On Sat, 15 Mar 2003, Ken Hohhof wrote: > First, I regularly do something like: > > cd /var/spool/mail > ls -lS | head > ls -lrt | head
> The first ls finds mailbox hogs, the second finds abandoned mailboxes. Find is probably more useful for this, but YMMV > I guess you may feel this doesn't accomplish your goal because the > date on the mailspool file will be recent as long as it is receiving > mail even if it is not being checked. hint: ls -lu or find -atime/-mtime if you look at atimes in particular, you'll see the users who are reading but leaving mail on the server. In an ISP context, I found that find -size +1000k -atime -5 was useful for this kind of tracking, especially given a userbase sometimes lacking in $CLUE AB
