Hmmm...I'm seeing occasional control characters in non-subject lines, as
well as the EOL problem where the CRLF gets mangled.
However, I'm not seeing the mixed lines problems that others have
reported...probably because of lower load on our system.
I've attached a few log snippets to illustrate the problems I'm seeing. In
every case, it seems there is a CR, and then a CRLF. I don't see a matching
LF to the initial CR anywhere. This screws up the SQL Server imports I
attempted previously. I can bypass the lines with the parser, but proper
parsing would be preferable. If we can't get it fixed, I suppose I could
read the log in chunks as opposed to line reads...
I tried 1.78 briefly, but it broke the parsing I had in place to look for
"Msg Failed" lines and parse for "Action="...makes it a little more
difficult to separate out HOLD vs. DELETE...though we could look at the
actual tests failed instead.
I'd like to propose that log formats have dedicated lines for the most
commonly used information, and restrict enhancements to adding new lines for
more information rather than changing existing lines. That way those of us
with log parsers have some stability in our reporting.
Appreciate it.
Darin.
----- Original Message -----
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, February 29, 2004 4:22 PM
Subject: Re: [Declude.JunkMail] Possible Missing JM Log lines in 1.75
>BTW, I have to throw away lines occasionally because of intermittent CRs
>that cause problems with parsing. For my log parsing, I initially tried to
>use SQL Server DTS to isolate fields and parse from there, but SQL would
>merge two lines together at times because of a related problem with EOL
>characters. A separate parser is doing better, but still occasionally has
>to throw away lines.
>
>I'd like to add my vote to the others for ironing out the few bugs in
>logging.
FWIW, I'm not aware of any bugs with logging (as of the latest interim,
which fixes an issue where two lines could be combined if certain control
characters appeared in the subject).
There are, however, two issues that I'm aware of. [1] A problem where a
flaw in Windows will incorrectly cause corruption to the log file (such as
multiple lines getting mixed together), which affects any programs that use
multiple processes/threads to save data (including IMail), and [2] The
desire for more flexibility in logging (such as choosing whether or not
"Msg Failed" lines should appear in the log file). We're looking into the
possibility of changing the logging to bypass the corruption program (by
having a centralized process do all the logging), as well as more logging
options. However, these are not currently a high priority.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Catches known viruses and is the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
_____________________________________
[This E-mail virus scanned by 4C Web]
02/27/2004 17:14:44 Qc15204f103ccec5c BASE64:4 nNOLEGITCONTENT:-3 . Total weight = 1
02/27/2004 17:14:44 Qc15204f103ccec5c Msg failed BASE64 (A binary encoded text or HTML
section was found in this E-mail.). Action=WARN.
02/27/2004 17:14:44 Qc15204f103ccec5c L1 Message OK
02/27/2004 17:14:44 Qc15204f103ccec5c Subject: You are dismissed
02/27/2004 17:14:44 Qc15204f103ccec5c From: [EMAIL PROTECTED] To: [EMAIL PROTECTED]
IP: 63.112.170.2 ID: i1RMHj7M006099Date:
02/27/2004 00:03:26 Qcf9a013b030eb667 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED]
IP: 141.158.231.134 ID: 061A40A1F202/27/2004 00:03:26 Qcf9d01b00336bec4
nNOLEGITCONTENT:-3 . Total weight = -3
02/27/2004 00:05:36 Qd01e01ba0336b8ee From: [EMAIL PROTECTED] To: [EMAIL PROTECTED]
IP: 216.93.163.241 ID: i1R56Q3K01780102/27/2004 00:05:42 Qd02101bb0336c477
SORBS-DUHL:9 SPAMCOP:9 NOABUSE:4 NOPOSTMASTER:4 . Total weight = 26
02/27/2004 00:19:28 Qd35c00e5031e631e From: [EMAIL PROTECTED] To: [EMAIL PROTECTED]
IP: 66.28.35.134 ID: CBE1465502/27/2004 00:19:34 Qd34201e90336fdcd nNOLEGITCONTENT:-3
. Total weight = -3
02/27/2004 00:22:06 Qd3f901ee0336c7ca From: [EMAIL PROTECTED] To: [EMAIL PROTECTED]
IP: 192.251.219.16 ID: i1R5P7jt02560702/27/2004 00:22:06 Qd3fd01ef0336d73b SBL:7 .
Total weight = 7
02/27/2004 00:30:23 Qd5e800e7031056ba From: [EMAIL PROTECTED] To: [EMAIL PROTECTED]
IP: 65.110.13.67 ID: EB4FB26CA7702/27/2004 00:30:34 Qd5f600da03388bd3 CBL:9 DSBL:9
SORBS-DUHL:9 SPAMCOP:9 . Total weight = 36
02/27/2004 00:31:45 Qd63b023600c6991d From: [EMAIL PROTECTED] To: [EMAIL PROTECTED]
IP: 207.14.178.212 ID: 8870B46CD2802/27/2004 00:31:48 Qd642023700c6b5ad AHBL:6 SBL:7
SORBS-SPAM:9 SPAMCOP:9 nIPNOTINMX:-3 . Total weight = 28
