dovecot POP3 log shows too many identical RETR entries
Bappasaheb Nirmal
bappasaheb.nirmal at qlc.in
Tue Mar 21 18:50:25 EET 2017
Hello,
Dovecot log is showing too many POP3 RETR entries which are identical
lines. I also suspect that it is causing high pop traffic eating most of
the network bandwidth. Here are some of the lines out of 11009 in a
day. Such pattern is observed only for few users. dovecot version is
2.1.17.
==============
Mar 20 00:00:07 pi3 dovecot: pop3(user at example.com): Disconnected:
Logged out top=0/0, retr=1/64014, del=0/1429, size=478762716
Mar 20 00:00:07 pi3 dovecot: pop3-login: Login: user=<user at example.com>,
method=PLAIN, rip=43.243.173.97, lip=192.168.1.18, mpid=26645, secured,
session=<5CGrmRlLyAAr861h>
Mar 20 00:00:10 pi3 dovecot: pop3(user at example.com): Disconnected:
Logged out top=0/0, retr=1/64014, del=0/1429, size=478762716
Mar 20 00:00:11 pi3 dovecot: pop3-login: Login: user=<user at example.com>,
method=PLAIN, rip=43.243.173.97, lip=192.168.1.18, mpid=29932, secured,
session=<k6/gmRlL3gAr861h>
Mar 20 00:00:12 pi3 dovecot: pop3(user at example.com): Disconnected:
Logged out top=0/0, retr=1/64014, del=0/1429, size=478762716
Mar 20 00:00:13 pi3 dovecot: pop3-login: Login: user=<user at example.com>,
method=PLAIN, rip=43.243.173.97, lip=192.168.1.18, mpid=26819, secured,
session=<3DX6mRlLUQAr861h>
Mar 20 00:00:14 pi3 dovecot: pop3(user at example.com): Disconnected:
Logged out top=0/0, retr=1/64014, del=0/1429, size=478762716
Mar 20 00:00:15 pi3 dovecot: pop3-login: Login: user=<user at example.com>,
method=PLAIN, rip=43.243.173.97, lip=192.168.1.18, mpid=9636, secured,
session=<x5ghmhlLjwAr861h>
Mar 20 00:00:16 pi3 dovecot: pop3(user at example.com): Disconnected:
Logged out top=0/0, retr=1/64014, del=0/1429, size=478762716
Mar 20 00:00:17 pi3 dovecot: pop3-login: Login: user=<user at example.com>,
method=PLAIN, rip=43.243.173.97, lip=192.168.1.18, mpid=4585, secured,
session=<8Yw+mhlL0AAr861h>
Mar 20 00:00:18 pi3 dovecot: pop3(user at example.com): Disconnected:
Logged out top=0/0, retr=1/64014, del=0/1429, size=478762716
Mar 20 00:00:18 pi3 dovecot: pop3-login: Login: user=<user at example.com>,
method=PLAIN, rip=43.243.173.97, lip=192.168.1.18, mpid=30049, secured,
session=<UsJOmhlLmAAr861h>
Mar 20 00:00:19 pi3 dovecot: pop3(user at example.com): Disconnected:
Logged out top=0/0, retr=1/64014, del=0/1429, size=478762716
Mar 20 00:00:20 pi3 dovecot: pop3-login: Login: user=<user at example.com>,
method=PLAIN, rip=43.243.173.97, lip=192.168.1.18, mpid=9636, secured,
session=<B6VimhlLNgAr861h>
Mar 20 00:00:20 pi3 dovecot: pop3(user at example.com): Disconnected:
Logged out top=0/0, retr=1/64014, del=0/1429, size=478762716
Mar 20 00:00:20 pi3 dovecot: pop3-login: Login: user=<user at example.com>,
method=PLAIN, rip=43.243.173.97, lip=192.168.1.18, mpid=4584, secured,
session=<pVpxmhlLPwAr861h>
Mar 20 00:00:21 pi3 dovecot: pop3(user at example.com): Disconnected:
Logged out top=0/0, retr=1/64014, del=0/1429, size=478762716
Mar 20 00:00:23 pi3 dovecot: pop3-login: Login: user=<user at example.com>,
method=PLAIN, rip=43.243.173.97, lip=192.168.1.18, mpid=4585, secured,
session=<MlGam
==============
What could be the possible reason?
Thanks,
Bappasaheb
More information about the dovecot
mailing list