#!/usr/bin/env bash
# Author:  Oliver Ladner <oli@lugh.ch>
# License: LGPL
#
# greps mail.log for TLS debug loglines and displays sender count
# and cipher used.

MIN_MAILS=2
echo -e "Count\tCipher used\tSending domain"
echo "--------------------------------------"
grep 'Anonymous TLS connection established from' /var/log/mail.log* | sed -r 's/\[[0-9.]*\]://g' | awk {'print $15,$11'} | sort | uniq -c -i | while read line; do [[ $(grep -oE '^\s*[0-9]+' <<< $line) -gt $MIN_MAILS ]] && echo $line | tr -s ' ' '\t'; done | sort -k 2,2 -k 1,1rn