Paul
Sun Apr 18 04:58:29 CDT 2004
This is a multi-part message in MIME format.
------=_NextPart_000_001B_01C42590.489E0390
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
I think I have found the cause of the problem.
When setting up the new server I installed Symantec AV Corp and didn't =
change the default settings so the full system scan (running at midnight =
Saturday night) included the M: drive and the ...\exchsrvr directory. =20
I have now changed the setting so they are not scanned but how do I fix =
the problem with the current size of the files. As stated below the =
mailboxes are only 1.4GB but the amount being backed up is over 4GB.
Paul
"Paul Burrows" <paul.burrows@nospam.co.nz> wrote in message =
news:%2359JueSJEHA.3084@TK2MSFTNGP10.phx.gbl...
Yes, the log files (the ones starting with E00) are being deleted =
after every successful backup.
There is something weird here happening. Looking at the log files, =
there are 594 x 5MB files created between 00:29am and 2:54am this =
morning. This happens every Saturday night (Sunday morning) and they =
will be deleted on the next backup.
"Cris Hanna (SBS-MVP)" <crisnospamhanna@mindspring.com> wrote in =
message news:u3RZmkLJEHA.3220@TK2MSFTNGP10.phx.gbl...
Sorry for the long delay.
Have you looked at the log files to see if those are being deleted =
appropriately??
--=20
Cris Hanna, SBS-MVP
----------------------------------------------
Please DO NOT respond to me directly but post all responses here in =
the newsgroup so that all can share the information
"Paul Burrows" <paul.burrows@nospam.co.nz> wrote in message =
news:Oe2VTNqIEHA.3440@TK2MSFTNGP09.phx.gbl...
Also with the 4,180,910,754 bytes that were backed up last night =
from the exchange store.
The files:
priv1.ebd =3D 1,545,416 KB
priv1.stm =3D 2,500,616 KB
But if I look at the mailboxes and add up the sizes of all =
mailboxes it only comes to 1,390,438 KB. There are no public folders
A sample of the exchange backup sizes have been from initial setup =
on 9/3:
09/3 1,598,137,232 bytes
13/3 1,651,614,510
17/3 2,821,890,898
23/3 2,819,793,598
30/3 3,884,163,746
15/4 4,180,910,754
Is this of any use with determining what is happening?
Thanks
Paul
"Paul Burrows" <paul.burrows@nospam.co.nz> wrote in message =
news:%23JkK81nIEHA.1140@tk2msftngp13.phx.gbl...
The BadMail folder has 394 files totalling 1.65 MB with 6-7 =
messages arriving there each day.
Where do I turn on max logging for Exchange?
In the short term, do you think I should set the retain mail on =
server from 30 days down to 7 to overcome the backup space problem? I =
am sure this would not adversely affect the company. Is this change =
effective immediately?
On reviewing backup logs the exchange store as backed up was:
18/3 2,817,696,446 bytes
26/3 2,821,890,750
29/3 3,884,163,746
05/4 4,123,239,074
14/4 4,180,910,754
Paul
"Cris Hanna (SBS-MVP)" <crisnospamhanna@mindspring.com> wrote =
in message news:ePMhcomIEHA.3848@tk2msftngp13.phx.gbl...
Have you turned on max logging for Exchange?? This out to =
give you some indications. Have you checked the BadMail Folder?? If =
you're getting spammed that could be growing a lot
--=20
Cris Hanna, SBS-MVP
----------------------------------------------
Please DO NOT respond to me directly but post all responses =
here in the newsgroup so that all can share the information
"Paul Burrows" <paul.burrows@nospam.co.nz> wrote in message =
news:OsttaTmIEHA.940@tk2msftngp13.phx.gbl...
This is weird and has happened over last 3 weekends since I =
rebuilt the
server to incorporate a hardware raid controller into the =
SBS server. It is
a Compaq ML310.
On Monday morning space used by exchange increases by approx =
3 GB. These
are caused by an increase in log files and then after the =
Monday night
backup the space is recovered as the log files are deleted. =
As stated above
this has happened the last 3 weeks.
This in itself does not cause a problem BUT the size of the =
exchange backup
is increasing by about a GB per week (the difference between =
the exchange
backup on Friday as compared with Monday) so the backup =
(using latest
Veritas BackupExec) now requires tape spanning. I presume =
this is because I
am retaining deleted mail for ? days after user deletion.
The server runs the latest Norton Corporate with Mail =
Security AV and all
clients have Norton installed and configured correctly. All =
definitions are
up-to-date.
Has anyone any idea what is going on and how to fix?
