一个关于日志统计的问题？请帮忙看看。

看我好成

统计maillog日志中通过客户端发信最多的账号以及他的发送次数？

Shell_HAT

贴一部分日志上来吧，大家好测试代码。

看我好成

Feb  1 14:23:04 mail postfix/cleanup[9881]: D82412FED8: warning: header Subject: Anacron job 'cron.daily' from mail.test.com[127.0.0.1]; from=<root@test.com> to=<root@test.com> proto=SMTP helo=<localhost>
Feb  1 14:23:04 mail postfix/pickup[6015]: 893342FED6: uid=0 from=<root>
Feb  1 14:23:04 mail postfix/pipe[9871]: 893342FED6: to=<root@test.com>, orig_to=<root>, relay=anyscan, delay=0.45, delays=0.18/0.04/0/0.23, dsn=2.0.0, status=sent (delivered via anyscan service)
Feb  1 14:23:04 mail postfix/qmgr[6014]: 893342FED6: from=<root@test.com>, size=543, nrcpt=1 (queue active)
Feb  1 14:23:04 mail postfix/qmgr[6014]: 893342FED6: removed
Feb  1 14:23:04 mail postfix/qmgr[6014]: D82412FED8: from=<root@test.com>, size=711, nrcpt=1 (queue active)
Feb  1 14:23:04 mail postfix/smtpd[9874]: connect from mail.test.com[127.0.0.1]
Feb  1 14:23:04 mail postfix/smtpd[9874]: D82412FED8: client=mail.test.com[127.0.0.1]
Feb  1 14:23:04 mail postfix/smtpd[9874]: disconnect from mail.test.com[127.0.0.1]
Feb  1 14:23:25 mail postfix/smtp[9884]: D82412FED8: to=<root@test.com>, relay=none, delay=20, delays=0.08/0.05/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  1 14:32:34 mail postfix/qmgr[6014]: D82412FED8: from=<root@test.com>, size=711, nrcpt=1 (queue active)
Feb  1 14:32:55 mail postfix/smtp[12517]: D82412FED8: to=<root@test.com>, relay=none, delay=590, delays=570/0.04/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  1 14:37:34 mail postfix/qmgr[6014]: 3112B2FED0: from=<root@test.com>, size=866, nrcpt=1 (queue active)
Feb  1 14:37:54 mail postfix/smtp[12523]: 3112B2FED0: to=<root@test.com>, relay=none, delay=4761, delays=4741/0.04/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  1 14:47:34 mail postfix/qmgr[6014]: D82412FED8: from=<root@test.com>, size=711, nrcpt=1 (queue active)
Feb  1 14:47:54 mail postfix/smtp[12586]: D82412FED8: to=<root@test.com>, relay=none, delay=1489, delays=1469/0.04/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  1 15:17:34 mail postfix/qmgr[6014]: D82412FED8: from=<root@test.com>, size=711, nrcpt=1 (queue active)
Feb  1 15:17:54 mail postfix/smtp[12639]: D82412FED8: to=<root@test.com>, relay=none, delay=3289, delays=3269/0.05/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  1 15:47:34 mail postfix/qmgr[6014]: 3112B2FED0: from=<root@test.com>, size=866, nrcpt=1 (queue active)
Feb  1 15:47:55 mail postfix/smtp[12820]: 3112B2FED0: to=<root@test.com>, relay=none, delay=8962, delays=8942/0.04/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  1 16:07:01 mail postfix/cleanup[12922]: BFF3A2FEDB: message-id=<20120201080701.BFF3A2FEDB@mail.test.com>
Feb  1 16:07:01 mail postfix/cleanup[12922]: BFF3A2FEDB: warning: header Subject: =?gbk?B?yP208w==?= from local; from=<test1@lxz.com>
Feb  1 16:07:01 mail postfix/cleanup[12922]: BFF3A2FEDB: warning: header x_mj: 0 from local; from=<test1@lxz.com>
Feb  1 16:07:01 mail postfix/pickup[12604]: BFF3A2FEDB: uid=48 from=<test1@lxz.com>
Feb  1 16:07:01 mail postfix/qmgr[6014]: BFF3A2FEDB: from=<test1@lxz.com>, size=671, nrcpt=1 (queue active)
