[Dovecot] Weird log entries when some users are composing messages in Thunderbird
Hi all/Timo,
When some of our users are composing a message in Thunderbird, I see a ton of these in the logs, and they keep repeating the entire time they are typing until the message gets sent...
2013-08-05T10:34:42-04:00 myhost dovecot: imap-login: Login: user=user@media-brokers.com, method=PLAIN, rip=###.###.###.###, lport=993, mpid=8152, TLS, session=<El2GNTTjNgDAqAIc> 2013-08-05T10:34:42-04:00 myhost dovecot: imap(user@media-brokers.com): Disconnected: Disconnected in IDLE in=149 out=12449 2013-08-05T10:34:42-04:00 myhost dovecot: imap-login: Login: user=user@media-brokers.com, method=PLAIN, rip=###.###.###.###, lport=993, mpid=8153, TLS, session=<lJedNTTjNwDAqAIc> 2013-08-05T10:34:42-04:00 myhost dovecot: imap(user@media-brokers.com): Disconnected: Disconnected in IDLE in=149 out=12449
I confirmed that their 'Auto-Save' settings are the defaults (5 minutes, same as mine), and when I'm composing a message, there are no entries like this. The only other option I could think of that might affect t his is the 'spell check as you type', which is also enabled on mine.
Also - I'm not sure this *always* happens to these users... all I know is, I see these flooding the logs sometimes, and when I remote in, that user is composing a message.
Anyone have any idea why this happens to only a few of our users, and possibly only sometimes? Could it be something in the HTML of the quoted text when they are replying to certain messages?
Thanks,
--
Best regards,
Charles
On 5.8.2013, at 17.45, Charles Marcus CMarcus@Media-Brokers.com wrote:
Hi all/Timo,
When some of our users are composing a message in Thunderbird, I see a ton of these in the logs, and they keep repeating the entire time they are typing until the message gets sent...
2013-08-05T10:34:42-04:00 myhost dovecot: imap-login: Login: user=user@media-brokers.com, method=PLAIN, rip=###.###.###.###, lport=993, mpid=8152, TLS, session=<El2GNTTjNgDAqAIc> 2013-08-05T10:34:42-04:00 myhost dovecot: imap(user@media-brokers.com): Disconnected: Disconnected in IDLE in=149 out=12449 2013-08-05T10:34:42-04:00 myhost dovecot: imap-login: Login: user=user@media-brokers.com, method=PLAIN, rip=###.###.###.###, lport=993, mpid=8153, TLS, session=<lJedNTTjNwDAqAIc> 2013-08-05T10:34:42-04:00 myhost dovecot: imap(user@media-brokers.com): Disconnected: Disconnected in IDLE in=149 out=12449
No idea, but check what the sessions do: http://wiki2.dovecot.org/Debugging/Rawlog
On 2013-08-05 10:48 AM, Timo Sirainen tss@iki.fi wrote:
On 5.8.2013, at 17.45, Charles Marcus CMarcus@Media-Brokers.com wrote:
Hi all/Timo,
When some of our users are composing a message in Thunderbird, I see a ton of these in the logs, and they keep repeating the entire time they are typing until the message gets sent...
2013-08-05T10:34:42-04:00 myhost dovecot: imap-login: Login: user=user@media-brokers.com, method=PLAIN, rip=###.###.###.###, lport=993, mpid=8152, TLS, session=<El2GNTTjNgDAqAIc> 2013-08-05T10:34:42-04:00 myhost dovecot: imap(user@media-brokers.com): Disconnected: Disconnected in IDLE in=149 out=12449 2013-08-05T10:34:42-04:00 myhost dovecot: imap-login: Login: user=user@media-brokers.com, method=PLAIN, rip=###.###.###.###, lport=993, mpid=8153, TLS, session=<lJedNTTjNwDAqAIc> 2013-08-05T10:34:42-04:00 myhost dovecot: imap(user@media-brokers.com): Disconnected: Disconnected in IDLE in=149 out=12449 No idea, but check what the sessions do: http://wiki2.dovecot.org/Debugging/Rawlog
Thanks Timo, I'll do this in the morning when no one is here...
Hmmm... can this be enabled for this a couple of users (those that I've noticed this happening to)? The wiki says that it works 'by checking if dovecot.rawlog/ directory exists in the logged in user's home directory'... so, does this mean I would just need to make sure I only had that directory for the users I wanted to monitor? Or would I get lots of errors for all of the users that*didn't* have this directory?
--
Best regards,
Charles
On 5.8.2013, at 18.18, Charles Marcus CMarcus@Media-Brokers.com wrote:
No idea, but check what the sessions do: http://wiki2.dovecot.org/Debugging/Rawlog
Thanks Timo, I'll do this in the morning when no one is here...
Hmmm... can this be enabled for this a couple of users (those that I've noticed this happening to)? The wiki says that it works 'by checking if dovecot.rawlog/ directory exists in the logged in user's home directory'... so, does this mean I would just need to make sure I only had that directory for the users I wanted to monitor?
Yes.
Or would I get lots of errors for all of the users that*didn't* have this directory?
No errors, just silent skipping.
On 2013-08-05 11:28 AM, Timo Sirainen tss@iki.fi wrote:
On 5.8.2013, at 18.18, Charles Marcus CMarcus@Media-Brokers.com wrote:
No idea, but check what the sessions do: http://wiki2.dovecot.org/Debugging/Rawlog Thanks Timo, I'll do this in the morning when no one is here...
Hmmm... can this be enabled for this a couple of users (those that I've noticed this happening to)? The wiki says that it works 'by checking if dovecot.rawlog/ directory exists in the logged in user's home directory'... so, does this mean I would just need to make sure I only had that directory for the users I wanted to monitor? Yes.
Or would I get lots of errors for all of the users that*didn't* have this directory? No errors, just silent skipping.
Excellent - thanks!
--
Best regards,
Charles
participants (2)
-
Charles Marcus
-
Timo Sirainen