==Notes==<br /> Not sure if there&#039;s any official documentation of the format, so this is reverse-engineered.<br /> <br /> Sample lines (raw):<br /> &lt;pre&gt;Feb 15 09:25:43 cloud2 dovecot: imap-login: Login: user=&lt;harena&gt;, method=PLAIN, rip=104.169.188.172, lip=45.55.148.146, mpid=32283, TLS, session=&lt;PdnAys8r4QBoqbys&gt;<br /> Feb 15 09:25:46 cloud2 dovecot: imap-login: Login: user=&lt;harena&gt;, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=32285, secured, session=&lt;Ourpys8rIQB/AAAB&gt;<br /> Feb 15 09:25:46 cloud2 dovecot: imap(harena): Disconnected: Logged out in=402 out=1099&lt;/pre&gt;<br /> <br /> My interpretation:<br /> <br /> Abbreviations:<br /> * &#039;&#039;&#039;rip&#039;&#039;&#039;: remote IP address (i.e. address of the email client)<br /> * &#039;&#039;&#039;lip&#039;&#039;&#039;: local IP address (i.e. address of the Postfix server)<br /> * &#039;&#039;&#039;mpid&#039;&#039;&#039;: not sure; &quot;mail process ID&quot;?<br /> <br /> Breakdown of a line:<br /> * &#039;&#039;&#039;When&#039;&#039;&#039;: Feb 15 09:25:43<br /> ** &#039;&#039;&#039;Server ID&#039;&#039;&#039;: cloud2<br /> ** &#039;&#039;&#039;Daemon&#039;&#039;&#039;: dovecot<br /> ** &#039;&#039;&#039;Action&#039;&#039;&#039; imap-login<br /> *** &#039;&#039;&#039;user&#039;&#039;&#039;: harena<br /> *** &#039;&#039;&#039;auth method&#039;&#039;&#039;: plaintext via TLS<br /> *** &#039;&#039;&#039;remote IP&#039;&#039;&#039;: 104.169.188.172<br /> *** &#039;&#039;&#039;local IP&#039;&#039;&#039;: 45.55.148.146<br /> *** &#039;&#039;&#039;mpid&#039;&#039;&#039;: 32283<br /> *** &#039;&#039;&#039;session ID&#039;&#039;&#039;: PdnAys8r4QBoqbys</div> Woozle