Feb  1 16:07:02 mail postfix/cleanup[12936]: 1CE312FEDC: message-id=<20120201080701.BFF3A2FEDB@mail.test.com>
Feb  1 16:07:02 mail postfix/cleanup[12936]: 1CE312FEDC: warning: header Subject: =?gbk?B?yP208w==?= from mail.test.com[127.0.0.1]; from=<test1@lxz.com> to=<test2@lxz.com> proto=SMTP helo=<localhost>
Feb  1 16:07:02 mail postfix/cleanup[12936]: 1CE312FEDC: warning: header x_mj: 0 from mail.test.com[127.0.0.1]; from=<test1@lxz.com> to=<test2@lxz.com> proto=SMTP helo=<localhost>
Feb  1 16:07:02 mail postfix/pipe[12927]: BFF3A2FEDB: to=<test2@lxz.com>, relay=anyscan, delay=0.47, delays=0.19/0.03/0/0.24, dsn=2.0.0, status=sent (delivered via anyscan service)
Feb  1 16:07:02 mail postfix/pipe[12940]: 1CE312FEDC: to=<test2@lxz.com>, relay=maildrop, delay=0.33, delays=0.11/0.04/0/0.18, dsn=2.0.0, status=sent (delivered via maildrop service)
Feb  1 16:07:02 mail postfix/qmgr[6014]: 1CE312FEDC: from=<test1@lxz.com>, size=839, nrcpt=1 (queue active)
Feb  1 16:07:02 mail postfix/qmgr[6014]: 1CE312FEDC: removed
Feb  1 16:07:02 mail postfix/qmgr[6014]: BFF3A2FEDB: removed
Feb  1 16:07:02 mail postfix/smtpd[12929]: 1CE312FEDC: client=mail.test.com[127.0.0.1]
Feb  1 16:07:02 mail postfix/smtpd[12929]: connect from mail.test.com[127.0.0.1]
Feb  1 16:07:02 mail postfix/smtpd[12929]: disconnect from mail.test.com[127.0.0.1]
Feb  1 16:17:34 mail postfix/qmgr[6014]: D82412FED8: from=<root@test.com>, size=711, nrcpt=1 (queue active)
Feb  1 16:17:54 mail postfix/smtp[12964]: D82412FED8: to=<root@test.com>, relay=none, delay=6890, delays=6869/0.13/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  1 16:57:34 mail postfix/qmgr[6014]: 3112B2FED0: from=<root@test.com>, size=866, nrcpt=1 (queue active)
Feb  1 16:57:54 mail postfix/smtp[13004]: 3112B2FED0: to=<root@test.com>, relay=none, delay=13161, delays=13141/0.04/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  1 17:27:34 mail postfix/qmgr[6014]: D82412FED8: from=<root@test.com>, size=711, nrcpt=1 (queue active)
Feb  1 17:27:54 mail postfix/smtp[13041]: D82412FED8: to=<root@test.com>, relay=none, delay=11089, delays=11069/0.05/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  1 18:07:34 mail postfix/qmgr[6014]: 3112B2FED0: from=<root@test.com>, size=866, nrcpt=1 (queue active)
Feb  1 18:07:54 mail postfix/smtp[13087]: 3112B2FED0: to=<root@test.com>, relay=none, delay=17361, delays=17341/0.04/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  1 18:37:34 mail postfix/qmgr[6014]: D82412FED8: from=<root@test.com>, size=711, nrcpt=1 (queue active)
Feb  1 18:37:55 mail postfix/smtp[13118]: D82412FED8: to=<root@test.com>, relay=none, delay=15290, delays=15270/0.05/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  1 19:17:34 mail postfix/qmgr[6014]: 3112B2FED0: from=<root@test.com>, size=866, nrcpt=1 (queue active)
Feb  1 19:17:54 mail postfix/smtp[13164]: 3112B2FED0: to=<root@test.com>, relay=none, delay=21562, delays=21542/0.05/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  1 19:47:34 mail postfix/qmgr[6014]: D82412FED8: from=<root@test.com>, size=711, nrcpt=1 (queue active)
