AW: [Exim] POP3 and Exim

> I'm using qpopper 4.0.5 and haven't experience any memory leakage
> problems. What client is causing the problem?

First of all, thanks to you all for your answers. I can now choose between
quite a variety of products, and hopefully get our server back to work.

I'm not entirely sure if it's qpopper (4.0.5 here too) that has the leak,
but I need to start somewhere. When I tail the /var/log/mail and
/var/log/exim_mainlog while watching the used memory displayed by the top
command, I can see the memory going up steadily. There are some times when
the memory increase coincides with a mail coming in, which would actually
point at exim (which is version 4.22 by the way), but I have these log file
entries from qpopper, which arrive every few minutes, so I suspected there
could be something wrong with qpopper.

Sep 22 20:07:51 mail1 popper[1398]: I/O error flushing output to client
jkopp at pD90057CF.dip.t-dialin.net [217.0.87.207]: Operation not permitted
(1)
Sep 22 20:07:51 mail1 popper[1398]: jkopp at pD90057CF.dip.t-dialin.net
(217.0.87.207): -ERR POP hangup from mail1.clippernet.de
Sep 22 20:07:51 mail1 popper[1398]: I/O error flushing output to client
jkopp at pD90057CF.dip.t-dialin.net [217.0.87.207]: Operation not permitted
(1)
Sep 22 20:07:51 mail1 popper[1398]: I/O error flushing output to client
jkopp at pD90057CF.dip.t-dialin.net [217.0.87.207]: Operation not permitted
(1)
Sep 22 20:09:47 mail1 popper[1419]: hschmidt at pD90057CF.dip.t-dialin.net
(217.0.87.207): -ERR [AUTH] Password supplied for "hschmidt" is incorrect.
Sep 22 20:09:47 mail1 popper[1419]: [AUTH] Failed attempted login to
hschmidt from host (pD90057CF.dip.t-dialin.net) 217.0.87.207

I think that the first customer uses Netscape Messenger, but I can't really
call and ask him that. The other has probably more than one client, because
he doesn't seem to notice that he has authentication failures. But again, I
can't call and tell him that, because there are more like him and I'd have
to call all these customers...

However, there is quite some traffic and it could be exim that causes the
memory leak. The only other program that runs on this server is ssld.

If anybody can help me on with this, I'd be _really_ glad. This is taking my
sleep, and it started several weeks ago - just about when Sobig arrived -
after three years without problems...

Thanks a lot,
Wolf-Guido Lutz