Hi,
I am trying to debug a problem with incoming email which is logging the following:
2014-04-29 17:24:47 [11806] SMTP connection from btn-mailfilter-v2.fast.net.uk [212.42.162.167]:26932 I=[192.168.210.100]:25 lost while reading message data (header)
The wireshark dump below shows a 30sec pause as marked below.... Does anyone have any idea what could be causing this as the sender is then terminating the connection...
Thanks
Ruairi
998.848163 212.42.162.167 -> 192.168.210.100 TCP 74 34204 > smtp [SYN] Seq=0 Win=65535 Len=0 MSS=1380 WS=8 SACK_PERM=1 TSval=198622317 TSecr=0
998.848187 192.168.210.100 -> 212.42.162.167 TCP 74 smtp > 34204 [SYN, ACK] Seq=0 Ack=1 Win=14480 Len=0 MSS=1460 SACK_PERM=1 TSval=3521127358 TSecr=198622317 WS=64
999.142050 212.42.162.167 -> 192.168.210.100 TCP 66 34204 > smtp [ACK] Seq=1 Ack=1 Win=65664 Len=0 TSval=198622346 TSecr=3521127358
999.694500 192.168.210.100 -> 212.42.162.167 SMTP 135 S: 220 mx1.msre.com.sg ESMTP Exim 4.80 Tue, 29 Apr 2014 17:55:58 +0800
999.990042 212.42.162.167 -> 192.168.210.100 SMTP 102 C: EHLO btn-mailfilter-v2.fast.net.uk
999.990056 192.168.210.100 -> 212.42.162.167 TCP 66 smtp > 34204 [ACK] Seq=70 Ack=37 Win=14528 Len=0 TSval=3521127644 TSecr=198622431
999.990093 192.168.210.100 -> 212.42.162.167 SMTP 199 S: 250-mx1.msre.com.sg Hello btn-mailfilter-v2.fast.net.uk [212.42.162.167] | 250-SIZE 52428800 | 250-8BITMIME | 250-PIPELINING | 250 HELP
1000.286118 212.42.162.167 -> 192.168.210.100 SMTP 114 C: MAIL From:<xxxxx@???> SIZE=25733
1000.286196 192.168.210.100 -> 212.42.162.167 SMTP 74 S: 250 OK
1000.582057 212.42.162.167 -> 192.168.210.100 SMTP 142 C: RCPT To:<xxxxx@???> | RCPT To:<xxxxx@???> | DATA
1000.620599 192.168.210.100 -> 212.42.162.167 TCP 66 smtp > 34204 [ACK] Seq=211 Ack=161 Win=14528 Len=0 TSval=3521127802 TSecr=198622490
******** 30 second pause ***********
1030.574118 212.42.162.167 -> 192.168.210.100 TCP 66 34204 > smtp [FIN, ACK] Seq=161 Ack=211 Win=65664 Len=0 TSval=198625491 TSecr=3521127802
1030.612598 192.168.210.100 -> 212.42.162.167 TCP 66 smtp > 34204 [ACK] Seq=211 Ack=162 Win=14528 Len=0 TSval=3521135300 TSecr=198625491
1030.910528 192.168.210.100 -> 212.42.162.167 SMTP 80 S: 250 Accepted
1031.204000 212.42.162.167 -> 192.168.210.100 TCP 60 34204 > smtp [RST] Seq=162 Win=0 Len=0