Feb  1 19:47:54 mail postfix/smtp[13194]: D82412FED8: to=<root@test.com>, relay=none, delay=19490, delays=19470/0.05/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  1 20:27:34 mail postfix/qmgr[6014]: 3112B2FED0: from=<root@test.com>, size=866, nrcpt=1 (queue active)
Feb  1 20:27:54 mail postfix/bounce[13242]: 3112B2FED0: sender non-delivery notification: C08502FEDA
Feb  1 20:27:54 mail postfix/cleanup[13244]: C08502FEDA: message-id=<20120201122754.C08502FEDA@mail.test.com>
Feb  1 20:27:54 mail postfix/qmgr[6014]: 3112B2FED0: from=<root@test.com>, status=expired, returned to sender
Feb  1 20:27:54 mail postfix/qmgr[6014]: 3112B2FED0: removed
Feb  1 20:27:54 mail postfix/qmgr[6014]: C08502FEDA: from=<>, size=2460, nrcpt=1 (queue active)
Feb  1 20:27:54 mail postfix/smtp[13241]: 3112B2FED0: to=<root@test.com>, relay=none, delay=25762, delays=25741/0.05/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  1 20:28:14 mail postfix/smtp[13241]: C08502FEDA: to=<root@test.com>, relay=none, delay=20, delays=0.1/0.02/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  1 20:37:34 mail postfix/qmgr[6014]: C08502FEDA: from=<>, size=2460, nrcpt=1 (queue active)
Feb  1 20:37:54 mail postfix/smtp[13259]: C08502FEDA: to=<root@test.com>, relay=none, delay=600, delays=580/0.04/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  1 20:52:34 mail postfix/qmgr[6014]: C08502FEDA: from=<>, size=2460, nrcpt=1 (queue active)
Feb  1 20:52:54 mail postfix/smtp[13277]: C08502FEDA: to=<root@test.com>, relay=none, delay=1500, delays=1480/0.05/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  1 20:57:34 mail postfix/qmgr[6014]: D82412FED8: from=<root@test.com>, size=711, nrcpt=1 (queue active)
Feb  1 20:57:55 mail postfix/bounce[13287]: D82412FED8: sender non-delivery notification: 1F7A62FEDC
Feb  1 20:57:55 mail postfix/cleanup[13290]: 1F7A62FEDC: message-id=<20120201125755.1F7A62FEDC@mail.test.com>
Feb  1 20:57:55 mail postfix/qmgr[6014]: 1F7A62FEDC: from=<>, size=2305, nrcpt=1 (queue active)
Feb  1 20:57:55 mail postfix/qmgr[6014]: D82412FED8: from=<root@test.com>, status=expired, returned to sender
Feb  1 20:57:55 mail postfix/qmgr[6014]: D82412FED8: removed
Feb  1 20:57:55 mail postfix/smtp[13286]: D82412FED8: to=<root@test.com>, relay=none, delay=23690, delays=23670/0.09/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  1 20:58:15 mail postfix/smtp[13286]: 1F7A62FEDC: to=<root@test.com>, relay=none, delay=20, delays=0.1/0.02/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  1 21:07:34 mail postfix/qmgr[6014]: 1F7A62FEDC: from=<>, size=2305, nrcpt=1 (queue active)
Feb  1 21:07:54 mail postfix/smtp[13312]: 1F7A62FEDC: to=<root@test.com>, relay=none, delay=599, delays=579/0.05/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  1 21:22:34 mail postfix/qmgr[6014]: 1F7A62FEDC: from=<>, size=2305, nrcpt=1 (queue active)
Feb  1 21:22:34 mail postfix/qmgr[6014]: C08502FEDA: from=<>, size=2460, nrcpt=1 (queue active)
Feb  1 21:22:54 mail postfix/smtp[13330]: C08502FEDA: to=<root@test.com>, relay=none, delay=3300, delays=3279/0.09/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  1 21:22:54 mail postfix/smtp[13331]: 1F7A62FEDC: to=<root@test.com>, relay=none, delay=1499, delays=1479/0.1/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  1 21:52:34 mail postfix/qmgr[6014]: 1F7A62FEDC: from=<>, size=2305, nrcpt=1 (queue active)
