[Exim] Where did all the mail come from and go?

Kezdőlap
Üzenet törlése
Válasz az üzenetre
Szerző: Marc MERLIN
Dátum:  
Címzett: exim-users
Tárgy: [Exim] Where did all the mail come from and go?
I'm going over this eximstats report and I'm a bit puzzled.
I'm trying to understand where the gig of mail (when I usually only see 3 to
400MB) came from and went to.
I see a source for 100MB, but nothing that adds up to a 1G+ (I mean, I do
see local, but that doesn't help me).

As you guessed, I want to find out what's happening and teach the culprits
about other fine protocols like ftp and http :-)

I have full logging turned on, as in:
2001-01-24 06:45:44 14LRBA-0005gB-00 <= mahakala@??? H=(localhost.localdomain) [216.248.176.2] P=esmtp S=1719 id=BLEFIFGKNFKNNGIKEIOICEDMCBAA.mahakala@??? T="subject snipped" from <mahakala@???> for jrabin@???
2001-01-24 06:45:44 14LRBA-0005gB-00 => jrabin <jrabin@???> D=localuser T=local_delivery
2001-01-24 06:45:44 14LRBA-0005gB-00 Completed

I'm guessing I need to hack eximstats in some way, but I'm not too sure to
understand what it's missing yet.

Thanks,
Marc

----- Forwarded message from root <root@???> -----

Exim statistics from 2001-01-24 06:25:58 to 2001-01-26 06:25:43

Grand total summary
-------------------
                                                       At least one address
  TOTAL               Volume    Messages    Hosts      Delayed       Failed
  Received             687MB       33820     2993     103  0.3%    347  1.0%
  Delivered           1110MB       82028     1283


Deliveries by transport
-----------------------
                      Volume    Messages
  **bypassed**          34KB           9
  address_file          16MB         682
  address_pipe          12MB        1099
  local_delivery       790MB       56812
  procmail_pipe         72MB       13114
  remote_smtp          219MB       10312


Messages received per hour (each dot is 52 messages)
----------------------------------------------------

00-01    522 ..........
01-02    603 ...........
02-03    535 ..........
03-04    560 ..........
04-05    636 ............
05-06    809 ...............
06-07   1239 .......................
07-08   1489 ............................
08-09   1945 .....................................
09-10   2251 ...........................................
10-11   2582 .................................................
11-12   2342 .............................................
12-13   2402 ..............................................
13-14   2293 ............................................
14-15   2387 .............................................
15-16   2358 .............................................
16-17   2009 ......................................
17-18   2194 ..........................................
18-19   1154 ......................
19-20    856 ................
20-21    824 ...............
21-22    707 .............
22-23    567 ..........
23-24    556 ..........


Deliveries per hour (each dot is 139 deliveries)
------------------------------------------------

00-01   1143 ........
01-02   1207 ........
02-03    887 ......
03-04    963 ......
04-05    996 .......
05-06   1345 .........
06-07   3635 ..........................
07-08   4161 .............................
08-09   4558 ................................
09-10   6370 .............................................
10-11   6412 ..............................................
11-12   5305 ......................................
12-13   6394 ..............................................
13-14   6223 ............................................
14-15   5398 ......................................
15-16   6973 ..................................................
16-17   4526 ................................
17-18   4521 ................................
18-19   2947 .....................
19-20   2009 ..............
20-21   2519 ..................
21-22   1380 .........
22-23   1187 ........
23-24    969 ......


