Plesk 9.2.1 reporting much more SMTP traffic than the logs indicate

Plesk is reporting nearly 7GB of SMTP traffic so far this month on one domain, most of it outgoing. However, after running qmail's mail logs (which only go back to May 8) through Sawmill, only about 900MB of traffic on that domain is accounted for.

What I know so far:

• Email sent via PHP's mail() function is sent through sendmail, which has been logging its output via syslog to the same logs that qmail uses, at /usr/local/psa/var/log/

• Messages sent by logging in directly via Telnet are logged as well

• I verified that Plesk is reporting totals correctly by creating a new domain, sending some large emails through it, running Plesk's statistics calculation script, and comparing its reported totals to the actual size of the emails sent

• The problem domain did have three mail accounts with blank or insecure passwords, which I corrected

Does anyone know how Plesk calculates SMTP traffic statistics? Are there some log files elsewhere that I'm missing? What kind of SMTP traffic would Plesk know about that isn't being logged?

---

EDIT: Since fixing the blank/weak mail passwords on the domain, the traffic seems to have returned to normal, but I still haven't solved how Plesk calculated those amounts if they aren't showing in the logs.

From serverfault Eric3

• Hello,

  I have been struggling with this problem for 2 months. Could you find a solution?

  From Seha