August 26, 2003

So close....

Sobig disappointed, trending downward in deliveries. Copy 40K showed up at 3:53:54 EDT. I should put together graphs or something.

Posted by Dan at August 26, 2003 08:31 AM | TrackBack (0)
Comments

Hi, nice blog you've got here :) I'll watch for those graphs, Kevin mentioned them. Have you kept all 40K messages? It'd be really interesting to run a network mapping tool on the implicit connections demonstrated by the messages.

Posted by: Richard Soderberg at September 1, 2003 01:34 AM

I've not kept all the messages--the only thing I've got to work from is procmail's filter log, though I do have sendmail's logs, so I could possibly link the two. It would definitely be interesting to see where everything was coming from, and whether it'd be worth blocking certain sites at the mailserver level.

I really need to get realtime RRD graphs of this stuff set up...

Posted by: Dan at September 3, 2003 01:54 PM