Feb  1 21:52:54 mail postfix/smtp[13364]: 1F7A62FEDC: to=<root@test.com>, relay=none, delay=3299, delays=3279/0.05/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  1 22:22:34 mail postfix/qmgr[6014]: C08502FEDA: from=<>, size=2460, nrcpt=1 (queue active)
Feb  1 22:22:54 mail postfix/smtp[13401]: C08502FEDA: to=<root@test.com>, relay=none, delay=6899, delays=6879/0.05/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  1 22:52:34 mail postfix/qmgr[6014]: 1F7A62FEDC: from=<>, size=2305, nrcpt=1 (queue active)
Feb  1 22:52:54 mail postfix/smtp[13431]: 1F7A62FEDC: to=<root@test.com>, relay=none, delay=6899, delays=6879/0.04/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  1 23:32:34 mail postfix/qmgr[6014]: C08502FEDA: from=<>, size=2460, nrcpt=1 (queue active)
Feb  1 23:32:55 mail postfix/qmgr[6014]: C08502FEDA: from=<>, status=expired, returned to sender
Feb  1 23:32:55 mail postfix/qmgr[6014]: C08502FEDA: removed
Feb  1 23:32:55 mail postfix/smtp[13478]: C08502FEDA: to=<root@test.com>, relay=none, delay=11100, delays=11080/0.04/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  2 00:02:34 mail postfix/qmgr[6014]: 1F7A62FEDC: from=<>, size=2305, nrcpt=1 (queue active)
Feb  2 00:02:54 mail postfix/qmgr[6014]: 1F7A62FEDC: from=<>, status=expired, returned to sender
Feb  2 00:02:54 mail postfix/smtp[13521]: 1F7A62FEDC: to=<root@test.com>, relay=none, delay=11100, delays=11080/0.05/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=test.com type=MX: Host not found, try again)
Feb  2 00:02:55 mail postfix/qmgr[6014]: 1F7A62FEDC: removed
Feb  2 03:30:33 mail postfix/cleanup[14260]: 56A952FED8: message-id=<20120201193033.56A952FED8@mail.test.com>
Feb  2 03:30:33 mail postfix/cleanup[14260]: 56A952FED8: warning: header Subject: =?gbk?B?YWFhYQ==?= from local; from=<test4@lxz.com>
Feb  2 03:30:33 mail postfix/cleanup[14260]: 56A952FED8: warning: header x_mj: 0 from local; from=<test4@lxz.com>
Feb  2 03:30:33 mail postfix/cleanup[14274]: B8C222FED0: message-id=<20120201193033.56A952FED8@mail.test.com>
Feb  2 03:30:33 mail postfix/cleanup[14274]: B8C222FED0: warning: header Subject: =?gbk?B?YWFhYQ==?= from mail.test.com[127.0.0.1]; from=<test4@lxz.com> to=<test1@lxz.com> proto=SMTP helo=<localhost>
Feb  2 03:30:33 mail postfix/cleanup[14274]: B8C222FED0: warning: header x_mj: 0 from mail.test.com[127.0.0.1]; from=<test4@lxz.com> to=<test1@lxz.com> proto=SMTP helo=<localhost>
Feb  2 03:30:33 mail postfix/pickup[14009]: 56A952FED8: uid=48 from=<test4@lxz.com>
Feb  2 03:30:33 mail postfix/pipe[14265]: 56A952FED8: to=<test1@lxz.com>, relay=anyscan, delay=0.56, delays=0.2/0.05/0/0.31, dsn=2.0.0, status=sent (delivered via anyscan service)
Feb  2 03:30:33 mail postfix/qmgr[6014]: 56A952FED8: from=<test4@lxz.com>, size=549, nrcpt=1 (queue active)
Feb  2 03:30:33 mail postfix/qmgr[6014]: 56A952FED8: removed
Feb  2 03:30:33 mail postfix/qmgr[6014]: B8C222FED0: from=<test4@lxz.com>, size=717, nrcpt=1 (queue active)
