> -----Messaggio originale-----
> Da: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Per conto di Victor Duchovni
> Inviato: venerdì 17 ottobre 2008 3.26
> Cc: postfix-users@postfix.org
> Oggetto: Re: R: R: read timeout on cleanup socket on two
> different machines
>
>
> On Thu, Oct 16, 2008 at 07:17:37PM -0400, Wietse Venema wrote:
>
> > Luigi Iotti:
> > > 02:11:15.006582 IP (tos 0x0, ttl 64, id 43044, offset 0,
> flags [DF], proto:
> > > TCP (6), length: 52) 192.168.0.100.smtp >
> squid-cache.org.54737: ., cksum
> > > 0x1d47 (correct), 134:134(0) ack 2380 win 46
> <nop,nop,timestamp 1599101060
> > > 4005670333>
> > > 0x0000: 4500 0034 a824 4000 4006 9fea c0a8 0064
> [EMAIL PROTECTED]@......d
> > > 0x0010: 0ca0 2509 0019 d5d1 b1de 244a 32f0 333b
> ..%.......$J2.3;
> > > 0x0020: 8010 002e 1d47 0000 0101 080a 5f50 5884
> .....G......_PX.
> > > 0x0030: eec1 adbd ....
> >
> > The receiver says (win 46) that it has room for 46 bytes of data.
> >
> > > 02:12:17.735768 IP (tos 0x0, ttl 46, id 55626, offset 0,
> flags [DF], proto:
> > > TCP (6), length: 86) squid-cache.org.54737 > 192.168.0.100.smtp: .
> > > 2380:2426(46) ack 134 win 65535
> > > 0x0000: 4500 0056 d94a 4000 2e06 80a2 0ca0 2509
> [EMAIL PROTECTED]
> > > 0x0010: c0a8 0064 d5d1 0019 32f0 333b b1de 244a
> ...d....2.3;..$J
> > > 0x0020: 5010 ffff 4328 0000 6e20 7468 6520 6375
> P...C(..n.the.cu
> > > 0x0030: 7272 656e 7420 332e 302e 5354 4142 4c45
> rrent.3.0.STABLE
> > > 0x0040: 3130 0d0a 7061 636b 6167 652e 0d0a 6874
> 10..package...ht
> > > 0x0050: 7470 tp
> >
> > Two seconds later we have 46 bytes of data from the sender.
>
> Or is window scaling in effect? And perhaps an edge firewall at the
> sender's edge system that fails to take window scaling into account?
>
> We'd need to see the initial TCP handshake (SYN, SYN-ACK,
> ACK). This could
> be another recent case of poor interaction between WS>0 and firewalls.
It seems you caught it. Window scaling is in effect. The handshake:
01:15:38.122112 IP (tos 0x0, ttl 46, id 53117, offset 0, flags [DF], proto:
TCP (6), length: 64) squid-cache.org.54737 > 192.168.0.100.smtp: S, cksum
0x7502 (correct), 854600175:854600175(0) win 65535 <mss 1460,nop,wscale
1,nop,nop,timestamp 4005670333 0,sackOK,eol>
01:15:38.122213 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto: TCP
(6), length: 60) 192.168.0.100.smtp > squid-cache.org.54737: S, cksum 0xce37
(correct), 2984125380:2984125380(0) ack 854600176 win 5792 <mss
1460,sackOK,timestamp 1595763800 4005670333,nop,wscale 7>
01:15:38.476421 IP (tos 0x0, ttl 46, id 53395, offset 0, flags [DF], proto:
TCP (6), length: 64) squid-cache.org.54737 > 192.168.0.100.smtp: S, cksum
0x694a (correct), 854600175:854600175(0) win 65535 <mss 1460,nop,wscale
1,nop,nop,timestamp 4005673333 0,sackOK,eol>
So the tiny window (0x2e, 46) my box announces should read 5888.
