Display the most frequently occurring envelope From:, Subject:, or message content fields found in message files in the channel queues.

Syntax

PMDF QTOP [channel]

Command Qualifiers	Defaults
/CONTENT[=offset-specifier]	None
/DATABASE	/DATABASE
/DIRECTORY_TREE	/DATABASE
/ENV_FROM[=offset-specifier]	None
/MIN_COUNT=n	/MIN_COUNT=2
/SUBJECT[=offset-specifier]	/SUBJECT=(START=1,LENGTH=2147483647)
/THREADS=n	/NOTHREADS
/TOP=n	/TOP=20
/VERBOSE	/NOVERBOSE

restrictions

Privileges sufficient to read files in the PMDF channel queue directory tree, as well as read the PMDF queue cache database, are required.

Parameters

channel

Optional parameter which specifies a specific PMDF channel area to be scanned for string frequencies. * or ? wildcard characters may be used in the channel specification.

Description

Display the most frequently occurring envelope From:, Subject:, or message content fields found in message files in the channel queues. By default, only Subject: fields are shown (/SUBJECT). Use /ENV_FROM to display frequent envelope From: fields or /CONTENT to display frequent message contents. Any combination of /CONTENT, /ENV_FROM, and /SUBJECT may be specified. However, only one of each may be used.

The optional channel parameter restricts the scan to message files in the specified channel. The channel parameter may use * and ? wild cards.

By default, the top 20 most frequently occurring fields are shown (/TOP=20) provided that they occur 2 or more times (/MIN_COUNT=2). Use the /TOP and /MIN_COUNT qualifiers to alter this behavior. Also by default, only message files identified by the queue cache database are scanned (/DATABASE). Use the /DIRECTORY_TREE qualifier to instead scan all message files actually present in the channel queue directory tree.

The /THREADS qualifier may be used to accelerate scanning on multiprocessor systems by dividing the work amongst multiple, simultaneously running threads. To run n simultaneous scanning threads, specify /THREADS=n. The value n must be in the range 1-8. The default is /NOTHREADS.

The /CONTENT, /ENV_FROM, and /SUBJECT qualifiers accept the optional qualifiers START=n and LENGTH=n. These qualifiers indicate the starting offset and number of bytes in the field to consider. The defaults are /CONTENT=(START=1,LENGTH=256), /ENV_FROM=(START=1,LENGTH=2147483647), and /SUBJECT=(START=1,LENGTH=2147483647). Use of these qualifiers is useful when, for example, trying to identify occurrences of a spam message which uses random text at the start of the Subject: line.

Command Qualifiers

/CONTENT[=offset-specifier]

/ENV_FROM[=offset-specifier]

/SUBJECT[=offset-specifier]

The /CONTENT, /ENV_FROM, and /SUBJECT qualifiers are used to specify which frequently occurring fields should be displayed. By default, only Subject: fields are shown (/SUBJECT). Use /ENV_FROM to display frequent envelope From: fields or /CONTENT to display frequent message contents. Any combination of /CONTENT, /ENV_FROM, and /SUBJECT may be specified. However, only one of each may be used. The /CONTENT, /ENV_FROM, and /SUBJECT qualifiers accept the optional qualifiers START=n and LENGTH=n. These qualifiers indicate the starting offset and number of bytes in the field to consider. The defaults are /CONTENT=(START=1,LENGTH=256), /ENV_FROM=(START=1,LENGTH=2147483647), and /SUBJECT=(START=1,LENGTH=2147483647). Use of these qualifiers is useful when, for example, trying to identify occurrences of a spam message which uses random text at the start of the Subject: line.

/DATABASE (default)

/DIRECTORY_TREE

The /DATABASE qualifier, the default, specifies that only message files identified by the queue cache database be searched. Use the /DIRECTORY_TREE qualifier to instead search all message files actually present in the channel queue directory tree.

/MIN_COUNT=n

By default, a string must occur at least 2 times, /MIN_COUNT=2, in order to be displayed.

/THREADS=n

/NOTHREADS (default)

The /THREADS qualifier may be used to accelerate searching on multiprocessor systems by dividing the work amongst multiple, simultaneously running threads. To run n simultaneous searching threads, specify /THREADS=n. The value n must be an integer in the range 1-8. The default is /NOTHREADS.

/TOP=n

By default, the top 20 most frequently occurring fields are shown, (/TOP=20).

/VERBOSE

/NOVERBOSE (default)

The /VERBOSE qualifier may be used to request that the utility print out information about what it is doing as it operates.

EXAMPLES

The following example shows displaying the most frequently occurring Subject: and envelope From: addresses amongst messages in the PMDF queue area.

$ PMDF QTOP/SUBJECT/ENV_FROM %QM-I-QCLISTING, building a list of message files to scan from the queue cache %QM-I-SCANNING, scanning 73 message files %QM-I-SCANNED, scanned 73 message files in 0.5600 seconds (130.36 messages/secon d) Top 20 Envelope From: addresses which occur 2 or more times Count Envelope From: address ====== ====================================================================== 27 10 owner-ex-list@example.com 2 owner-test-list@example.com Top 20 Subject: header lines which occur 2 or more times Count Subject ====== ====================================================================== 6 Re: your ex-list posting 2 Test posting to test-list

The following example shows displaying the most frequently occuring Subject: lines that occur 20 times or more, starting from 12 characters into the Subject: header value. This may be useful when trying to spot spam that inserts random characters at the beginning of the Subject: header value.

$ PMDF QTOP/SUBJECT=START=12/MIN_COUNT=15 %QM-I-QCLISTING, building a list of message files to scan from the queue cache %QM-I-SCANNING, scanning 73 message files %QM-I-SCANNED, scanned 73 message files in 0.5600 seconds (130.36 messages/secon d) Top 20 Subject: header lines which occur 15 or more times Count Subject ====== ====================================================================== 25 ake money fast $$$