We have a Postfix hub and I'm trying to better understand the information in the mail.log file. I use tools like qshape, pflogsumm.pl and amavis-logwatch to summarize the log files, but I have still have questions about some of the elements of the raw log file.
My first question is in regard to the delay entry that appears from Postfix when an email is finally delivered. I am guessing that these values are in seconds, but what does this information exactly mean.
delay=2.4, delays=0.18/0.01/1.4/0.81
Did the email take a total of 2.4 seconds to process?
What is the breakdown of timings in the delays section?
Postfix feature # 20051103 added the following (from the 2.3.13 release notes):
As I would suspect, the longest delay in your setup is being caused by connection setup, DNS, and the initial SMTP conversation. Seems normal to me.
This is mentioned in the FAQ for postfix-logwatch.
In the source code:
postfix-logwatch will also give you a delays percentiles report, which gives an overview of how all mail is flowing during the report period.