[exim-dev] [Bug 2563] New connection type "kse" for the Kasp…

Top Page
Delete this message
Reply to this message
Author: admin
Date:  
To: exim-dev
Subject: [exim-dev] [Bug 2563] New connection type "kse" for the Kaspersky Scan Engine
https://bugs.exim.org/show_bug.cgi?id=2563

--- Comment #13 from Andrew Colin Kissa <andrew@???> ---
In test-stdout-server i see the following, which i surmise is that the client
stopped communicating.

Listening on port 1224 ...
Connection request from [127.0.0.1]
<POST /scanmemory HTTP/1.0
<Content-Length: 505
<X-KAV-ProtocolVersion: 1
<X-KAV-Timeout: 2000
<
Unexpected EOF read from client

But that does not correspond with the packet capture. My reading of the capture
is the connection was setup, client sends the first payload with the protocol
headers, the server ack's that and then kills the connection with a FIN, they
client is still trying to send the next payload with the body of the email, the
server then sends the reset to immediately kill the connection.

Am i missing something or have misinterpreted the capture below ?

IP 127.0.0.1.50660 > 127.0.0.1.vpnz: Flags [S], seq 3147582047, win 65495,
options [mss 65495,sackOK,TS val 1109368868 ecr 0,nop,wscale 7], length 0
E..<.{@.@.R>..............J_...................
B..$........
IP 127.0.0.1.vpnz > 127.0.0.1.50660: Flags [S.], seq 1637814294, ack
3147582048, win 65483, options [mss 65495,sackOK,TS val 1109368868 ecr
1109368868,nop,wscale 7], length 0
E..<..@.@.<.............a.....J`....I..........
B..$B..$....
IP 127.0.0.1.50660 > 127.0.0.1.vpnz: Flags [.], ack 1, win 512, options
[nop,nop,TS val 1109368868 ecr 1109368868], length 0
E..4.|@.@.RE..............J`a.......o......
B..$B..$
IP 127.0.0.1.50660 > 127.0.0.1.vpnz: Flags [P.], seq 1:98, ack 1, win 512,
options [nop,nop,TS val 1109368869 ecr 1109368868], length 97
E....}@.@.Q...............J`a..............
B..%B..$POST /scanmemory HTTP/1.0
Content-Length: 505
X-KAV-ProtocolVersion: 1
X-KAV-Timeout: 2000


IP 127.0.0.1.vpnz > 127.0.0.1.50660: Flags [.], ack 98, win 512, options
[nop,nop,TS val 1109368869 ecr 1109368869], length 0
E..4.3@.@...............a.....J.....op.....
B..%B..%
IP 127.0.0.1.vpnz > 127.0.0.1.50660: Flags [F.], seq 1, ack 98, win 512,
options [nop,nop,TS val 1109368869 ecr 1109368869], length 0
E..4.4@.@...............a.....J.....oo.....
B..%B..%
IP 127.0.0.1.50660 > 127.0.0.1.vpnz: Flags [P.], seq 98:603, ack 2, win 512,
options [nop,nop,TS val 1109368870 ecr 1109368869], length 505
E..-.~@.@.PJ..............J.a........".....
B..&B..%From MAILER-DAEMON Sun May 03 14:11:43 2020
X-Envelope-From: <eximbuild@???>
X-Envelope-To: userx@???
Received: from eximbuild (helo=test.ex)
    by myhost.test.ex with local-esmtp (Exim x.yz)
    (envelope-from <eximbuild@???>)
    id 1jVDTD-0006pE-IK
    for userx@???; Sun, 03 May 2020 14:11:43 +0200
Date: Fri, 17 Dec 2004 14:35:01 +0100
Subject: message should be accepted despite timeout
Message-Id: <E1jVDTD-0006pE-IK@???>
From: CALLER_NAME <eximbuild@???>



IP 127.0.0.1.vpnz > 127.0.0.1.50660: Flags [R], seq 1637814296, win 0, length 0
E..(..@.@.<.............a.......P...uz..

--
You are receiving this mail because:
You are on the CC list for the bug.