Bot?

[Kevin Wilcox]

On 5 January 2011 10:47, Jerry Bell <jerry at nrdx.com> wrote:

> There could be reasons you
> aren't seeing a spike, such as you're only looking at traffic processed by
> the MTA, or it simply doesn't show as a material increase on a graph of
> traffic on the network interface if the server is busy.

Those are good points and to go a little further regarding looking at
traffic...

To really see what your machine is doing, consider taking a look at
the network flows. pfflowd, netflowd, ipaudit and a host of others can
get you flow data with mostly minimal overhead.

kmw