+- ispCP - Board - Support (http://www.isp-control.net/forum)
+-- Forum: ispCP Omega Development Area (/forum-1.html)
+--- Forum: General discussion (/forum-11.html)
+--- Thread: imap traffic - strange things (/thread-1878.html)
Pages: 1 2
imap traffic - strange things - joximu - 11-27-2007 08:12 PM
Hi
while studying ticket #898 I came across this behaviour on my system.
The traffic counter greps the lines with 'imaplogin' ffrom the mail.log but there's not such line in my log (I have courierpop3login but no imaplogin).
Ok, let's see what's running:
Code:
/usr/sbin/courierlogger -pid=/var/run/courier/imapd-ssl.pid -start -name=imapd-ssl /usr/sbin/couriertcpd -address=0 -maxprocs=40 -maxperip=4 -nodnslookup -noidentlookup 993 /usr/
/usr/sbin/couriertcpd -address=0 -maxprocs=40 -maxperip=4 -nodnslookup -noidentlookup 993 /usr/bin/couriertls -server -tcpd /usr/lib/courier/courier/imaplogin /usr/bin/imapd Mail
/usr/sbin/courierlogger -pid=/var/run/courier/pop3d-ssl.pid -start -name=pop3d-ssl /usr/sbin/couriertcpd -address=0 -maxprocs=40 -maxperip=4 -nodnslookup -noidentlookup 995 /usr/
/usr/sbin/couriertcpd -address=0 -maxprocs=40 -maxperip=4 -nodnslookup -noidentlookup 995 /usr/bin/couriertls -server -tcpd /usr/lib/courier/courier/courierpop3login /usr/lib/cou
/usr/sbin/courierlogger -pid=/var/run/courier/authdaemon/pid -start /usr/lib/courier/courier-authlib/authdaemond
/usr/lib/courier/courier-authlib/authdaemond (6 times)
/usr/sbin/courierlogger -pid=/var/run/courier/imapd.pid -start /usr/sbin/couriertcpd -address=0 -maxprocs=40 -maxperip=4 -nodnslookup -noidentlookup 143 /usr/lib/courier/courier/
/usr/sbin/couriertcpd -address=0 -maxprocs=40 -maxperip=4 -nodnslookup -noidentlookup 143 /usr/lib/courier/courier/imaplogin /usr/bin/imapd Maildir
/usr/sbin/couriertcpd -pid=/var/run/courier/pop3d.pid -stderrlogger=/usr/sbin/courierlogger -maxprocs=40 -maxperip=4 -nodnslookup -noidentlookup -address=0 110 /usr/lib/courier/c
/usr/sbin/courierlogger courierpop3loginand the same on a newly set up machine...
in the log I have theese two possibilities:
Code:
Nov 27 11:08:08 laudox courierpop3login: Connection, ip=[::ffff:123.45.67.89]
Nov 27 11:08:11 laudox courierpop3login: LOGIN: ip=[::ffff:123.45.67.89], command=QUIT
Nov 27 11:08:11 laudox courierpop3login: LOGOUT, ip=[::ffff:123.45.67.89]
Nov 27 11:08:11 laudox courierpop3login: Disconnected, ip=[::ffff:123.45.67.89]
Nov 27 11:08:16 laudox couriertcpd: Connection, ip=[::ffff:123.45.67.89]
Nov 27 11:08:32 laudox couriertcpd: LOGIN: ip=[::ffff:123.45.67.89], command=EXIT
Nov 27 11:08:45 laudox couriertcpd: LOGIN: ip=[::ffff:123.45.67.89], command=LOGIN
Nov 27 11:08:48 laudox couriertcpd: LOGIN: ip=[::ffff:123.45.67.89], command=LOGINwell the IMAP commands are not the right - it's a telnet on 143 :-)
What do others with courier have in their logs?
