Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Please check this image, it's a screenshot from plesk 10 of 1 domains mail traffic:

enter image description here

This domain has about 1GB POP3/IMAP (OUT) traffic each day. I know that this is not normal because I know the owner and how he's using his mail. It's just some mails each day.

Is OUT in this case incomming mails to the domain owner? or is it OUTgoing imap traffic?

I have about 30 domains on this machine, but this one is the only one making so much traffic.

How can I check whats happening there? Can I check which email adress makes the most of this traffic? Can I try to swich off Imap for just this domain?

share|improve this question
up vote 2 down vote accepted

When I read this correctly, Plesk shows you the outgoing IMAP traffic. This normally means that an IMAP client connects to your server and checks/receives mails.

This could also be caused by backup or synchronization scripts (I guess you would be aware of those).

My own Plesk installation uses courier-imap with logging disabled at default. I recommend to enable it according to this Plesk Knowledge Base article: Enabling POP3/IMAP logging in CourierIMAP.

You then should be able to have a look at the logs and find out what is happening there.

Another approach could be running tcpdump or tshark on the IMAP port and look what is happening. The disadvantage of this method is that you would need proper timing.

share|improve this answer
thx. one more question: how to disable just IMAP for a single domain? the only way I found until now is to disable IMAP service in firewall for all ... – Danzzz Mar 18 '12 at 12:59
Sorry, Plesk seems not to provide a possibility to do that. You'd have to configure that yourself via PAM (see here:…). – Valentin Mar 18 '12 at 13:10

You can also use awk to parse /usr/local/psa/var/log/maillog which is where the Plesk 'statistics' binary pulls it's data from. This guy does something along those lines.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.