use strict;
use warnings;
use MD5;

my $in_attachment = 0;  # 0: mail; 1: attachm. header 2: attachm. content
my $subject_seen  = 0;
my $md5           = new MD5;

# read until (Subject: ...)
while ( <DATA> ) {
  $subject_seen = 1 if /^Subject:\s/;
  next if not $subject_seen;
  ## When in doubt:
  #  die "didn't expect that [$.]: $_"
  #      if /^Content-Type:\s/i and not /application\/x-gzip/i
  $in_attachment = 1,              next  if  not $in_attachment and /^Content-Type: /;
  $in_attachment = ++$in_attachment % 3  if      $in_attachment and /^\s*$/;
  next if $in_attachment; # skip MD5 computation while in attachment
  $md5->add($_);          # incremental calculation
}

# MD5 of "Subject: .... " .. "CREATED_ON=..."
# MD5: a138724a0766a9b685ccc60ce9c85de3
print "MD5: ", $md5->hexdigest(),"\n";


__DATA__
Message-Id: <200707020704.l6274QG9029301@smtp2.corp.abb.com>
Subject: System Alert from XUZ of sts WARNING
Mime-Version: 1.0

dhcp 0
ip 172.19.22.255
netmask 255.255.255.255
gateway 192.168.1.1
HOSTNAME=ABB
dns.enable on
ab_to_abb[0]
ab_to_local[0]
plex_to_abb[1]
plex_to_local[1]
ab_to_abb[1]
Content-Type: application/x-gzip
Content-Disposition: attachment; filename="sys_logs.gz"
Content-Transfer-Encoding: base64

H4sIAHujiEYCA+1dW2/bOhJ+D5DwIN9aAukqqirrcUukJM2pznIpUjScxZYLApZlhJtZMmrS9Ls27znSElx4ouiWXasRMVhW1J5MfhcDgcfhlJO3979I8cR1fkL5QkqR2nJPUnLrnIQvJ7
FhBCiaJYqm5p8EOWzZ2dpsppnIWOnbpjYqel6qqlGJZm8urk1vMDN4amko/JbSArH289lVzb
CUmus5SMo7tQkqTd3R34f3B0eEGCyLEDkrjxLdSKwqI+/5KJzyumfng1VnO9tkZSodQ1YnC
cUImUew+H7dGork+UQP7pFPy7fMl+eesLxZUl5I0mk7dsXVnxyHI8C8rx7TIu/lO03d/JXlR
0dDK6qDVdmitAj299T3JDoJjP7xJPoMurYPzo8ujg/1jaGIO2fdkahEoSAIsydS+u/N1//jSIk6QJSmMzRSsM4RvHJvUvnFDEuHgvfcmH3AEq+KYTBy0u90dsttsum44rlo9M1t90Gr1StOU

CREATED_ON=Mon Jul  2 00:04:28 2007