On Thu, 20 Mar 2003, Walter Harms wrote: > if anything fails you can use tcpdump to analyse whats going on > beaware that it can generate HUGE files.
Good idea, but I need some help interpreting the results }:-) I servered all my connections with the printserver. After that I started a dump of all traffic between my workstation and that host and only then did I start lprng. During the whole time that the print daemon was running on my host these lines appeared in the syslog of the printserver (one every second): Mar 20 13:26:06 sanders in.lpd[26306]: [ID 927837 mail.info] connect from piglet.yyy.xxx.org That is only connects to lpd, nothing else. Here's what I got in the tcpdump (I did prune it): 13:26:00.616642 piglet.yyy.xxx.org.32799 > ns1.xxx.org.domain: 40630+ AAAA? sanders.yyy.xxx.org. (39) (DF) 13:26:00.617176 ns1.xxx.org.domain > piglet.yyy.xxx.org.32799: 40630* 0/1/0 (90) (DF) 13:26:00.617441 piglet.yyy.xxx.org.32799 > ns1.xxx.org.domain: 40631+ AAAA? sanders.yyy.xxx.org.yyy.xxx.org. (54) (DF) 13:26:00.617789 ns1.xxx.org.domain > piglet.yyy.xxx.org.32799: 40631 NXDomain* 0/1/0 (105) (DF) 13:26:00.617827 piglet.yyy.xxx.org.32799 > ns1.xxx.org.domain: 40632+ A? sanders.yyy.xxx.org. (39) (DF) 13:26:00.618332 ns1.xxx.org.domain > piglet.yyy.xxx.org.32799: 40632* 1/3/3 A[|domain] (DF) 13:26:06.079741 piglet.yyy.xxx.org.632 > sanders.yyy.xxx.org.printer: S 1983535709:1983535709(0) win 5840 <mss 1460,sackOK,timestamp 1382972 0,nop,wscale 0> (DF) 13:26:06.080097 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.632: S 3947662928:3947662928(0) ack 1983535710 win 24616 <nop,nop,timestamp 1520875951 1382972,nop,wscale 0,nop,nop,sackOK,mss 1460> (DF) 13:26:06.080122 piglet.yyy.xxx.org.632 > sanders.yyy.xxx.org.printer: . ack 1 win 5840 <nop,nop,timestamp 1382972 1520875951> (DF) 13:26:06.080357 piglet.yyy.xxx.org.632 > sanders.yyy.xxx.org.printer: P 1:5(4) ack 1 win 5840 <nop,nop,timestamp 1382972 1520875951> (DF) 13:26:06.080723 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.632: . ack 5 win 24612 <nop,nop,timestamp 1520875952 1382972> (DF) 13:26:06.126503 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.632: P 1:12(11) ack 5 win 24616 <nop,nop,timestamp 1520875956 1382972> (DF) 13:26:06.126736 piglet.yyy.xxx.org.632 > sanders.yyy.xxx.org.printer: . ack 12 win 5840 <nop,nop,timestamp 1382976 1520875956> (DF) 13:26:06.127600 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.632: F 12:12(0) ack 5 win 24616 <nop,nop,timestamp 1520875956 1382976> (DF) 13:26:06.127796 piglet.yyy.xxx.org.632 > sanders.yyy.xxx.org.printer: F 5:5(0) ack 13 win 5840 <nop,nop,timestamp 1382976 1520875956> (DF) 13:26:06.128154 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.632: . ack 6 win 24616 <nop,nop,timestamp 1520875956 1382976> (DF) 13:26:07.019991 piglet.yyy.xxx.org.928 > sanders.yyy.xxx.org.printer: S 1996958804:1996958804(0) win 5840 <mss 1460,sackOK,timestamp 1383066 0,nop,wscale 0> (DF) 13:26:07.020402 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.928: S 3948304562:3948304562(0) ack 1996958805 win 24616 <nop,nop,timestamp 1520876045 1383066,nop,wscale 0,nop,nop,sackOK,mss 1460> (DF) 