5 use Data::Dump qw(dump);
11 my ( $mon, $dd, $time, $host, $daemon, $msg ) = split(/\s+/,$_,6);
13 next unless $msg =~ m/from=<([^>]+)>/;
14 next if $msg =~ m/(NOQUEUE|FILTER)/;
18 $t =~ s/\d:\d\d$/_/; # group by 10 min
20 $stat->{$mon}->{$dd}->{$t}->{$from}++;
23 print STDERR "$l " if $l % 10000 == 0;
26 #warn "# stat = ", dump( $stat );
28 foreach my $mon ( sort keys %$stat ) {
29 foreach my $dd ( sort { $a <=> $b } keys %{$stat->{$mon}} ) {
30 foreach my $t ( sort keys %{ $stat->{$mon}->{$dd} } ) {
32 my $e = $stat->{$mon}->{$dd}->{$t};
33 my $fmt = "%3s %2s %5s %4d %s\n";
34 foreach my $email ( sort { $e->{$b} <=> $e->{$a} } keys %$e ) {
36 printf $fmt, $mon, $dd, $t, $e->{$email}, $email;
37 } elsif ( $n == 5 ) { # XXX top
40 printf $fmt, '', '', '', $e->{$email}, $email;
42 $stat->{_from}->{$email} += $e->{$email};
48 #print "_from = ",dump( $stat->{_from} );
49 print "# XXX count,email\n";
50 foreach my $email ( sort { $stat->{_from}->{$b} <=> $stat->{_from}->{$a} } keys %{ $stat->{_from} } ) {
51 printf "%4d %s\n", $stat->{_from}->{$email}, $email;