My Declude logs regularly get up to 1.5 GB (log level high). I run DLAnalyzer daily at 12:05 AM. It takes between 45 and 65 minutes depending on the size of the log.
----- Original Message ----- From: "Robert" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, June 01, 2004 11:16 PM Subject: Re: [Declude.JunkMail] Declude version 1.79 and Delog > > > But who wants 800MB to 1GB spam log files? > The server is so busy doing declude processes there isn't enough time to run > a log analyzer on the local machine. > It takes to long to transfer the log file to a different machine. > > > Robert > > > ----- Original Message ----- > From: R. Scott Perry <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Tuesday, June 01, 2004 1:39 PM > Subject: RE: [Declude.JunkMail] Declude version 1.79 and Delog > > > > > > > Thanks, we have been running along with MID since the beginning, > > >all along, upgrading the interim releases. We just this week needed to > > >know which line it failed on in one of our filter files. This is what > > >we get now in our log. I will up to HIGH this week. Thanks, > > > > > >Qff4f4d2301429a89 BADHEADERS:8 SPAMHEADERS:8 FILTER-SUBJECT:9 > > >FILTER-BODYURL:20 . Total weight = 45. > > >06/01/2004 00:00:24 Qff4f4d2301429a89 Subject: Indebted to your > > >creditors? We can help > > >06/01/2004 00:00:24 Qff4f4d2301429a89 From: [EMAIL PROTECTED] > > >To: XXXXXXX IP: 206.173.149.243 ID: > > >06/01/2004 00:00:24 Qff4f4d2301429a89 Tests failed [weight=45]: > > >BADHEADERS=WARN IPNOTINMX=IGNORE SPAMHEADERS=WARN SNIFFER-NOTFND=IGNORE > > >WEIGHT10=WARN WEIGHT20=SUBJECT FILTER-SUBJECT=IGNORE > > >FILTER-BODYURL=IGNORE > > > > The "Msg failed" lines at LOGLEVEL HIGH include the line in the filter > that > > failed. So when you move to LOGLEVEL HIGH, it will have the information > > you desire. > > > > > > -Scott > > --- > > Declude JunkMail: The advanced anti-spam solution for IMail mailservers > > since 2000. > > Declude Virus: Ultra reliable virus detection and the leader in mailserver > > vulnerability detection. > > Find out what you've been missing: Ask for a free 30-day evaluation. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