13:26:07.020428 piglet.yyy.xxx.org.928 > sanders.yyy.xxx.org.printer: . ack 1 win 5840 <nop,nop,timestamp 1383066 1520876045> (DF) 13:26:07.020704 piglet.yyy.xxx.org.928 > sanders.yyy.xxx.org.printer: P 1:5(4) ack 1 win 5840 <nop,nop,timestamp 1383066 1520876045> (DF) 13:26:07.020997 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.928: . ack 5 win 24612 <nop,nop,timestamp 1520876045 1383066> (DF) 13:26:07.167859 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.928: P 1:12(11) ack 5 win 24616 <nop,nop,timestamp 1520876060 1383066> (DF) 13:26:07.168117 piglet.yyy.xxx.org.928 > sanders.yyy.xxx.org.printer: . ack 12 win 5840 <nop,nop,timestamp 1383080 1520876060> (DF) 13:26:07.168866 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.928: F 12:12(0) ack 5 win 24616 <nop,nop,timestamp 1520876060 1383080> (DF) 13:26:07.169617 piglet.yyy.xxx.org.928 > sanders.yyy.xxx.org.printer: F 5:5(0) ack 13 win 5840 <nop,nop,timestamp 1383081 1520876060> (DF) 13:26:07.169985 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.928: . ack 6 win 24616 <nop,nop,timestamp 1520876060 1383081> (DF) 13:26:08.059726 piglet.yyy.xxx.org.902 > sanders.yyy.xxx.org.printer: S 1993237340:1993237340(0) win 5840 <mss 1460,sackOK,timestamp 1383170 0,nop,wscale 0> (DF) 13:26:08.060126 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.902: S 3949546617:3949546617(0) ack 1993237341 win 24616 <nop,nop,timestamp 1520876149 1383170,nop,wscale 0,nop,nop,sackOK,mss 1460> (DF) This cycle keeps repeating itself, until at 13:26:00 I started a printjob on the workstation. 13:26:20.641042 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.899: S 3954798210:3954798210(0) ack 2002643459 win 24616 <nop,nop,timestamp 1520877406 1384428,nop,wscale 0,nop,nop,sackOK,mss 1460> (DF) 13:26:20.641067 piglet.yyy.xxx.org.899 > sanders.yyy.xxx.org.printer: . ack 1 win 5840 <nop,nop,timestamp 1384428 1520877406> (DF) 13:26:20.641414 piglet.yyy.xxx.org.899 > sanders.yyy.xxx.org.printer: P 1:5(4) ack 1 win 5840 <nop,nop,timestamp 1384428 1520877406> (DF) 13:26:20.641631 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.899: . ack 5 win 24612 <nop,nop,timestamp 1520877406 1384428> (DF) 13:26:21.118903 piglet.yyy.xxx.org.620 > sanders.yyy.xxx.org.printer: S 2003675809:2003675809(0) win 5840 <mss 1460,sackOK,timestamp 1384476 0,nop,wscale 0> (DF) 13:26:21.119161 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.620: S 3955074920:3955074920(0) ack 2003675810 win 24616 <nop,nop,timestamp 1520877454 1384476,nop,wscale 0,nop,nop,sackOK,mss 1460> (DF) 13:26:21.119184 piglet.yyy.xxx.org.620 > sanders.yyy.xxx.org.printer: . ack 1 win 5840 <nop,nop,timestamp 1384476 1520877454> (DF) 13:26:21.119282 piglet.yyy.xxx.org.620 > sanders.yyy.xxx.org.printer: P 1:5(4) ack 1 win 5840 <nop,nop,timestamp 1384476 1520877454> (DF) 13:26:21.119409 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.620: . ack 5 win 24612 <nop,nop,timestamp 1520877454 1384476> (DF) 13:26:21.273067 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.899: P 1:2(1) ack 5 win 24616 <nop,nop,timestamp 1520877469 1384428> (DF) 13:26:21.273342 piglet.yyy.xxx.org.899 > sanders.yyy.xxx.org.printer: . ack 2 win 5840 <nop,nop,timestamp 1384491 1520877469> (DF) 13:26:21.273513 piglet.yyy.xxx.org.899 > sanders.yyy.xxx.org.printer: P 5:20(15) ack 2 win 5840 <nop,nop,timestamp 1384491 1520877469> (DF) 13:26:21.275322 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.899: P 2:3(1) ack 20 win 24616 <nop,nop,timestamp 1520877469 1384491> (DF) 13:26:21.275526 piglet.yyy.xxx.org.899 > sanders.yyy.xxx.org.printer: P 20:109(89) ack 3 win 5840 <nop,nop,timestamp 1384491 1520877469> (DF) 13:26:21.276214 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.899: P 3:4(1) ack 109 win 24616 <nop,nop,timestamp 1520877469 1384491> (DF) 13:26:21.276534 piglet.yyy.xxx.org.899 > sanders.yyy.xxx.org.printer: P 109:127(18) ack 4 win 5840 <nop,nop,timestamp 1384491 1520877469> (DF) 13:26:21.310813 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.899: P 4:5(1) ack 127 win 24616 <nop,nop,timestamp 1520877473 1384491> (DF) 13:26:21.311087 piglet.yyy.xxx.org.899 > sanders.yyy.xxx.org.printer: . 127:1575(1448) ack 5 win 5840 <nop,nop,timestamp 1384495 1520877473> (DF) 13:26:21.311099 piglet.yyy.xxx.org.899 > sanders.yyy.xxx.org.printer: . 1575:3023(1448) ack 5 win 5840 <nop,nop,timestamp 1384495 1520877473> (DF) 13:26:21.311111 piglet.yyy.xxx.org.899 > sanders.yyy.xxx.org.printer: . 3023:4471(1448) ack 5 win 5840 <nop,nop,timestamp 1384495 1520877473> (DF) 13:26:21.311906 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.899: . ack 1575 win 24616 <nop,nop,timestamp 1520877473 1384495> (DF) 13:26:21.312095 piglet.yyy.xxx.org.899 > sanders.yyy.xxx.org.printer: . 4471:5919(1448) ack 5 win 5840 <nop,nop,timestamp 1384495 1520877473> (DF) 13:26:21.312103 piglet.yyy.xxx.org.899 > sanders.yyy.xxx.org.printer: . 5919:7367(1448) ack 5 win 5840 <nop,nop,timestamp 1384495 1520877473> (DF) 13:26:21.312802 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.899: . ack 4471 win 24616 <nop,nop,timestamp 1520877473 1384495> (DF) 13:26:21.312987 piglet.yyy.xxx.org.899 > sanders.yyy.xxx.org.printer: . 7367:8815(1448) ack 5 win 5840 <nop,nop,timestamp 1384495 1520877473> (DF) 13:26:21.312994 piglet.yyy.xxx.org.899 > sanders.yyy.xxx.org.printer: . 8815:10263(1448) ack 5 win 5840 <nop,nop,timestamp 1384495 1520877473> (DF) 13:26:21.313002 piglet.yyy.xxx.org.899 > sanders.yyy.xxx.org.printer: . 10263:11711(1448) ack 5 win 5840 <nop,nop,timestamp 1384495 1520877473> (DF) 13:26:21.313720 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.899: . ack 8815 win 24616 <nop,nop,timestamp 1520877473 1384495> (DF) 13:26:21.313906 piglet.yyy.xxx.org.899 > sanders.yyy.xxx.org.printer: . 11711:13159(1448) ack 5 win 5840 <nop,nop,timestamp 1384495 1520877473> (DF) 13:26:21.313913 piglet.yyy.xxx.org.899 > sanders.yyy.xxx.org.printer: P 13159:13883(724) ack 5 win 5840 <nop,nop,timestamp 1384495 1520877473> (DF) 13:26:21.314762 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.899: P 5:6(1) ack 13883 win 24616 <nop,nop,timestamp 1520877473 1384495> (DF) 13:26:21.315062 piglet.yyy.xxx.org.899 > sanders.yyy.xxx.org.printer: F 13883:13883(0) ack 6 win 5840 <nop,nop,timestamp 1384495 1520877473> (DF) 13:26:21.315262 