Searching the log Files

SurgeMail generates two log files of general interest:

• msg.log (surgemail\msg*.rec) = permanent record of mail received, bounced, delivered, etc
• mail.log (surgemail\mail*.log) = temporary record of almost everything that happens inside surgemail. These are rotated on restart or when they get too big (typically several hours)

Log file searching

With this form you can display the last part of the log files. The search option will let you pick out significant lines from a large log file. 

Example of msg.log:

19 14:26:27 [1] Received 127.0.0.1 <indiatimes@me.com> <test3@lap> 593 <1@test> "In Queue"
19 14:26:27 [1] Stored 127.0.0.1 <indiatimes@me.com> <test3@lap> 593 <1@test> "Stored locally"
19 14:26:27 [2] Received 127.0.0.1 <test1@orion> <test3@lap> 588 <1@test> "In Queue"
19 14:26:27 [2] Stored 127.0.0.1 <test1@orion> <test3@lap> 588 <1@test> "Stored locally"

In msg.log notice that an item is given a que number [1] in brackets which you can use to match up an item coming in and being delivered.

Format of msg.log

The msg.log files can be used to determine whether a particular message has been received, and if it has been received what has happened to it. A new file is created on a daily basis named "msg<year><month><day>.rec". This log is a permanent record and is not rotated.

There are the following types of entries:

• Received - Message has been received via SMTP and queued for local or remote delivery
• Stored - Message has been delivered to local account
• Sent - Message has been delivered to remote account
• Later - Message delivery failed, will try again later
• pop - Message has been retrieved using POP3
• del - Message has been deleted using POP3 also
• Rejected - Message has been received via SMTP and rejected (with reason)
• Tarpitted - Message has been tarpitted and rejected

Log entry format:

Entries for Received, Stored, Sent, Later have the same syntax:

"date & time" "queue id" Received "from ip" "from address" "dest address" "size" "id" "status"

"date & time" "queue id" tarpited "from ip" "from address" "dest address" 0 "status message"
"date & time" 0 pop "client ip" "from address" "pop login" "size" "xmailer id" "filename"
"date & time" 0 del "." "." "login" 0 "." "filename"

Tracking a message

To track a particular message:

1. Ensure msg.log is selected
2. Select the number of days (files) to search
3. Add sender or recipient in text to find
4. Check the message has been received and then what action has been taken

eg Delivered and redirected to two local addresses

26 12:20:35 [1] Received 203.167.148.167 <fred@xxx> <user1@yyy> 366 <102@marijn> "In Queue"
26 12:20:35 [1] Stored 203.167.148.167 <fred@xxx> <redirect2@yyy> 366 <102@marijn> "Stored locally"
26 12:20:35 [1] Stored 203.167.148.167 <fred@xxx> <redirect1@yyy> 366 <102@marijn> "Stored locally"

eg. Delivered and retrived via pop

26 12:46:38 [2] Received 203.167.148.167 <fred@xxx> <user1@yyy> 366 <103@marijn> "In Queue"
26 12:46:38 [2] Stored 203.167.148.167 <fred@xxx> <user1@yyy> 366 <103@marijn> "Stored locally"
26 12:47:29 [0] pop 127.0.0.1 "Fred" <fred@xxx> user1 394 <103@marijn> "103.marijn"

Format of mail.log

The mail.log - mail6.log contain information logged from within SurgeMail to record what is happening. There are three levels that are recorded error / information / debug. The information logging level can be set using the g_log_level setting.

This is the logfile NetWin support staff will probably request if you have any problems that need investigation.

 

Additional log files

• surgemail\startstop.log = Record of SurgeMail startup and shutdown
• webmail*.log (surgemail\scripts\webmail*.log) = Similar to mail*.log but for WebMail and must be explicitly enabled in wemail.ini
• surgemail\install.log = Logfile of what is done during installation
• surgemail\mon.log = Logfile of surgemail monitor (swatch.exe) activity
• surgemail\wweb.log = SurgeMail web serving activity
• surgemail\trace.log, mutex.log = Debug logs useful if surgemail dies
  unexpectedly