Re: [IMail Forum] MRTG Scripts For Imail Updated

[Gordon Waters]

I am not sure of the Syslog format , but the SYS , format looks like this. 12:12 00:00 IMAP4 (00000BB4) logon success for peterk canberratimes.com.au from 192.168.6.61 12:12 00:00 SMTPD(ef541a1902123e00) [192.168.10.50] connect 192.168.10.50 port 2942 12:12 00:00 SMTPD(ef561a1a02123e01) [127.0.0.1] connect 127.0.0.1 port 2974 12:12 00:00 SMTPD(ef5b1a1b02123e02) [192.168.10.50] connect 192.168.10.70 port 3233 12:12 00:00 POP3D (00001418) NTlogon success for sms canberratimes.com.au from 192.168.10.38 12:12 00:00 POP3D (00001418) logoff for sms R:0, D:0, P:0, RS:0 12:12 00:00 SMTP-(0000000000000000) Sending daily report 12:12 00:00 SMTP-(ef6900000aa8ccd3) processing f:\IMail\spool\Qef6900000aa8ccd3.CNT 12:12 00:00 SMTP-(ef6900000aa8ccd3) ldeliver canberratimes.com.au ServAdmin-Imail (1) 463 12:12 00:00 SMTP-(ef6900000aa8ccd3) finished f:\IMail\spool\Qef6900000aa8ccd3.CNT status=1 12:12 00:00 IMAP4 (00000BB4) logoff for peterk R:0, D:0, P:0 12:12 00:00 IMAP4 (0000153C) logon success for agodfrey canberratimes.com.au from 192.168.10.78 12:12 00:00 SMTP-(0000000000000000) Info - Queue manager starting Queue run 3813 12:12 00:00 IMAP4 (00000344) logon success for servadmin canberratimes.com.au from 192.168.10.78 12:12 00:00 POP3D (000015B8) NTlogon success for CyberLetters canberratimes.com.au from 192.168.10.70 12:12 00:00 POP3D (000015b8) logoff for CyberLetters R:0, D:0, P:0, RS:0 12:12 00:00 POP3D (00001550) NTlogon success for cybernews canberratimes.com.au from 192.168.10.70 12:12 00:00 POP3D (00001550) logoff for cybernews R:0, D:0, P:0, RS:0 12:12 00:00 POP3D (000011DC) NTlogon success for Cybersport canberratimes.com.au from 192.168.10.70 12:12 00:00 POP3D (000011dc) logoff for Cybersport R:0, D:0, P:0, RS:0 12:12 00:00 POP3D (00000284) NTlogon success for cybercomputing canberratimes.com.au from 192.168.10.70 12:12 00:00 POP3D (00000284) logoff for cybercomputing R:0, D:0, P:0, RS:0 12:12 00:00 POP3D (00001400) NTlogon success for cyberfeatures canberratimes.com.au from 192.168.10.70 12:12 00:00 POP3D (00001400) logoff for cyberfeatures R:0, D:0, P:0, RS:0 12:12 00:01 SMTPD(ef8c051602763e03) [192.168.10.50] connect 192.168.10.24 port 3911 12:12 00:01 SMTPD(ef8c051602763e03) [192.168.10.24] EHLO ct-mail.canberratimes.com.au 12:12 00:01 SMTPD(ef8c051602763e03) [192.168.10.24] MAIL From:<[EMAIL PROTECTED]> 12:12 00:01 SMTPD(ef8c051602763e03) [192.168.10.24] RCPT To:<[EMAIL PROTECTED]> 12:12 00:01 SMTPD(ef8c051602763e03) [192.168.10.24] f:\IMail\spool\Def8c051602763e03.SMD 1271 darrell_list wrote: I have my logs set to go to the IMAIL syslog server. It generates the name as LOGMMDD.TXT. I suspect you are using the SYSMMDD.TXT format? Is the log information sent to that file the same as whats sent to the LOGMMDD.TXT file? If so I can quickly add support for custom log names. Let me know, Darrell Gordon Waters writes: I have Imail 8.14 , and I dont have any log files name LOGMMDD.txt , as reqiured by ImailMRTG.exe. My Log files are Am I missing something. Gordon. darrell_list wrote: We have updated our Imail MRTG scripts to now track the volume of dictionary attacks. It will graph the following ( Invalid User Attempts / Responsible IP Addresses). The IMail/MRTG integration stuff is free and you can get it from http://www.invariantsystems.com. Darrell To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/   To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ ---------------------------------------------------------------------------- ------------------------------------ Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, MRTG Integration, and Log Parsers. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ -- Gordon Waters Network / Server Administrator The Canberra Times 9 Pirie St Fyshwick ACT 2610 Ph : (02) 6280 2393 Fax: (02) 6280 2141