dtrace for monitoring outgoing SMTP connection
Hi Gurus,
I'm told to find out the applications on a number of servers sending emails using a relay to be retired. For this, I'm looking for a dtrace script to monitor outgoing SMTP connections.
The information I need is the name of the processes that are making outgoing SMTP connections and the IP of the remote host. I was trying to use the tcpsnoop comes with DTrace-Toolkit. but it doesn't work:
sbtorsvr391# ./tcpsnoop -a
"/usr/include/sys/modctl.h", line 276: major: argument mismatch
dtrace: failed to compile script /dev/fd/11: "/usr/include/sys/modctl.h", line 276: syntax error near "1"