Unfortunately, as Wietse observed, the remote site sends me exactly 46 bytes
so it seems that it simply ignores the scale. Another strange point is that,
after the initial greeting, it sends me almost exactly one packet (with 46
smtp bytes) a minute. If I continue observing the sniffed packets, I find
immediately after the handshake two retransmissions of the SYN-ACK (seems
the server is a little sleeping this night..):
01:15:38.476479 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto: TCP
(6), length: 60) 192.168.0.100.smtp > squid-cache.org.54737: S, cksum 0xccd5
(correct), 2984125380:2984125380(0) ack 854600176 win 5792 <mss
1460,sackOK,timestamp 1595764154 4005670333,nop,wscale 7>
01:15:42.122073 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto: TCP
(6), length: 60) 192.168.0.100.smtp > squid-cache.org.54737: S, cksum 0xbe97
(correct), 2984125380:2984125380(0) ack 854600176 win 5792 <mss
1460,sackOK,timestamp 1595767800 4005670333,nop,wscale 7>
Then, we go on very slowly with some retransmissions until we go a little
past the DATA smtp command. I turn on ascii dump just for clearness. Sorry
for the long dumps, I include alle the packets just to show the
communication being so slow:
01:15:44.216266 IP (tos 0x0, ttl 46, id 54821, offset 0, flags [DF], proto:
TCP (6), length: 40) squid-cache.org.54737 > 192.168.0.100.smtp: ., cksum
0xb4b0 (correct), 1:1(0) ack 1 win 65535
0x0000: 4500 0028 d625 4000 2e06 83f5 0ca0 2509 E..([EMAIL PROTECTED]
0x0010: c0a8 0064 d5d1 0019 32f0 29f0 b1de 23c5 ...d....2.)...#.
0x0020: 5010 ffff b4b0 0000 30d3 5232 471c P.......0.R2G.
01:15:44.225483 IP (tos 0x0, ttl 46, id 54875, offset 0, flags [DF], proto:
TCP (6), length: 40) squid-cache.org.54737 > 192.168.0.100.smtp: ., cksum
0xb4b0 (correct), 1:1(0) ack 1 win 65535
0x0000: 4500 0028 d65b 4000 2e06 83bf 0ca0 2509 E..([EMAIL PROTECTED]
0x0010: c0a8 0064 d5d1 0019 32f0 29f0 b1de 23c5 ...d....2.)...#.
0x0020: 5010 ffff b4b0 0000 30d3 3e3e ef8a P.......0.>>..
01:15:44.556516 IP (tos 0x0, ttl 64, id 42979, offset 0, flags [DF], proto:
TCP (6), length: 93) 192.168.0.100.smtp > squid-cache.org.54737: P 1:42(41)
ack 1 win 46 <nop,nop,timestamp 1595770235 4005670333>
0x0000: 4500 005d a7e3 4000 4006 a002 c0a8 0064 [EMAIL
PROTECTED]@......d
0x0010: 0ca0 2509 0019 d5d1 b1de 23c5 32f0 29f0 ..%.......#.2.).
0x0020: 8018 002e 9696 0000 0101 080a 5f1d 857b ............_..{
0x0030: eec1 adbd 3232 3020 6261 7261 7474 6f6c ....220.barattol
0x0040: 6f2e 7269 6e6e 616e 6574 2e69 7420 4553 o.rinnanet.it.ES
0x0050: 4d54 MT
01:15:45.354381 IP (tos 0x0, ttl 46, id 55542, offset 0, flags [DF], proto:
TCP (6), length: 62) squid-cache.org.54737 > 192.168.0.100.smtp: P, cksum
0x7f7b (correct), 1:23(22) ack 42 win 65535
0x0000: 4500 003e d8f6 4000 2e06 810e 0ca0 2509 E..>[EMAIL PROTECTED]
0x0010: c0a8 0064 d5d1 0019 32f0 29f0 b1de 23ee ...d....2.)...#.
0x0020: 5018 ffff 7f7b 0000 4845 4c4f 2073 7175 P....{..HELO.squ
0x0030: 6964 2d63 6163 6865 2e6f 7267 0d0a id-cache.org..
01:15:45.354442 IP (tos 0x0, ttl 64, id 42980, offset 0, flags [DF], proto:
TCP (6), length: 52) 192.168.0.100.smtp > squid-cache.org.54737: ., cksum
0xf6f5 (correct), 42:42(0) ack 23 win 46 <nop,nop,timestamp 1595771033
4005670333>
0x0000: 4500 0034 a7e4 4000 4006 a02a c0a8 0064 [EMAIL
PROTECTED]@..*...d
0x0010: 0ca0 2509 0019 d5d1 b1de 23ee 32f0 2a06 ..%.......#.2.*.
