This article applies to:

• Trustwave MailMarshal (SEG)
• Trustwave ECM/MailMarshal Exchange

(For WebMarshal, see Q11973.)

Question:

What types of performance counters are available in MailMarshal (SEG) and ECM?

Information:

MailMarshal (SEG), ECM, and WebMarshal publish performance information to the Microsoft Windows Performance Monitor. Listed below are all of the type of counters available. Use of these counters in conjunction with the existing Microsoft Windows counters will assist in obtaining useful performance information.

Trustwave MailMarshal (SEG) and Trustwave ECM/MailMarshal Exchange

MailMarshal Engine

• Active Threads
• Bytes Total/Sec
• Messages Total/Sec
• Msgs Queued (Removed at version 6.X)
• Msgs Split
• Rule Time/Msg
• Scanning Time/Msg
• SQL Queue Length (Removed at version 6.X; SQL logging is through Array Manager)
• Time behind  (Added at version 6.X) 
• Undetermined Error
• Unpacking Error
• Unpacking Time/Msg
• Viruses Cleaned (Removed at version 8.2)
• Viruses Detected

SEG/MailMarshal SMTP only

MailMarshal Receiver

• Active Connections External
• Active Connections Internal
• Active Connections Total
• Bytes External/Sec
• Bytes Internal/sec
• Bytes Total/Sec
• Connections External/Sec
• Connections Internal/Sec
• Connections Total/Sec
• Messages External/Sec
• Messages Internal/sec
• Messages Total/Sec
• Refused Blocked hosts
• Refused Host Validation
• Refused MAPS Hosts
• Refused Rule Imposed
• Relay Attempts

MailMarshal Sender

• Active Sessions Total
• Messages In/sec
• Messages Out/sec
• Messages Total/sec
• Msg Bytes In/sec
• Msg Bytes Out/sec
• Raw Bytes Total/sec
• Raw Sessions/sec
• SQL queue length (Removed at version 6.X; SQL logging is through Array Manager)

MailMarshal Controller (added at 8.0)

• DNS Cache Hits
• DNS Cache Misses
• DNS Resolution Time/Lookup
• Failed DNS Lookups
• Successful DNS Lookups
• Total DNS Lookups

MailMarshal Array Manager (added at 8.0)

• Database Inserts/sec
• Database Log Failures
• Mail Queue (Note: this reflects administrative messages originating from the Array Manager, not email being scanned)

MailMarshal Syslog (added at 8.1)

• Syslog sent/sec (Number of syslog records sent to the remote server)
• Syslog unsent/sec (Number of syslog records that were attempted but not successfully delivered to the remote server)
• New syslogs total (Number of new syslog records submitted for sending)
• Unsent syslogs total (Number of syslog records queued for sending)

MailMarshal Archive Service (added at 8.2)

• Active Sessions (Current count of connections to the Archive server)
• Bytes/sec (Data throughput for the message body part)
• Deliveries/sec (Total number of messages delivered to the Archive server per second)
• Delivery Queue Length (Number of messages that are being queued for delivery)
• Retry Queue Length (Number of messages in the retry queue)
• Sessions/sec (Total number of connections to the Archive server per second)

Note:

Most of the counter names are self-explanatory. Some additional information is available through the Explain or Show Description function in Windows Performance Monitor.

This article was previously published as:

NETIQKB29552

Marshal KB343