Sergio, Since no one else has responded, I thought I would get you started....
First the log right below, is probably not terribly significant, because it refers to SMTP. If you shut down the IMonitor service, all this will stop. And, whenever CPU goes to 100%, other services/processes will be slow in responding and that is what this log is telling me. IMonitor is attempting to stop/start the SMTP service, and that is placing an additional load on the server.... As for the WebMail log, that could be an attack or just a less than brilliant user. Is the IP, one you own? If so, then it could be a user. If outside, you might consider blocking it for a while...If a customer complains, then you know who it is...If the problem goes away, then you have an even better clue as to the cause.... So far, you have not presented much evidence related to the POP3 service.... Kind of hard to tell what is going on. If stop/start of POP3 service 'fixes' it for a period of time, then check logs (you do have the POP3 service logging, don't you?) around the time it starts to go bad, to see what might be the trigger event....(a particular user or IP trying to connect/login?). It is not entirely out of the question for any service to go to 100%, but that should not happen on a regular basis or for more than a few seconds (typically). It could for POP3, if the mailbox of the user, is relatively large (10-50M, or bigger). Are your POP3 users leaving email on the server? A check of the size of all your users folders (.mbx files), could point you to those users who do and the reason for the high CPU utilization (they login and you see high POP3 CPU)! Could it be a NIC?, yes, but so far no concrete evidence of that. If you have a spare, it could be worth a try.... Have you checked (chkdsk /f) and defragged your hard disk lately? Disk problems (slow or repeated access), could cause this symptom! Have you looked at the Event Logs? If there are OS/driver related problems, those need to be fixed before IMail can become reliable! Sorry that this is not a 'fix' but hopefully you can now investigate more closely and that will get you closer to the cause/solution. Daniel Donnelly Ipswitch, Inc. ----- Original Message ----- From: "Sergio Rinc�n Jaramillo" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, June 04, 2003 2:18 PM Subject: Re: [IMail Forum] POP3D32.EXE still consumes 100% CPU Look what my log file says: 20030604 125538 TCP DOWN SMTP 200.69.97.11:25 TCP Connection Reset 20030604 125642 TCP UP SMTP 200.69.97.11:25 20030604 125816 TCP DOWN SMTP 200.69.97.11:25 TCP Timed out 20030604 125949 SRVC STOP "SMTPD32" service 20030604 125954 SRVC START "SMTPD32" service 20030604 130000 SRVC UP SMTP service "SMTPD32" - Restarted 20030604 130126 TCP UP SMTP 200.69.97.11:25 20030604 130300 TCP DOWN SMTP 200.69.97.11:25 TCP Timed out 20030604 130434 SRVC STOP "SMTPD32" service 20030604 130439 SRVC START "SMTPD32" service 20030604 130445 SRVC UP SMTP service "SMTPD32" - Restarted 20030604 130616 TCP UP SMTP 200.69.97.11:25 20030604 130918 TCP DOWN SMTP 200.69.97.11:25 TCP Timed out 20030604 131048 TCP UP SMTP 200.69.97.11:25 20030604 131221 TCP DOWN SMTP 200.69.97.11:25 TCP Timed out 20030604 131354 TCP UP SMTP 200.69.97.11:25 Also, other log file says(webmail): 20030604 122758 Socket Error - 200.75.86.218 Error while writing sockect due to error 10054 or malicious connection type. 20030604 122758 Socket Error - 200.75.86.218 Error while writing sockect due to error 10054 or malicious connection type. 20030604 122758 Socket Error - 200.75.86.218 Error while writing sockect due to error 10054 or malicious connection type. 20030604 122758 Socket Error - 200.75.86.218 Error while writing sockect due to error 10054 or malicious connection type. 20030604 122759 Socket Error - 200.75.86.218 Error while writing sockect due to error 10054 or malicious connection type. Would it be an attack? Thanks! ----- Original Message ----- From: Sergio Rinc�n Jaramillo To: [EMAIL PROTECTED] Sent: Wednesday, June 04, 2003 10:18 AM Subject: [IMail Forum] POP3D32.EXE still consumes 100% CPU Hi there: Recently i posted a message with this problem, but tonight i reinstalled the server from scratch but the problem still continues, suddnely, pop3d32.exe hangs the CPU and after about 5 seconds, it frees it up again, and it loops again and again. May it be possible that there are some mailboxes corrupt?, how to find 'em ?, cause some users have complain that their mailboxes suddenly get erased. Any suggestions?, how to debug the issue?...Shall it be the NIC? PD: If i stop and start again de POP3 service, it goes ok for aboput an hour and then it hangs again. Imail version: 7.15 CPU: 1.2 GHz RAM: 1 GB Server type: IBM E-Series Sergio Rinc�n Jaramillo HostMaster GeoNet S.A. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
