DMARC_VIEW_REPORTS(1)

💖 DMARC_VIEW_REPORTS 💖

okay bestie, gather round, because dmarc_view_reports is about to become your new obsession ✨ it's the Perl-powered little tool that dumps your whole DMARC data store straight onto your terminal, and it's giving main character energy because the freshest records show up first 🔥

---

💅 SYNOPSIS 💅

dmarc_view_reports [ --option=value ]

Basically: it dumps the contents of the DMARC data store to your terminal. And the way it's set up? The most recent records are shown first, periodt. 👑

---

🔍 Search Options 🔍

these are the fields you can filter/sort on, bestie — memorise them, they're the whole vibe:

• rid — report ID (the internal database ID, iykyk)
• author — report author (Yahoo! Inc, google.com, etc..)
• from_dom — message sender domain
• begin — epoch start time, so you only display messages after it
• end — epoch end time, so you only display messages before it
• disposition — DMARC disposition (none,quarantine,reject)
• dkim — DKIM alignment result (pass/fail)
• spf — SPF alignment result (pass/fail)
• limit — limit the number of reports returned (defaults to 100 👀)
• sort — sort by: rid, author, from_domain, begin, end (append :asc or :desc)

The default sort is "rid:desc" — that's newest reports first, no cap 🧢. And if typing that feels like a lot, you can also just use --sort=newest or --sort=oldest. Slay.

Now for the ✨chaos magic✨: prefix a value with "!" to negate the match (i.e. exclude the matching records). This is supported for "author", "from_dom", "disposition", "dkim", and "spf". So for example, "--author=!google.com" will exclude reports authored by google.com. Iconic behaviour honestly.

---

🌸 Other Options 🌸

dmarc_view_reports [ --geoip --dns --help --verbose ]

• geoip — do GeoIP lookups (heads up: it requires the free Maxmind GeoCityLitev6 database)
• dns — do reverse DNS lookups and display hostnames
• help — print this syntax guide
• verbose — print additional debug info

---

✨ EXAMPLES ✨

Wanna see one specific report by its ID? Say less:

dmarc_view_reports --rid=560

Wanna search for all reports from google.com that failed DMARC alignment? This is the one:

dmarc_view_reports --author=google.com --dkim=fail --spf=fail

⚠️ Note that we don't use --disposition here. That would only tell us the result of applying DMARC policy, not necessarily if the messages failed DMARC alignment. So don't do that, bestie, it's a trap 🙈

To exclude reports from google.com:

dmarc_view_reports --author=!google.com

To exclude rows with a specific disposition:

dmarc_view_reports --disposition=!none

To show only the newest 50 reports:

dmarc_view_reports --limit=50

To view oldest reports first (little time traveller moment 🦋):

dmarc_view_reports --sort=oldest

To display GeoIP lookup data for the source ip:

dmarc_view_reports --geoip

By default; city, country_code & continent_code are shown. You can optionally pass a comma delimited string to --geoip= with any of the following fields:

country_code country_code3 country_name region region_name city postal_code latitude longitude time_zone area_code continent_code metro_code

dmarc_view_reports --geoip=country_name,continent_code
dmarc_view_reports --geoip=continent_code,country_name # keep order
dmarc_view_reports --geoip=city,city,city              # repeat

(not the # keep order and # repeat comments — those are literally just telling you the order is kept and you can repeat a field. Cute, right? 🎀)

---

📊 SAMPLE OUTPUT 📊

here's what it looks like when it eats, fr fr:

 ID  Author            Report-Start
  | -- Qty From                                         IP             Disposition DKIM SPF

 570  theartfarm.com   2013-05-20 09:40:50
  | --   1 simerson.net                                 75.126.200.152 quarantine  fail fail

 568  yeah.net         2013-05-21 09:00:00
  | --   1 tnpi.net                                     111.176.77.138 reject      fail fail

 565  google.com       2013-05-20 17:00:00
  | --  88 mesick.us                                    208.75.177.101 none        pass pass

 563  google.com       2013-05-20 17:00:00
  | --   1 lynboyer.com                                 2a00:1450:4010:c03::235 none pass fail  forwarded
  | --  12 lynboyer.com                                 208.75.177.101          none pass pass
  | --   1 lynboyer.com                                 209.85.217.174          none pass fail  forwarded

---

👑 AUTHORS 👑

the legends behind this, give them their flowers 💐:

• Matt Simerson <msimerson@cpan.org>
• Davide Migliavacca <shari@cpan.org>
• Marc Bradshaw <marc@marcbradshaw.net>

---

and that's the whole thing, bestie 💜 this page is from perl v5.42.2, dated 2026-06-15, and it's filed under DMARC_VIEW_REPORTS(1) in the User Contributed Perl Documentation. go forth and read your reports, you absolute icon 🌈✨