FreeBSD 9.3 STABLE, cyrus-imapd 2.5.9, Listen queue overflow
Alexander Demin
support at spectrum.ru
Thu Aug 11 10:02:13 EDT 2016
1) Prefork = 0. Maybe new connections are comming in too quickly for imapd to launch and take the connection? Stampeding herd issue.
Hmmm... This parameter didn't change. Switch to 1?
2) Bad guys are beating you up trying to bruteforce passwords?
No DDoS, no bruteforce password.
3) Have all of the mailboxes been reconstructed? That can be a hugedisk
I/O load for a while, at least with 2.3.x to 2.4.x. I haven't done the
2.4 to 2.5 upgrade on my real server.
Yes, all mailboxes reconstructed.
4) How many mailboxes?
100
5) How many IMAPd processes?
150 (+/- 20) - This is average value during a the working day
6) Are you using Fail2Ban, or similar, to block the bad guys? That
really helped the MySQL DB access load on my FreeBSD/Cyrus/MySQL/Postfix
mail server.
No
7) I use skiplist for all of my CyrusIMAPd DBs. Did you convert your
berkley DBs to the new berkley DB version as part of the upgrade?
No, not all.
duplicate_db: berkeley-nosync
ptscache_db: berkeley
Convert db's? How? Prompt me please.
8) Watch activity with "top" and "systat -vm 1" when it happens. Does
it show any I/O, CPU, or memory bottlenecks?
I will wait when freeze imapd process and provide it.
CPU - 2 cores Xeon.
9) UFS or ZFS? I suspect UFS since you are upgrading from FreeBSD 7.
Probably no bearing on the issue. I just want to cover all of the
variables. My mail servers are using ZFS.
UFS, hardware raid (3ware)
10) Did you build the port or install the package?
After upgrade OS all packages reinstalled from the package.
11.08.2016 00:20, Scott Lambert via Info-cyrus пишет:
> Wild guesses,
>
> 1) Prefork = 0. Maybe new connections are comming in too quickly for
> imapd to launch and take the connection? Stampeding herd issue.
>
> 2) Bad guys are beating you up trying to bruteforce passwords?
>
> 3> Have all of the mailboxes been reconstructed? That can be a huge
> disk I/O load for a while, at least with 2.3.x to 2.4.x. I haven't
> done the 2.4 to 2.5 upgrade on my real server.
>
> How many mailboxes?
>
> How many IMAPd processes?
>
> Are you using Fail2Ban, or similar, to block the bad guys? That really
> helped the MySQL DB access load on my FreeBSD/Cyrus/MySQL/Postfix mail
> server.
>
> I use skiplist for all of my CyrusIMAPd DBs. Did you convert your
> berkley DBs to the new berkley DB version as part of the upgrade?
>
> Watch activity with "top" and "systat -vm 1" when it happens. Does it
> show any I/O, CPU, or memory bottlenecks?
>
> UFS or ZFS? I suspect UFS since you are upgrading from FreeBSD 7.
> Probably no bearing on the issue. I just want to cover all of the
> variables. My mail servers are using ZFS.
>
> You may want to use truss to see what the hung processes are doing or
> waiting for.
>
> Did you build the port or install the package?
>
> Bad guys are the only thing that has given me performance problems with
> Cyrus. My server may be less heavily used than yours. I have less than
> 4000 mailboxes. That seems very small on this list.
>
> On Wed, Aug 10, 2016 at 04:12:25PM +0300, Alexander Demin via Info-cyrus wrote:
>> No ideas? :-(
>>
>> 09.08.2016 13:35, Alexander Demin via Info-cyrus ??????????:
>>> Hello.
>>>
>>> I have strange problem with cyrus-imapd 2.5.9, after upgrade my server
>>> OS from FreeBSD 7 to FreeBSD 9.3 STABLE and cyrus-imapd from 2.3.x to
>>> 2.5.9. All packages reinstalled after upgrade OS.
>>> A problem that, after a 2 or 4 or 7 days (differently) of normal work of
>>> service cyrus-imapd, he freeze. Users can't connect to mailboxes.
>>> In the dmesg log i see it - sonewconn: pcb 0xfffffe0101da7c40: Listen
>>> queue overflow: 49 already in queue awaiting acceptance (12 occurrences).
>>> And netstat -LAan show me it - fffffe0081a747a0 tcp4 49/0/32 *.993.