0x0020: 8010 002e f6f5 0000 0101 080a 5f1d 8899 ............_...
0x0030: eec1 adbd ....
01:15:45.354578 IP (tos 0x0, ttl 64, id 42981, offset 0, flags [DF], proto:
TCP (6), length: 79) 192.168.0.100.smtp > squid-cache.org.54737: P, cksum
0x187a (correct), 42:69(27) ack 23 win 46 <nop,nop,timestamp 1595771033
4005670333>
0x0000: 4500 004f a7e5 4000 4006 a00e c0a8 0064 [EMAIL
PROTECTED]@......d
0x0010: 0ca0 2509 0019 d5d1 b1de 23ee 32f0 2a06 ..%.......#.2.*.
0x0020: 8018 002e 187a 0000 0101 080a 5f1d 8899 .....z......_...
0x0030: eec1 adbd 3235 3020 6261 7261 7474 6f6c ....250.barattol
0x0040: 6f2e 7269 6e6e 616e 6574 2e69 740d 0a o.rinnanet.it..
01:15:47.748054 IP (tos 0x0, ttl 64, id 42982, offset 0, flags [DF], proto:
TCP (6), length: 79) 192.168.0.100.smtp > squid-cache.org.54737: P, cksum
0x0f20 (correct), 42:69(27) ack 23 win 46 <nop,nop,timestamp 1595773427
4005670333>
0x0000: 4500 004f a7e6 4000 4006 a00d c0a8 0064 [EMAIL
PROTECTED]@......d
0x0010: 0ca0 2509 0019 d5d1 b1de 23ee 32f0 2a06 ..%.......#.2.*.
0x0020: 8018 002e 0f20 0000 0101 080a 5f1d 91f3 ............_...
0x0030: eec1 adbd 3235 3020 6261 7261 7474 6f6c ....250.barattol
0x0040: 6f2e 7269 6e6e 616e 6574 2e69 740d 0a o.rinnanet.it..
01:15:52.536190 IP (tos 0x0, ttl 64, id 42983, offset 0, flags [DF], proto:
TCP (6), length: 79) 192.168.0.100.smtp > squid-cache.org.54737: P, cksum
0xfc6b (correct), 42:69(27) ack 23 win 46 <nop,nop,timestamp 1595778215
4005670333>
0x0000: 4500 004f a7e7 4000 4006 a00c c0a8 0064 [EMAIL
PROTECTED]@......d
0x0010: 0ca0 2509 0019 d5d1 b1de 23ee 32f0 2a06 ..%.......#.2.*.
0x0020: 8018 002e fc6b 0000 0101 080a 5f1d a4a7 .....k......_...
0x0030: eec1 adbd 3235 3020 6261 7261 7474 6f6c ....250.barattol
0x0040: 6f2e 7269 6e6e 616e 6574 2e69 740d 0a o.rinnanet.it..
01:16:02.110458 IP (tos 0x0, ttl 64, id 42984, offset 0, flags [DF], proto:
TCP (6), length: 79) 192.168.0.100.smtp > squid-cache.org.54737: P, cksum
0xd703 (correct), 42:69(27) ack 23 win 46 <nop,nop,timestamp 1595787791
4005670333>
0x0000: 4500 004f a7e8 4000 4006 a00b c0a8 0064 [EMAIL
PROTECTED]@......d
0x0010: 0ca0 2509 0019 d5d1 b1de 23ee 32f0 2a06 ..%.......#.2.*.
0x0020: 8018 002e d703 0000 0101 080a 5f1d ca0f ............_...
0x0030: eec1 adbd 3235 3020 6261 7261 7474 6f6c ....250.barattol
0x0040: 6f2e 7269 6e6e 616e 6574 2e69 740d 0a o.rinnanet.it..
01:16:06.906297 IP (tos 0x0, ttl 46, id 55671, offset 0, flags [DF], proto:
TCP (6), length: 86) squid-cache.org.54737 > 192.168.0.100.smtp: . 23:69(46)
ack 69 win 65535
0x0000: 4500 0056 d977 4000 2e06 8075 0ca0 2509 [EMAIL PROTECTED]
0x0010: c0a8 0064 d5d1 0019 32f0 2a06 b1de 2409 ...d....2.*...$.
