plugin-spamassassin: amavis

#!/bin/sh
#
# Plugin to count the SpamAssassin troughput
#
# Contributed by David Obando - 16.11.2005
# edited by Cornelius Bolten - 11.07.2006
# edited by Anarcat - 14.08.2006
#
# Magic markers - optional - used by installation scripts and
# munin-config:
#
#%# family=contrib
#%# capabilities=autoconf

if [ "$1" = "autoconf" ]; then
        echo yes
        exit 0
fi

if [ "$1" = "config" ]; then

        echo 'graph_title Spam detection'
        echo 'graph_args --base 1000 -l 0 '
        echo 'graph_vlabel emails / ${graph_period}'
        echo 'graph_order spam ham'
        echo 'graph_category Mail'
        echo 'ham.label ham'
        echo 'ham.type DERIVE'
        echo 'ham.min 0'
        echo 'spam.label spam'
        echo 'spam.type DERIVE'
        echo 'spam.min 0'
        exit 0
fi

TMP=`mktemp /tmp/tmp.XXXXXXXX`

# relevant samples:
# Aug 14 09:03:35 hostname amavis[7216]: (07216-08) Passed, <foo@example.com> -> <bar@example.com>, Message-ID: <4u8532u58945hi532h>, Hits: 2.253
# Aug 14 09:03:35 hostname amavis[7216]: (07216-08) Passed, <foo@example.com> -> <bar@example.com>, Message-ID: <4u8532u58945hi532h>, Hits: -1.300
# Aug 14 09:03:35 hostname amavis[7216]: (07216-08) Passed, <foo@example.com> -> <bar@example.com>, Message-ID: <4u8532u58945hi532h>, Hits: 0
# Aug 14 09:03:35 hostname amavis[7216]: (07216-08) Passed, <foo@example.com> -> <bar@example.com>, Message-ID: <4u8532u58945hi532h>, Hits: -

# detect hits > 5
SPAM="Hits: \([5-9]\(\.\|\$\)\|[1-9][0-9][0-9]*\(\.\|\$\)\)"
# hits < 5, including negatives
HAM="Hits: \([0-4]\(\.\|\$\)\|-\)"

grep "amavis.*Hits" /var/log/syslog >> $TMP

# debug: number of hits
#echo -n "hits " && wc -l < $TMP
echo -n "spam.value " && grep "$SPAM" $TMP | wc -l
echo -n "ham.value " && grep "$HAM" $TMP | wc -l

# debug: find which statement don't match anything
#grep -v "$HAM" < $TMP | grep -v "$SPAM"
rm -f $TMP