[imp] Ongoing POP3 connection attempts after IMP Logout
Emily A. Carl
emilyac@wanet.net
Wed, 18 Sep 2002 11:48:02 -0700
This is a multipart MIME message.
---------------------- multipart/mixed attachment
Hi Folks,
I am running a HEAD version of horde and imp (maybe a month
out of date - seems to be adequate so I have not been continually
checking out the current stuff). I can get more specifics if
needed.
I just noticed that there are ongoing POP connections to the
POP servers that had been servicing prior imp requests. I say
PRIOR because the imp logins that were making pop requests are
logged out, and the web browser that was being used is also
closed down and not running. I even rebooted the linux host that
was running the web brower (Netscape 4.77) to see if it was
anything hidden on the client that was involved. POP connections
to each different POP server continues without cause(?).
The POP connections are not going as far as logging in with
any user. I am encloing a capture of the traffic seen on one of the
POP servers (mead). The SYN-WIN requests are coming from the host that
runs horde/imp (www1) over ssl.
Has anyone else seen this or have any suggestions for me on how
to stop these connection attempts (for what is currently happening
once a minute for each different POP server)?
Emily.
---------------------- multipart/mixed attachment
www1 -> mead TCP D=110 S=44569 Syn Seq=2968381516 Len=0 Win=5840
0: 0204 05b4 0402 080a 003f a2ef 0000 0000 .........?......
16: 0103 0300 ....
mead -> www1 TCP D=44569 S=110 Syn Ack=2968381517 Seq=1267568258 Len=0 Win=8760
0: 0204 05b4 ....
www1 -> mead TCP D=110 S=44569 Ack=1267568259 Seq=2968381517 Len=0 Win=5840
0: 0000 0000 0000 ......
mead -> www1 TCP D=44569 S=110 Ack=2968381517 Seq=1267568259 Len=45 Win=8760
0: 2b4f 4b20 504f 5020 7365 7276 6572 2072 +OK POP server r
16: 6561 6479 203c 3739 3334 2e31 3033 3233 eady <7934.10323
32: 3734 3037 3740 6d65 6164 3e0d 0a 74077@mead>..
www1 -> mead TCP D=110 S=44569 Ack=1267568304 Seq=2968381517 Len=0 Win=5840
0: 0000 0000 0000 ......
www1 -> mead TCP D=110 S=44569 Ack=1267568304 Seq=2968381517 Len=5 Win=5840
0: 5155 4954 0a00 QUIT..
www1 -> mead TCP D=110 S=44569 Fin Ack=1267568304 Seq=2968381522 Len=0 Win=5840
0: 0000 0000 0000 ......
mead -> www1 TCP D=44569 S=110 Ack=2968381523 Seq=1267568304 Len=0 Win=8760
mead -> www1 TCP D=44569 S=110 Ack=2968381523 Seq=1267568304 Len=5 Win=8760
0: 2b4f 4b0d 0a +OK..
mead -> www1 TCP D=44569 S=110 Fin Ack=2968381523 Seq=1267568309 Len=0 Win=8760
www1 -> mead TCP D=110 S=44569 Rst Seq=2968381523 Len=0 Win=0
0: 0000 0000 0000 ......
www1 -> mead TCP D=110 S=44569 Rst Seq=2968381523 Len=0 Win=0
0: 0000 0000 0000 ......
www1 -> mead TCP D=110 S=44586 Syn Seq=3025517309 Len=0 Win=5840
0: 0204 05b4 0402 080a 003f ba4f 0000 0000 .........?.O....
16: 0103 0300 ....
mead -> www1 TCP D=44586 S=110 Syn Ack=3025517310 Seq=1280125994 Len=0 Win=8760
0: 0204 05b4 ....
www1 -> mead TCP D=110 S=44586 Ack=1280125995 Seq=3025517310 Len=0 Win=5840
0: 0000 0000 0000 ......
mead -> www1 TCP D=44586 S=110 Ack=3025517310 Seq=1280125995 Len=45 Win=8760
0: 2b4f 4b20 504f 5020 7365 7276 6572 2072 +OK POP server r
16: 6561 6479 203c 3739 3834 2e31 3033 3233 eady <7984.10323
32: 3734 3133 3740 6d65 6164 3e0d 0a 74137@mead>..
www1 -> mead TCP D=110 S=44586 Ack=1280126040 Seq=3025517310 Len=0 Win=5840
0: 0000 0000 0000 ......
www1 -> mead TCP D=110 S=44586 Ack=1280126040 Seq=3025517310 Len=5 Win=5840
0: 5155 4954 0a00 QUIT..
www1 -> mead TCP D=110 S=44586 Fin Ack=1280126040 Seq=3025517315 Len=0 Win=5840
0: 0000 0000 0000 ......
mead -> www1 TCP D=44586 S=110 Ack=3025517316 Seq=1280126040 Len=0 Win=8760
mead -> www1 TCP D=44586 S=110 Ack=3025517316 Seq=1280126040 Len=5 Win=8760
0: 2b4f 4b0d 0a +OK..
mead -> www1 TCP D=44586 S=110 Fin Ack=3025517316 Seq=1280126045 Len=0 Win=8760
www1 -> mead TCP D=110 S=44586 Rst Seq=3025517316 Len=0 Win=0
0: 0000 0000 0000 ......
www1 -> mead TCP D=110 S=44586 Rst Seq=3025517316 Len=0 Win=0
0: 0000 0000 0000 ......
---------------------- multipart/mixed attachment--