From owner-freebsd-stable Fri May 11 11: 8:53 2001 Delivered-To: freebsd-stable@freebsd.org Received: from khavrinen.lcs.mit.edu (khavrinen.lcs.mit.edu [18.24.4.193]) by hub.freebsd.org (Postfix) with ESMTP id 1B1C837B423 for ; Fri, 11 May 2001 11:08:51 -0700 (PDT) (envelope-from wollman@khavrinen.lcs.mit.edu) Received: (from wollman@localhost) by khavrinen.lcs.mit.edu (8.9.3/8.9.3) id OAA95315; Fri, 11 May 2001 14:08:46 -0400 (EDT) (envelope-from wollman) Date: Fri, 11 May 2001 14:08:46 -0400 (EDT) From: Garrett Wollman Message-Id: <200105111808.OAA95315@khavrinen.lcs.mit.edu> To: art@pilikia.net Subject: Re: sendmail traffic analysis In-Reply-To: <20010511172756$2b96@traf.lcs.mit.edu> Organization: MIT Laboratory for Computer Science Cc: stable@freebsd.org Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG In article <20010511172756$2b96@traf.lcs.mit.edu> you write: >I'm not sure how to monitor sendmail with SNMP, and would be >interested in hearing from others what tools they use to monitor SMTP >traffic on their FreeBSD systems. Depends on what and how you want to monitor. For BIND, I wrote a little script that stuffs those annoying statistics dumps into an RRD. You could conceivably do the same thing with sendmail, although you would have to collect your own stats by analyzing the log files. The one place where we use SNMP to monitor sendmail is by using ucd-snmp's process monitoring feature. We then use Cricket to monitor the number of sendmails active. While this is statistically invalid (because cricket measures every five minutes exactly) it still gives us a useful look at what's going on. (I just looked at my long-term cricket graphs and learned something which was totally new to me: there seems to be a new outbreak of the Hybris worm on the seventh day of every month, although the population seems to have peaked last February.) -GAWollman -- Garrett A. Wollman | O Siem / We are all family / O Siem / We're all the same wollman@lcs.mit.edu | O Siem / The fires of freedom Opinions not those of| Dance in the burning flame MIT, LCS, CRS, or NSA| - Susan Aglukark and Chad Irschick To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message