>Thanks Al. I sent this info to Kevin and he wanted me to thank you. Kevin says that there may be some possibilities there ...
>
>He sometimes uses terminal services
>He may be using a public proxy server, he wasn't sure and was going to check
>He runs something called splashtop remote streamer

OK, based on Michel's reply to you ( Message#1516072 ), it looks like 2 different IPs were in use, so most of my last post was moot.

If I read Michel's post correctly, what he's seeing in the UT web logs is something like this:

1. Kevin logs into UT from KevinIP and performs some activities (read posts, create posts etc.)

2. There is no explicit logoff option on the UT. However, if Kevin navigates away from UT or closes his browser, the periodic refresh code running in the browser stops, so UT is no longer getting a "heartbeat" from KevinIP, and his UT session is considered "closed". I believe this heartbeat period is by default something like 90 seconds; I don't know if that's user-configurable. So, the UT may detect Kevin has finished his session as little as 0 seconds after he navigates away or closes his browser, or as much as 90 seconds. On average it will be 45 seconds.

3. Within seconds of Kevin's session being closed, Grover logs on to UT from GroverIP (different from KevinIP), and performs some activities.

4. Grover navigates away or closes his browser, and when his heartbeat is no longer detected UT considers his session closed.

5. Within seconds of Grover's session being closed, Kevin logs on to UT from KevinIP and performs some more activities.

6. Etc. etc.

Michel considers that back-and-forth timing of sessions opening and closing to be suspicious. His theory is that Grover is not a different person, it's actually Kevin remote-controlling a computer at another IP address via Remote Desktop/Terminal Services, LogMeIn or similar. I don't believe there's any way Michel can tell from his web server logs that Grover's session actually is being run through Terminal Services; I think that's just what he's calling his remote control theory.

It would seem more natural to me that, if they actually are different people, Kevin's and Grover's UT sessions would overlap, rather than be mutually exclusive. When I access UT I tend to leave it open for a while in a tab, even if I'm doing other stuff in other browser tabs. However, I can certainly see someone being a purist, and navigating away from UT or closing the browser entirely once finished with it. If both Kevin and Grover were purists, then in general I'd expect there to be significant (and variable) gaps between one's session ending and the other one's starting. Apparently one session closing and the other's starting is so close in time, so consistently, that it is not by chance.

This implies some sort of synchronization between Kevin and Grover. Michel's theory is they are the same person. Failing that, some other synchronization method is necessary.

I believe there are notification features to this site - I've never used them. I believe you can configure your account so you are notified when a message is posted to a particular thread, or if a particular member posts any message in any forum. Maybe someone else could comment on the mechanics of how this might synchronize UT session between Kevin and Grover. Do these notifications only work if you're logged in to UT, or can they be via e-mail or some other protocol?