From owner-freebsd-questions@FreeBSD.ORG  Wed Jan  5 16:15:04 2011
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 7F7BA106564A
	for <freebsd-questions@freebsd.org>;
	Wed,  5 Jan 2011 16:15:04 +0000 (UTC)
	(envelope-from kevin.wilcox@gmail.com)
Received: from mail-yi0-f54.google.com (mail-yi0-f54.google.com
	[209.85.218.54])
	by mx1.freebsd.org (Postfix) with ESMTP id 3DFD98FC0A
	for <freebsd-questions@freebsd.org>;
	Wed,  5 Jan 2011 16:15:03 +0000 (UTC)
Received: by yie19 with SMTP id 19so4212248yie.13
	for <freebsd-questions@freebsd.org>;
	Wed, 05 Jan 2011 08:15:03 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma;
	h=domainkey-signature:mime-version:received:received:in-reply-to
	:references:date:message-id:subject:from:to:content-type;
	bh=Vqq8nJLKTsP5bDl72aLC3BRQ2b373xrO1zhvamzp2m8=;
	b=D+CfnBLH4S63yrdWtlkt4EMyDVGkB7D9+sKUcaJ4mvg4OZJEgbrPiZHpxgH4srCbZi
	wT36F/S7Q7mP0yrNhabQZTQlzmMElbbuPh04jhqyuX3LbDY10xupEpFG/5vODNM7ENHw
	J2HDZzav9IF2wPmqHNEdvDuQpyNGkCoNSfFIg=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=mime-version:in-reply-to:references:date:message-id:subject:from:to
	:content-type;
	b=PTrLA1Z+pL6LI/UCUjCp/Uqxmibw3pWp02MX6kexTMP/EvlSHeMzZrsonBQXfDA/Ev
	dUg+mvlCRGT2rJ/7H+Sr4lKBJk//6a8Crq2NUVY+bkb7m5aprKBGAxaved4WxcrbBoX9
	M6T8m2/Ifk/Xui+S4cUqQFdjywRHMpGigag7M=
MIME-Version: 1.0
Received: by 10.90.14.40 with SMTP id 40mr851795agn.60.1294244103135; Wed, 05
	Jan 2011 08:15:03 -0800 (PST)
Received: by 10.90.73.20 with HTTP; Wed, 5 Jan 2011 08:15:00 -0800 (PST)
In-Reply-To: <4D249298.9080706@nrdx.com>
References: <4D249129.6090008@webtent.net>
	<4D249298.9080706@nrdx.com>
Date: Wed, 5 Jan 2011 11:15:00 -0500
Message-ID: <AANLkTi=+=FGeQevAnxii6m2XK7i+617Mt4EkQfd2Ucv0@mail.gmail.com>
From: Kevin Wilcox <kevin.wilcox@gmail.com>
To: freebsd-questions@freebsd.org
Content-Type: text/plain; charset=UTF-8
Subject: Re: Bot?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 05 Jan 2011 16:15:04 -0000

On 5 January 2011 10:47, Jerry Bell <jerry@nrdx.com> wrote:

> There could be reasons you
> aren't seeing a spike, such as you're only looking at traffic processed by
> the MTA, or it simply doesn't show as a material increase on a graph of
> traffic on the network interface if the server is busy.

Those are good points and to go a little further regarding looking at
traffic...

To really see what your machine is doing, consider taking a look at
the network flows. pfflowd, netflowd, ipaudit and a host of others can
get you flow data with mostly minimal overhead.

kmw