[BlueOnyx:17396] Re: Detecting compromised mail accounts

[Tigerwolf]

On Wed, 1 Apr 2015, Jeff Keller wrote:

> Is there no way to get "top senders" (either by user or domain) from the
> GUI?

I don't know of anything off the shelf, but if you trust the sendmail logs 
to reflect who sends what, I'd think a script to parse the log by sender, 
then count the results along the general idea of:

     For usernames in userlist
       echo username
       grep -c "from=username" /var/log/maillog

If you want to see it from a browser, then just make an html template page 
and have the script stuff it's output into the template.