Time spent on the queue: all messages
-------------------------------------

Under   1m    33521  99.1%   99.1%
        5m      141   0.4%   99.6%
       15m       41   0.1%   99.7%
       30m       25   0.1%   99.8%
        1h       11   0.0%   99.8%
        3h       14   0.0%   99.8%
        6h       12   0.0%   99.9%
       12h        4   0.0%   99.9%
        1d        2   0.0%   99.9%
Over    1d       38   0.1%  100.0%


Time spent on the queue: messages with at least one remote delivery
-------------------------------------------------------------------

Under   1m     7851  97.2%   97.2%
        5m       89   1.1%   98.3%
       15m       38   0.5%   98.7%
       30m       20   0.2%   99.0%
        1h       11   0.1%   99.1%
        3h       14   0.2%   99.3%
        6h       12   0.1%   99.5%
       12h        4   0.0%   99.5%
        1d        2   0.0%   99.5%
Over    1d       38   0.5%  100.0%


Relayed messages
----------------

      2 kitenet.net [198.144.200.155] joey@??? 
      => sv1.valinux.co.jp [202.32.245.254] kamop@???
      1 localhost [127.0.0.1] <> 
      => com-exch1.comedycentral.com [208.132.148.14] patricia.johnson@???
      1 localhost [127.0.0.1] <> 
      => dialmail.eunet.be [193.74.208.167] maribel@???
      1 localhost [127.0.0.1] <> 
      => mail.adic.com [207.243.13.12] paul.rose@???
      1 localhost [127.0.0.1] <> 
      => mail.infolibria.com [199.103.137.198] hsatkiewicz@???
      1 localhost [127.0.0.1] <> 
      => mail.infolibria.com [199.103.137.198] rcentauro@???
      1 localhost [127.0.0.1] <> 
      => vipmailgate.earthlink.net [207.217.121.96] jmilinovich@???
      1 localhost [127.0.0.1] <> 
      => xcgca807.northgrum.com [157.127.103.103] muldejo@???
      1 localhost [127.0.0.1] pallison@??? 
      => mail.hostingventures.com [216.147.86.13] cblanton@???
      1 mgate03.so-net.ne.jp [210.139.254.150] kamop@??? 
      => sv1.valinux.co.jp [202.32.245.254] kamop@???
      1 tyo201.gate.nec.co.jp [202.32.8.214] dup@??? 
      => sv1.valinux.co.jp [202.32.245.254] kamop@???


Total: 12 (plus 4114 unshown)

Top 50 sending hosts by message count
-------------------------------------

   3422   28345221   local
   2382   70029203   nat-hdqt.valinux.com
   1183    9558581   (lists.valinux.com)
   1155    2861469   www1.wwwi.hdqt.valinux.com
   1136   28532631   localhost
   1135    4297542   listman.redhat.com
   1132   19993355   beefcake.hdqt.valinux.com
    959    3111846   master.debian.org
    647    5153650   usw-outbound.sourceforge.net
    494    1883232   vger.kernel.org
    384    1987938   mail.linux.com
    374    1339505   va.php.net
    347    3810136   (mail.xao.com)
    325    1135510   dolly1.pobox.com
    323     729071   celia.wwwac.org
    322    1267051   wormwood.pobox.com
    306    1069356   us5.samba.org
    287     967428   gwyn.tux.org
    285     833580   web.mysql.com
    284    1312580   magic.magic.metawire.com
    241     846944   mate.pobox.com
    239     884551   xf86.isc.org
    225     631986   ip-216-73-169-226.hqglobal.net
    210     593087   segue.merit.edu
    208     449782   biglist.com
    203     506832   (locutus4.calderasystems.com)
    183     548212   usw-sf-sshgate.sourceforge.net
    176   21148337   dhcp-net10-6-sw11-213.hdqt.valinux.com
    162     856494   svlug.svlug.org
    155     720501   aya1.aya.yale.edu
    136    1498962   panoramix.valinux.com
    135     312156   db.gotocity.com
    132     311547   trna.ximian.com
    127     706004   li.org
    127     691727   mx2.netcom.com
    126     670375   mx1.netcom.com
    116     602751   alabanza.com
    112    4308459   mail.andover.net
    108     217957   entropy.valinux.com
    103     227827   foobar.math.fu-berlin.de
    101     583365   ruebert.ieee.org
     99     292959   (www.aalug.org)
     95    8223411   dhcp-net10-6-sw11-218.hdqt.valinux.com
     93  104239445   (mail1.synnex.com)
     92     407553   fencepost.gnu.org
     92     319186   (mail.minivend.com)
     87     581599   lists.securityfocus.com
     86     322570   hermes.sistina.com
     86     295829   ircache.net
     84     341724   mail.freeswan.org