0x0020: 5010 ffff f517 0000 4d41 494c 2046 524f P.......MAIL.FRO
0x0030: 4d3a 3c73 7175 6964 2d75 7365 7273 2d72 M:<squid-users-r
0x0040: 6574 7572 6e2d 3836 3432 302d 7371 7569 eturn-86420-squi
0x0050: 643d d=
01:16:06.946565 IP (tos 0x0, ttl 64, id 42985, offset 0, flags [DF], proto:
TCP (6), length: 52) 192.168.0.100.smtp > squid-cache.org.54737: ., cksum
0xa252 (correct), 69:69(0) ack 69 win 46 <nop,nop,timestamp 1595792627
4005670333>
0x0000: 4500 0034 a7e9 4000 4006 a025 c0a8 0064 [EMAIL
PROTECTED]@..%...d
0x0010: 0ca0 2509 0019 d5d1 b1de 2409 32f0 2a34 ..%.......$.2.*4
0x0020: 8010 002e a252 0000 0101 080a 5f1d dcf3 .....R......_...
0x0030: eec1 adbd ....
01:16:15.825142 IP (tos 0x0, ttl 46, id 57640, offset 0, flags [DF], proto:
TCP (6), length: 64) squid-cache.org.54737 > 192.168.0.100.smtp: P, cksum
0x1175 (correct), 69:93(24) ack 69 win 65535
0x0000: 4500 0040 e128 4000 2e06 78da 0ca0 2509 [EMAIL
PROTECTED](@...x...%.
0x0010: c0a8 0064 d5d1 0019 32f0 2a34 b1de 2409 ...d....2.*4..$.
0x0020: 5018 ffff 1175 0000 692e 6269 7a40 7371 [EMAIL PROTECTED]
0x0030: 7569 642d 6361 6368 652e 6f72 673e 0d0a uid-cache.org>..
01:16:15.825200 IP (tos 0x0, ttl 64, id 42986, offset 0, flags [DF], proto:
TCP (6), length: 52) 192.168.0.100.smtp > squid-cache.org.54737: ., cksum
0x7f8a (correct), 69:69(0) ack 93 win 46 <nop,nop,timestamp 1595801507
4005670333>
0x0000: 4500 0034 a7ea 4000 4006 a024 c0a8 0064 [EMAIL
PROTECTED]@..$...d
0x0010: 0ca0 2509 0019 d5d1 b1de 2409 32f0 2a4c ..%.......$.2.*L
0x0020: 8010 002e 7f8a 0000 0101 080a 5f1d ffa3 ............_...
0x0030: eec1 adbd ....
01:16:15.841384 IP (tos 0x0, ttl 64, id 42987, offset 0, flags [DF], proto:
TCP (6), length: 66) 192.168.0.100.smtp > squid-cache.org.54737: P, cksum
0x2d1d (correct), 69:83(14) ack 93 win 46 <nop,nop,timestamp 1595801523
4005670333>
0x0000: 4500 0042 a7eb 4000 4006 a015 c0a8 0064 [EMAIL
PROTECTED]@......d
0x0010: 0ca0 2509 0019 d5d1 b1de 2409 32f0 2a4c ..%.......$.2.*L
0x0020: 8018 002e 2d1d 0000 0101 080a 5f1d ffb3 ....-......._...
0x0030: eec1 adbd 3235 3020 322e 312e 3020 4f6b ....250.2.1.0.Ok
0x0040: 0d0a ..
01:16:19.264157 IP (tos 0x0, ttl 46, id 58236, offset 0, flags [DF], proto:
TCP (6), length: 67) squid-cache.org.54737 > 192.168.0.100.smtp: P, cksum
0x863b (correct), 93:120(27) ack 83 win 65535
0x0000: 4500 0043 e37c 4000 2e06 7683 0ca0 2509 E..C.|@...v...%.
0x0010: c0a8 0064 d5d1 0019 32f0 2a4c b1de 2417 ...d....2.*L..$.
0x0020: 5018 ffff 863b 0000 5243 5054 2054 4f3a P....;..RCPT.TO:
0x0030: 3c73 7175 6964 4069 6f74 7469 2e62 697a <[EMAIL PROTECTED]
0x0040: 3e0d 0a >..
