Results 1 to 5 of 5

Thread: Way to view messages by day

  1. #1
    Cryophallion is offline Senior Member
    Join Date
    Mar 2007
    Location
    New England
    Posts
    50
    Rep Power
    8

    Default Way to view messages by day

    I am running a server at a very small company (5 users typically). However, since I have some forwarding of a shared mailbox, and cad files are sent around, I can see some decent throughput on a day (50 megs is not atypical).
    However, I saw 400 megs the other day, none of which was marked as spam by the graph. I don't see where any of the users could have sent anything resembling that size.
    Is there a way to see the messages sent in a time period (one day, one week, etc), and maybe sender, recipient, and size? I am slightly concerned about my mta being used by spammers, but I'd also like to see where all this is coming from.

    Thanks for everyone's always kind help on this wonderful product.

  2. #2
    Krishopper is offline Dedicated Member
    Join Date
    Dec 2006
    Location
    Minneapolis MN
    Posts
    775
    Rep Power
    9

    Default

    Check out zmmsgtrace

    Code:
    Usage: /opt/zimbra/bin/zmmsgtrace -i msg_id | -s sender_addr -r rcpt_addr -F from_ip/host -D dest_ip/host -t start,end
            times in YYYYMMDD[hhmmss] format
    You can use just time too, and it should dump quite a bit of information for you to scroll through.

    For example, for midnight - 1AM on December 18th, 2007:

    Code:
    zmmsgtrace -t 20071218000000,20071218010000

  3. #3
    Cryophallion is offline Senior Member
    Join Date
    Mar 2007
    Location
    New England
    Posts
    50
    Rep Power
    8

    Default

    Awesome. While I could hope for message size, that still does most of it.

    It look to be 90% spam, blocked by the antivirus program, but it just wasn't colored blue in the graph. It doesn't seem to be using my mta to send out spam, which was my original concern.

    Your help is much appreciated.

  4. #4
    Krishopper is offline Dedicated Member
    Join Date
    Dec 2006
    Location
    Minneapolis MN
    Posts
    775
    Rep Power
    9

    Default

    If you're familiar with MySQL, you can look directly at the Zimbra Logger sql database and there is a "bytes" column in there.

    Use "logmysql" as the zimbra user to get into it.

    "use zimbra_logger;" to switch to the logger database.

    and all of the mta data is in the "mta" table. Some fields that may be of use are the arrive_time (allow you to query based on time), host (or from_host, from_IP, to_host, to_IP) sender, recipient, and bytes.

  5. #5
    mmorse's Avatar
    mmorse is offline Moderator
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    20

    Default

    There's actually a bunch of different RFE's in bugzilla to have the graphs more detailed, zoomable, more info in the daily reports, etc, etc.
    Bug 19109 - expose data from zimbrastats.csv in the admin console
    For instance you would be helped by either 'data sent per user' or a time series chart showing individual user quotas and you could check who got all that new content.
    More: Bug 17343 - domain statistics & Bug 19152 - RFE: Spam statistics

    Besides zmmsgtrace & mysql, you could also examine /opt/zimbra/log/ & /opt/zimbra/zmstat/
    Expecially if you prefer to make a quick graph or something; a quick list of some stuff to examine is here Log Files - Zimbra :: Wiki & more here Monitoring Zimbra Servers - Zimbra :: Wiki
    You might want to match up user logs with mailboxd.csv (formerly zimbrastats.csv) and look at things like lmtp_rcvd_msgs, lmtp_rcvd_bytes, lmtp_rcvd_rcpt, lmtp_dlvd_msgs, lmtp_dlvd_bytes - aka the number and size of messages received and delivered to narrow your search over time.
    Last edited by mmorse; 12-19-2007 at 10:24 AM.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. [SOLVED] Re-creating the spam training e-mail account
    By richard-hdd in forum Administrators
    Replies: 21
    Last Post: 03-20-2012, 07:34 AM
  2. New messages not showing up in outlook
    By bersrker in forum Zimbra Connector for Outlook
    Replies: 4
    Last Post: 01-16-2007, 08:17 AM
  3. Spam assassain not traiing properly!
    By Mike T in forum Administrators
    Replies: 1
    Last Post: 10-09-2006, 01:34 PM
  4. Unable to view messages in queues
    By mtnx in forum Administrators
    Replies: 1
    Last Post: 05-16-2006, 08:33 PM
  5. Replies: 5
    Last Post: 01-04-2006, 03:22 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •