On Monday 18 December 2006 9:42 am, Oliver Schulze L. wrote: > Nice stats! > How do you generate them in SA 3.1.7 ? > > Chris Lear wrote: > > Here's some sa-stats output: > > > > TOP SPAM RULES FIRED
If you want a bit more detailed output on add-on rule sets, try Bowie Bailey's "sa-addon-stats" script. This will give you stats on all add-on rulesets: Botnet.cf: Rule Name Score Ham Spam %of Ham %of Spam ----------------------------------------------------------------------- BOTNET 5.00 10 1001 2.75% 75.43% BOTNET_NORDNS 0.01 3 436 0.82% 32.86% BOTNET_BADDNS 0.00 4 142 1.10% 10.70% BOTNET_CLIENT 0.01 4 522 1.10% 39.34% BOTNET_IPINHOSTNAME 0.01 4 494 1.10% 37.23% BOTNET_CLIENTWORDS 0.01 5 150 1.37% 11.30% BOTNET_SERVERWORDS -0.01 171 135 46.98% 10.17% ----------------------------------------------------------------------- OVERALL 181 1125 49.73% 84.78% Addon Rules hitting the most spam (top 20) Ruleset Rule Name % of Spam ----------------------------------------------------------- sagrey.cf SAGREY 82.74% Botnet.cf BOTNET 75.43% local.cf BAYES_99 73.25% Botnet.cf BOTNET_CLIENT 39.34% Botnet.cf BOTNET_IPINHOSTNAME 37.23% local.cf RM_t_bobbf 36.62% Botnet.cf BOTNET_NORDNS 32.86% 20_vbounce.cf ANY_BOUNCE_MESSAGE 19.67% 20_vbounce.cf BOUNCE_MESSAGE 19.59% and so forth. -- Chris http://learn.to/quote
pgpexeeQ1TzjR.pgp
Description: PGP signature