01:16:19.304338 IP (tos 0x0, ttl 64, id 42988, offset 0, flags [DF], proto:
TCP (6), length: 52) 192.168.0.100.smtp > squid-cache.org.54737: ., cksum
0x71ca (correct), 83:83(0) ack 120 win 46 <nop,nop,timestamp 1595804986
4005670333>
0x0000: 4500 0034 a7ec 4000 4006 a022 c0a8 0064 [EMAIL
PROTECTED]@.."...d
0x0010: 0ca0 2509 0019 d5d1 b1de 2417 32f0 2a67 ..%.......$.2.*g
0x0020: 8010 002e 71ca 0000 0101 080a 5f1e 0d3a ....q......._..:
0x0030: eec1 adbd ....
01:16:24.708891 IP (tos 0x0, ttl 64, id 42989, offset 0, flags [DF], proto:
TCP (6), length: 66) 192.168.0.100.smtp > squid-cache.org.54737: P, cksum
0x054f (correct), 83:97(14) ack 120 win 46 <nop,nop,timestamp 1595810392
4005670333>
0x0000: 4500 0042 a7ed 4000 4006 a013 c0a8 0064 [EMAIL
PROTECTED]@......d
0x0010: 0ca0 2509 0019 d5d1 b1de 2417 32f0 2a67 ..%.......$.2.*g
0x0020: 8018 002e 054f 0000 0101 080a 5f1e 2258 .....O......_."X
0x0030: eec1 adbd 3235 3020 322e 312e 3520 4f6b ....250.2.1.5.Ok
0x0040: 0d0a ..
01:16:29.656477 IP (tos 0x0, ttl 64, id 42990, offset 0, flags [DF], proto:
TCP (6), length: 66) 192.168.0.100.smtp > squid-cache.org.54737: P, cksum
0xf1fa (correct), 83:97(14) ack 120 win 46 <nop,nop,timestamp 1595815340
4005670333>
0x0000: 4500 0042 a7ee 4000 4006 a012 c0a8 0064 [EMAIL
PROTECTED]@......d
0x0010: 0ca0 2509 0019 d5d1 b1de 2417 32f0 2a67 ..%.......$.2.*g
0x0020: 8018 002e f1fa 0000 0101 080a 5f1e 35ac ............_.5.
0x0030: eec1 adbd 3235 3020 322e 312e 3520 4f6b ....250.2.1.5.Ok
0x0040: 0d0a ..
01:16:39.551686 IP (tos 0x0, ttl 64, id 42991, offset 0, flags [DF], proto:
TCP (6), length: 66) 192.168.0.100.smtp > squid-cache.org.54737: P, cksum
0xcb52 (correct), 83:97(14) ack 120 win 46 <nop,nop,timestamp 1595825236
4005670333>
0x0000: 4500 0042 a7ef 4000 4006 a011 c0a8 0064 [EMAIL
PROTECTED]@......d
0x0010: 0ca0 2509 0019 d5d1 b1de 2417 32f0 2a67 ..%.......$.2.*g
0x0020: 8018 002e cb52 0000 0101 080a 5f1e 5c54 .....R......_.\T
0x0030: eec1 adbd 3235 3020 322e 312e 3520 4f6b ....250.2.1.5.Ok
0x0040: 0d0a ..
01:16:59.341108 IP (tos 0x0, ttl 64, id 42992, offset 0, flags [DF], proto:
TCP (6), length: 66) 192.168.0.100.smtp > squid-cache.org.54737: P, cksum
0x7e02 (correct), 83:97(14) ack 120 win 46 <nop,nop,timestamp 1595845028
4005670333>
0x0000: 4500 0042 a7f0 4000 4006 a010 c0a8 0064 [EMAIL
PROTECTED]@......d
0x0010: 0ca0 2509 0019 d5d1 b1de 2417 32f0 2a67 ..%.......$.2.*g
0x0020: 8018 002e 7e02 0000 0101 080a 5f1e a9a4 ....~......._...
0x0030: eec1 adbd 3235 3020 322e 312e 3520 4f6b ....250.2.1.5.Ok
0x0040: 0d0a ..
