On my mail server, I would like to be able to see which PC's in the network may be spamming, I can run tethereal to look at all packets coming to the mail or going from the mail server. However, I would like to know what I should be looking for precisely.

Or is there a better tool to use. I've heard of using iptraf, but this is not installed on the SLES v11 server.

Thanks