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.899: . ack 13884 win 24616 <nop,nop,timestamp 1520877473 1384495> (DF) 13:26:21.327550 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.620: P 1:12(11) ack 5 win 24616 <nop,nop,timestamp 1520877474 1384476> (DF) 13:26:21.327810 piglet.yyy.xxx.org.620 > sanders.yyy.xxx.org.printer: . ack 12 win 5840 <nop,nop,timestamp 1384496 1520877474> (DF) 13:26:21.328849 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.620: F 12:12(0) ack 5 win 24616 <nop,nop,timestamp 1520877475 1384496> (DF) 13:26:21.329258 piglet.yyy.xxx.org.620 > sanders.yyy.xxx.org.printer: F 5:5(0) ack 13 win 5840 <nop,nop,timestamp 1384497 1520877475> (DF) 13:26:21.329629 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.620: . ack 6 win 24616 <nop,nop,timestamp 1520877475 1384497> (DF) 13:26:21.404356 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.899: F 6:6(0) ack 13884 win 24616 <nop,nop,timestamp 1520877482 1384495> (DF) 13:26:21.404402 piglet.yyy.xxx.org.899 > sanders.yyy.xxx.org.printer: . ack 7 win 5840 <nop,nop,timestamp 1384504 1520877482> (DF) 13:26:22.110003 piglet.yyy.xxx.org.689 > sanders.yyy.xxx.org.printer: S 2001272565:2001272565(0) win 5840 <mss 1460,sackOK,timestamp 1384575 0,nop,wscale 0> (DF) 13:26:22.110403 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.689: S 3955533408:3955533408(0) ack 2001272566 win 24616 <nop,nop,timestamp 1520877553 1384575,nop,wscale 0,nop,nop,sackOK,mss 1460> (DF) 13:26:22.110427 piglet.yyy.xxx.org.689 > sanders.yyy.xxx.org.printer: . ack 1 win 5840 <nop,nop,timestamp 1384575 1520877553> (DF) 13:26:22.110701 piglet.yyy.xxx.org.689 > sanders.yyy.xxx.org.printer: P 1:5(4) ack 1 win 5840 <nop,nop,timestamp 1384575 1520877553> (DF) 13:26:22.110962 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.689: . ack 5 win 24612 <nop,nop,timestamp 1520877553 1384575> (DF) 13:26:22.157461 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.689: P 1:122(121) ack 5 win 24616 <nop,nop,timestamp 1520877557 1384575> (DF) 13:26:22.157675 piglet.yyy.xxx.org.689 > sanders.yyy.xxx.org.printer: . ack 122 win 5840 <nop,nop,timestamp 1384579 1520877557> (DF) 13:26:22.158534 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.689: F 122:122(0) ack 5 win 24616 <nop,nop,timestamp 1520877557 1384579> (DF) 13:26:22.158746 piglet.yyy.xxx.org.689 > sanders.yyy.xxx.org.printer: F 5:5(0) ack 123 win 5840 <nop,nop,timestamp 1384580 1520877557> (DF) 13:26:22.159104 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.689: . ack 6 win 24616 <nop,nop,timestamp 1520877558 1384580> (DF) 13:26:23.049837 piglet.yyy.xxx.org.541 > sanders.yyy.xxx.org.printer: S 2002676888:2002676888(0) win 5840 <mss 1460,sackOK,timestamp 1384669 0,nop,wscale 0> (DF) 13:26:23.050250 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.541: S 3955931672:3955931672(0) ack 2002676889 win 24616 <nop,nop,timestamp 1520877647 1384669,nop,wscale 0,nop,nop,sackOK,mss 1460> (DF) 13:26:23.050275 piglet.yyy.xxx.org.541 > sanders.yyy.xxx.org.printer: . ack 1 win 5840 <nop,nop,timestamp 1384669 1520877647> (DF) 13:26:23.050541 piglet.yyy.xxx.org.541 > sanders.yyy.xxx.org.printer: