Dear List

I need some help by understanding the Output of a SSLDEBUG-File.
For me it seems that assp is not properly re announcing the "TLS go 
ahead" (example Debug Output below, the expected part in CAPITALS ). The 
symptom occurs once or twice in a thousand perfect working sessions. 
Right know I can't figure out if assp is really keeping sometimes parts 
of the conversation by itself, or if some of the clients are doing 
stupid things after starting STARTTLS.
Are there any ideas what I could look for in the logs to get more infos 
about this misbehaving?

Best regards,

Martin



Assp-Version 2.0.1(2.0.19) on debian is listening on port 25
Output of SSLDEBUG=3:


Nov-28-11 10:57:47 Worker_1
Nov-28-11 10:57:47 client filenumber = 20
Nov-28-11 10:57:47 server filenumber = 22
Nov-28-11 10:57:47 client  = IO::Socket::INET=GLOB(0xd0c67a0)
Nov-28-11 10:57:47 client IP  = xxx.xxx.xxx.xxx
Nov-28-11 10:57:47 server  = IO::Socket::INET=GLOB(0xd711320)
Nov-28-11 10:57:47 server unpoll from main assp.pl 43366
Nov-28-11 10:57:47 client unpoll from main assp.pl 43366
read from server = 220 <SERVER> ESMTP dfex
Nov-28-11 10:57:47 server unpoll from main assp.pl 43366
Nov-28-11 10:57:47 client wrote = 220 <SERVER> ESMTP dfex
Nov-28-11 10:57:47 client unpoll from main assp.pl 43366
read from client = EHLO <client-hostname>
Nov-28-11 10:57:47 server wrote = EHLO <client-hostname>
Nov-28-11 10:57:47 server unpoll from main assp.pl 43366
read from server = <SERVER> Hello <client-hostname> [<IP>]
250-SIZE 104857600
250-8BITMIME
250-PIPELINING
250-AUTH PLAIN LOGIN
250-STARTTLS
250 HELP
Nov-28-11 10:57:47 server unpoll from main assp.pl 43366
Nov-28-11 10:57:47 client wrote = <SERVER> Hello <client-hostname> [<IP>]
250-STARTTLS
250-SIZE 104857600
250-8BITMIME
250-AUTH PLAIN LOGIN
250 HELP
Nov-28-11 10:57:47 client unpoll from main assp.pl 43366
read from client = STARTTLS
Nov-28-11 10:57:47 server wrote = STARTTLS
Nov-28-11 10:57:47 server unpoll from main assp.pl 43366
read from server = 220 TLS go ahead

<HERE I WOULD EXPECT SOMETHING LIKE "Nov-28-11 10:57:47 client wrote = 
220 TLS go ahead" END OF WISHFUL THINKING>

Nov-28-11 10:57:47 client unpoll from main assp.pl 10902
Nov-28-11 10:57:47 client unpoll from main assp.pl 22966
Nov-28-11 10:57:47 client unpoll from main assp.pl 22967
Nov-28-11 10:57:47 server unpoll from main assp.pl 43366
Nov-28-11 11:00:59 client Timeout after 180 secs
Nov-28-11 11:00:59 client was not readable
Nov-28-11 11:00:59 client was not writable

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure 
contains a definitive record of customers, application performance, 
security threats, fraudulent activity, and more. Splunk takes this 
data and makes sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-novd2d
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to