Hi, here is tcpflow result : the mail server has 192.168.0.002 as ip address
192.168.0.002.00143-192.168.0.245.40587: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN] Dovecot ready.^M 192.168.0.245.40587-192.168.0.002.00143: 1 login "user" {7} 192.168.0.245.40587-192.168.0.002.00143: ^M 192.168.0.002.00143-192.168.0.245.40587: + OK^M 192.168.0.245.40587-192.168.0.002.00143: ABCDEF^M 192.168.0.002.00143-192.168.0.245.40587: 1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS] Logged in^M 192.168.0.245.40587-192.168.0.002.00143: 2 capability 192.168.0.245.40587-192.168.0.002.00143: ^M 192.168.0.002.00143-192.168.0.245.40587: * CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS^M 2 OK Capability completed.^M 192.168.0.245.40587-192.168.0.002.00143: 3 namespace 192.168.0.245.40587-192.168.0.002.00143: ^M 192.168.0.002.00143-192.168.0.245.40587: * NAMESPACE (("" "/")) NIL NIL^M 3 OK Namespace completed.^M 192.168.0.245.40587-192.168.0.002.00143: 4 LIST "" "" 192.168.0.245.40587-192.168.0.002.00143: ^M 192.168.0.002.00143-192.168.0.245.40587: * LIST (\Noselect) "/" ""^M 4 OK List completed.^M 192.168.0.245.40587-192.168.0.002.00143: 5 select "INBOX" 192.168.0.245.40587-192.168.0.002.00143: ^M 192.168.0.002.00143-192.168.0.245.40587: * FLAGS (\Answered \Flagged \Deleted \Seen \Draft Junk $NotJunk $Junk JunkRecorded $Label1 $Label2 $Label3 $Label4 $Label5 NonJunk $MDNSent NotJunk receipt-handled Old $has_cal fait)^M * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft Junk $NotJunk $Junk JunkRecorded $Label1 $Label2 $Label3 $Label4 $Label5 NonJunk $MDNSent NotJunk receipt-handled Old $has_cal fait \*)] Flags permitted.^M * 3029 EXISTS^M * 0 RECENT^M * OK [UNSEEN 2979] First unseen.^M * OK [UIDVALIDITY 1148485194] UIDs valid^M * OK [UIDNEXT 151001] Predicted next UID^M * OK [HIGHESTMODSEQ 14029] Highest^M 5 OK [READ-WRITE] Select completed.^M 192.168.0.245.40587-192.168.0.002.00143: 6 UID THREAD REFERENCES UTF-8 (NOT DELETED) 192.168.0.245.40587-192.168.0.002.00143: ^M 192.168.0.002.00143-192.168.0.245.40587: 710 147711 147823)(147712 147713)(147714)(147715)(147722 147723)(147724)(147725)(147726)(147728)(147729)(147748 (147752)(147977))(147738 147740)(147776)(147749)(147743 149205)(147745)(147746)(147751 (147754)(147775))(147753)(147756)(147757)(147758)(147759)(147771)(147772)((147773)(147774))(147778)(147779)(147789)(147795 147797)(147799)(147864 (147891 148056)(148065 148157 148303 148356))(147801)(147802)(147803)(147804)(147805 147873)(147806)(147807 147908 147948)(147809)(147811 147813)(147812)(147814)(147817)((147831)(147832))(147844)(147850)(147852)(147855)(147863 147872)(147866)(147868)(147871)(147882)(147883)(147884)(147885)(147886)(147887)(147888)(147895)(147902)(147904)(147905)(147906 147968)(147907)(147909)(147911)(147910 147967 148015 148023)((147912)(148152)(148825))(147915)(147921)(147925)(147923)(147926)(147928)(147929)(147936)(147937)(147939)(147941)(147942)(147943)(147944)(147945)(147946)(147949)(147951)(147952)(147955)(147956)(147958)(147957)(147959)((147960 (145089 145092)(147963 147966))(147964 148443))(147961)(147986)(147962)((147969)(148147))(147975 148026)(147976 148018)(147979)(147980 148027 148668 149361)(147981 147982)(147984)(147997)(148006 (148016 148118)(149387))(148013)(148014)(148017)(148019)(148020)(148021 148722 148812)(148024)(148028)(148029)(148030 148070)(148031)(148032)(148042 148049)(148043)(148047)(148054)(148055)(148060)(148061)(148062 148207)(148067)(148068)(148066)(148069)(148079)(148086) * 3026 FETCH (UID 150997 FLAGS (Old) RFC822.SIZE 12363 ENVELOPE ("Mon, 28 May 2012 02:55:23 +0800 (GMT+08:00)" "=?gb2312?B?KEFEKdfcssPK1cjro6y85tawuaTX9zI6NTc6MzE=?= =?gb2312?B?IEFNNS8yOC8yMDEy?=" (("defyq" NIL "job" "futureland.cn")) (("defyq" NIL "job" "futureland.cn")) (("defyq" NIL "job" "futureland.cn")) NIL NIL NIL NIL "<A3BB391ECBE6DF807E0F881243DA207C@igqlfl>") BODYSTRUCTURE ("text" "html" ("charset" "gb2312") NIL NIL "base64" 10584 136 NIL NIL NIL NIL) BODY[HEADER.FIELDS (X-PRIORITY)] {17}^M X-Priority: 3^M ^M ) 8 OK Fetch completed.^M 192.168.0.245.40587-192.168.0.002.00143: 9 logout^M 192.168.0.002.00143-192.168.0.245.40587: * BYE Logging out^M 9 OK Logout completed.^M Thanks 2012/5/27 Ludovic Marcotte <lmarco...@inverse.ca> > On 27/05/12 10:26, James James wrote: > >> No error message from the imap daemon.. just a connection and in the same >> time a deconnection >> > Sniff the traffic in-between SOGo and your IMAP server using tcpflow and > post the result. > > -- > Ludovic Marcotte > +1.514.755.3630 :: www.inverse.ca > Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence ( > www.packetfence.org) > > -- > users@sogo.nu > https://inverse.ca/sogo/lists > -- users@sogo.nu https://inverse.ca/sogo/lists