P 1:5(4) ack 1 win 5840 <nop,nop,timestamp 1384669 1520877647> (DF) 13:26:23.050833 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.541: . ack 5 win 24612 <nop,nop,timestamp 1520877647 1384669> (DF) 13:26:23.206811 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.541: P 1:122(121) ack 5 win 24616 <nop,nop,timestamp 1520877662 1384669> (DF) 13:26:23.207068 piglet.yyy.xxx.org.541 > sanders.yyy.xxx.org.printer: . ack 122 win 5840 <nop,nop,timestamp 1384684 1520877662> (DF) 13:26:23.207779 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.541: F 122:122(0) ack 5 win 24616 <nop,nop,timestamp 1520877662 1384684> (DF) 13:26:23.207975 piglet.yyy.xxx.org.541 > sanders.yyy.xxx.org.printer: F 5:5(0) ack 123 win 5840 <nop,nop,timestamp 1384684 1520877662> (DF) 13:26:23.208334 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.541: . ack 6 win 24616 <nop,nop,timestamp 1520877662 1384684> (DF) 13:26:24.104046 piglet.yyy.xxx.org.670 > sanders.yyy.xxx.org.printer: S 2007702102:2007702102(0) win 5840 <mss 1460,sackOK,timestamp 1384774 0,nop,wscale 0> (DF) 13:26:24.104607 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.670: S 3956474945:3956474945(0) ack 2007702103 win 24616 <nop,nop,timestamp 1520877752 1384774,nop,wscale 0,nop,nop,sackOK,mss 1460> (DF) 13:26:24.104631 piglet.yyy.xxx.org.670 > sanders.yyy.xxx.org.printer: . ack 1 win 5840 <nop,nop,timestamp 1384774 1520877752> (DF) 13:26:24.104890 piglet.yyy.xxx.org.670 > sanders.yyy.xxx.org.printer: P 1:5(4) ack 1 win 5840 <nop,nop,timestamp 1384774 1520877752> (DF) 13:26:24.105173 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.670: . ack 5 win 24612 <nop,nop,timestamp 1520877752 1384774> (DF) 13:26:24.257035 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.670: P 1:122(121) ack 5 win 24616 <nop,nop,timestamp 1520877767 1384774> (DF) 13:26:24.257312 piglet.yyy.xxx.org.670 > sanders.yyy.xxx.org.printer: . ack 122 win 5840 <nop,nop,timestamp 1384789 1520877767> (DF) 13:26:24.260260 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.670: F 122:122(0) ack 5 win 24616 <nop,nop,timestamp 1520877767 1384789> (DF) 13:26:24.260456 piglet.yyy.xxx.org.670 > sanders.yyy.xxx.org.printer: F 5:5(0) ack 123 win 5840 <nop,nop,timestamp 1384790 1520877767> (DF) 13:26:24.260813 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.670: . ack 6 win 24616 <nop,nop,timestamp 1520877767 1384790> (DF) 13:26:25.040146 piglet.yyy.xxx.org.848 > sanders.yyy.xxx.org.printer: S 2009362595:2009362595(0) win 5840 <mss 1460,sackOK,timestamp 1384868 0,nop,wscale 0> (DF) 13:26:25.040548 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.848: S 3956910898:3956910898(0) ack 2009362596 win 24616 <nop,nop,timestamp 1520877845 1384868,nop,wscale 0,nop,nop,sackOK,mss 1460> (DF) 13:26:25.040572 piglet.yyy.xxx.org.848 > sanders.yyy.xxx.org.printer: . ack 1 win 5840 <nop,nop,timestamp 1384868 1520877845> (DF) 13:26:25.040831 piglet.yyy.xxx.org.848 > sanders.yyy.xxx.org.printer: P 1:5(4) ack 1 win 5840 <nop,nop,timestamp 1384868 1520877845> (DF) 13:26:25.041114 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.848: . ack 5 win 24612 <nop,nop,timestamp 1520877845 