> ...the user in question has received (popped) this > message 10+ times today while at the same time has also received at least 5 > other messages and popped them down only once. What if anything should I > be looking for?
Probably user's mail client or AV software choking on a message, possibly the one downloaded 10+ times but more likely the one AFTER it. Or if user is on a dialup link, possibly disconnecting from Internet before finishing download of large message. Session times out without QUIT from mail client, so popper leaves deleted messages in mailspool because it has no way to be sure they were really downloaded successfully. If you have webmail, delete all messages up to the one downloaded 10+ times plus the one after it. Most webmail SW will show which messages have already been "opened" by POP3 client, usually the problem message is the first unopened. You can also telnet to port 110 and delete messages 1 and 2 assuming the one downloaded 10+ times is sitting at #1. I would probably do: telnet <address of pop3 server> 110 user <username> pass <password> top 1 1 (verify which message is at #1) dele 1 dele 2 quit