Thank you Croydon!
Have you tried to verify whether Amavis' mail log is a reliable source for this kind of information then? I.e. does it log the size of every e-mail passing through it (and not some other sizes), and do these values look correct?
If this works, we'll only be lacking SMTP traffic accounting, that's quite some progress.