>>> Why queue overflow, i'm not understand. I think that a problem in the
>>> process idled, because after stoped cyrus-imapd process
>>> ("/usr/local/etc/rc.d/imapd stop"), several processes of idled are
>>> visible in the list of processes (ps -ax).
>>> I run command "kiilall -9 idled" and "/usr/local/etc/rc.d/imapd start" -
>>> service normal work.
>>>
>>> Sorry about my english, my english is hard.
>>> Maybe someone help me.
>>>
>>> i have provided below detailed information about system and from logs
>>> (service cyrus-imapd freeze).
>>>
>>> System information:
>>> # uname -a
>>> FreeBSD mail.spectrum.ru 9.3-STABLE FreeBSD 9.3-STABLE #0: Sat Jul 2
>>> 17:48:04 MSK 2016
>>> oldman at mail.spectrum.ru:/usr/obj/usr/src/sys/SRVKERNEL amd64
>>>
>>> # pkg info | grep cyrus
>>> cyrus-imapd25-2.5.9 The cyrus mail server, supporting POP3
>>> and IMAP4 protocols
>>> cyrus-sasl-2.1.26_12 RFC 2222 SASL (Simple Authentication and
>>> Security Layer)
>>> cyrus-sasl-saslauthd-2.1.26_3 SASL authentication server for cyrus-sasl2
>>>
>>>
>>> Conf files
>>> # cat /usr/local/etc/cyrus.conf
>>> START {
>>> idled cmd="idled"
>>> recover cmd="ctl_cyrusdb -r"
>>> # syncclient cmd="sync_client -r"
>>> }
>>>
>>> SERVICES {
>>> imap cmd="imapd" listen="imap" prefork=0
>>> imaps cmd="imapd -s" listen="imaps" prefork=0
>>> pop3 cmd="pop3d" listen="pop3" prefork=0
>>> pop3s cmd="pop3d -s" listen="spop3" prefork=0
>>> sieve cmd="timsieved" listen="sieve" prefork=0
>>> lmtpunix cmd="lmtpd" listen="/data/imap/socket/lmtp"
>>> prefork=0
>>> smmap cmd="smmapd" listen="/data/imap/socket/smmap"
>>> prefork=1
>>> # syncclient cmd="sync_client -r" listen="csync" prefork=1
>>> }
>>>
>>> EVENTS {
>>> checkpoint cmd="ctl_cyrusdb -c" period=30
>>> delprune cmd="cyr_expire -v -E 3" at=0400
>>> tlsprune cmd="tls_prune" at=0400
>>> squatter cmd="squatter -i" at=0100
>>> }
>>>
>>> # cat /usr/local/etc/imapd.conf
>>> admins: cyrus
>>> allowanonymouslogin: no
>>> allowplaintext: yes
>>> altnamespace: yes
>>> annotation_db: skiplist
>>> configdirectory: /data/imap
>>> defaultpartition: default
>>> duplicate_db: berkeley-nosync
>>> imapidresponse: yes
>>> imapmagicplus: 0
>>> lmtp_downcase_rcpt: 1
>>> lmtpsocket: /data/imap/socket/lmtp
>>> mboxlist_db: skiplist
>>> munge8bit: 0
>>> partition-default: /data/spool/imap
>>> postmaster: postmaster
>>> ptscache_db: berkeley
>>> rfc2046_strict: 0
>>> sasl_auxprop_plugin: sasldb
>>> sasl_log_level: 1
>>> sasl_mech_list: plain cram-md5 digest-md5 login
>>> sasl_pwcheck_method: auxprop
>>> seenstate_db: skiplist
>>> sendmail: /usr/sbin/sendmail
>>> sievedir: /data/imap/sieve
>>> subscription_db: flat
>>> # sync_authname: cyrus
>>> # sync_batch_size: 0
>>> # sync_host: support.spectrum.ru
>>> # sync_log: 1
>>> # sync_password: pDkazwok
>>> # sync_repeat_interval: 5
