cat /var/log/maillog |grep "from=<" | grep -v "filter:" | grep -v "from=<>" | awk {'print $7'} | sort -n | uniq -c | sort -nr | head

or

cat /var/log/zimbra.log | sed -n 's/.*sasl_username=//p' | sort | uniq -c | sort -n
Advertisements