Port 25 Heavy Bandwidth

[kram@]

Hello All,

Is there are easy way to dertermine what domain is utilizing a heavy chunk of bandwidth on port 25?

I have a situation where at certain times of the day my server reports heavy utlization over 4Mbps, when i check with IPTRAF i can see it is all on port 25.

I can get the ip generating the traffic, but the ip is a dynamic ip from a local DSL servcie provider.

What i assume is happening is the client is pushing a number of "large" files from a 1Mbps DSL once it gets to my server it is pushed out a the max rate of my allocated bandwidth.

Any help will be greatly appcriated!!!

 

[wagnerch]

You can look in your maillog (/usr/local/psa/var/log/maillog on Fedora):

Mar 15 22:11:24 u15183227 qmail: 1142478684.489763 info msg 12601731: bytes 32315 from <yoyo@nowhere.com> qp 8294 uid 2020


There is a field there, bytes 32315. Which means the message was 32K. grep "info msg" /usr/local/psa/var/log/maillog should help narrow it down.