>>> # sync_shutdown_file: /data/imap/socket/syncshutdown
>>> tls_server_ca_file: /etc/ssl/imapserver.pem
>>> tls_server_cert: /etc/ssl/imapserver.pem
>>> tls_server_key: /etc/ssl/imapserver.pem
>>> tls_session_timeout: 1440
>>> unixhierarchysep: no
>>> virtdomains: userid
>>>
>>>
>>> Information from logs:
>>> # netstat -LAan
>>> Current listen queue sizes (qlen/incqlen/maxqlen)
>>> Tcpcb Proto Listen Local Address
>>> fffffe01257a33d0 tcp4 0/0/32 *.4190
>>> fffffe0125e45b70 tcp4 0/0/32 *.995
>>> fffffe00a4a38b70 tcp4 0/0/32 *.110
>>> fffffe0081a747a0 tcp4 49/0/32 *.993
>>> fffffe00a434e000 tcp4 0/0/32 *.143
>>> fffffe00a4f453d0 tcp4 0/0/10 *.587
>>> fffffe0007ccd3d0 tcp4 0/0/10 *.465
>>> fffffe0125e453d0 tcp4 0/0/10 *.25
>>> fffffe0007ccd7a0 tcp4 0/0/512 *.113
>>> fffffe0007ccdb70 tcp4 0/0/512 *.79
>>> fffffe0007acc3d0 tcp4 0/0/128 *.22
>>> fffffe00079947a0 tcp4 0/0/512 127.0.0.1.8891
>>> fffffe00079943d0 tcp4 0/0/128 *.888
>>> fffffe0007acd3d0 tcp4 0/0/128 127.0.0.1.953
>>> fffffe0007994b70 tcp4 0/0/10 127.0.0.1.53
>>> unix 0/0/32 /data/imap/socket/smmap
>>> unix 0/0/32 /data/imap/socket/lmtp
>>> unix 0/0/32 /var/run/saslauthd/mux
>>> unix 0/0/4 /var/run/devd.pipe
>>>
>>> # dmesg
>>> sonewconn: pcb 0xfffffe0101da7c40: Listen queue overflow: 49 already in
>>> queue awaiting acceptance (8 occurrences)
>>> sonewconn: pcb 0xfffffe0101da7c40: Listen queue overflow: 49 already in
>>> queue awaiting acceptance (81 occurrences)
>>> sonewconn: pcb 0xfffffe0101da7c40: Listen queue overflow: 49 already in
>>> queue awaiting acceptance (25 occurrences)
>>> sonewconn: pcb 0xfffffe0101da7c40: Listen queue overflow: 49 already in
>>> queue awaiting acceptance (29 occurrences)
>>> sonewconn: pcb 0xfffffe0101da7c40: Listen queue overflow: 49 already in
>>> queue awaiting acceptance (9 occurrences)
>>> sonewconn: pcb 0xfffffe0101da7c40: Listen queue overflow: 49 already in
>>> queue awaiting acceptance (100 occurrences)
>>> sonewconn: pcb 0xfffffe0101da7c40: Listen queue overflow: 49 already in
>>> queue awaiting acceptance (23 occurrences)
>>> sonewconn: pcb 0xfffffe0101da7c40: Listen queue overflow: 49 already in
>>> queue awaiting acceptance (12 occurrences)
>>>
>>> # ps -ax
>>> PID TT STAT TIME COMMAND
>>> 0 ?? DLs 8:29,42 [kernel]
>>> 1 ?? SLs 0:14,59 /sbin/init --
>>> 2 ?? DL 0:00,00 [crypto]
>>> 3 ?? DL 0:00,00 [crypto returns]
>>> 4 ?? DL 0:09,61 [pfpurge]
>>> 5 ?? DL 0:00,00 [sctp_iterator]
>>> 6 ?? DL 0:00,00 [xpt_thrd]
>>> 7 ?? DL 0:09,72 [pagedaemon]
>>> 8 ?? DL 0:00,00 [vmdaemon]
>>> 9 ?? DL 0:00,00 [pagezero]
>>> 10 ?? DL 0:00,00 [audit]
>>> 11 ?? RL 13964:18,79 [idle]
>>> 12 ?? WL 8:31,02 [intr]
>>> 13 ?? DL 4:50,42 [geom]
>>> 14 ?? DL 0:45,36 [yarrow]
>>> 15 ?? DL 0:00,86 [bufdaemon]
>>> 16 ?? DL 16:24,13 [syncer]
>>> 17 ?? DL 0:01,23 [vnlru]
