Re: [cobalt-security] traffic question

[Edwin Groenescheij <edwin@xxxxxxxxxxxxxxxx>]

Matthew Nuzum wrote:
> 
> If you offer e-mail or ftp services, you're going to have to save and
> process these logs.  I found a tool a while back on sunsite
> (http://metalab.unc.edu) that will convert e-mail log files into common
> log format so that it can be processed by standard web log processing
> tools.  ProFTP also supports using the same log format as apache, so it
> is easily processed.

You don't really need to process these log files yourself, the
Cobalt RaQ server already does that for you (see the *.log files
in /home/sites/site/logs/). These log files are generated each
night at 4.00AM (unless you changed the default logrotate/cron
settings).
We're running Webalizer to generate web/mail/ftp stats for each
domain and I extract used data traffic from the webalizer history
files. This allows me to monitor each sites usage. 

Cheers,
Edwin