Re: 2003 cluster logs QUIT in SMTP log every 10 seconds

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Logging is set to max on SMTP(all checkboxes are checked). I do get all
fields for other connection attempts, but for some reason the one in
question is either missing or simply does not have the info you would want
to see. Log files have not been deleted since 2007, and SMTP service does
not need to be restarted to pick up additional

log changes.



I ran curports from http://www.nirsoft.net/utils/cports.html but didn't see
anything sowing up every 10 secs in the app.



Are you running exchange in the cluster environment yourself? Maybe it's
normal to see QUIT every 10 secs?



"Rich Matheisen [MVP]" <richnews@xxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0a1qb55ntg3ncg2lqfkolunu6i32mg4tje@xxxxxxxxxx
On Fri, 25 Sep 2009 09:18:15 -0400, "Drew Govnuk"
<usetheforum@xxxxxxxxxxx> wrote:

There is a CPU monitoring, but even if i check Disable all monitoring of
this server box it's still logging QUITs.

There are no scheduled tasks on the computer and even if i disable all
antivirus services it still logs QUITs every 10 secs.

Are there any really old files in the SMTP queue directory? You could
stop the SMTP service and remove them. Then restart the service.

I'd add more fields to the SMTP log file collection, too.

When you start the service there should be a HELO\EHLO for each
connection. You should be able to see each conversation start. With
the additional logged data you may be able to see what's sending the
"QUIT" by working through each transaction and eliminating those that
terminate normally.

"netstat -abno" may also provide you with useful information by
displaying the process names that are bound to a connection.
---
Rich Matheisen
MCSE+I, Exchange MVP


.

Relevant Pages

  • Re: SMTP Service when turned on is spamming other SMTP servers.
    ... Suddenly this evening my net connection stopped working. ... SMTP service was turned on the spamming started again. ... Do a thorough check for malware, following all of the steps at one of these Web pages. ...
    (microsoft.public.security)
  • Re: SMTP receiver logs
    ... >> would want one log file containing all connections, ... Although there are lots of bugs and inadequacies with the HP SMTP code, ... > When you hit version 32768, you will have to delete/reset it if you stiil want log files. ... It would be nice if this purge was actually just for log files but it's ...
    (comp.os.vms)
  • Re: Really Quit?
    ... > When I Exit Internet Explorer, it doesn't really quit. ... > I can disable the connection, but that's kind of a pain. ... **Post your HijackThis log to ... Alternative download pages for Ad-Aware, Spybot, HijackThis and CWShredder ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Help...am I being hacked?
    ... I'm using freebsd 4.10 on my laptop and I was browsing ... my filesystem and looking at some log files, ... Connection attempt to TCP 192.168.1.101:5554 from ...
    (freebsd-questions)
  • Re: XML Log (-> file size!)
    ... I noticed that we now have log files up to 200MB in size. ... Please do keep in mind that I'm still learning SSIS, ... There are a number of ways to implement logging in this way - my ... Right-click on the connection in the connection manager and select ...
    (microsoft.public.sqlserver.dts)