Greets Joximu
RE: imap traffic - strange things - ephigenie - 11-27-2007 10:36 PM
For me it looks like that :
pop3
Code:
Nov 27 13:37:59 ns2 courierpop3login: Connection, ip=[::ffff:123.45.67.89]
Nov 27 13:37:59 ns2 courierpop3login: LOGIN, user=tralalala@g-house.de, ip=[::ffff:123.45.67.89]
Nov 27 13:37:59 ns2 courierpop3login: LOGOUT, user=tralalala@g-house.de, ip=[::ffff:123.45.67.89], top=0, retr=0, rcvd=12, sent=39, time=0Code:
Nov 27 13:36:21 ns2 imapd: Connection, ip=[::ffff:123.45.67.89]
Nov 27 13:36:21 ns2 imapd: LOGIN, user=tralalala@g-house.de, ip=[::ffff:123.45.67.89], protocol=IMAP
Nov 27 13:36:21 ns2 imapd: DISCONNECTED, user=tralalala@g-house.de, ip=[::ffff:123.45.67.89], headers=0, body=0, rcvd=67, sent=154, time=0So i've sent and rcvd in my lines ...
my courier looks like that :
Code:
root 1947 0.0 0.0 1860 436 ? S Oct19 0:19 /usr/sbin/couriertcpd -address=0 -maxprocs=200 -maxperip=20 -nodnslookup -noidentlookup 143 /usr/lib/cou rier/courier/imaplogin /usr/bin/imapd Maildir
root 1958 0.0 0.0 1756 324 ? S Oct19 0:00 /usr/sbin/courierlogger -pid=/var/run/courier/imapd-ssl.pid -start -name=imapd-ssl /usr/sbin/couriertcpd -address=0 -maxprocs=200 -maxperip=20 -nodnslookup -noidentlookup 993 /usr/bin/couriertls -server -tcpd /usr/lib/courier/courier/imaplogin /usr/bin/imapd Maildir
root 1969 0.0 0.0 1856 404 ? S Oct19 0:21 /usr/sbin/couriertcpd -pid=/var/run/courier/pop3d.pid -stderrlogger=/usr/sbin/courierlogger -maxprocs=20 0 -maxperip=20 -nodnslookup -noidentlookup -address=0 110 /usr/lib/courier/courier/courierpop3login /usr/lib/courier/courier/courierpop3d Maildir
root 1982 0.0 0.0 1760 372 ? S Oct19 0:01 /usr/sbin/courierlogger -pid=/var/run/courier/pop3d-ssl.pid -start -name=pop3d-ssl /usr/sbin/couriertcpd -address=0 -maxprocs=200 -maxperip=20 -nodnslookup -noidentlookup 995 /usr/bin/couriertls -server -tcpd /usr/lib/courier/courier/courierpop3login /usr/lib/courier/courier/courierpop3d Maildir
root 1983 0.0 0.0 1856 428 ? S Oct19 0:01 /usr/sbin/couriertcpd -address=0 -maxprocs=200 -maxperip=20 -nodnslookup -noidentlookup 995 /usr/bin/couriertls -server -tcpd /usr/lib/courier/courier/courierpop3login /usr/lib/courier/courier/courierpop3d Maildirmy logfile is :
/var/log/mail.log
Courier Version is standard etch.
RE: imap traffic - strange things - joximu - 11-27-2007 11:50 PM
ok, it's not very different. Most important:
a grep 'imaplogin' in you mail.log finds nothing too...
we have to change the grep expression to get the imap traffic out of the whole mail.log.
/J
RE: imap traffic - strange things - BeNe - 11-28-2007 12:02 AM
I have dovecot and IMAP SSL and this entry:
Code:
Nov 27 06:28:59 vs24XXX dovecot: imap-login: Login: user=<bene@mydomain.tld>, method=plain, rip=217.243.170.XXX, lip=62.75.2XX.XX, TLSShould grep "imap-login"
Greez BeNe
RE: imap traffic - strange things - joximu - 11-28-2007 12:21 AM
Yes with dovecot...
but until today: courier is the default with ispcp....
Seems there will be an update in the dovecot howto so it counts the traffic... :-)
/J
RE: imap traffic - strange things - joximu - 11-28-2007 08:39 PM
Hi testers
Can you please test the version of r929?
At least the "no-go" probems should be solved with this...
/Joxi
RE: imap traffic - strange things - BeNe - 11-28-2007 08:46 PM
I´m on the way...
Greez BeNe
RE: imap traffic - strange things - BeNe - 11-28-2007 10:20 PM
No Error now in this Fix - but still 100% CPU usage!
and this script runs and runs and runs....
Greez BeNe
RE: imap traffic - strange things - joximu - 11-28-2007 10:23 PM
are you sure it's the new script which runs - I also had some scripts runnning but they were from older releases...
RE: imap traffic - strange things - BeNe - 11-28-2007 10:27 PM
Yes i am sure! Or is there a new on than this --> http://www.isp-control.net/ispcp/changeset/929 ??
Greez BeNe