Strange to see so many logins spread over a short time. They seem to be in pairs, which is the way some clients start up. I wonder if the client thinks the connection has dropped, and so it starts new sessions. I realize the server's netstat shows them as still connected. It might be interesting to log sessions and see what's going on. Or to strace live processes. And of course ask the user what it looks like from his/her end. Joseph Brennan Lead Email Systems Engineer Columbia University Information Technology ---- Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html