Parses for TIMING entries?

[Ralf Hildebrandt]

Anybody got a parser for the TIMING entries:

Jun 10 13:45:46 mail amavis[21530]: (21530-14) TIMING [total 1125 ms]
- SMTP greeting: 1 (0%)0, SMTP EHLO: 0 (0%)0, SMTP pre-MAIL: 0 (0%)0,
SMTP pre-DATA-flush: 1 (0%)0, SMTP DATA: 0 (0%)0, check_init: 0 (0%)0,
digest_hdr: 2 (0%)0, digest_body_dkim: 0 (0%)0, mime_decode: 12 (1%)2,
get-file-type2: 73 (6%)8, decompose_part: 4 (0%)8, parts_decode: 0
(0%)8, check_header: 1 (0%)9, AV-scan-1: 31 (3%)11, AV-scan-2: 193
(17%)28, spam-wb-list: 1 (0%)29, SA parse: 4 (0%)29, SA check: 764
(68%)97, decide_mail_destiny: 7 (1%)97, notif-quar: 0 (0%)97,
fwd-connect: 3 (0%)98, fwd-xforward: 0 (0%)98, fwd-mail-pip: 1 (0%)98,
fwd-rcpt-pip: 0 (0%)98, fwd-data-chkpnt: 0 (0%)98, write-header: 1
(0%)98, fwd-data-contents: 0 (0%)98, fwd-end-chkpnt: 16 (1%)99,
prepare-dsn: 0 (0%)99, main_log_entry: 4 (0%)100, update_snmp: 1
(0%)100, SMTP pre-response: 0 (0%)100, SMTP response: 0 (0%)100,
unlink-2-files: 0 (0%)100, rundown: 0 (0%)100

I want to graph these values using gnuplot. Preferrably I wanted to
put size and TIMING into relation (how do the values change depending
on the mailsize), but the TIMING line lacks the message size.

-- 
Ralf Hildebrandt
  Geschäftsbereich IT | Abteilung Netzwerk
  Charité - Universitätsmedizin Berlin
  Campus Benjamin Franklin
  Hindenburgdamm 30 | D-12203 Berlin
  Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
  ralf.hildebrandt at charite.de | http://www.charite.de