Article ID: 114145, created on Jun 19, 2012, last review on May 10, 2014

  • Applies to:
  • Plesk 11.x for Linux
  • Plesk 10.x for Linux
  • Plesk 9.x for Linux/Unix
  • Plesk 8.x for Linux/Unix

Symptoms

Domain.tld subscription seems to be using a lot of traffic though customer claims that the figures should be much lower. Statistics shows that in particular mail traffic is affected.

Cause

The issue may be caused by multiple repetition of IMAP end-of-session messages in maillog which report same amount of received and sent data all belonging to the same session (hence actual traffic equals to values in rcvd and sent) but Plesk statistics accounts them as separate entries (since they have different timings and every session should have only one end-of-session message logged):
 
    Jun  6 23:45:07 ip-1-1-1-1 imapd-ssl: 1339051507.490999 DISCONNECTED, user=mailname@domain.tld, ip=[::ffff:2.2.2.2], headers=0, body=0, rcvd=341085899, sent=101744, maildir=/var/qmail/mailnames/domain.tld/mailname/Maildir
    Jun  6 23:45:07 ip-1-1-1-1  imapd-ssl: 1339051507.491029 DISCONNECTED, user=mailname@domain.tld, ip=[::ffff:2.2.2.2], headers=0, body=0, rcvd=341085899, sent=101744, maildir=/var/qmail/mailnames/domain.tld/mailname/Maildir
    Jun  6 23:45:07 ip-1-1-1-1 imapd-ssl: 1339051507.491036 DISCONNECTED, user=mailname@domain.tld, ip=[::ffff:2.2.2.2], headers=0, body=0, rcvd=341085899, sent=101744, maildir=/var/qmail/mailnames/domain.tld/mailname/Maildir…

 
Such problem may occur because some of the mail client programs improperly close connection, causing Courier-IMAP to log multiple DISCONNECT records.

Resolution

You need to check with the owner of the affected mailbox (mailname@domain.tld in our case) which mail client software they are using and advise that they either upgrade or use another software for sending and receiving emails.

dd0611b6086474193d9bf78e2b293040 56797cefb1efc9130f7c48a7d1db0f0c a914db3fdc7a53ddcfd1b2db8f5a1b9c 29d1e90fd304f01e6420fbe60f66f838 6ef0db7f1685482449634a455d77d3f4 b8ef5052d936e902043e41759118114e 0a53c5a9ca65a74d37ef5c5eaeb55d7f

Email subscription for changes to this article
Save as PDF