DLAnalyzer   Home   Software Features   Documentation   Support / FAQ   Report Samples   Product notifications   Download   Purchase   My Account Update Notifications Would you like to be notified when this product is updated? If so click here to subscribe to our mailing list.	Technical Support We provide technical support through online knowledge bases, customer support forums, and We also welcome any suggestions or comments on how we can improve our products.   FAQ General 1.) What are the resource requirements of DLAnalyzer? 2.) Does DLAnalyzer support the new log format with Declude Security Suite v4? 3.) Does DLAnalyzer need to run on the server that Declude Junkmail is running on? 4.) How much does DLAnalyzer cost? 5.) How does the DLAnalyzer service agreements work? 5.) What if I don't renew my service agreement? 6.) What are the differences between the standard and enterprise edition? 7.) What logging level does Declude need to be set to? 8.) What operating systems does DLAnalyzer run on? 9.) I get an error when running DLAnalyzer from a Network/Mapped Drive? 10.) How can I run DLAnalyzer From a Mapped Drive? 11.) I need to use multiple configuration files for different customers. How can I do that?   Server Test Summary Report 1.) What logging level is required for the server test summary report? 2.) Can you show me an example of the server test summary report?   Last Action Report 1.) What logging level is required for the Last Action report? 2.) Can you show me an example of the Last Action report?   Recipient Spam Report 1.) What logging level is required for the Recipient Spam Report? 2.) Can you show me an example of the Recipient Spam Report?   Test Quality Report 1.) What logging level is required for the Test Quality Report? 2.) Can you show me an example of the Test Quality Report? 3.) What is the purpose of the Test Quality Report?   Test Summary Breakdown Report 1.) What logging level is required for the Test Summary Breakdown report? 2.) Can you show me an example of the Test Summary Breakdown report? 3.) What is the purpose of the Test Summary Breakdown report?   Weight Range Report 1.) What logging level is required for the weight range summary report? 2.) Can you show me an example of the server weight range report?   IP Summary Report 1.) What logging level is required for the IP summary report? 2.) Can you show me an example of the IP summary report? 3.) Why do you caution about resolving the ip addresses to hostname's? 4.) What type of logic does the test and last action filter use (AND or OR)?   Domain Test Summary Report 1.) What logging level is required for the Domain Test Summary report? 2.) Can you show me an example of a Domain Test Summary report? 3.) Can you explain the global domain options? 4.) What logging level is required for the Domain Recipient Summary report? 5.) Can you show me an example of a Domain Recipient Summary report? 6.) What logging level is required for the Domain Executive report? 7.) Can you show me an example of the Domain Executive report?   Advanced Report 1.) What logging level is required for Advanced Summary report? 2.) Can you show me an example of a Advanced Summary report? 3.) Can the format of the advanced report be modified?   Virus Summary Report 1.) What logging level is required for the Virus summary report? 2.) Can you show me an example of a Virus Summary report?   Virus Scanner Report 1.) What logging level is required for the Virus Scanner report? 2.) Can you show me an example of a Virus Scanner report?   File Extension Report 1.) What logging level is required for the File Extension Report? 2.) Can you show me an example of a File Extension Report?   File Extension Virus Report 1.) What logging level is required for the File Extension Virus Report? 2.) Can you show me an example of a File Extension Virus Report?   IP Virus Summary Report 1.) What logging level is required for the IP Virus Summary Report? 2.) Can you show me an example of a IP Virus Summary Report?   Recipient Virus Report 1.) What logging level is required for the Recipient Virus Report? 2.) Can you show me an example of a Recipient Virus Report?   Sender Virus Report 1.) What logging level is required for the Sender Virus Report? 2.) Can you show me an example of a Sender Virus Report?   Banned File Extension Report 1.) What logging level is required for the Banned File Extension Report? 2.) Can you show me an example of a Banned File Extension Report?   Domain Virus Report 1.) What logging level is required for the Domain Virus Report? 2.) Can you show me an example of a Domain Virus Report?   Domain Recipient Virus Report 1.) What logging level is required for the Domain Recipient Virus Report? 2.) Can you show me an example of a Domain Recipient Virus Report?   Domain IP Virus Report 1.) What logging level is required for the Domain IP Virus Report? 2.) Can you show me an example of a Domain IP Virus Report?   Advanced Virus Report 1.) What logging level is required for the Advanced Virus Report? 2.) Can you show me an example of a Advanced Virus Report?   Database Options 1.) Is using an external database required? 2.) How do I extract the data out of the database? 3.) What is the purpose of the database? 4.) What type of permissions are needed on the database?   