Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1009 Source: MSExchangePOP3

Level
Description
Number of simultaneous connections made by user <user name> exceeded maximum (16).
Comments
 
This can happen on Exchange 2007 SP1 due to a bug (the counter of POP3 connections does not decrease when a connection is disconnected). To resolve this problem, install Update Rollup 9 for Exchange 2007 Service Pack 1. See ME968626 for details.
This problem occurs if a deadlock occurs in the Microsoft.Exchange.POP3.exe process. In this situation, a client connection thread and a back-end proxy thread are pending for one another. Therefore, the existing connections are not disposed because the disposed threads are waiting for a resource that is held by the deadlocked threads. Eventually, the Exchange 2007 mail server reaches the connection limit. See ME932905 for information on how to resolve this problem.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...