[Info-vax] TCPIP Services IMAP and POP resource consumption

[Simon Clubley]

On 2016-02-03, Rich Jordan <jordan at ccs4vms.com> wrote:
>
> The error logs show nothing relevant.  The LAN connection is fine
> and error free (100Mbit FDX, no mismatch).  The POP and IMAP logs
> don't show anything since we upped the timeouts on the clients to
> several minutes (before that we'd see the client drop the connection
> attempt)
>

How much detail is being logged ?

> Any thoughts?  I had suggested putting MX on it as a workaround (and
> now maybe Ruslan's IUPOP since its been updated) but can't get the go
> ahead without some indication it might help.
>

If site security policies allow it, have you considered running Wireshark
on the physical LAN connection or maybe use the VMS version of tcpdump
to see what's going on at protocol level ?

Are protocol level commands being issued by a rogue entity (infected PC,
etc) that are consuming system resources ?

It's possible you may be getting whacked by a known security problem
or by someone actively probing you in a way which isn't showing up in
your logs.

Simon.

-- 
Simon Clubley, clubley at remove_me.eisner.decus.org-Earth.UFP
Microsoft: Bringing you 1980s technology to a 21st century world