>>> 18 ?? DL 3:45,84 [softdepflush]
>>> 156 ?? Is 0:00,00 adjkerntz -i
>>> 256 ?? S 0:01,48 sendmail: ./u78HEgcU084993 noblesse.pl.: user
>>> open (sendmail)
>>> 503 ?? Ss 0:00,08 /sbin/devd
>>> 511 ?? Is 0:00,01 pflogd: [priv] (pflogd)
>>> 515 ?? S 0:06,34 pflogd: [running] -s 116 -i pflog0 -f
>>> /var/log/pflog (pflogd)
>>> 578 ?? I 0:03,59 sendmail: ./u7887SmU011698 nomail.muo.it.:
>>> user open (sendmail)
>>> 609 ?? Ss 2:59,79 /usr/sbin/syslogd -l /var/run/log -l
>>> /var/named/var/run/log -s
>>> 708 ?? Is 0:00,05 /usr/sbin/named -u bind -c
>>> /etc/namedb/my_named.conf -t /var/named -u bind
>>> 758 ?? Is 0:00,57 /usr/local/sbin/saslauthd -a sasldb
>>> 759 ?? I 0:00,58 /usr/local/sbin/saslauthd -a sasldb
>>> 761 ?? I 0:00,58 /usr/local/sbin/saslauthd -a sasldb
>>> 762 ?? I 0:00,57 /usr/local/sbin/saslauthd -a sasldb
>>> 763 ?? I 0:00,57 /usr/local/sbin/saslauthd -a sasldb
>>> 767 ?? Ss 16:20,97 /usr/local/sbin/opendkim -l -u mailnull -P
>>> /var/run/milteropendkim/pid -x /usr/local/etc/mail/opendkim.conf
>>> 801 ?? Ss 0:10,68 /usr/sbin/ntpd -c /etc/ntp.conf -A -p
>>> /var/run/ntpd.pid -l /var/log/ntpd.log
>>> 824 ?? S 0:10,41 idled
>>> 1337 ?? I 0:01,27 sendmail: ./u78BQ2e2069626 pitchstone.com.:
>>> user open (sendmail)
>>> 1828 ?? Is 0:01,52 /usr/sbin/sshd
>>> 1835 ?? Is 0:00,07 sendmail: Queue runner at 00:30:00 for
>>> /var/spool/clientmqueue (sendmail)
>>> 1839 ?? Is 0:00,60 /usr/sbin/cron -s
>>> 1866 ?? Is 0:08,55 /usr/sbin/inetd -wW -C 60
>>> 2340 ?? I 0:01,29 sendmail: ./u78KbuRA091611
>>> mail.nickstel.com.: client DATA status (sendmail)
>>> 3294 ?? I 0:01,11 sendmail: ./u78N2ooJ095870 mx1.mimecast.com.:
>>> user open (sendmail)
>>> 3982 ?? S 0:03,38 sendmail: ./u78Bo1A1085304 mail.b-io.co.:
>>> client DATA status (sendmail)
>>> 4352 ?? Ss 0:01,33 /usr/local/cyrus/bin/master -d
>>> 4356 ?? S 0:00,49 idled
>>> 4360 ?? I 0:00,00 smmapd
>>> 4362 ?? I 0:00,41 imapd: imaps: davidov.spectrum.ru
>>> [192.168.10.14] sasha at spectrum.ru spectrum.ru!user.sasha Idle (imapd)
>>> 4376 ?? I 0:00,30 imapd: imaps: parshukov.spectrum.ru
>>> [192.168.10.28] kostya at spectrum.ru spectrum.ru!user.kostya Idle (imapd)
>>> 4384 ?? S 0:00,66 imapd: imaps: secretar.spectrum.ru
>>> [192.168.10.25] abystrov at spectrum.ru spectrum.ru!user.abystrov Idle (imapd)
>>> 4385 ?? I 0:01,36 imapd: imaps: mitrofanov.spectrum.ru
>>> [192.168.10.10] yuriy at spectrum.ru spectrum.ru!user.yuriy Idle (imapd)
>>> 4389 ?? I 0:00,13 imapd: imaps: deligodina.spectrum.ru
>>> [192.168.10.27] exc at spectrum.ru spectrum.ru!user.exc.Junk Idle (imapd)
>>> 4401 ?? I 0:00,40 imapd: imaps: secretar.spectrum.ru
>>> [192.168.10.25] konkol at spectrum.ru spectrum.ru!user.konkol Idle (imapd)
>>> 4402 ?? I 0:00,40 imapd: imaps: mitrofanov.spectrum.ru