Top 50 sending hosts by volume
------------------------------

     93  104239445   (mail1.synnex.com)
   2382   70029203   nat-hdqt.valinux.com
   1136   28532631   localhost
   3422   28345221   local
    176   21148337   dhcp-net10-6-sw11-213.hdqt.valinux.com
      9   21061348   dhcp-net10-32-sw2-203.sndg.valinux.com
     29   20322201   mail.bwd.com
   1132   19993355   beefcake.hdqt.valinux.com
     29   16566925   tatooine.hdqt.valinux.com
      9   14388568   dhcp-net10-32-sw2-247.sndg.valinux.com
     43   11576071   dhcp-net10-2-sw1-201.hdqt.valinux.com
     18   11292710   dhcp-net10-3-sw6-202.hdqt.valinux.com
   1183    9558581   (lists.valinux.com)
      8    9028334   bigbubba.fnbsd.net
     38    8877796   (sfoexch.accesspr.com)
     95    8223411   dhcp-net10-6-sw11-218.hdqt.valinux.com
     29    7874526   dhcp-net10-2-sw2-204.hdqt.valinux.com
     47    7110654   virgin.life.be
      1    5340044   (fmtmail.phasemetrics.com)
    647    5153650   usw-outbound.sourceforge.net
      1    4741209   notesmail.dwp.ci.la.ca.us
      6    4721730   legion.hdqt.valinux.com
     14    4683881   butane.hdqt.valinux.com
      2    4575530   coral.tci.com
     28    4515837   strontium.hdqt.valinux.com
    112    4308459   mail.andover.net
   1135    4297542   listman.redhat.com
      1    4138162   mailfe.belbone.be
     42    4044928   host34.rnt.ewr.qwest.net
      2    3917973   filer.fr.clara.net
    347    3810136   (mail.xao.com)
      1    3480556   ns.impinc.com
     16    3282218   mta5.snfc21.pbi.net
     16    3162939   mail.e-g.com
    959    3111846   master.debian.org
      5    2940812   gw.platform.com
     38    2917374   list.venturewire.net
   1155    2861469   www1.wwwi.hdqt.valinux.com
     12    2729722   smtp6.mindspring.com
      3    2699689   vserver.be.ihost.com
     10    2609369   palrel3.hp.com
      4    2592703   dfw-smtpout4.email.verio.net
      2    2589335   (gi1.genesisintermedia.com)
     28    2524839   dman-120-89.jacksonville.net
      1    2516251   mtiwgwc24.worldnet.att.net
      1    2516249   mtiwgwc22.worldnet.att.net
      1    2513901   mtiwgwc25.worldnet.att.net
     21    2477948   gluon.hdqt.valinux.com
      3    2213374   door-uunet.ecrix.com
      1    2204757   mtiwgwc23.worldnet.att.net


Top 50 local senders by message count
-------------------------------------

   1003   12421783   mail
    956    7070316   rodmur
    653    3991200   merlin
    526    3532529   root
    140     686506   bam
     87     280270   linux
     19      68884   zsprackett
     16       7712   snaarding
     13     165414   dcoulson
      5     118522   rob
      2       1256   rhuang
      2        829   ccrouchet


Top 50 local senders by volume
------------------------------

   1003   12421783   mail
    956    7070316   rodmur
    653    3991200   merlin
    526    3532529   root
    140     686506   bam
     87     280270   linux
     13     165414   dcoulson
      5     118522   rob
     19      68884   zsprackett
     16       7712   snaarding
      2       1256   rhuang
      2        829   ccrouchet


