Display the most frequently occurring envelope From:, Subject:, or message content fields found in message files in the channel queues.

Syntax

TOP [channel]

Command Qualifiers	Defaults
/CONTENT[=offset-specifier]	None
/DATABASE	See text
/DIRECTORY_TREE	See text
/ENV_FROM[=offset-specifier]	None
/MIN_COUNT=n	/MIN_COUNT=2
/SUBJECT[=offset-specifier]	/SUBJECT=(START=1,LENGTH=2147483647)
/THREADS=n	/NOTHREADS
/TOP=n	/TOP=20
/VERBOSE	/NOVERBOSE

Parameters

channel

Optional parameter which specifies a specific PMDF channel area to be scanned for string frequencies. * or ? wildcard characters may be used in the channel specification.

Description

Display the most frequently occurring envelope From:, Subject:, or message content fields found in message files in the channel queues. By default, only Subject: fields are shown (/SUBJECT). Use /ENV_FROM to display frequent envelope From: fields or /CONTENT to display frequent message contents. Any combination of /CONTENT, /ENV_FROM, and /SUBJECT may be specified. However, only one of each may be used.

The optional channel parameter restricts the scan to message files in the specified channel. The channel parameter may use * and ? wild cards.

By default, the top 20 most frequently occurring fields are shown (/TOP=20) provided that they occur 2 or more times (/MIN_COUNT=2). Use the /TOP and /MIN_COUNT qualifiers to alter this behavior. The message files searched may be either all those present in the channel queue directory tree, or only those files with entries in the queue cache database. Use either the VIEW command of the /DIRECTORY_TREE or /DATABASE qualifier to control which files are searched.

The /THREADS qualifier may be used to accelerate scanning on multiprocessor systems by dividing the work amongst multiple, simultaneously running threads. To run n simultaneous scanning threads, specify /THREADS=n. The value n must be in the range 1-8. The default is /NOTHREADS.

The /CONTENT, /ENV_FROM, and /SUBJECT qualifiers accept the optional qualifiers START=n and LENGTH=n. These qualifiers indicate the starting offset and number of bytes in the field to consider. The defaults are /CONTENT=(START=1,LENGTH=256), /ENV_FROM=(START=1,LENGTH=2147483647), and /SUBJECT=(START=1,LENGTH=2147483647). Use of these qualifiers is useful when, for example, trying to identify occurrences of a spam message which uses random text at the start of the Subject: line.

Command Qualifiers

/CONTENT[=offset-specifier]

/ENV_FROM[=offset-specifier]

/SUBJECT[=offset-specifier]

The /CONTENT, /ENV_FROM, and /SUBJECT qualifiers are used to specify which frequently occurring fields should be displayed. By default, only Subject: fields are shown (/SUBJECT). Use /ENV_FROM to display frequent envelope From: fields or /CONTENT to display frequent message contents. Any combination of /CONTENT, /ENV_FROM, and /SUBJECT may be specified. However, only one of each may be used. The /CONTENT, /ENV_FROM, and /SUBJECT qualifiers accept the optional qualifiers START=n and LENGTH=n. These qualifiers indicate the starting offset and number of bytes in the field to consider. The defaults are /CONTENT=(START=1,LENGTH=256), /ENV_FROM=(START=1,LENGTH=2147483647), and /SUBJECT=(START=1,LENGTH=2147483647). Use of these qualifiers is useful when, for example, trying to identify occurrences of a spam message which uses random text at the start of the Subject: line.

/DATABASE

/DIRECTORY_TREE

Controls whether the message files scanned are only those with entries in the queue cache database, /DATABASE, or all message files actually present in the channel queue directory tree, /DIRECTORY_TREE. When neither /DATABASE nor /DIRECTORY_TREE is specified, then the view selected with the VIEW command will be used. If no VIEW command has been issued, then /DIRECTORY_TREE is assumed.

/MIN_COUNT=n

By default, a string must occur at least 2 times, /MIN_COUNT=2, in order to be displayed.

/THREADS=n

/NOTHREADS (default)

The /THREADS qualifier may be used to accelerate searching on multiprocessor systems by dividing the work amongst multiple, simultaneously running threads. To run n simultaneous searching threads, specify /THREADS=n. The value n must be an integer in the range 1-8. The default is /NOTHREADS.

/TOP=n

By default, the top 20 most frequently occurring fields are shown, (/TOP=20).

/VERBOSE

/NOVERBOSE (default)

The /VERBOSE qualifier may be used to request that the utility print out information about what it is doing as it operates.

EXAMPLES

The following example shows displaying the most frequently occurring Subject: and envelope From: addresses amongst messages in the PMDF queue area.

qm.maint> TOP/SUBJECT/ENV_FROM %QM-I-QCLISTING, building a list of message files to scan from the queue cache %QM-I-SCANNING, scanning 73 message files %QM-I-SCANNED, scanned 73 message files in 0.5600 seconds (130.36 messages/secon d) Top 20 Envelope From: addresses which occur 2 or more times Count Envelope From: address ====== ====================================================================== 27 10 owner-ex-list@example.com 2 owner-test-list@example.com Top 20 Subject: header lines which occur 2 or more times Count Subject ====== ====================================================================== 6 Re: your ex-list posting 2 Test posting to test-list

The following example shows displaying the most frequently occuring Subject: lines that occur 20 times or more, starting from 12 characters into the Subject: header value. This may be useful when trying to spot spam that inserts random characters at the beginning of the Subject: header value.

qm.maint> TOP/SUBJECT=START=12/MIN_COUNT=15 %QM-I-QCLISTING, building a list of message files to scan from the queue cache %QM-I-SCANNING, scanning 73 message files %QM-I-SCANNED, scanned 73 message files in 0.5600 seconds (130.36 messages/secon d) Top 20 Subject: header lines which occur 15 or more times Count Subject ====== ====================================================================== 25 ake money fast $$$