General Q.) What are the resource requirements of DLAnalyzer? A.) DLAnalyzer operates as a self contained database. All messages stats are compiled in memory. Depending on the amount of messages processed and the type of filtering you specify will determine the amount of RAM this application will use. To produce a test summary based on 500,000 messages it took roughly 7 minutes to process and the application consumed approximately 45 Megs of RAM. Advanced reports will consume significantly more RAM depending on the complexity of the report. The Conserve Memory option can decrease the amount of RAM required by swapping to disk. The Conserve Memory option is most effective when you are filtering on specific fields.   Q.) Does DLAnalyzer support the new log format in Declude Security Suite 4.4.x? A.) Yes. DLAnalyzer fully supports the new log format. Please see the FAQ entry about the various log levels that DLAnalyzer requires for proper reporting.   Q.) Does DLAnalyzer need to run on the server that Declude Junkmail is running on? A.) No. DLAnalyzer can run on any machine as long as it has access to the Declude Junkmail log files.   Q.) How much does DLAnalyzer cost? A.) It depends on the version that fits your needs. The standard edition which provides basic test summary reports is $30.00. While the Enterprise Edition which has an advanced reporting engine can provide comprehensive reports based on email address, spam test, and domains. Reports can be generated on any combination of those fields. The reports that are generated with the enterprise edition are often sent to customers as verification of what was blocked to their account or domain. The Enterprise edition costs $99.00. For a comparison of features for both versions click here.   Q.) How do the DLAnalyzer service agreements work? A.) In order to continue receiving product updates, enhancements, and support on the DLAnalyzer products after the first year of purchase a valid service agreement is required. Service agreements must be purchased or renewed within thirty days after your initial support or previous service agreement expires. If you are unable to renew your service agreement within the first thirty days after your initial support or service agreement ends please contact us to make alternate arrangements.   Q.) What if I don't renew or purchase a service agreement? A.) You are able to continue running the last version of DLAnalyzer that was released during your first 12 months after your initial purchase or service agreement expiration. However, without a valid service agreement you will not be able to receive product updates, enhancements, and support on DLAnalyzer.   Q.) What are the differences between the standard and enterprise edition? A.) The Standard Edition Is Limited reporting tool. It can provide basic test summary reports. The Enterprise Edition is a comprehensive reporting engine that can provide advanced reports based on email address, domain, and spam test failed. Reports can be generated using any combination of those fields together. Please Click Here For A Complete Listing Of Which Features Are Available In Each Version.   Q.) What logging level does Declude need to be set to? A.) It is recommended that your logging level for Declude be set to HIGH to provide the most detail. Each test has a different logging requirement. The FAQ for each specific test outlines the logging level needed. NOTE:If you do run DLAnalyzer under log levels lower than HIGH you must make sure that you do not have the following line "LOG_OK NONE" in your global.cfg.   Q.) What operating systems does DLAnalyzer run on? A.) DLAnalyzer runs on Windows 2000, Windows XP Professional, and Windows 2000/2003 server.   Q.) How can I run DLAnalyzer from a network or mapped drive? A.) Follow The Below Instructions. 1. Open the "Microsoft .NET Framework 1.1 Configuration" utility 2. Expand "Runtime Security Policy->Machine->Code Groups" 3. Right click "All Code", and then select the "New..." item 4. Type a name in the "Name" text box, and then click the "Next" button 5. Set the condition type to "URL" and type the following string to the "URL:" text box: file://Z:/* NOTE: Z: represents your mapped driver letter 6. Click the "Next" button and assign the "FullTrust" permission set to this Code Group. Note: you can type "file://machinename/sharedfolder/*", if you want to grant a give permission set to a shared folder directly.   Q.) I need to use multiple configuration files for different customers. How can I do that? A.) With version 3.0 we have added a "-c" command line parameter to specify different configuration files. Example: DLAnalyzer.exe -c myconfig.xml   Server Test Summary Report Q.) What logging level is required for the server test summary report? A.) Server test summary reports require log level low or higher. With versions of Declude 1.8.x and higher make sure you are not using the following line in your global.cfg "LOG_OK NONE" as it will cause the "Tests Failed" line to be removed under LOW and MID logging levels when the messages last action is ignore.   Q.) Can you show me an example of the server test summary report? A.) Yes. Click Here for an example of a server test summary report.     IP Summary Report Q.) What logging level is required for the IP summary report? A.) The IP summary reports requires log level MID or higher.   