01:17:38.920951 IP (tos 0x0, ttl 64, id 42993, offset 0, flags [DF], proto:
TCP (6), length: 66) 192.168.0.100.smtp > squid-cache.org.54737: P, cksum
0xe361 (correct), 83:97(14) ack 120 win 46 <nop,nop,timestamp 1595884612
4005670333>
0x0000: 4500 0042 a7f1 4000 4006 a00f c0a8 0064 [EMAIL
PROTECTED]@......d
0x0010: 0ca0 2509 0019 d5d1 b1de 2417 32f0 2a67 ..%.......$.2.*g
0x0020: 8018 002e e361 0000 0101 080a 5f1f 4444 .....a......_.DD
0x0030: eec1 adbd 3235 3020 322e 312e 3520 4f6b ....250.2.1.5.Ok
0x0040: 0d0a ..
01:18:06.867579 IP (tos 0x0, ttl 46, id 3644, offset 0, flags [DF], proto:
TCP (6), length: 46) squid-cache.org.54737 > 192.168.0.100.smtp: P, cksum
0x0e3f (correct), 120:126(6) ack 97 win 65535
0x0000: 4500 002e 0e3c 4000 2e06 4bd9 0ca0 2509 E....<@...K...%.
0x0010: c0a8 0064 d5d1 0019 32f0 2a67 b1de 2425 ...d....2.*g..$%
0x0020: 5018 ffff 0e3f 0000 4441 5441 0d0a P....?..DATA..
01:18:06.867644 IP (tos 0x0, ttl 64, id 42994, offset 0, flags [DF], proto:
TCP (6), length: 52) 192.168.0.100.smtp > squid-cache.org.54737: ., cksum
0xcd7c (correct), 97:97(0) ack 126 win 46 <nop,nop,timestamp 1595912562
4005670333>
0x0000: 4500 0034 a7f2 4000 4006 a01c c0a8 0064 [EMAIL
PROTECTED]@......d
0x0010: 0ca0 2509 0019 d5d1 b1de 2425 32f0 2a6d ..%.......$%2.*m
0x0020: 8010 002e cd7c 0000 0101 080a 5f1f b172 .....|......_..r
0x0030: eec1 adbd ....
01:18:06.867874 IP (tos 0x0, ttl 64, id 42995, offset 0, flags [DF], proto:
TCP (6), length: 89) 192.168.0.100.smtp > squid-cache.org.54737: P
97:134(37) ack 126 win 46 <nop,nop,timestamp 1595912562 4005670333>
0x0000: 4500 0059 a7f3 4000 4006 9ff6 c0a8 0064 [EMAIL
PROTECTED]@......d
0x0010: 0ca0 2509 0019 d5d1 b1de 2425 32f0 2a6d ..%.......$%2.*m
0x0020: 8018 002e 9c72 0000 0101 080a 5f1f b172 .....r......_..r
0x0030: eec1 adbd 3335 3420 456e 6420 6461 7461 ....354.End.data
0x0040: 2077 6974 6820 3c43 523e 3c4c 463e 2e3c .with.<CR><LF>.<
0x0050: 4352 CR
01:18:07.749232 IP (tos 0x0, ttl 46, id 3939, offset 0, flags [DF], proto:
TCP (6), length: 86) squid-cache.org.54737 > 192.168.0.100.smtp: .
126:172(46) ack 134 win 65535
0x0000: 4500 0056 0f63 4000 2e06 4a8a 0ca0 2509 [EMAIL PROTECTED]
0x0010: c0a8 0064 d5d1 0019 32f0 2a6d b1de 244a ...d....2.*m..$J
0x0020: 5010 ffff e551 0000 5265 6365 6976 6564 P....Q..Received
0x0030: 3a20 2871 6d61 696c 2035 3534 3931 2069 :.(qmail.55491.i
0x0040: 6e76 6f6b 6564 2062 7920 7569 6420 3130 nvoked.by.uid.10
0x0050: 3037 07
01:18:07.789730 IP (tos 0x0, ttl 64, id 42996, offset 0, flags [DF], proto:
TCP (6), length: 52) 192.168.0.100.smtp > squid-cache.org.54737: ., cksum
0xc98f (correct), 134:134(0) ack 172 win 46 <nop,nop,timestamp 1595913484
4005670333>
0x0000: 4500 0034 a7f4 4000 4006 a01a c0a8 0064 [EMAIL
PROTECTED]@......d
0x0010: 0ca0 2509 0019 d5d1 b1de 244a 32f0 2a9b ..%.......$J2.*.