Top 50 destinations by message count
------------------------------------

  71716  933807982   local
    956    7070316   enigma.hdqt.valinux.com
    781    3367960   mail.engr.valinux.com
    778    3657420   home.linux3d.org
    653    3991200   magic.hdqt.valinux.com
    622    5487380   lists.valinux.com
    618    3431119   sv1.valinux.co.jp
    402    3686223   primx.cistron.nl
    314    1423448   mail.intrex.net
    251     596783   mail.redhat.com
    172    6261960   mail.life.be
    167     642342   kitenet.net
    140     686506   inbound.omnisky.net.criticalpath.net
    133    7665609   mail1.synnex.com
    129     677968   gambit.ihug.com.au
    123     591074   mail.lunabase.org
     94    2428672   mx1.mail.yahoo.com
     91    7835945   mail.terrehon.com
     87    1043311   dandelion.com
     71     375032   lum.fezbox.com
     70     279978   mailhost.xfree86.org
     63     359607   mail1.vlaanderen.be
     61     381559   mail.alabanza.com
     43     154116   mail.sourceforge.net
     42    2173622   mail.bwd.com
     42     511185   mail.osdn.com
     41     142250   lists.linux.or.jp
     35     102230   blueraja.scyld.com
     34    6041779   mail.accesspr.com
     32     244899   mx-rr.home.com
     31     324264   mail.linux.com
     25     830297   mail.epicrealm.com
     23     131152   paging.bactc.com
     22     160860   mailin-04.mx.aol.com
     21     195082   mailin-01.mx.aol.com
     21      91065   mail1.listbot.com
     20    9308613   mail.e-g.com
     19     181113   mailin-02.mx.aol.com
     19      68884   aka1.electric.net
     18    6085951   external-relay2.akamai.com
     18     152153   mailin-03.mx.aol.com
     18      86326   mail-lax.pilot.net
     18      68625   mail.zaconta.com
     17   14537894   mail1.flextronics.com
     17      44254   capsicum.zgp.org
     16     182903   rtn.emazing.com
     16      52371   mx1.cistron.net
     16      28250   mx2.business.mindspring.com
     15     364211   pinky.idg.com
     15     280599   mail.upn.net


Top 50 destinations by volume
-----------------------------

  71716  933807982   local
     17   14537894   mail1.flextronics.com
      3    9455484   mail-uunet.ecrix.com
      1    9436888   mailhost.worksta.com
     20    9308613   mail.e-g.com
      1    8955808   mail.flyinglogo.com
     91    7835945   mail.terrehon.com
    133    7665609   mail1.synnex.com
      8    7255567   gateway2.worldnet.att.net
    956    7070316   enigma.hdqt.valinux.com
      6    6923832   gateway6.worldnet.att.net
    172    6261960   mail.life.be
     18    6085951   external-relay2.akamai.com
     34    6041779   mail.accesspr.com
      8    5987343   pop2.san.rr.com
    622    5487380   lists.valinux.com
      2    5063300   gateway4.att.net
      5    4723895   sco.sco.com
      2    4495571   mx1.digisle.net
     10    4432362   gateway3.worldnet.att.net
    653    3991200   magic.hdqt.valinux.com
    402    3686223   primx.cistron.nl
    778    3657420   home.linux3d.org
    618    3431119   sv1.valinux.co.jp
    781    3367960   mail.engr.valinux.com
      5    2530688   gateway1.worldnet.att.net
     94    2428672   mx1.mail.yahoo.com
      6    2206835   external-relay1.akamai.com
     42    2173622   mail.bwd.com
      8    2015387   mail.deltad.com
      7    1992260   mailhub2.svg.com
      5    1927617   yg.mx.aol.com
      2    1916212   lonestar.jsc.nasa.gov
      2    1916212   tuckermail.tuckerrocky.com
      1    1915322   mail1.mcbrideelectric.com
      1    1915322   mx1.nl.home.com
    314    1423448   mail.intrex.net
      4    1317592   tpcg.net
      4    1096162   gateway3.att.net
     87    1043311   dandelion.com
      9    1033295   mc5.law5.hotmail.com
      2    1020657   mx00.earthlink.net
      5    1018427   gateway5.att.net
      4    1005068   mail.infolibria.com
      4     928318   mail.andover.net
     11     837427   proxy2.cisco.com
     25     830297   mail.epicrealm.com
      5     811335   mx02.netapp.com
      2     809925   fna.fujitsu.com
      6     808691   minos.intel.com