Q.) Can you show me an example of the IP summary report? A.) Yes. Click Here for an example of a IP Summary report.   Q.) Why do you caution about resolving the ip addresses to hostname's? A.) We caution this because Reverse DNS Resolution takes time. Especially if you have a large number of hosts that are going to be output in the IP Summary report. Simply put depending on your report settings reverse dns resolution can increase the amount of time your report takes to generate significantly.   Q.) What type of logic does the test and last action filter use (AND or OR)? A.) Filters in this report uses "OR" logic. For example if a message has failed any of the tests you define for the IP Summary test filter than the message will be included in the report. The logic between the filters uses "AND". For a message to be included in a report it much match all the criteria's of all the filters.   Weight Range Summary Report Q.) What logging level is required for the weight range summary report? A.) Weight Range summary reports require log level MID or higher. Also, make sure that you do not have the following line "LOG_OK NONE" in your global.cfg for Declude.   Q.) Can you show me an example of the Weight Range summary report? A.) Yes. Click Here for an example of a Weight Range Summary report.     Last Action Report Q.) What logging level is required for the Last Action report? A.) Last Action summary reports require a log level that outputs the "LAST ACTION" line. In newer versions of Declude Junkmail it is log level MID. Older versions of Declude it's log level HIGH. Also, make sure that you do not have the following line "LOG_OK NONE" in your Declude global.cfg.   Q.) Can you show me an example of the Last Action report? A.) Yes. Click Here for an example of the Last Action report.   RecipientSpamReport Q.) What logging level is required for the Recipient Spam Report? A.) Recipient Spam Reports require a log level MID or above. However, older versions of Declude will require log level HIGH for this report. Also, make sure that you do not have the following line "LOG_OK NONE" in your Declude global.cfg.   Q.) Can you show me an example of the Recipeint Spam Report? A.) Yes. Click Here for an example of the Recipient Spam Report.   TestQualityReport Q.) What logging level is required for the Test Quality Report? A.) The Test Quality Report requires log level MID or above.   Q.) Can you show me an example of the Test Quality Report? A.) Yes. Click Here for an example of the Test Quality Report.   Q.) What is the purpose of the Test Quality Report? A.) The Test Quality report evaluates the effectiveness of tests that are configured tests on your system. In order for this report to work properly you must configure what constitutes SPAM on your system. This is done by configuring various filters (Tests, Last Actions, or Weights) for the report. The report will determine a score on a scale of -1 to 1. A score closer to 1 indicates that a test is more likely to identify SPAM and a test with a score closer to -1 indicates that the test is more likely to identify HAM. Using the information from this report you can refine your weighting system for maximum effectiveness. This report is only available in the Enterprise version of DLAnalyzer.     DomainSummaryReport Q.) What logging level is required for the Domain Summary report? A.) Domain Summary reports require log level MID.   Q.) Can you show me an example of a Domain Test Summary report? A.) Yes. Click Here for an example of a Domain Test Summary report.   Q.) Can you explain the various global options for the Domain Summary report? A.) The domain global options allow you to define the criteria that will filter the various domain based reports. You are able to set test inclusion and exclusion filters, last action filters, weight range filters, and domain inclusion and exclusion filters. There is also an option to define any ip addresses that are considered local senders. Any ip address that is defined as a local sender will be excluded from any of the reports.   Q.) What logging level is required for the Domain Recipient Summary report? A.) The Domain Recipient report requires log level MID or higher.   Q.) Can you show me an example of a Domain Recipient Summary report? A.) Yes. Click Here for an example of a Domain Recipient Summary report.   Q.) What logging level is required for the Domain Executive report? A.) The Domain Executive report requires log level MID or higher.   Q.) Can you show me an example of a Domain Executive report? A.) Yes. Click Here for an example of a Domain Executive report.     Test Summary Breakdown Report Q.) What logging level is required for the Test Summary Breakdown report? A.) Test Summary Breakdown reports require log level MID. Also, make sure you do not have the following line "LOG_OK NONE" in your Declude global.cfg file.   Q.) Can you show me an example of a Test Summary Breakdown report? A.) Yes. Click Here for an example of a Test Summary Breakdown report.   Q.) What is the purpose of the Test Summary Breakdown report? A.) The main purpose of this test is to give you the ability to see which tests fail in conjunction with the configured test. For example you might be interested in finding out what tests are failed when a given weight range test is met. Or you might be interested in seeing what tests a message fails when a message fails "Sniffer" and "WEIGHT30", but does not fail "ORDB". This test gives you a lot of flexibility in determining how effective tests are.     