Cisco Cisco Email Security Appliance X1070 Guía Del Usuario
38-10
AsyncOS 9.1.2 for Cisco Email Security Appliances User Guide
Chapter 38 Logging
Log Types
Use
as a guide to reading the preceding log file.
Examples of Text Mail Log Entries
Following are some sample log entries based on various situations.
Message Injection and Delivery
A message is injected into the Email Security appliance for a single recipient. The message is
successfully delivered.
successfully delivered.
5
Mon Apr 17 19:59:52 2003 Info: MID 6 ready 100 bytes from <sender@remotehost.com>
6
Mon Apr 17 19:59:59 2003 Info: ICID 5 close
7
Mon Mar 31 20:10:58 2003 Info: New SMTP DCID 8 interface 192.168.42.42 address
10.5.3.25
8
Mon Mar 31 20:10:58 2003 Info: Delivery start DCID 8 MID 6 to RID [0]
9
Mon Mar 31 20:10:58 2003 Info: Message done DCID 8 MID 6 to RID [0]
10
Mon Mar 31 20:11:03 2003 Info: DCID 8 close
Table 38-5
Text Mail Log Detail (continued)
Table 38-6
Detail of Text Mail Log Example
Line Number
Description
1.
A new connection is initiated into the system and assigned an Injection ID (ICID)
of “5.” The connection was received on the Management IP interface and was
initiated from the remote host at 10.1.1.209.
of “5.” The connection was received on the Management IP interface and was
initiated from the remote host at 10.1.1.209.
2.
The message was assigned a Message ID (MID) of “6” after the
MAIL FROM
command is issued from the client.
3.
The sender address is identified and accepted.
4.
The recipient is identified and assigned a Recipient ID (RID) of “0.”
5.
MID 5 is accepted, written to disk, and acknowledged.
6.
Receiving is successful and the receiving connection closes.
7.
Next the message delivery process starts. It is assigned a Delivery Connection ID
(DCID) of “8” from 192.168.42.42 and to 10.5.3.25.
(DCID) of “8” from 192.168.42.42 and to 10.5.3.25.
8.
The message delivery starts to RID “0.”
9.
Delivery is successful for MID 6 to RID “0.”
10.
The delivery connection closes.
Wed Jun 16 21:42:34 2004 Info: New SMTP ICID 282204970 interface mail.example.com
(1.2.3.4) address 2.3.4.5 reverse dns host unknown verified no
Wed Jun 16 21:42:34 2004 Info: ICID 282204970 SBRS None
Wed Jun 16 21:42:35 2004 Info: Start MID 200257070 ICID 282204970
Wed Jun 16 21:42:35 2004 Info: MID 200257070 ICID 282204970 From: <someone@foo.com>