~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~ L a s t 2 4 H o u r s ~~~~~~~~~~~~~~~~~~~~~~~~~~~ qms-analog: Qmail-Scanner Log File Analysis For records beginning: Tue Nov 9 00:03:47 2004 ending: Tue Nov 9 23:52:03 2004 Note: QMS WC stats are qmail-scanner working copy generated stats. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ==> Server Report External SMTP sessions: 286 Internal SMTP sessions: 0 SMTP msgs dropped: 2 Scan Errors: 0 Non-MIME or text/plain (msgs): 110 MIME (msgs): 174 Average scan time/msg (secs): 1.47713 QMS WC bad char (msgs): 0 QMS WC header breakage (msgs): 0 QMS WC bad MIME hdr (msgs): 0 QMS WC bad MIME content (msgs): 1 QMS WC bad MIME filename (msgs): 0 QMS WC bad MIME boundary (msgs): 0 QMS WC bad MIME assoc (msgs): 0 QMS WC bad MIME windows file (msgs): 0 QMS WC bad zip file (msgs): 0 PERLSCAN bad MIME hdr (msgs): 0 PERLSCAN bad hdr found in db (msgs): 0 PERLSCAN bad attach length (msgs): 0 PERLSCAN bad attachment type (msgs): 0 UNZIP password protected (msgs): 0 CLAMAV virus found (msgs): 1 SPAM deleted (msgs): 21 SPAM detected (msgs): 24 SPAM quarantined (msgs): 0 SPAM rejected (msgs): 0 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ==> Detected Viruses Report Count Description ------------------------------------------------------------------------------ 1 HTML.Phishing.Bank-1 1 BAD_MIME_CONTENT ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ==> Local Accounts Report MsgRx MsgTx %Total ScanTime VirusRx VirusTx SA-AVG SA-MRK SA-DEL SA-REJ SA-QUA ------------------------------------------------------------------------------ user3@yourdomain.com: 91 10 66.9 1161.1 3 0 2.7 12 22 0 0 user5@yourdomain.com: 30 0 19.9 334.2 1 0 5.5 11 29 0 0 user2@yourdomain.com: 17 2 12.6 119.3 0 0 5.5 6 10 0 0 user1@yourdomain.com: 0 1 0.7 5.8 0 0 3.8 0 1 0 0 user4@yourdomain.com: 0 0 0.0 12.2 0 0 6.6 0 1 0 0 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~ A l l R e c o r d s ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ qms-analog: Qmail-Scanner Log File Analysis For records beginning: Sat May 29 09:08:44 2004 ending: Tue Nov 9 23:52:03 2004 Note: QMS WC stats are qmail-scanner working copy generated stats. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ==> Server Report External SMTP sessions: 45706 Internal SMTP sessions: 16 SMTP msgs dropped: 945 Scan Errors: 8 Non-MIME or text/plain (msgs): 16350 MIME (msgs): 28427 Average scan time/msg (secs): 2.5307 QMS WC bad char (msgs): 0 QMS WC header breakage (msgs): 176 QMS WC bad MIME hdr (msgs): 0 QMS WC bad MIME content (msgs): 292 QMS WC bad MIME filename (msgs): 0 QMS WC bad MIME boundary (msgs): 0 QMS WC bad MIME assoc (msgs): 97 QMS WC bad MIME windows file (msgs): 5 QMS WC bad zip file (msgs): 0 PERLSCAN bad MIME hdr (msgs): 0 PERLSCAN bad hdr found in db (msgs): 84 PERLSCAN bad attach length (msgs): 0 PERLSCAN bad attachment type (msgs): 1 UNZIP password protected (msgs): 0 CLAMAV virus found (msgs): 272 SPAM deleted (msgs): 5760 SPAM detected (msgs): 5109 SPAM quarantined (msgs): 0 SPAM rejected (msgs): 0 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ==> Detected Viruses Report Count Description ------------------------------------------------------------------------------ 292 BAD_MIME_CONTENT 176 BAD_HDR_BREAKAGE 109 Worm.Gibe.F 97 BAD_MIME_ASSOCIATION 86 Worm.SomeFool.P 84 BAD_HDR_DB 18 Trojan.Dropper.JS.Zerolin-6 13 Worm.Bagle.AG 9 Worm.SomeFool.X 7 Worm.SomeFool.Z 6 Worm.Bagle.Z 5 BAD_MIME_WINBLOWS 5 Worm.Bagle.Gen-zippwd 4 Worm.SomeFool.Gen-2 2 Eicar-Test-Signature 2 HTML.Phishing.Bank-1 1 Worm.Bagle.AC 1 Worm.Bagle.AF.2 1 Worm.Bagle.AG.2 1 Trojan.Dropper.JS.Zerolin-5 1 BAD_ATTACHMENT_TYPE ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ==> Local Accounts Report MsgRx MsgTx %Total ScanTime VirusRx VirusTx SA-AVG SA-MRK SA-DEL SA-REJ SA-QUA ------------------------------------------------------------------------------ user3@yourdomain.com: 474 69 65.4 3923.9 12 1 3.7 56 225 0 0 user5@yourdomain.com: 154 11 19.9 1826.7 8 0 5.9 65 178 0 0 user2@yourdomain.com: 98 15 13.6 822.8 1 0 4.9 29 65 0 0 user1@yourdomain.com: 6 2 1.0 36.3 0 0 3.9 3 4 0 0 user4@yourdomain.com: 1 0 0.1 20.0 0 0 6.2 1 3 0 0 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Qmail Statistics qtime is the time spent by a message in the queue. ddelay is the latency for a successful delivery to one recipient---the end of successful delivery, minus the time when the message was queued. xdelay is the latency for a delivery attempt---the time when the attempt finished, minus the time when it started. The average concurrency is the total xdelay for all deliveries divided by the time span; this is a good measure of how busy the mailer is. Completed messages: 3778 Recipients for messages: 3816 Total attempts for messages: 3818 Average attempts per message: 1.01059 Bytes in messages: 12016248 Bytes weighted by success: 13445603 Average message qtime (s): 0.63861 Total delivery attempts: 3870 success: 1988 failure: 1830 deferral: 52 Total ddelay (s): 2296.590657 Avg ddelay per success (s): 1.155227 Total xdelay (s): 4211.470079 Avg xdelay per attempt (s): 1.088235 Time span (days): 4.69444 Average concurrency: 0.0103833 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Reasons for failure One line per reason for delivery failure. Information on each line: * del is the number of deliveries that ended for this reason. * xdelay is the total xdelay on those deliveries. del xdelay reason 1829 9.99 Sorry, no mailbox here by that name. vpopmail (#5.1.1)/ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Reasons for deferral One line per reason for deferral. Information on each line: * del is the number of deliveries that ended for this reason. * xdelay is the total xdelay on those deliveries. del xdelay reason 1 1.60 Connected to 64.12.138.57 but connection died. (#4.4.2)/ 1 1260.71 Connected to 64.156.215.18 but connection died. (#4.4.2)/ 23 2486.04 Sorry, I wasn't able to establish an SMTP connection. (#4.4.1)/