[Bro] Internal hostname in mail.log

[Robin Sommer]

On Mon, May 02, 2011 at 12:36 -0400, you wrote:

> Can anyone help me determine which broctl script/postprocessor (I'm
> assuming) is adding an internal hostname (user.host.com) to mail.log.

It's done inside Bro actually, see the
aux/broctl/policy/mail-alarms.bro script.

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org