Very nice! Thanks for sharing this, Bill! Bill ----- Original Message ----- From: "Bill" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Tuesday, April 13, 2004 12:33 PM Subject: RE: [Declude.Virus] Scott, what do you use to generate this report
> Hi, > > I have a utility to do a quick analysis of my decMMDD.log file to > discover test effectiveness. If anyone would like to use it, I have it > available for free from my website: http://www.wamusa.com/wamtools > > The program is designed for LOGLEVEL MID but it may work for other > levels. My system analyzed this 120Mb decMMDD.log in less than one > minute. This is a sample output: > > > Message Recipient > Test Name Fail Count % Fail Count % > > WEIGHT10 116362 96 169684 96 > SNIFFER2 114790 94 167322 95 > WEIGHT15 112700 93 165299 94 > WEIGHT20 108443 89 159758 91 > WEIGHTDEL 108443 89 159758 91 > SPAMCOP 84740 70 129602 73 > SBL 52552 43 53879 30 > AHBL 48506 40 57094 32 > CBL 46445 38 89827 51 > DSBL 39527 32 77743 44 > SORBS-DUHL 29673 24 58427 33 > REVDNS 28996 23 41544 23 > BADHEADERS 27493 22 34922 19 > SORBS-SPAM 25119 20 27995 15 > NOPOSTMASTER 22488 18 46530 26 > NOABUSE 21746 17 42732 24 > SPAMHEADERS 19613 16 20587 11 > SPAM-DOMAINS 15263 12 33776 19 > ROUTING 12041 9 25060 14 > FOREIGN 10098 8 16330 9 > GIBBERISH 9072 7 9932 5 > DSN 8484 7 13755 7 > SORBS-HTTP 6584 5 12459 7 > SORBS-SOCKS 6508 5 12697 7 > SPFFAIL 4954 4 6527 3 > BLITZEDALL 3350 2 5991 3 > BASE64 2252 1 2956 1 > MAILFROM 1684 1 2841 1 > COMMENTS 1328 1 2056 1 > MYFILTERFAIL 1159 0 1723 0 > WAMO 585 0 609 0 > MYFILTERPASS 512 0 1239 0 > SORBS-MISC 504 0 923 0 > SORBS-SMTP 445 0 1132 0 > OBFUSCATION 360 0 457 0 > ORDB 316 0 654 0 > SORBS-WEB 316 0 514 0 > SORBS-ZOMBIE 280 0 280 0 > SPFPASS 208 0 234 0 > BONDEDSENDER 62 0 62 0 > @LINKED 10 0 14 0 > HABEAS 4 0 4 0 > WAMCHECK 1 0 2 0 > > Message Count 120934 175163 > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Paul Fuhrmeister > > Sent: Monday, April 12, 2004 5:11 PM > > To: [EMAIL PROTECTED] > > Subject: [Declude.Virus] Scott, what do you use to generate > > this report > > > > > > Thanks Scott, > > > > While I have your attention, what do you use to generate this > > report from your log files? > > > > > Each month, we go through our spamtraps (E-mail addresses > > > designed to collect spam), to find out which spam tests > > > were most effective at catching spam. <snip> > > > > > > > > > WEIGHT10 99.48% > > > WEIGHT20 95.45% > > > NOLEGITCONTENT 95.43% > > > SNIFFER 94.06% > > > SPAMCHK 93.20% > > > IPNOTINMX 90.76% > > > SPAMCOP 79.83% > > > CMDSPACE 77.37% > > > > <snip> > > > > [EMAIL PROTECTED] > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
