> > > Which tcpdump version is this? Where are the time stamps and the 
> > > packets with data (Len>0)?
> >
> > tcpdump show only initial packet data by default and "-s0" show all 
> > data. Is usefull when decode HEX (-xX) or ASCII (-A)
> 
> I repeat, there is no need to look at the data itself.
> 
> However, this trace is worthless for the following reasons:
> 
> 1) There are no time stamps, sequence numbers, IP addresses.
> 
> 2) There is no information about packets that have data length > 0.
> 
> And, with a thread that has one message per week, it might also help 
> to summarize what the problem was.

Sorry for the bad information that I have submitted! :-(

I hope that this time they are correct (please, refer at
http://80.74.176.104/dump_no_detail).

Moreover I want to report some rows that describe shortly the problem
that I have encountered:

I can't identify the cause of impossibility to relay emails through my
Postifix mail gateway, from a Outlook express client.

> From mail log, I saw:
> 
> postfix/smtpd[16988]: connect from unknown[xxx.yyy.www.zzz]
> postfix/smtpd[16988]: 7B98D75008D: client=unknown[xxx.yyy.www.zzz]
> postfix/cleanup[22797]: 7B98D75008D:
> message-id=<[EMAIL PROTECTED]>
> 
> From client side I get a pop-up window that points out problems with 
> server communication or even network..

And 

>> $ egrep 'postfix/cleanup\[22797\]|postfix/smtpd\[16988\]'
>> /var/log/maillog
>>     
>
> Oct 29 10:27:58 av3 postfix/smtpd[16988]: connect from 
> unknown[xxx.yyy.www.zzz] Oct 29 10:27:58 av3 postfix/smtpd[16988]:
> 7B98D75008D:
> client=unknown[xxx.yyy.www.zzz]
> Oct 29 10:34:25 av3 postfix/smtpd[16988]: timeout after DATA from 
> unknown[xxx.yyy.www.zzz] Oct 29 10:34:25 av3 postfix/smtpd[16988]:
> disconnect from unknown[xxx.yyy.www.zzz]

After the I would to investigate deeply about the cause and I have
collected data with tcpdump for one problematic session:

# tcpdump -s 0 -w /var/dump host <client> and port 25

And got the data showed at url above (hoping that this time they are the
worth ones! ;-))

Thanks,

rocsca

Reply via email to