0x0020: 8010 002e c98f 0000 0101 080a 5f1f b50c ............_...
0x0030: eec1 adbd ....
Here we have to wait more than 4 minutes for something to arrive again.
After that, we stabilize on a rate of one packet every minute:
01:22:25.997338 IP (tos 0x0, ttl 46, id 31375, offset 0, flags [DF], proto:
TCP (6), length: 86) squid-cache.org.54737 > 192.168.0.100.smtp: .
172:218(46) ack 134 win 65535
0x0000: 4500 0056 7a8f 4000 2e06 df5d 0ca0 2509 [EMAIL PROTECTED]
0x0010: c0a8 0064 d5d1 0019 32f0 2a9b b1de 244a ...d....2.*...$J
0x0020: 5010 ffff 8333 0000 3520 4f63 7420 3230 P....3..5.Oct.20
0x0030: 3038 2032 333a 3034 3a30 3420 2d30 3030 08.23:04:04.-000
0x0040: 300d 0a4d 6169 6c69 6e67 2d4c 6973 743a 0..Mailing-List:
0x0050: 2063 .c
01:22:25.997420 IP (tos 0x0, ttl 64, id 42997, offset 0, flags [DF], proto:
TCP (6), length: 52) 192.168.0.100.smtp > squid-cache.org.54737: ., cksum
0xd8a0 (correct), 134:134(0) ack 218 win 46 <nop,nop,timestamp 1596171721
4005670333>
0x0000: 4500 0034 a7f5 4000 4006 a019 c0a8 0064 [EMAIL
PROTECTED]@......d
0x0010: 0ca0 2509 0019 d5d1 b1de 244a 32f0 2ac9 ..%.......$J2.*.
0x0020: 8010 002e d8a0 0000 0101 080a 5f23 a5c9 ............_#..
0x0030: eec1 adbd ....
01:23:31.075952 IP (tos 0x0, ttl 46, id 40581, offset 0, flags [DF], proto:
TCP (6), length: 86) squid-cache.org.54737 > 192.168.0.100.smtp: .
218:264(46) ack 134 win 65535
0x0000: 4500 0056 9e85 4000 2e06 bb67 0ca0 2509 [EMAIL PROTECTED]
0x0010: c0a8 0064 d5d1 0019 32f0 2ac9 b1de 244a ...d....2.*...$J
0x0020: 5010 ffff 5974 0000 6374 2073 7175 6964 P...Yt..ct.squid
0x0030: 2d75 7365 7273 2d68 656c 7040 7371 7569 [EMAIL PROTECTED]
0x0040: 642d 6361 6368 652e 6f72 673b 2072 756e d-cache.org;.run
0x0050: 2062 .b
01:23:31.076010 IP (tos 0x0, ttl 64, id 42998, offset 0, flags [DF], proto:
TCP (6), length: 52) 192.168.0.100.smtp > squid-cache.org.54737: ., cksum
0xda33 (correct), 134:134(0) ack 264 win 46 <nop,nop,timestamp 1596236807
4005670333>
0x0000: 4500 0034 a7f6 4000 4006 a018 c0a8 0064 [EMAIL
PROTECTED]@......d
0x0010: 0ca0 2509 0019 d5d1 b1de 244a 32f0 2af7 ..%.......$J2.*.
0x0020: 8010 002e da33 0000 0101 080a 5f24 a407 .....3......_$..
0x0030: eec1 adbd ....
01:24:38.255932 IP (tos 0x0, ttl 46, id 51805, offset 0, flags [DF], proto:
TCP (6), length: 86) squid-cache.org.54737 > 192.168.0.100.smtp: .
