Base64 subjects in Reports

[deramik]

Yes! Thanks!
It's my decoded string!
How can I decode all such strings in my CSV?

[WebFooL]

I think it will take me some days to work with the app...
I will see if i have time this weekend to work with it.

Do you want it in English or in native ?

[deramik]

Thank you.
Interface is irrelevant.

[WebFooL]

What i meant with English or Native was if you want the subject to be decode in to English or to your native lang.

Meaning do you want:
0sXNz87UIM7BIMTB3sUgySDXIMvXwdLUydLF = ремонт на даче и в квартире
or
0sXNz87UIM7BIMTB3sUgySDXIMvXwdLUydLF = renovation of rooms and dache

[deramik]

I think it will correct if language will detect on codepage in string:
=?koi8-r?B?0sXNz87UIM7BIMTB3sUgySDXIMvXwdLUydLF?=
so,
0sXNz87UIM7BIMTB3sUgySDXIMvXwdLUydLF = ремонт на даче и в квартире
without translates.
Thanks!

[WebFooL]

Will see what i can fix :P
Is it the standard csv from the spam filter?

[deramik]

it's very interesting!
yes, it's standart csv
Time,Client,Score,Msg sender,Subject,Destination IP,Action,Msg receiver
2010-02-03 00:03:03.687,192.168.1.1,9.5,13johnson@ms66.hinet. net,[!! SPAM] =?koi8-r?B?0sXNz87UIM7BIMTB3sUgySDXIMvXwdLUydLF?=,MY_IP,m arked,user@domain.my

[WebFooL]

I am running in to some problems.

I created a simple php script.
So if you run

http://fakenews.se/untangle/base64/test.php?str=0sXNz87UIM7BIMTB3sUgySDXIMvXwdLUydLF

It will decode it and print out "ремонт на даче и в квартире"

The app then use the PHP script and then downloads the decoded string.

But here is the problem when i view it after i see it as "ÒÅÍÏÎÔ ÎÁ ÄÁÞÅ É × Ë×ÁÒÚS'K"
That has to do with that notepad dont disply Cyrillic. (if i use Notepad++ and configure the correct format and character set i see ремонт на даче и в квартире)

I have the feeling that my app will just force the "ÒÅÍÏÎÔ ÎÁ ÄÁÞÅ É × Ë×ÁÒÚS'K" in to the CSV and fubar everthing..

Will do some more testing.

But i have a feeling that my skills are note enough here

[deramik]

I had tested.

1. when subj='=?koi8-r?B?8OL1IDE4LzAyLiD308UgydrNxc7FzsnRIDIwMTDHLg==?='
result is:

that's all right

2. when subj='=?windows-1251?B?xOv/IPDl6uvg7O379SDg4+Xt8vHy4g==?='
result is:

there are no any result

[WebFooL]

It is the = in the last sample that mess with it..

Without them i get:
Для рекламных аб{|ј|ё
By the looks the start is intact but the end is fubar.