reed@??? said:
> 20:45:55.253738 209.45.208.4.smtp > 12.155.196.8.28253: P 229:285(56) ack
> 80 win 5840 (DF) (ttl 64, id 49196, len 96)
> 0x0000 4500 0060 c02c 4000 4006 0896 d12d d004 E..`.,@.@....-..
> 0x0010 0c9b c408 0019 6e5d 75b4 ec3f 02b9 ac85 ......n]u..?....
> 0x0020 5018 16d0 18d5 0000 3335 3420 456e 7465 P.......354.Ente
> 0x0030 7220 6d65 7373 6167 652c 2065 6e64 696e r.message,.endin
> 0x0040 6720 7769 7468 2022 2e22 206f 6e20 6120 g.with.".".on.a.
> 0x0050 6c69 li
Er, there ain't 56 bytes of data there. There are only 42. There _should_
be 56 though. Note also the absence of the text '[tcp sum ok]'. Where are
these tcpdumps taken? On the offending server box or elsewhere on the same
network segment?
Network driver problems, perhaps? What OS/version/NIC etc.? (Sorry, I
missed the beginning of the thread).
--
dwmw2
