How to monitor email traffic?

[jgao]

Is there any way to monitor email traffic? I need to know if some user is send large volume of emails.

Thanks,
Jian

[ScalixSupport]

Chapter 22 of the Administration Guide gives you details on how to configure auditing and what information is logged.

Cheers

Dave

[jgao]

I need to monitor the email traffic at real time, and send alerts out for unusual circumstances. Any way to do this in Scalix? Or some way in sendmail?

Thanks,
Jian

[Valerion]

I can't think of a way that doesn't require extra development/software.

You can write a perl script that scans the sendmail logs and/or the Scalix audit file for new messages and alert on any anomalies/big messages/etc. I've written something like this for archiving purposes (store the audit log info in a DB backend) and haven't found it very hard.

[ScalixSupport]

mrtg is used for that. Besides producing pretty stats, it can be used for alerting as well.

You can set alerts in mrtg.cfg - this is beyond free support however. Please google for http://www.google.com/search?hl=de&q=mr ... -Suche&lr=

Another tool is Big Brother. http://www.bb4.org/

Cheers,

Sascha.

[burhankhalid]

Another software that does monitoring is cacti which leverages the power of RRDTool. Provides a wide range of graphs, not just bandwidth (for example, disk usage).