Help me remember server scanner tool name

[jeffschips]

Hello, here is a simple request.

A while back I came across a command-line perl or similar tool that when executed would scan your system for email activity and report which accounts sent out how many emails, etc. It is useful for seeing if a system has been compromised. I forgot the name but it was something like:

ec

or

ce

with command line switches.

Thoughts?

 

[jeffschips]

SOLVED:
ecpp -h to get help from the /usr/bin/ecpp

 

[jeffschips]

Except it doesn't work. Anybody have some suggestions? Is this tool still being used? Can anyone get it to work. Back in the day it was very useful at tracking emails sent by accounts/users, in a period of time, etc.

ecpp -c [email protected]
ecpp_2.pl - Version: 20130416 - Michael Karr

Finding the creation time of: [email protected]
User: root
Domain: domain.com

readdir() attempted on invalid dirhandle $archivedh at /usr/bin/ecpp line 233.
closedir() attempted on invalid dirhandle $archivedh at /usr/bin/ecpp line 239.
Processing: /usr/local/cpanel/logs/access_log
Progress: 100%

 

[cPanelLauren]

Ahh this is a really old script. We have the following (unofficial) custom script our tech support uses sometimes for this purpose:
perl <(curl -s https://raw.githubusercontent.com/cPanelTechs/SSE/master/sse.pl) -s

 

[jeffschips]

Thanks!