A customer is reporting that they are receiving duplicate copies of e-mails.  I found the following in the msg log (obfuscated).  u126773, u154969, and u154971 all appear to be the exact same message.  I am trying to determine where the duplication occurred.  Was it client side or on the server?  Since I do not see a non-u file that created u154969* and u154971*, I am leaning towards client side duplication.  Just looking for duplication.  Any help from the list would be appreciated.

 

# grep -E "u(126773|154969|154971)" /var/log/surgemail/rec1405/msg140519.rec

 

19 09:34:02 [0] burst 10.20.30.40 . <d.sturges@xxxxxxxx.tld> 0 . "burst 1400506388.11489_21104.mail1.n2net.net --> u126773~2,(0,142193)[1400506388]"

19 09:35:25 [0] burst 10.20.30.40 . <d.sturges@xxxxxxxx.tld> 0 . "burst u154971~2,R(0,142193)[1400506388] --> u154971~2,(0,142193)[1400506388]"

19 09:35:25 [0] burst 10.20.30.40 . <d.sturges@xxxxxxxx.tld> 0 . "burst u154969~2,SR[1400506388] --> u154969~2,S(0,142193)[1400506388]"

19 09:35:25 [0] del 10.20.30.40 . <d.sturges@xxxxxxxx.tld> 142193 . "u126773~2,DS(0,142193)[1400506388](ip=10.20.30.40)"

19 09:38:35 [0] burst 10.20.30.40 . <d.sturges@xxxxxxxx.tld> 0 . "burst u154971~2,SR(0,142193)[1400506388] --> u154971~2,S(0,142193)[1400506388]"

 

Thanks,

 

Jim L.

N2Net

I just went through this for another customer here at LCR.  The mail.log here is very verbose and has more info in than this.  You may find more info there as to what happened.

In our case, we discovered that the user had several emails to download(was using POP3).  We see them downloading messages, then issuing delete commands for some of the messages just downloaded, but not all of them.  So of course the server does not delete those they did not issue a delete for.  Then the client immediately started a new POP3 session and redownloaded those few that were not deleted.

But all of this was recorded in mail.log and not in the message logs you quoted.

Lyle Giese
LCR Computer Services, Inc.