Feb  2 03:30:33 mail postfix/smtpd[14267]: B8C222FED0: client=mail.test.com[127.0.0.1]
Feb  2 03:30:33 mail postfix/smtpd[14267]: connect from mail.test.com[127.0.0.1]
Feb  2 03:30:33 mail postfix/smtpd[14267]: disconnect from mail.test.com[127.0.0.1]
Feb  2 03:30:34 mail postfix/pipe[14278]: B8C222FED0: to=<test1@lxz.com>, relay=maildrop, delay=0.36, delays=0.16/0.06/0/0.14, dsn=2.0.0, status=sent (delivered via maildrop service)
Feb  2 03:30:34 mail postfix/qmgr[6014]: B8C222FED0: removed
Feb  2 03:30:37 mail postfix/cleanup[14260]: 0CF772FED8: message-id=<20120201193037.0CF772FED8@mail.test.com>
Feb  2 03:30:37 mail postfix/cleanup[14260]: 0CF772FED8: warning: header Subject: =?gbk?B?YmI=?= from local; from=<test4@lxz.com>
Feb  2 03:30:37 mail postfix/cleanup[14260]: 0CF772FED8: warning: header x_mj: 0 from local; from=<test4@lxz.com>
Feb  2 03:30:37 mail postfix/cleanup[14274]: 22E782FEDA: message-id=<20120201193037.0CF772FED8@mail.test.com>
Feb  2 03:30:37 mail postfix/cleanup[14274]: 22E782FEDA: warning: header Subject: =?gbk?B?YmI=?= from mail.test.com[127.0.0.1]; from=<test4@lxz.com> to=<test1@lxz.com> proto=SMTP helo=<localhost>
Feb  2 03:30:37 mail postfix/cleanup[14274]: 22E782FEDA: warning: header x_mj: 0 from mail.test.com[127.0.0.1]; from=<test4@lxz.com> to=<test1@lxz.com> proto=SMTP helo=<localhost>
Feb  2 03:30:37 mail postfix/pickup[14009]: 0CF772FED8: uid=48 from=<test4@lxz.com>
Feb  2 03:30:37 mail postfix/pipe[14265]: 0CF772FED8: to=<test1@lxz.com>, relay=anyscan, delay=0.15, delays=0.06/0.01/0/0.09, dsn=2.0.0, status=sent (delivered via anyscan service)
Feb  2 03:30:37 mail postfix/pipe[14278]: 22E782FEDA: to=<test1@lxz.com>, relay=maildrop, delay=0.16, delays=0.07/0.01/0/0.09, dsn=2.0.0, status=sent (delivered via maildrop service)
Feb  2 03:30:37 mail postfix/qmgr[6014]: 0CF772FED8: from=<test4@lxz.com>, size=541, nrcpt=1 (queue active)
Feb  2 03:30:37 mail postfix/qmgr[6014]: 0CF772FED8: removed
Feb  2 03:30:37 mail postfix/qmgr[6014]: 22E782FEDA: from=<test4@lxz.com>, size=709, nrcpt=1 (queue active)
Feb  2 03:30:37 mail postfix/qmgr[6014]: 22E782FEDA: removed
Feb  2 03:30:37 mail postfix/smtpd[14267]: 22E782FEDA: client=mail.test.com[127.0.0.1]
Feb  2 03:30:37 mail postfix/smtpd[14267]: connect from mail.test.com[127.0.0.1]
Feb  2 03:30:37 mail postfix/smtpd[14267]: disconnect from mail.test.com[127.0.0.1]
Feb  2 03:30:48 mail postfix/cleanup[14260]: 3742A2FED8: message-id=<20120201193048.3742A2FED8@mail.test.com>
Feb  2 03:30:48 mail postfix/cleanup[14260]: 3742A2FED8: warning: header Subject: =?gbk?B?Rlc6YmI=?= from local; from=<test4@lxz.com>
Feb  2 03:30:48 mail postfix/cleanup[14260]: 3742A2FED8: warning: header x_mj: 0 from local; from=<test4@lxz.com>
Feb  2 03:30:48 mail postfix/cleanup[14274]: 5B9F02FEDA: message-id=<20120201193048.3742A2FED8@mail.test.com>
Feb  2 03:30:48 mail postfix/cleanup[14274]: 5B9F02FEDA: warning: header Subject: =?

看我好成

主要是命令对，可以再其他日志中正确筛选，这些日志可能不全达不到效果。

rick_sq

详细说下要求吧，日志看不懂

jiejie455

awk -vFS="[<>]" '/from=</{if($2!=""){email[$2]++}}END{for(i in email){print i"\t"email[i]}}' data

看我好成

客户端发信是pop3，这个客户的账号和发送次数最多的一个，来统计