Content Archive Log Body

[#1]

Article

Content archives record meta-data about the content for a particular protocol (HTTP, FTP, IMAP, POP3, and SMTP).

Each content archive message records the date and time and a description of the content.

HTTP

An example HTTP content archive body contains the following information:

<ContLogVersionNo>:<SessionNo>:<clientIP>->
<serverIP>:<infectionStatus>:<RequestSize>:<ResponseSize>:<HTTPrequest>

FTP

An example FTP content archive body contains the following information:

<ContLogVersionNo>:<SessionNo>:<clientIP><-><serverIP>:<infectionStatus>:<RequestSize>:<ResponseSize>:<FTPcommand>

SMTP, POP3, and IMAP

An example email content archive body contains the following information:

<ContLogVersionNo>:<SessionNo>:<clientIP><->
<serverIP>:<infectionStatus>:<SizeSent>:<from/to>:<attachment(1=yes, 0=no)>