Skip to main content

imap traffic

Comments

14 comments

  • ssfred
    Hello David, If you are looking to identify the volume of IMAP traffic for each domains, you can use the option "Bandwisth" available in cPanel. If you wish to track the IMAP activities on the server, you can get details from the log file /var/log/maillog
    0
  • cPanelMichael
    Hello :) Could you provide some more details about what in-particular you would like to determine? For instance, are you attempting to determine which account is using IMAP bandwidth? Feel free to attach some images to this thread to show us an example. Thank you.
    0
  • David Gamero
    Hello account that generates a lot of traffic imap is located, I need to know is where IMAP mail is sent, I made an analysis of virus in cpanel and found many viruses and eliminated, changed passwords cpanel, mysql and email, but continues to generate a lot of traffic imap, I send you a picture for you to check consumption. I looked at the log / var / log / maillog but no meeting since imap mail traffic is sent. Any ideas? Thank you very much and greetings.
    0
  • cPanelMichael
    I looked at the log / var / log / maillog but no meeting since imap mail traffic is sent.

    Are there no entries in /var/log/maillog at all, or do you see nothing that shows where the IMAP traffic is coming from? Thank you.
    0
  • David Gamero
    Hello sorry for the delay in answering, I can not find in the log the problem, use tail maillog -100 | grep "domain name" but I see little traffic imap, it is possible that can be sent from a joomla and does not appear in the logs? A greeting.
    0
  • cPanelMichael
    Hello, You can search /var/log/maillog with the "grep" command to see all matching results from that log file. Here's an example:
    grep domain.com /var/log/maillog
    Thank you.
    0
  • David Gamero
    Hi thanks for the info, as I know the size of the emails sent? I sent a line of log Jul 2 00:34:36 cp01 dovecot: imap(cristobal@domain.com): Logged out in=4222, out=643633566, bytes=4222/643633566 A greeting.
    0
  • cPanelMichael
    bytes=4222/643633566

    Hello, It separates the bytes delivered vs. the bytes received. Thank you.
    0
  • David Gamero
    Hi thanks for the answer, as I know from where he has received many megasbyte? A greeting.
    0
  • cPanelMichael
    Could you elaborate on the question? The logs you are referring to show IMAP usage, indicating the email user from that IP address checked their email via IMAP. Thank you.
    0
  • David Gamero
    Hello I send the second line where you see the ip client and my server, but as I know the mail client from which you send and receive emails? Jul 2 00:36:40 cp01 dovecot: imap-login: Login: user=, method=PLAIN, rip=83.XX.XX.XX, lip=185.XX.XX.XX, mpid=12296, TLS, session= A greeting
    0
  • cPanelMichael
    New Hello I send the second line where you see the ip client and my server, but as I know the mail client from which you send and receive emails?

    Hello, It's not possible to see the name of the email client (e.g. Outlook, Thunderbird) in /var/log/maillog. Thank you.
    0
  • David Gamero
    Hello there any way to find whm this email? or you know any software that you can install in whm showing me more information about mail traffic? I do not know where the source of excessive traffic on July 2 the day is, there was traffic 146gb imap A greeting.
    0
  • cPanelMichael
    I do not know where the source of excessive traffic on July 2 the day is, there was traffic 146gb imap

    You could browse through all of the "Jul 2" activity in /var/log/maillog with a command such as:
    grep "Jul 12" /var/log/maillog
    You can use ""WHM Home " Email " Mail Delivery Reports" to review email deliveries. However, note that it's possible for POP3/IMAP traffic to come logging in and downloading messages as opposed to sending/receiving messages. You may also find this thread helpful, but note you may need to change the commands to check for IMAP usage: Tracking Down Excessive POP3 Usage Thank you.
    0

Please sign in to leave a comment.