>>> [192.168.10.10] avia at spectrum.ru spectrum.ru!user.avia Idle (imapd)
>>> 4427 ?? I 0:00,12 imapd: imaps: melnikova.spectrum.ru
>>> [192.168.10.61] ticket at spectrum.ru spectrum.ru!user.ticket.Junk Idle (imapd)
>>> 4439 ?? S 0:00,09 imapd: imaps: secretar.spectrum.ru
>>> [192.168.10.25] nadia at spectrum.ru spectrum.ru!user.nadia.Junk Idle (imapd)
>>> 4442 ?? I 0:00,71 imapd: imaps: tkachenko.spectrum.ru
>>> [192.168.10.37] katya at spectrum.ru spectrum.ru!user.katya Idle (imapd)
>>> 4444 ?? I 0:00,17 imapd: imaps: tkachenko.spectrum.ru
>>> [192.168.10.37] olga at spectrum.ru spectrum.ru!user.olga.Junk Idle (imapd)
>>> 4476 ?? I 0:00,12 imapd: imaps: secretar.spectrum.ru
>>> [192.168.10.25] vip at spectrum.ru spectrum.ru!user.vip Idle (imapd)
>>> 4477 ?? I 0:00,15 imapd: imaps: revenko.spectrum.ru
>>> [192.168.10.15] rina at spectrum.ru spectrum.ru!user.rina.Junk Idle (imapd)
>>> 4481 ?? I 0:00,64 imapd: imaps: tkachenko.spectrum.ru
>>> [192.168.10.37] olga at spectrum.ru spectrum.ru!user.olga Idle (imapd)
>>> 4482 ?? I 0:00,11 imapd: imaps: tkachenko.spectrum.ru
>>> [192.168.10.37] spectrum_news at spectrum.ru spectrum.ru!user.spectrum_news
>>> Idle (imapd)
>>> 4527 ?? I 0:00,48 imapd: imaps: tkachenko.spectrum.ru
>>> [192.168.10.37] kristina at spectrum.ru spectrum.ru!user.kristina Idle (imapd)
>>> 4528 ?? I 0:00,13 imapd: imaps: tkachenko.spectrum.ru
>>> [192.168.10.37] bonus at spectrum.ru spectrum.ru!user.bonus Idle (imapd)
>>> 4538 ?? I 0:00,35 imapd: imaps: secretar.spectrum.ru
>>> [192.168.10.25] russia at spectrum.ru spectrum.ru!user.russia Idle (imapd)
>>> 4542 ?? S 0:00,63 imapd: imaps: instant27.my.com
>>> [185.30.177.86] oksana at spectrum.ru spectrum.ru!user.oksana Idle (imapd)
>>> 4558 ?? I 0:01,11 sendmail: ./u792CUWj002575 wine.co.uk.: user
>>> open (sendmail)
>>> 4562 ?? I 0:00,26 imapd: imaps: [91.210.84.248]
>>> romanov at spectrum.ru spectrum.ru!user.romanov Idle (imapd)
>>> 4565 ?? I 0:00,30 imapd: imaps: [91.210.84.248]
>>> romanov at spectrum.ru spectrum.ru!user.romanov (imapd)
>>> 4572 ?? S 0:00,88 imapd: imaps: lomteva.spectrum.ru
>>> [192.168.10.35] lomteva at spectrum.ru spectrum.ru!user.lomteva (imapd)
>>> 4579 ?? S 0:00,13 imapd: imaps: secretar.spectrum.ru
>>> [192.168.10.25] business at spectrum.ru spectrum.ru!user.business Idle (imapd)
>>> 4580 ?? S 0:00,13 imapd: imaps: secretar.spectrum.ru
>>> [192.168.10.25] konkol at ruspbc.com ruspbc.com!user.konkol Idle (imapd)
>>> 4585 ?? I 0:00,11 imapd: imaps: farnosova.spectrum.ru
>>> [192.168.10.29] larisa at spectrum.ru spectrum.ru!user.larisa.Junk Idle (imapd)
>>> 4591 ?? I 0:00,70 imapd: imaps: deligodina.spectrum.ru
>>> [192.168.10.27] lika at spectrum.ru spectrum.ru!user.lika Idle (imapd)
>>> 4603 ?? I 0:00,13 imapd: imaps: secretar.spectrum.ru
>>> [192.168.10.25] zhiganova at ruspbc.com ruspbc.com!user.zhiganova Idle (imapd)
