Help me remember server scanner tool name

jeffschips

Well-Known Member
Jun 5, 2016
135
12
18
new york
cPanel Access Level
Root Administrator
Hello, here is a simple request.

A while back I came across a command-line perl or similar tool that when executed would scan your system for email activity and report which accounts sent out how many emails, etc. It is useful for seeing if a system has been compromised. I forgot the name but it was something like:

ec

or

ce

with command line switches.

Thoughts?
 

jeffschips

Well-Known Member
Jun 5, 2016
135
12
18
new york
cPanel Access Level
Root Administrator
Except it doesn't work. Anybody have some suggestions? Is this tool still being used? Can anyone get it to work. Back in the day it was very useful at tracking emails sent by accounts/users, in a period of time, etc.

ecpp -c [email protected]
ecpp_2.pl - Version: 20130416 - Michael Karr

Finding the creation time of: [email protected]
User: root
Domain: domain.com

readdir() attempted on invalid dirhandle $archivedh at /usr/bin/ecpp line 233.
closedir() attempted on invalid dirhandle $archivedh at /usr/bin/ecpp line 239.
Processing: /usr/local/cpanel/logs/access_log
Progress: 100%
 

cPanelLauren

Product Owner
Staff member
Nov 14, 2017
13,296
1,252
313
Houston
Ahh this is a really old script. We have the following (unofficial) custom script our tech support uses sometimes for this purpose:
perl <(curl -s https://raw.githubusercontent.com/cPanelTechs/SSE/master/sse.pl) -s