Top 50 local destinations by message count
------------------------------------------

   1153    4273037   chip
   1121    2845223   dgoehrig
   1120    3762926   shaleh
    973    3718632   rob
    956    6922492   rodmur
    903    3392111   ajort
    844    8346206   adam
    758    2694384   cosper
    745    3596879   gcarter
    683    2906554   sflory
    675    2394820   fusion94
    672    3935410   merlin
    672    2568254   gpryzby
    667    2821666   visitor
    623    2351248   jhartmann
    619    2442376   jhoffmann
    584    2054028   rjlemley
    579    2543657   juergen
    573    2202695   faith
    566    2617482   joseph
    561    1933107   jkenniso
    543    2056205   flemming
    539    1901133   jadams
    537    3532338   ds
    528    1904812   tschenk
    522    2336661   hjl
    504    2867430   jeremy
    493    2146857   jmwalker
    483    2019413   ajramos
    462    1397923   agarza
    460    1795347   gherteg
    445    3576804   michael
    444    1596357   pda
    432    5705527   tperdue
    421    3346143   jneal
    410    1430390   jmcdermott
    406    2452476   jpine
    397    1652486   mej
    392    3865553   bdespain
    391    1485861   jgoebel
    387    1489769   ben
    381    1858867   apeterson
    379    1705212   jfreeman
    378    1855702   ian
    376    1596703   sad
    370    1430976   chris
    368    1972815   rfurst
    365    1579870   mkomarinski
    347    3363797   dbellizzi
    338    7225956   /home/lma/Mail/inbox <lma@???>


Top 50 local destinations by volume
-----------------------------------

     29   99267405   gbandak
    333   23997575   sgaar
     67   12471767   rtalob
    191   11771752   eendo
    221   11183905   rlarsen
    152    9721684   tbowden
    153    9666199   jmurdock
     30    9463765   bgeorge
    122    9426344   paul
     61    9414827   mmarquez
    141    9370291   meg
     73    9205155   alangarica
     74    8576602   svitali
    844    8346206   adam
      9    7997237   /var/spool/exim/rejects/embeddedmimeattachement <message filter>
    110    7872557   knelson
    338    7225956   /home/lma/Mail/inbox <lma@???>
     35    6929371   dlevien
    956    6922492   rodmur
     51    6502232   dschreiber
    138    6500143   salerno
     70    6161013   ctaylor
    257    5925111   pwong
     46    5921559   aibara
    298    5920986   lisa
     86    5842829   jkeith
    164    5811029   tjones
    432    5705527   tperdue
    125    5611030   bheflin
     38    5469453   spatel
    202    5359943   zfisher
    118    5307328   nslaught
     90    5282916   khutchings
     79    5110973   dshore
     39    4945636   wschumann
    169    4902008   kpeoples
     57    4881702   kminami
    222    4837778   khoran
    141    4788499   mmarriott
    178    4728693   kspencer
    119    4517857   bbiles
    290    4428887   jcornell
     17    4365304   jdonan
     44    4339057   tersch
   1153    4273037   chip
     95    4191179   rfrench
    128    4178354   cjauco
    150    4156091   thenry
     99    4153122   cstrasen
    213    4094856   bone


List of errors
--------------

(snipped)

----- End forwarded message -----

-- 
Microsoft is to operating systems & security ....
                                      .... what McDonalds is to gourmet cooking


Home page: http://marc.merlins.org/ | Finger marc_f@??? for PGP key