264:310(46) ack 134 win 65535
0x0000: 4500 0056 ca5d 4000 2e06 8f8f 0ca0 2509 [EMAIL PROTECTED]
0x0010: c0a8 0064 d5d1 0019 32f0 2af7 b1de 244a ...d....2.*...$J
0x0020: 5010 ffff bc9c 0000 6d6c 6d0d 0a50 7265 P.......mlm..Pre
0x0030: 6365 6465 6e63 653a 2062 756c 6b0d 0a4c cedence:.bulk..L
0x0040: 6973 742d 4964 3a20 5371 7569 6420 5573 ist-Id:.Squid.Us
0x0050: 6572 er
01:24:38.255991 IP (tos 0x0, ttl 64, id 42999, offset 0, flags [DF], proto:
TCP (6), length: 52) 192.168.0.100.smtp > squid-cache.org.54737: ., cksum
0xd391 (correct), 134:134(0) ack 310 win 46 <nop,nop,timestamp 1596303994
4005670333>
0x0000: 4500 0034 a7f7 4000 4006 a017 c0a8 0064 [EMAIL
PROTECTED]@......d
0x0010: 0ca0 2509 0019 d5d1 b1de 244a 32f0 2b25 ..%.......$J2.+%
0x0020: 8010 002e d391 0000 0101 080a 5f25 aa7a ............_%.z
0x0030: eec1 adbd ....
01:25:39.311370 IP (tos 0x0, ttl 46, id 63464, offset 0, flags [DF], proto:
TCP (6), length: 86) squid-cache.org.54737 > 192.168.0.100.smtp: .
310:356(46) ack 134 win 65535
0x0000: 4500 0056 f7e8 4000 2e06 6204 0ca0 2509 [EMAIL PROTECTED]
0x0010: c0a8 0064 d5d1 0019 32f0 2b25 b1de 244a ...d....2.+%..$J
0x0020: 5010 ffff f507 0000 7175 6964 2d75 7365 P.......quid-use
0x0030: 7273 2e73 7175 6964 2d63 6163 6865 2e6f rs.squid-cache.o
0x0040: 7267 3e0d 0a4c 6973 742d 506f 7374 3a20 rg>..List-Post:.
0x0050: 3c6d <m
01:25:39.311430 IP (tos 0x0, ttl 64, id 43000, offset 0, flags [DF], proto:
TCP (6), length: 52) 192.168.0.100.smtp > squid-cache.org.54737: ., cksum
0xe4db (correct), 134:134(0) ack 356 win 46 <nop,nop,timestamp 1596365057
4005670333>
0x0000: 4500 0034 a7f8 4000 4006 a016 c0a8 0064 [EMAIL
PROTECTED]@......d
0x0010: 0ca0 2509 0019 d5d1 b1de 244a 32f0 2b53 ..%.......$J2.+S
0x0020: 8010 002e e4db 0000 0101 080a 5f26 9901 ............_&..
0x0030: eec1 adbd ....
01:26:40.003950 IP (tos 0x0, ttl 46, id 10779, offset 0, flags [DF], proto:
TCP (6), length: 86) squid-cache.org.54737 > 192.168.0.100.smtp: .
356:402(46) ack 134 win 65535
0x0000: 4500 0056 2a1b 4000 2e06 2fd2 0ca0 2509 [EMAIL
PROTECTED]/...%.
0x0010: c0a8 0064 d5d1 0019 32f0 2b53 b1de 244a ...d....2.+S..$J
0x0020: 5010 ffff fb0b 0000 6f3a 7371 7569 642d P.......o:squid-
0x0030: 7573 6572 7340 7371 7569 642d 6361 6368 [EMAIL PROTECTED]
0x0040: 652e 6f72 673e 0d0a 4c69 7374 2d48 656c e.org>..List-Hel
0x0050: 703a p:
01:26:40.004010 IP (tos 0x0, ttl 64, id 43001, offset 0, flags [DF], proto:
TCP (6), length: 52) 192.168.0.100.smtp > squid-cache.org.54737: ., cksum
0xf791 (correct), 134:134(0) ack 402 win 46 <nop,nop,timestamp 1596425756
4005670333>
0x0000: 4500 0034 a7f9 4000 4006 a015 c0a8 0064 [EMAIL
PROTECTED]@......d
0x0010: 0ca0 2509 0019 d5d1 b1de 244a 32f0 2b81 ..%.......$J2.+.
0x0020: 8010 002e f791 0000 0101 080a 5f27 861c ............_'..
0x0030: eec1 adbd ....
...
If you have some further suggestion, I would appreciate them very much.
Obviously, thank you all for helping me even in such an OT discussion.
Luigi