Thanks
Paul
------=_NextPart_000_001B_01C42590.489E0390
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2800.1400" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>I think I have found the cause of the=20
problem.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>When setting up the new server I =
installed Symantec=20
AV Corp and didn't change the default settings so the full system scan =
(running=20
at midnight Saturday night) included the M: drive and the ...\exchsrvr=20
directory. </FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>I have now changed the =
setting so=20
they are not scanned but how do I fix the problem with the current size =
of the=20
files. As stated below the mailboxes are only 1.4GB but the amount =
being=20
backed up is over 4GB.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Paul</FONT></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Paul Burrows" <<A=20
=
href=3D"mailto:paul.burrows@nospam.co.nz">paul.burrows@nospam.co.nz</A>&g=
t;=20
wrote in message <A=20
=
href=3D"news:%2359JueSJEHA.3084@TK2MSFTNGP10.phx.gbl">news:%2359JueSJEHA.=
3084@TK2MSFTNGP10.phx.gbl</A>...</DIV>
<DIV><FONT face=3DArial size=3D2>Yes, the log files (the ones =
starting with=20
E00) are being deleted after every successful backup.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>There is something weird here =
happening. =20
Looking at the log files, there are 594 x 5MB files created between =
00:29am=20
and 2:54am this morning. This happens every Saturday night =
(Sunday=20
morning) and they will be deleted on the next backup.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Cris Hanna (SBS-MVP)" <<A=20
=
href=3D"mailto:crisnospamhanna@mindspring.com">crisnospamhanna@mindspring=
.com</A>>=20
wrote in message <A=20
=
href=3D"news:u3RZmkLJEHA.3220@TK2MSFTNGP10.phx.gbl">news:u3RZmkLJEHA.3220=
@TK2MSFTNGP10.phx.gbl</A>...</DIV>
<DIV><FONT face=3DArial size=3D2>Sorry for the long =
delay.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Have you looked at the log files to =
see if=20
those are being deleted appropriately??</FONT></DIV>
<DIV><BR>-- <BR>Cris Hanna,=20
SBS-MVP<BR>----------------------------------------------<BR>Please =
DO NOT=20
respond to me directly but post all responses here in the newsgroup =
so that=20
all can share the information</DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Paul Burrows" <<A=20
=
href=3D"mailto:paul.burrows@nospam.co.nz">paul.burrows@nospam.co.nz</A>&g=
t;=20
wrote in message <A=20
=
href=3D"news:Oe2VTNqIEHA.3440@TK2MSFTNGP09.phx.gbl">news:Oe2VTNqIEHA.3440=
@TK2MSFTNGP09.phx.gbl</A>...</DIV>
<DIV><FONT face=3DArial size=3D2>Also with the 4,180,910,754 bytes =
that were=20
backed up last night from the exchange store.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>The files:</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>priv1.ebd =3D 1,545,416 =
KB</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>priv1.stm =3D 2,500,616 =
KB</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>But if I look at the mailboxes =
and add up the=20
sizes of all mailboxes it only comes to 1,390,438 KB. There =
are no=20
public folders</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>A sample of the exchange =
backup sizes=20
have been from initial setup on 9/3:</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>09/3 =
1,598,137,232=20
bytes</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>13/3 =20
1,651,614,510</FONT></DIV>
<DIV><FONT face=3DArial=20
size=3D2>17/3 2,821,890,898</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>23/3 =20
2,819,793,598</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>30/3 =20
3,884,163,746</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>15/4 =20
4,180,910,754</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Is this of any use with =
determining what is=20
happening?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Thanks</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Paul</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Paul Burrows" <<A=20
=
href=3D"mailto:paul.burrows@nospam.co.nz">paul.burrows@nospam.co.nz</A>&g=
t;=20
wrote in message <A=20
=
href=3D"news:%23JkK81nIEHA.1140@tk2msftngp13.phx.gbl">news:%23JkK81nIEHA.=
1140@tk2msftngp13.phx.gbl</A>...</DIV>
<DIV><FONT face=3DArial size=3D2>The BadMail folder has 394 =
files totalling=20
1.65 MB with 6-7 messages arriving there each day.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Where do I turn on max logging =
for=20
Exchange?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>In the short term, do you think =
I should=20
set the retain mail on server from 30 days down to 7 to overcome =
the=20
backup space problem? I am sure this would not adversely =
affect=20
the company. Is this change effective =
immediately?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>On reviewing backup logs the =
exchange store=20
as backed up was:</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>18/3 =
2,817,696,446=20
bytes</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>26/3 =20
2,821,890,750</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>29/3 =20
3,884,163,746</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>05/4 =20
4,123,239,074</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>14/4 =20
4,180,910,754</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Paul</FONT></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: =
5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Cris Hanna (SBS-MVP)" <<A=20
=
href=3D"mailto:crisnospamhanna@mindspring.com">crisnospamhanna@mindspring=
.com</A>>=20
wrote in message <A=20
=
href=3D"news:ePMhcomIEHA.3848@tk2msftngp13.phx.gbl">news:ePMhcomIEHA.3848=
@tk2msftngp13.phx.gbl</A>...</DIV>
<DIV><FONT face=3DArial size=3D2>Have you turned on max =
logging for=20
Exchange?? This out to give you some=20
indications. Have you checked the BadMail=20
Folder?? If you're getting spammed that =
could be=20
growing a lot</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV> </DIV>
<DIV><BR>-- <BR>Cris Hanna,=20
=
SBS-MVP<BR>----------------------------------------------<BR>Please DO=20
NOT respond to me directly but post all responses here in the=20
newsgroup so that all can share the information</DIV>
<BLOCKQUOTE=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: =
5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Paul Burrows" <<A=20
=
href=3D"mailto:paul.burrows@nospam.co.nz">paul.burrows@nospam.co.nz</A>&g=
t;=20
wrote in message <A=20
=
href=3D"news:OsttaTmIEHA.940@tk2msftngp13.phx.gbl">news:OsttaTmIEHA.940@t=
k2msftngp13.phx.gbl</A>...</DIV>This=20
is weird and has happened over last 3 weekends since I =
rebuilt=20
the<BR>server to incorporate a hardware raid controller into =
the SBS=20
server. It is<BR>a Compaq ML310.<BR><BR>On Monday =
morning=20
space used by exchange increases by approx 3 GB. =
These<BR>are=20
caused by an increase in log files and then after the Monday =