IronPort - daily management guide - AsyncOS 7.6.1

Chapter 5 Logging
Using IronPort Delivery Logs
OL-25138-01
Wed Feb 14 12:11:44 2007 Info: RPC Delivery start RCID 756814 MID 2317877 to local
IronPort Spam Quarantine
Wed Feb 14 12:11:45 2007 Info: EUQ: Quarantined MID 2317877
Wed Feb 14 12:11:45 2007 Info: RPC Message done RCID 756814 MID 2317877
Wed Feb 14 12:11:45 2007 Info: Message finished MID 2317877 done
Cisco IronPort AsyncOS 7.6 for Email Daily Management Guide
Log Types
Delivery logs record critical information about the email delivery operations of AsyncOS. The log
messages are “stateless,” meaning that all associated information is recorded in each log message and
users need not reference previous log messages for information about the current delivery attempt.
The delivery log records all information pertaining to email delivery operations for each recipient. All
information is laid out in a logical manner and is human-readable after conversion using a utility
provided by Cisco. The conversion tools are located at:
http://support.ironport.com
Delivery logs are recorded and transferred in a binary format for resource efficiency. Information
recorded in delivery logs is shown in the following table:
Table 5-8 Delivery Log Statistics
Statistic Description
Delivery status Success (message was successfully delivered) or bounce (message was hard bounced)
Del_time Delivery time
Inj_time Injection time. del_time - inj_time = time the recipient message stayed in the queue
Bytes Message size
Mid Message ID
Ip Recipient host IP. The IP address of the host that received or bounced the recipient
message
From Envelope From, also known as Envelope Sender or MAIL FROM
Source_ip Source host IP. The IP address of the host of the incoming message
Code SMTP response code from recipient host
Reply SMTP response message from recipient host
Rcpt Rid Recipient ID. Recipient ID starts with , messages with multiple recipients will have
multiple recipient IDs
To Envelope To
Attempts Number of delivery attempts
5-15