FUJ00176329
FUJ00176329
From:
Sent:
To:
Cc:
Subject:
Jason
Holmes, Alan[/O=FUJITSU EXCHANGE ORGANIZATION/OU=EXCHANGE ADMINISTRATIVE
GROUP (FYDIBOHF23SPDLT)/CN=RECIPIENTS/CN=BE063F CDD2CE4F808C1352EC58D]
Fri 15/07/2016 9:23:59 AM (UTC
RE: Duplicates
L Denbali,
The reason behind the 2014 duplicates will be different to this case. Can you check what happened to the ARQ Andy
mentioned below viz
Reference
Generated Date
Generated Time
Group
Filter Start Date
Filter End Date
Node Identifier
(Office::Counter)
261420::1
261420::2
261420::3
261420::3
261420::4
POIA4231W
24/03/2016
11:19:02
261420
01/10/2015
31/10/2015
Lowest Message
4793073 (01/10/2015
11:06:55)
5023706 (01/10/2015
06:57:27)
4404959 (01/10/2015
08:12:26)
37800 (01/10/2015
07:03:11)
As this is the same problem as we have now.
From: Muir, Jason
Sent: 15 July 2016 10:01
Dunks, Andy
Highest Message
4793329 (28/10/2015
18:33:35)
5028135 (31/10/2015
16:00:15)
4408413 (31/10/2015
11:29:55)
41801 (31/10/2015
16:00:22)
Gaps
NONE
NONE
NONE
NONE
Duplicates
NONE
5026965 - 5027
4407440 - 4407
4407454 - 4407
40406 - 40592
“Denbali, Farzin
FUJ00176329
FUJ00176329
Cc: Barnes, Gerald
Stephen (Security)
Subject: RE: Duplicates
Goddard, Stev
Hi Alan,
As discussed, please see attached emails. Looking at the reason for the duplicate records in
2014 from Gerald’s email, it seems this is a different reason to why we have duplicates this
time around is that correct?
Looks like we never highlighted the duplicates to them back in 2014 and I don’t recall they ever
queried it.
This time around I think probably best we do highlight although we do run the danger of opening
a ‘can of worms’ should POL decide they want to investigate further.
We will also complete the check Gerald suggested back in 2014: you need to confirm that you have
not got duplicate transactions which are not identical because that would be a new issue of
concern.
Can you think of anything else we need to cover off?
Regards,
Jason Muir
Operational Security Manager
Post Office Account
Fujitsu
Mob: I
Phor
From: Holmes, Alan
nbali, Farz ° GRO H
Muir, Jason,
To: Dunks, And’
oddard, Steve
Andy, Farzin
Gerald is on leave at the moment.
There a couple of approaches we could take to work around this and get the ARQ completed, but I think that it is
better that we wait until Gerald comes back on Monday and check what we did last time so we can adopt a consistent
approach.
This problem is going to occur again for any ARQs that overlap the date range 23"? ~ 25" Oct 2015. It would be a good
idea to add this, and the eventual workaround, to your list of ‘problem cases’ for reference the next time it crops up.
Alan
FUJ00176329
FUJ00176329
From: Dunks, Andy
Sent: 14 July 2016 17:31
To: Holmes, Alan
Cc: Barnes, Geral
Subject: RE: Duplicates
; Denbali, Farzin’
‘Muir, Jason i
Can’t remember what we did at the time.
Can you think what we did Gerald ?
Andy
From: Holmes, Alan
Sent: 14 July 2016 1
To: Denbali, Farzi
Cc: Barnes, Geral
Subject: FW: Duplicates
Farzin - Your problem with duplicates in an ARQ is another occurrence of the problem detailed below.
Andy — Can you remember if/how this was worked around last time?
Alan
From: Goddard, Steve
Sent: 14 July 2016 17:
To: Holmes, Alan
Subject: FW: Duplicates
Alan,
This was the issue.
Gerald subsequently told me “It turned out that the share on which they sat was migrated that day and the audit
configuration file was modified by hand with two separate paths to the same migrated share which caused the files to
be copied twice. It was incorrect procedure to modify the audit configuration files by hand.”
Regards,
Steve
From: Barnes, Gerald
Sent: 08 April 2016 1
To: Dunks, And’
Ce: Muir, Jason
Subject: RE: Duplicates
Goddard, Steve
Hi Andy,
Yes it is something to be concerned about. Please raise a PEAK. I am copying all the transaction files to the
local disk of an audit workstation right now.
I have already got on a USB stick two files which contain the first set of duplicates so that can be examined by
FUJ00176329
FUJ00176329
anyone who wishes right now.
I have studied the first message, 5026965, in detail and it looks like the complete and same transaction is in
both files.
Regards,
Gerald Barnes
From: Dunks, Andy
Sent: 07 April 2016 14:37
To: Barnes, Gerald:
Ce: Muir, Jason
Subject: Duplicates
Hi Gerald,
The following is showing “duplicate” on the summary sheet, is this something to be concerned about?
Reference POIA4231W
Generated Date 24/03/2016
Generated Time 11:19:02
Group 261420
Filter Start Date 01/10/2015
Filter End Date 31/10/2015
Node Identifier Lowest Message Highest Message Gaps Duplicates
(Office::Counter)
261420::1 4793073 (01/10/2015 4793329 (28/10/2015 NONE NONE
11:06:55) 18:33:35)
261420::2 5023706 (01/10/2015 5028135 (31/10/2015 NONE 5026965 - 5027
06:57:27) 16:00:15)
261420::3 4404959 (01/10/2015 4408413 (31/10/2015 NONE 4407440 - 4407
08:12:26) 11:29:55)
261420::3 4407454 - 4407
261420::4 37800 (01/10/2015 41801 (31/10/2015 NONE 40406 - 40592
07:03:11) 16:00:22)
Thanks,
Andy Dunks
Secutity Operations Post Office Account
Fujitsu
Lovel
Tel:!
Road. .Bracknell. Berkshire, R612 8SN
GRO
Email: andy.dunk{” GRO
Web: http://uk.fujitsu.com
© £I¥inje
&
KS Fujitsu named as
Responsible Business
of the Year
Fujitsu is proud to partner with Action for Children.
{-CIO: Global Intelligence for the ClO. Fujitsu's online resource for ICT leaders
Sponsors of the 2015 Rugby World Cup
wv Please consider the environment - do you really need to print this email?
FUJ00176329
FUJ00176329