FUJ00172086
FUJ00172086
From: Muir, Jason[/O=FUJITSU EXCHANGE ORGANIZATION/OU=EXCHANGE ADMINISTRATIVE
GROUP (FYDIBOHF23SPDLT)/CN=RECIPIENTS/CN=BDC2EB2BC40846849C03D237942]
Sent: Fri 15/07/2016 9:01:09 AM (UTC)
To: Holmes, Alan{, GRO
Denbali, FarzinI
Dunks, Andyf —
Ce: ; Goddard,
nnn Godfrey, Stephen
Subject: RE: Duplicates .
Attachment: RE: ARQ - Duplicate Data
Attachment: RE: ARQ's 051-056 - Caereithin
Hi Alan,
As discussed, please see attached emails. Looking at the reason for the duplicate records in
2014 from Gerald’s email, it seems this is a different reason to why we have duplicates this
time around is that correct?
Looks like we never highlighted the duplicates to them back in 2014 and I don’t recall they ever
queried it.
This time around I think probably best we do highlight although we do run the danger of opening
a ‘can of worms’ should POL decide they want to investigate further.
We will also complete the check Gerald suggested back in 2014: you need to confirm that you have
not got duplicate transactions which are not identical because that would be a new issue of
concern.
Can you think of anything else we need to cover off?
Regards,
Jason Muir
Operational Security Manager
Post Office Account
Fujitsu
From: Holmes, Alan
Sent: 15 July 2016 0:
To: Dunks, Andy <
; Denbali, Farzin <}
} Muir, Jason <_
Andy, Farzin
Gerald is on leave at the moment.
FUJ00172086
FUJ00172086
There a couple of approaches we could take to work around this and get the ARQ completed, but I think that it is
better that we wait until Gerald comes back on Monday and check what we did last time so we can adopt a consistent
approach.
This problem is going to occur again for any ARQs that overlap the date range 23 — 25" Oct 2015. It would be a good
idea to add this, and the eventual workaround, to your list of ‘problem cases’ for reference the next time it crops up.
Alan
From: Dunks, Andy
Sent: 14 July 2016 1
To: Holmes, Alan <
Cc: Barnes, Gerald}.
Subject: RE: Duplicates
GRO
Can’t remember what we did at the time.
Can you think what we did Gerald ?
Andy
From: Holmes, Alan
Sent: 14 July 2016 17:26
To: Denbali, Farzin
Ce: Barnes,Gerald¢_
Subject: FW: Duplicates
Farzin - Your problem with duplicates in an ARQ is another occurrence of the problem detailed below.
Andy — Can you remember if/how this was worked around last time?
Alan
From: Goddard, Steve
Sent: 14 July 2016 1
To: Holmes, Alan <
Subject: FW: Duplicates
Alan,
This was the issue.
Gerald subsequently told me “It turned out that the share on which they sat was migrated that day and the audit
configuration file was modified by hand with two separate paths to the same migrated share which caused the files to
be copied twice. It was incorrect procedure to modify the audit configuration files by hand.”
Regards,
Steve
From: Barnes, Gerald
Sent: 08 April 2016 11:07
To: Dunks, Andy ¢
FUJ00172086
FUJ00172086
Ce: Muir, Jason {7 Goddard, Steve <
Subject: RE: Duplicates
Hi Andy,
Yes it is something to be concerned about. Please raise a PEAK. I am copying all the transaction files to the
local disk of an audit workstation right now.
I have already got on a USB stick two files which contain the first set of duplicates so that can be examined by
anyone who wishes right now.
I have studied the first message, 5026965, in detail and it looks like the complete and same transaction is in
both files.
Regards,
Gerald Barnes
From: Dunks, Andy
Sent: 07 April 2016 14:37
To: Barnes, Gerald
Ce: Muir, Jason}
Hi Gerald,
The following is showing “duplicate” on the summary sheet, is this something to be concerned about?
Reference POIA4231W
Generated Date 24/03/2016
Generated Time 11:19:02
Group 261420
Filter Start Date 01/10/2015
Filter End Date 31/10/2015
Node Identifier Lowest Message Highest Message Gaps Duplicates
(Office::Counter)
261420::1 4793073 (01/10/2015 4793329 (28/10/2015 NONE NONE
11:06:55) 18:33:35)
261420::2 5023706 (01/10/2015 5028135 (31/10/2015 NONE 5026965 - 5027
06:57:27) 16:00:15)
261420::3 4404959 (01/10/2015 4408413 (31/10/2015 NONE 4407440 - 4407
08:12:26) 11:29:55)
261420::3 4407454 - 4407
261420::4 37800 (01/10/2015 41801 (31/10/2015 NONE 40406 - 40592
07:03:11) 16:00:22)
Thanks,
Andy Dunks
Security Operations Post Office Account
Fujitsu
re, RG12 8SN
Fujitsu named as
Responsible Business
of the Year
Fujitsu is proud to partner with Action for Children
I-ClO: Global Intelligence for the ClO. Fujitsu's online resource for ICT leaders
Sponsors of the 2015 Rugby World Cup
hw Please consider the environment - do you really need to print this email?
FUJ00172086
FUJ00172086