>>> 4605 ?? I 0:00,20 imapd: imaps: shegoleva.spectrum.ru
>>> [192.168.10.32] shegoleva at spectrum.ru spectrum.ru!user.shegoleva Idle
>>> (imapd)
>>> 4610 ?? I 0:02,30 imapd: imaps: lomteva.spectrum.ru
>>> [192.168.10.35] etmanova at spectrum.ru spectrum.ru!user.etmanova Idle (imapd)
>>> 4611 ?? I 0:00,14 imapd: imaps: deligodina.spectrum.ru
>>> [192.168.10.27] exc at spectrum.ru spectrum.ru!user.exc Idle (imapd)
>>> 4612 ?? I 0:00,39 imapd: imaps: deligodina.spectrum.ru
>>> [192.168.10.27] france at spectrum.ru spectrum.ru!user.france Idle (imapd)
>>> 4616 ?? S 0:00,27 imapd: imaps: farnosova.spectrum.ru
>>> [192.168.10.29] larisa at spectrum.ru spectrum.ru!user.larisa Idle (imapd)
>>> 4624 ?? I 0:00,47 imapd: imaps: melnikova.spectrum.ru
>>> [192.168.10.61] ticket at spectrum.ru spectrum.ru!user.ticket Idle (imapd)
>>> 4629 ?? S 0:00,14 imapd: imaps: melnikova.spectrum.ru
>>> [192.168.10.61] anna at spectrum.ru spectrum.ru!user.anna.Junk Idle (imapd)
>>> 4642 ?? S 0:00,09 imapd: imaps: secretar.spectrum.ru
>>> [192.168.10.25] vip at spectrum.ru spectrum.ru!user.vip.Junk Idle (imapd)
>>> 4646 ?? I 0:00,13 imapd: imaps: revenko.spectrum.ru
>>> [192.168.10.15] contact at spectrum.ru spectrum.ru!user.contact Idle (imapd)
>>> 4647 ?? S 0:00,37 imapd: imaps: revenko.spectrum.ru
>>> [192.168.10.15] rina at spectrum.ru spectrum.ru!user.rina Idle (imapd)
>>> 4649 ?? S 0:00,55 imapd: imaps: melnikova.spectrum.ru
>>> [192.168.10.61] anna at spectrum.ru spectrum.ru!user.anna Idle (imapd)
>>> 4658 ?? I 0:00,22 imapd: imaps: secretar.spectrum.ru
>>> [192.168.10.25] nadia at spectrum.ru spectrum.ru!user.nadia Idle (imapd)
>>> 4662 ?? S 0:00,43 imapd: imaps: secretar.spectrum.ru
>>> [192.168.10.25] natalia at spectrum.ru spectrum.ru!user.natalia Idle (imapd)
>>> 4810 ?? S 0:00,10 imapd: imaps: secretar.spectrum.ru
>>> [192.168.10.25] konkol at spectrum.ru spectrum.ru!user.konkol.Junk Idle (imapd)
>>> 4908 ?? I 0:00,10 imapd: imaps: lomteva.spectrum.ru
>>> [192.168.10.35] lomteva at spectrum.ru spectrum.ru!user.lomteva.Junk Idle
>>> (imapd)
>>> 4938 ?? S 0:00,19 imapd: imaps: secretar.spectrum.ru
>>> [192.168.10.25] italy at spectrum.ru spectrum.ru!user.italy.Junk Idle (imapd)
>>> 5155 ?? S 0:00,78 imapd: imaps: secretar.spectrum.ru
>>> [192.168.10.25] business at spectrum.ru spectrum.ru!user.business.Junk Idle
>>> (imapd)
>>> 5884 ?? I 0:00,96 sendmail: ./u78Kg0XB091737 horsefly.co.uk.:
>>> user open (sendmail)
>>> 6961 ?? S 0:00,79 sendmail: ./u7940tDL006842 math.com.: user
>>> open (sendmail)
>>> 8037 ?? I 0:00,82 sendmail: ./u793fn5c006102 prophecy.com.:
>>> user open (sendmail)
>>> 8456 ?? I 0:00,06 imapd: imaps: ip-128-204-28-65.bb.netbynet.ru
>>> [128.204.28.65] kate at fticket.ru fticket.ru!user.kate Idle (imapd)