Advanced Summary Report Q.) What logging level is required for the Advanced Summary report? A.) Advanced Summary reports require log level MID. Also, make sure that you do not have the following line "LOG_OK NONE" in your Declude global.cfg.   Q.) Can you show me an example of a Advanced Summary report? A.) Yes. Click Here for an example of a Advanced Summary report.   Q.) Can you modify the format of the Advanced Summary report? A.) Yes, but only with the text and html report format. By creating a template named "advancedreport.format" and placing it in the directory where your dlanalyzer.exe file is ran from. Click Here For An Example Of The Advanced Format File (TEXT). Click Here For An Example Of The Advanced Format File (HTML).     Database Options Q.) Is using an external database required? A.) No, the use of an external database is not required. The only instance which we recommend using an external database is when resource requirements are limited.   Q.) How do I extract the data out of the database? A.) We do not support extracting data out of the database manually.   Q.) What is the purpose of the database? A.) Using an external database helps lessen the resource requirements when generating an advanced report. Other than the advanced report DLAnalyzer gains no advantage using an external database. Q.) What type of permissions are needed on the database? A.) DLAnalyzer requires SA access to the database.     Virus Summary Report Q.) What logging level is required for the Virus Summary report? A.) We recommend that you use Declude Virus Log Level HIGH for all virus summary reports.   Q.) Can you show me an example of a virus Summary report? A.) Yes. Click Here for an example of a Virus Summary report.     Virus Scanner Report Q.) What logging level is required for the Virus Scanner Summary report? A.) We recommend that you use Declude Virus Log Level HIGH for all virus summary reports.   Q.) Can you show me an example of a virus scanner Summary report? A.) Yes. Click Here for an example of a Virus Scanner Summary report.     File Extension Report Q.) What logging level is required for the File Extension report? A.) We recommend that you use Declude Virus Log Level HIGH for all virus summary reports.   Q.) Can you show me an example of a File Extension report? A.) Yes. Click Here for an example of a File Extension report.     File Extension Virus Report Q.) What logging level is required for the File Extension Virus report? A.) We recommend that you use Declude Virus Log Level HIGH for all virus summary reports.   Q.) Can you show me an example of a File Extension Virus report? A.) Yes. Click Here for an example of a File Extension Virus report.     IP Virus Summary Report Q.) What logging level is required for the IP Virus Summary report? A.) We recommend that you use Declude Virus Log Level HIGH for all virus summary reports.   Q.) Can you show me an example of a IP Virus Summary report? A.) Yes. Click Here for an example of a IP Virus Summary report.     Recipient Virus Report Q.) What logging level is required for the Recipient Virus report? A.) We recommend that you use Declude Virus Log Level HIGH for all virus summary reports.   Q.) Can you show me an example of a Recipient Virus report? A.) Yes. Click Here for an example of a Recipient Virus report.     Sender Virus Report Q.) What logging level is required for the Sender Virus report? A.) We recommend that you use Declude Virus Log Level HIGH for all virus summary reports.   Q.) Can you show me an example of a Sender Virus report? A.) Yes. Click Here for an example of a Sender Virus report.     Banned File Extension Report Q.) What logging level is required for the Banned File Extension report? A.) We recommend that you use Declude Virus Log Level HIGH for all virus summary reports.   Q.) Can you show me an example of a Banned File Extension report? A.) Yes. Click Here for an example of a Banned File Extension report.     Domain Virus Report Q.) What logging level is required for the Domain Virus report? A.) We recommend that you use Declude Virus Log Level HIGH for all virus summary reports.   Q.) Can you show me an example of a Domain Virus report? A.) Yes. Click Here for an example of a Domain Virus report.     Domain Recipient Virus Report Q.) What logging level is required for the Domain Recipient Virus report? A.) We recommend that you use Declude Virus Log Level HIGH for all virus summary reports.   Q.) Can you show me an example of a Domain Recipient Virus report? A.) Yes. Click Here for an example of a Domain Recipient Virus report.     Domain IP Virus Summary Report Q.) What logging level is required for the Domain IP Virus Summary report? A.) We recommend that you use Declude Virus Log Level HIGH for all virus summary reports.   Q.) Can you show me an example of a Domain IP Virus Summary report? A.) Yes. Click Here for an example of a IP Virus Summary report.     Advanced Virus Report Q.) What logging level is required for the Advanced Virus report? A.) We recommend that you use Declude Virus Log Level HIGH for all virus reports.   Q.) Can you show me an example of a Advanced Virus report? A.) Yes. Click Here for an example of a Virus Advanced report.