# grep "<=.*P=local" /var/log/exim_mainlog | awk '{print $6}' | sort | uniq -c | sort -nr | head -5
8506 U=k48it
7537 U=raovat
1373 U=tiengvan
349 U=root
137 U=anhluane
# tail -n1000 /var/log/exim_mainlog |grep SMTP|cut -d[ -f2|cut -d] -f1|sort -n |uniq -c
13714 R=localuser
1 R=virtual_user
# awk '{ if ($0 ~ "cwd" && $0 ~ "home") {print $3} }' /var/log/exim_mainlog | sort | uniq -c | sort -nk 1
2 24-10-2011
6884 3
#tail -n1000 /var/log/exim_mainlog |grep SMTP|cut -d[ -f2|cut -d] -f1|sort -n |uniq -c
1 74.125.127.27
1 2012-03-08 07:15:28 exim 4.69 daemon started: pid=1886, -q2h, listening for SMTP on port 25 (IPv6 and IPv4) and for SMTPS on port 465 (IPv6 and IPv4)
1 2012-03-08 07:20:30 exim 4.69 daemon started: pid=2709, -q2h, listening for SMTP on port 25 (IPv6 and IPv4) and for SMTPS on port 465 (IPv6 and IPv4)
1 2012-03-08 07:25:48 exim 4.69 daemon started: pid=3491, -q2h, listening for SMTP on port 25 (IPv6 and IPv4) and for SMTPS on port 465 (IPv6 and IPv4)
1 2012-03-08 07:30:31 exim 4.69 daemon started: pid=4367, -q2h, listening for SMTP on port 25 (IPv6 and IPv4) and for SMTPS on port 465 (IPv6 and IPv4)
1 2012-03-08 07:35:32 exim 4.69 daemon started: pid=5283, -q2h, listening for SMTP on port 25 (IPv6 and IPv4) and for SMTPS on port 465 (IPv6 and IPv4)
1 2012-03-08 07:40:33 exim 4.69 daemon started: pid=6216, -q2h, listening for SMTP on port 25 (IPv6 and IPv4) and for SMTPS on port 465 (IPv6 and IPv4)
1 2012-03-08 07:45:34 exim 4.69 daemon started: pid=7066, -q2h, listening for SMTP on port 25 (IPv6 and IPv4) and for SMTPS on port 465 (IPv6 and IPv4)
1 2012-03-08 07:50:36 exim 4.69 daemon started: pid=7930, -q2h, listening for SMTP on port 25 (IPv6 and IPv4) and for SMTPS on port 465 (IPv6 and IPv4)
1 2012-03-08 07:55:36 exim 4.69 daemon started: pid=8797, -q2h, listening for SMTP on port 25 (IPv6 and IPv4) and for SMTPS on port 465 (IPv6 and IPv4)
1 2012-03-08 07:57:22 exim 4.69 daemon started: pid=9271, -q2h, listening for SMTP on port 25 (IPv6 and IPv4) and for SMTPS on port 465 (IPv6 and IPv4)
root@server [~]#
# egrep -o 'dovecot_login[^ ]+' /var/log/exim_mainlog | sort|uniq
31 dovecot_login:noreply+bdssg.co.cc
5721 dovecot_login:noreply@bdssg.co.cc
|