>>> 8739 ?? S 0:00,10 imapd: imaps: 122.242.81.95.chtts.ru
>>> [95.81.242.122] maria_leo at spectrum.ru spectrum.ru!user.maria_leo Idle
>>> (imapd)
>>> 9151 ?? I 0:00,74 sendmail: ./u791wDS0002114 tokamak.com.: user
>>> open (sendmail)
>>> 10102 ?? I 0:00,45 sendmail: ./u78KFCq4090625 worksheet.com.:
>>> user open (sendmail)
>>> 10588 ?? S 0:00,18 lmtpd
>>> 10591 ?? S 0:00,35 lmtpd
>>> 11302 ?? S 0:00,48 sendmail: ./u7927VRl002401 seashore.it.: user
>>> open (sendmail)
>>> 11517 ?? I 0:00,18 lmtpd
>>> 11928 ?? S 0:00,12 lmtpd
>>> 12366 ?? I 0:00,21 lmtpd
>>> 12675 ?? S 0:00,12 lmtpd
>>> 12678 ?? S 0:00,09 lmtpd
>>> 12736 ?? S 0:00,12 lmtpd
>>> 12743 ?? S 0:00,14 lmtpd
>>> 13004 ?? I 0:00,32 sendmail: ./u796Wv7Q012877 wrestle.it.: user
>>> open (sendmail)
>>> 13416 ?? S 0:00,08 lmtpd
>>> 14824 ?? I 0:00,06 lmtpd
>>> 14836 ?? S 0:00,08 lmtpd
>>> 14839 ?? S 0:00,04 lmtpd
>>> 15019 ?? S 0:00,04 lmtpd
>>> 15247 ?? S 0:00,15 sendmail: ./u796wTqn014657 paddy.com.: user
>>> open (sendmail)
>>> 16311 ?? S 0:03,14 sendmail: ./u78C5sIH092785 mx.tyrant.nl.:
>>> user open (sendmail)
>>> 16386 ?? S 0:00,02 lmtpd
>>> 16426 ?? S 0:00,02 lmtpd
>>> 16777 ?? Is 0:00,01 sshd: oldman [priv] (sshd)
>>> 16792 ?? S 0:00,02 sshd: oldman at pts/0 (sshd)
>>> 17123 ?? Is 0:00,00 sendmail: ./u797O60Z017123 mx1.ovh.net.:
>>> client MAIL (sendmail)
>>> 17189 ?? I 0:00,02 pop3d: pop3s: lomteva.spectrum.ru
>>> [192.168.10.35] bron at spectrum.ru spectrum.ru!user.bron quit (pop3d)
>>> 17217 ?? S 0:00,00 sendmail: startup with gw.spectrum.ru (sendmail)
>>> 17218 ?? S 0:00,00 sendmail: startup with gw.spectrum.ru (sendmail)
>>> 17221 ?? S 0:00,00 sendmail: startup with gw.spectrum.ru (sendmail)
>>> 22675 ?? S 0:14,26 idled
>>> 27241 ?? I 0:03,61 sendmail: ./u787dDRO092746 mx5.shield.it.:
>>> user open (sendmail)
>>> 27832 ?? I 0:03,15 sendmail: ./u78DVGB2026591 orthodontic.nl.:
>>> user open (sendmail)
>>> 30412 ?? S 0:03,50 idled
>>> 35660 ?? I 0:03,00 sendmail: ./u78BGqXp063691 honorary.it.: user
>>> open (sendmail)
>>> 38984 ?? I 0:02,96 sendmail: ./u7881o7m007610
>>> thie5ku9.dsgeneration.com.: user open (sendmail)
>>> 51486 ?? S 0:02,96 sendmail: ./u78ELnda036841
>>> mx.improvisation.nl.: user open (sendmail)
>>> 55309 ?? I 0:03,34 sendmail: ./u786ZiGq081561 fade.com.: user
>>> open (sendmail)
>>> 63109 ?? S 0:02,93 sendmail: ./u78C1MQE090773 phenol.com.: user
>>> open (sendmail)
>>> 64319 ?? Ss 1:31,31 sendmail: accepting connections (sendmail)
>>> 75315 ?? S 0:02,77 sendmail: ./u78CbGYL005139 watchful.com.:
>>> user open (sendmail)
>>> 75323 ?? I 0:03,38 sendmail: ./u789KtsE068858
>>> mail2.webmagic.com.: user open (sendmail)
>>> 79000 ?? I 0:03,71 sendmail: ./u786jqCx082903 stripe.co.uk.:
>>> user open (sendmail)
>>> 82489 ?? I 0:02,66 sendmail: ./u78C5nN1092762 oriental.fr.: user
