PO log entries - tracking spam

[Michael Bell]

They mean a log in as that user.

I am trying to interpret a GW 6.5 post office log in an effort to track
down some outgoing spam that clogged the mail system. One of our users,
unbeknownst to me, had configured a blackberry to connect to the
Groupwise system via POP3/IMAP. I am wondering if the following lines in
the Post Office Log indicate repeated acceptance of messages or just
(where xxx.xxx.xxx.xxx is the internal IP address for the Groupwise
system and yy.yyy.yyy.yyy is the IP address for the blackberry device)
01:01:13 D88 C/S Login GWIA/Imap ::GW Id=emyers :: yy.yyy.yyy.yyy
[xxx.xxx.xxx.xxx]
01:01:50 D88 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:08:57 D88 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:00 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:01 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:01 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:03 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:03 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:04 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:04 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:05 D98 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:05 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:06 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:06 D98 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:07 D98 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:08 D98 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:08 D98 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:08 D98 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:09 D98 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:09 D98 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:09 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:09 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:11 D98 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:14 D98 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:16 D98 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:19 D98 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:20 D98 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:23 D98 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:38 D98 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:10:39 D98 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:11:07 D98 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:11:08 D98 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:11:09 D98 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:11:11 D98 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:11:12 D98 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:11:12 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:11:13 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:11:14 D98 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:11:15 D98 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:11:16 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:11:16 D98 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:11:17 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:11:17 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:11:17 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:11:18 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:11:19 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:11:19 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:11:21 D88 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:11:23 D88 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:11:23 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:11:26 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:11:28 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:11:33 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:11:34 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:11:37 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:12:47 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:12:56 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:12:56 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:12:57 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:13:04 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:13:24 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:13:44 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:13:55 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:13:58 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:13:58 D90 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:14:16 D88 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:14:20 D88 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:14:25 D88 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
01:14:31 D88 C/S Login Windows ::GW Id=info :: xxx.xxx.xxx.xxx
Thank you.
Ken

[Dave Parkes]

Or there's a resource called 'info' with a lot of shared folders or
address books that are shared to emyers ?

Cheers Dave