Display the most frequently occurring envelope From:, Subject:,
or message content fields found in message files in the channel
queues.
Syntax
PMDF QTOP [channel]
Command Qualifiers Defaults
/CONTENT[=offset-specifier] None
/DATABASE /DATABASE
/DIRECTORY_TREE /DATABASE
/ENV_FROM[=offset-specifier] None
/MIN_COUNT=n /MIN_COUNT=2
/SUBJECT[=offset-specifier] /SUBJECT=(START=1,LENGTH=2147483647)
/THREADS=n /NOTHREADS
/TOP=n /TOP=20
/VERBOSE /NOVERBOSE
1 – Restrictions
Privileges sufficient to read files in the PMDF channel queue
directory tree, as well as read the PMDF queue cache database,
are required.
2 – Parameters
channel
Optional parameter which specifies a specific PMDF channel area
to be scanned for string frequencies. * or ? wildcard characters
may be used in the channel specification.
3 – Description
Display the most frequently occurring envelope From:, Subject:,
or message content fields found in message files in the channel
queues. By default, only Subject: fields are shown (/SUBJECT).
Use /ENV_FROM to display frequent envelope From: fields or
/CONTENT to display frequent message contents. Any combination
of /CONTENT, /ENV_FROM, and /SUBJECT may be specified. However,
only one of each may be used.
The optional channel parameter restricts the scan to message
files in the specified channel. The channel parameter may use *
and ? wild cards.
By default, the top 20 most frequently occurring fields are
shown (/TOP=20) provided that they occur 2 or more times (/MIN_
COUNT=2). Use the /TOP and /MIN_COUNT qualifiers to alter this
behavior. Also by default, only message files identified by the
queue cache database are scanned (/DATABASE). Use the /DIRECTORY_
TREE qualifier to instead scan all message files actually present
in the channel queue directory tree.
The /THREADS qualifier may be used to accelerate scanning on
multiprocessor systems by dividing the work amongst multiple,
simultaneously running threads. To run n simultaneous scanning
threads, specify /THREADS=n. The value N must be in the range
1-8. The default is /NOTHREADS.
The /CONTENT, /ENV_FROM, and /SUBJECT qualifiers accept the
optional qualifiers START=n and LENGTH=n. These qualifiers
indicate the starting offset and number of bytes in the field
to consider. The defaults are /CONTENT=(START=1,LENGTH=256),
/ENV_FROM=(START=1,LENGTH=2147483647), and
/SUBJECT=(START=1,LENGTH=2147483647). Use of these qualifiers
is useful when, for example, trying to identify occurrences of a
spam message which uses random text at the start of the Subject:
line.
4 – Command Qualifiers
4.1 /CONTENT
/CONTENT[=offset-specifier]
/ENV_FROM[=offset-specifier]
/SUBJECT[=offset-specifier]
The /CONTENT, /ENV_FROM, and /SUBJECT qualifiers are used to
specify which frequently occurring fields should be displayed. By
default, only Subject: fields are shown (/SUBJECT). Use /ENV_FROM
to display frequent envelope From: fields or /CONTENT to display
frequent message contents. Any combination of /CONTENT, /ENV_
FROM, and /SUBJECT may be specified. However, only one of each
may be used.
The /CONTENT, /ENV_FROM, and /SUBJECT qualifiers accept the
optional qualifiers START=n and LENGTH=n. These qualifiers
indicate the starting offset and number of bytes in the field
to consider. The defaults are /CONTENT=(START=1,LENGTH=256),
/ENV_FROM=(START=1,LENGTH=2147483647), and
/SUBJECT=(START=1,LENGTH=2147483647). Use of these qualifiers
is useful when, for example, trying to identify occurrences of a
spam message which uses random text at the start of the Subject:
line.
4.2 /DATABASE
/DATABASE (default)
/DIRECTORY_TREE
The /DATABASE qualifier, the default, specifies that only message
files identified by the queue cache database be searched. Use
the /DIRECTORY_TREE qualifier to instead search all message files
actually present in the channel queue directory tree.
4.3 /MIN_COUNT
/MIN_COUNT=n
By default, a string must occur at least 2 times, /MIN_COUNT=2,
in order to be displayed.
4.4 /THREADS
/THREADS=n
/NOTHREADS (default)
The /THREADS qualifier may be used to accelerate searching on
multiprocessor systems by dividing the work amongst multiple,
simultaneously running threads. To run n simultaneous searching
threads, specify /THREADS=n. The value n must be an integer in
the range 1-8. The default is /NOTHREADS.
4.5 /TOP
/TOP=n
By default, the top 20 most frequently occurring fields are
shown, (/TOP=20).
4.6 /VERBOSE
/VERBOSE
/NOVERBOSE (default)
The /VERBOSE qualifier may be used to request that the utility
print out information about what it is doing as it operates.
5 – Examples
The following example shows displaying the most frequently
occurring Subject: and envelope From: addresses amongst
messages in the PMDF queue area.
$ PMDF QTOP/SUBJECT/ENV_FROM
%QM-I-QCLISTING, building a list of message files to scan from the queue cache
%QM-I-SCANNING, scanning 73 message files
%QM-I-SCANNED, scanned 73 message files in 0.5600 seconds (130.36 messages/secon
d)
Top 20 Envelope From: addresses which occur 2 or more times
Count Envelope From: address
27
10 owner-ex-list@example.com
2 owner-test-list@example.com
Top 20 Subject: header lines which occur 2 or more times
Count Subject
6 Re: your ex-list posting
2 Test posting to test-list
The following example shows displaying the most frequently
occuring Subject: lines that occur 20 times or more, starting
from 12 characters into the Subject: header value. This may be
useful when trying to spot spam that inserts random characters
at the beginning of the SUBJECT: header value.
$ PMDF QTOP/SUBJECT=START=12/MIN_COUNT=15
%QM-I-QCLISTING, building a list of message files to scan from the queue cache
%QM-I-SCANNING, scanning 73 message files
%QM-I-SCANNED, scanned 73 message files in 0.5600 seconds (130.36 messages/secon
d)
Top 20 Subject: header lines which occur 15 or more times
Count Subject
25 ake money fast $$$