Vernon Schryver
vjs@calcite.rhyolite.com
Mon, 3 Sep 2001 20:00:17 -0600 (MDT)
`cdcc "host dcc.rhyolite.com; stats"` produces:
dcc.rhyolite.com calcite.rhyolite.com 192.188.61.3,6277
server-ID 101 19:53:06
version 1.0.28 DB locked tracing ANON CLNT
90109 hash entries 66617 used 3460080 DB bytes
1 ms delay 236 NOPs 45 ADMN 108 query 12 clients
1056 reports 0>10 0>100 0>1000 39 many
answers 385>10 107>100 0>1000 102 many 34 whitelisted
0 bad IDs 11 passwds 0 error responses 30 retransmitted
0 answers rate-limited 0 anonymous 0 rejected reports
flood on 9 streams 5 out active 5 in 8766 total flooded in
2337 accepted 23 stale 6406 dup 0 white 0 delete 0 bad id
100 mmap 146453 hashed 68138 records mapped 3368 added
since Sep 02 09:28:57.381686 MDT
That says that in the 10.5 hours starting from 9:30 am until about 8 pm,
my server has received 1056 reports of the checksums of messages.
Of those, 385 or 36% look like spam because they have addressee counts
above 10. (10 is a reasonable threshold for my vanity domain, and
for the other clients of my DCC server, all of which seem similar.)
Assuming that a substantial fraction of the remaing 64% were not spam
implies a much better than 25% effectiveness against the spam seen
around here.
Vernon Schryver vjs@rhyolite.com