Hi Marc, Thanks for the info. I was able via Webmin to filter my dovecot.log/maillog.log file for this username in particular. I went to a day before and a day after this happened. All I ever see is her logins are via the Webmail/SM. In other words I ONLY see rip:127.0.0.1. I never see any pop3<ipaddressofmachine> logins at all. So All I can imagine now is possibly someone (kid) was on her machine and deleted her Inbox contents. I could see on the day/time she said this disappeared she was logged in for the 2 hours before she was disconnected from SM due to no activity. Maybe this is were someone was on her laptop? She is good at leaving her room?,,,with kids wondering about:(.. BTW: This is the first time I used Webmin to filter logs like this, It worked very well. It cut out ONLY what I wanted to view for a username. Keep that in mind for future use:).There are lots!! of entries in a 24 hour period,without being able to filter down to ONE username believe me. Thanks, Barry Cisna ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ ----- squirrelmail-users mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx List archives: http://news.gmane.org/gmane.mail.squirrelmail.user List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
