dovecot proxy messages

I just setup a dovecot proxy and am seeing lots of unmatched messages.  Some 
examples:

     dovecot: imap-login: proxy(alexand): disconnecting 97.124.147.59 
(Disconnected by client): 7 Time(s)
     dovecot: imap-login: proxy(alexand): disconnecting 97.124.147.59 
(Disconnected by server): 5 Time(s)
     dovecot: imap-login: proxy(alexand): started proxying to 
mail.cora.nwra.com:993: user=<alexand>, method=PLAIN, rip=97.124.147.59, 
lip=4.28.99.182, TLS: 12 Time(s)

     dovecot: pop3-login: proxy(werne): disconnecting 166.147.82.151 
(Disconnected by client): 1 Time(s)
     dovecot: pop3-login: proxy(werne): disconnecting 166.147.82.151 
(Disconnected by server): 2 Time(s)
     dovecot: pop3-login: proxy(werne): disconnecting 206.124.7.172 
(Disconnected by server): 200 Time(s)
     dovecot: pop3-login: proxy(werne): disconnecting 207.173.60.178 
(Disconnected by client: Connection reset by peer): 1 Time(s)
     dovecot: pop3-login: proxy(werne): disconnecting 207.173.60.178 
(Disconnected by server): 1 Time(s)
     dovecot: pop3-login: proxy(werne): started proxying to 
mail.cora.nwra.com:995: user=<werne>, method=PLAIN, rip=166.147.82.151, 
lip=4.28.99.182, TLS: 3 Time(s)


So, I think it makes sense to aggregate the proxy logins separate from the 
regular login totals.  Seem good?  What about the disconnects?

-- 
Orion Poplawski
Technical Manager                     303-415-9701 x222
NWRA, Boulder Office                  FAX: 303-415-9702
3380 Mitchell Lane                       [email protected]
Boulder, CO 80301                   http://www.nwra.com

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/