Руководство Пользователя для Cisco Cisco Email Security Appliance C170
34-9
Cisco AsyncOS 8.0.2 for Email User Guide
Chapter 34 Logging
Log Types
•
•
Timestamps in Log Files
The following log files include the begin and end date of the log itself, the version of AsyncOS, and the
GMT offset (provided in seconds, and only at the beginning of the log):
GMT offset (provided in seconds, and only at the beginning of the log):
•
Anti-Virus log
•
LDAP log
•
System log
•
Mail log
Using IronPort Text Mail Logs
They contain details of email receiving, email delivery and bounces. Status information is also written
to the mail log every minute. These logs are a useful source of information to understand delivery of
specific messages and to analyze system performance.
to the mail log every minute. These logs are a useful source of information to understand delivery of
specific messages and to analyze system performance.
These logs do not require any special configuration. However, you must configure the system properly
to view attachment names, and attachment names may not always be logged. For information, see
to view attachment names, and attachment names may not always be logged. For information, see
and
.
Information displayed in text mail logs is shown in
Interpreting an IronPort Text Mail Log
Use the following sample as a guide to interpret log files.
Table 34-5
Text Mail Log Statistics
Statistic
Description
ICID
Injection Connection ID. This is a numerical identifier for an individual SMTP
connection to the system, over which 1 to thousands of individual messages may
be sent.
connection to the system, over which 1 to thousands of individual messages may
be sent.
DCID
Delivery Connection ID. This is a numerical identifier for an individual SMTP
connection to another server, for delivery of 1 to thousands of messages, each
with some or all of their RIDs being delivered in a single message transmission.
connection to another server, for delivery of 1 to thousands of messages, each
with some or all of their RIDs being delivered in a single message transmission.
RCID
RPC Connection ID. This is a numerical identifier for an individual RPC
connection to the Cisco Spam quarantine. It is used to track messages as they are
sent to and from the Cisco Spam Quarantine.
connection to the Cisco Spam quarantine. It is used to track messages as they are
sent to and from the Cisco Spam Quarantine.
MID
Message ID: Use this to track messages as they flow through the logs.
RID
Recipient ID: Each message recipient is assigned an ID.
New
New connection initiated.
Start
New message started.