>>> open (sendmail)
>>> 84533 ?? I 0:02,50 sendmail: ./u78G53hI075498 watchful.com.:
>>> user open (sendmail)
>>> 85974 ?? S 0:02,48 sendmail: ./u78DjMcH032091 trouser.com.: user
>>> open (sendmail)
>>> 87242 ?? I 0:02,47 sendmail: ./u789ZtMW079941 verb.pl.: user
>>> open (sendmail)
>>> 88171 ?? S 0:02,47 sendmail: ./u78FxKqB073056 pariah.nl.: user
>>> open (sendmail)
>>> 88623 ?? I 0:02,18 sendmail: ./u78ELEVA036805 legacy.fr.: user
>>> open (sendmail)
>>> 89459 ?? I 0:02,45 sendmail: ./u78DUkUJ026398 sworn.co.uk.: user
>>> open (sendmail)
>>> 90355 ?? I 0:02,20 sendmail: ./u78BerOF079464 wound.co.uk.: user
>>> open (sendmail)
>>> 91387 ?? S 0:02,34 sendmail: ./u788fTOM035982 oasis.nl.: user
>>> open (sendmail)
>>> 92258 ?? I 0:03,21 sendmail: ./u7871Im0084978 drank.com.: user
>>> open (sendmail)
>>> 92261 ?? I 0:02,04 sendmail: ./u788iFWs037914
>>> mail2.webmagic.com.: user open (sendmail)
>>> 92899 ?? S 0:01,97 sendmail: ./u789Derq061773 pariah.nl.: user
>>> open (sendmail)
>>> 94124 ?? I 0:01,93 sendmail: ./u78ICf4K087539 hose.com.: user
>>> open (sendmail)
>>> 94849 ?? I 0:02,11 sendmail: ./u78FYYBQ063105 dress.nl.: user
>>> open (sendmail)
>>> 95899 ?? I 0:02,05 sendmail: ./u78GjGbQ083454 principle.nl.:
>>> user open (sendmail)
>>> 96668 ?? I 0:02,20 sendmail: ./u78K6XXa090406 weighty.com.: user
>>> open (sendmail)
>>> 97861 ?? I 0:01,71 sendmail: ./u78DUiwc026387 footman.com.: user
>>> open (sendmail)
>>> 98348 ?? Ss 0:01,88 sendmail: ./u78NHG0i096242 howl.fr.: user
>>> open (sendmail)
>>> 99247 ?? I 0:01,84 sendmail: ./u78KQOc8090970 earthmove.com.:
>>> user open (sendmail)
>>> 754 v0- S 0:03,81 /usr/local/sbin/3dm2
>>> 1889 v0 Is+ 0:00,00 /usr/libexec/getty Pc ttyv0
>>> 1890 v1 Is+ 0:00,00 /usr/libexec/getty Pc ttyv1
>>> 1891 v2 Is+ 0:00,00 /usr/libexec/getty Pc ttyv2
>>> 1892 v3 Is+ 0:00,00 /usr/libexec/getty Pc ttyv3
>>> 1893 v4 Is+ 0:00,00 /usr/libexec/getty Pc ttyv4
>>> 1894 v5 Is+ 0:00,00 /usr/libexec/getty Pc ttyv5
>>> 1895 v6 Is+ 0:00,00 /usr/libexec/getty Pc ttyv6
>>> 1896 v7 Is+ 0:00,00 /usr/libexec/getty Pc ttyv7
>>> 16793 0 Is 0:00,01 -tcsh (tcsh)
>>> 16810 0 I 0:00,00 su
>>> 16837 0 S 0:00,02 _su (tcsh)
>>> 17224 0 R+ 0:00,00 ps -ax
>>>
>>> Thanks for help.
>>>
>> --
>> Demin Alexander / Network Administrator
>> Group of companies Spectrum / tel. (+7 495) 995-8999
>> Russia, Moscow, 125009, Strastnoy blvr. 8
>> Web: http://www.spectrum.ru/
>>
>> ----
>> Cyrus Home Page: http://www.cyrusimap.org/
>> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
>> To Unsubscribe:
>> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
--
Demin Alexander / Network Administrator
Group of companies Spectrum / tel. (+7 495) 995-8999
Russia, Moscow, 125009, Strastnoy blvr. 8
Web: http://www.spectrum.ru/
More information about the Info-cyrus
mailing list