On Tue, Nov 10, 2009 at 9:14 PM, Stan Hoeppner <s...@hardwarefreak.com> wrote: > /dev/rob0 put forth on 11/10/2009 7:58 PM: >> On Tuesday 10 November 2009 19:21:04 Chris Arnold wrote: >>> OK, nothing stands out from pflogsumm.pl: >> >> Nothing? >> >>> Per-Day Traffic Summary >>> date received delivered deferred bounced rejected >>> -------------------------------------------------------------------- >>> Nov 9 2009 1 3 1 >>> Nov 10 2009 15328 15475 390 127 1115 >> >> Wouldn't you say that's a bit of an increase from the previous day? >> Perhaps significant? > > Rob, I think that's likely the result of log rotation timing. If you've > not seen this before, or often, you probably haven't been using > pflogsumm 'enough'. ;) > > Doing something like this usually prevents the anomaly above: > pflogsumm.pl /var/log/mail.log /var/log/mail.log.0 /var/log/mail.log.1 >
If spam from this server is the cause of trouble, it may have happened some days ago. The OP needs to look at a few days past. Depending on log rotation, this may involve several files, some of which may be gzipped. > -- > Stan >