I direct syslog messages from all the SA servers to the same Linux box and then run a perl script to popualate RRD files every hour.
The trend Simon mentioned can be seen here .. http://biodef.org/Percentage_5W.png Although that is only half the story since it could be related to a reduction in legit incoming email. If anyone is interested I could put the scripts somewhere, but they are written for our setup and don�t know to handle other MTA mailformats. They collect Stats about Postfix In/Outbound emails as well as SA stats. - R�khar�ur -----Original Message----- From: jdow [mailto:[EMAIL PROTECTED] Sent: 11 May, 2004 7:23 AM To: [EMAIL PROTECTED] Subject: Re: SPAM multiplying since use of spamassassin From: "Simon Byrnand" <[EMAIL PROTECTED]> > At 16:49 11/05/2004, jdow wrote: > > >Around here spam seems to ratchet its way upwards. It goes up dramatically > >then slides down a little then rises dramatically again some time > >later. Each peak seems to be higher than the preceding peak. > > > >It also has a weekly frequency distribution and a time of day > >frequency distribution superimposed on the ratchet upward. > > I wouldn't mind graphing our global mailserver spam statistics using > mrtg to see these trends, does anyone know of any scripts that can do > that ? I'm > using sendmail with procmail and spamc/spamd. I cheat, Simon. I simply store the day's spam in my spam folder. I check it from time to time for false alarmed ham. And I clean out both deleted mail and spam once a day. So it's easy to see light days and heavy days. And I can remember days when it was 100 spams rather than 200 to 250 spams. Others have seen far steeper increases in spam, though. So I'm careful to note that the modest rate of increase here is not something I am complaining about that it's too low. {^_-} {^_^}