1384868> (DF) 13:26:25.087241 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.848: P 1:122(121) ack 5 win 24616 <nop,nop,timestamp 1520877850 1384868> (DF) 13:26:25.087495 piglet.yyy.xxx.org.848 > sanders.yyy.xxx.org.printer: . ack 122 win 5840 <nop,nop,timestamp 1384872 1520877850> (DF) 13:26:25.088204 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.848: F 122:122(0) ack 5 win 24616 <nop,nop,timestamp 1520877850 1384872> (DF) 13:26:25.088401 piglet.yyy.xxx.org.848 > sanders.yyy.xxx.org.printer: F 5:5(0) ack 123 win 5840 <nop,nop,timestamp 1384872 1520877850> (DF) 13:26:25.088774 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.848: . ack 6 win 24616 <nop,nop,timestamp 1520877850 1384872> (DF) 13:26:26.089209 piglet.yyy.xxx.org.725 > sanders.yyy.xxx.org.printer: S 2009624128:2009624128(0) win 5840 <mss 1460,sackOK,timestamp 1384973 0,nop,wscale 0> (DF) 13:26:26.089617 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.725: S 3957173386:3957173386(0) ack 2009624129 win 24616 <nop,nop,timestamp 1520877950 1384973,nop,wscale 0,nop,nop,sackOK,mss 1460> (DF) 13:26:26.089641 piglet.yyy.xxx.org.725 > sanders.yyy.xxx.org.printer: . ack 1 win 5840 <nop,nop,timestamp 1384973 1520877950> (DF) 13:26:26.089903 piglet.yyy.xxx.org.725 > sanders.yyy.xxx.org.printer: P 1:5(4) ack 1 win 5840 <nop,nop,timestamp 1384973 1520877950> (DF) 13:26:26.090195 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.725: . ack 5 win 24612 <nop,nop,timestamp 1520877950 1384973> (DF) 13:26:26.135897 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.725: P 1:122(121) ack 5 win 24616 <nop,nop,timestamp 1520877955 1384973> (DF) 13:26:26.136123 piglet.yyy.xxx.org.725 > sanders.yyy.xxx.org.printer: . ack 122 win 5840 <nop,nop,timestamp 1384977 1520877955> (DF) 13:26:26.136983 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.725: F 122:122(0) ack 5 win 24616 <nop,nop,timestamp 1520877955 1384977> (DF) 13:26:26.137179 piglet.yyy.xxx.org.725 > sanders.yyy.xxx.org.printer: F 5:5(0) ack 123 win 5840 <nop,nop,timestamp 1384977 1520877955> (DF) 13:26:26.137538 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.725: . ack 6 win 24616 <nop,nop,timestamp 1520877955 1384977> (DF) 13:26:27.029496 piglet.yyy.xxx.org.737 > sanders.yyy.xxx.org.printer: S 2009347646:2009347646(0) win 5840 <mss 1460,sackOK,timestamp 1385067 0,nop,wscale 0> (DF) 13:26:27.029908 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.737: S 3957542833:3957542833(0) ack 2009347647 win 24616 <nop,nop,timestamp 1520878044 1385067,nop,wscale 0,nop,nop,sackOK,mss 1460> (DF) 13:26:27.029934 piglet.yyy.xxx.org.737 > sanders.yyy.xxx.org.printer: . ack 1 win 5840 <nop,nop,timestamp 1385067 1520878044> (DF) 13:26:27.030196 piglet.yyy.xxx.org.737 > sanders.yyy.xxx.org.printer: P 1:5(4) ack 1 win 5840 <nop,nop,timestamp 1385067 1520878044> (DF) 13:26:27.030325 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.737: . ack 5 win 24612 <nop,nop,timestamp 1520878044 1385067> (DF) 13:26:27.179698 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.737: P 1:122(121) ack 5 win 24616 <nop,nop,timestamp 1520878059 1385067> (DF) 13:26:27.179956 piglet.yyy.xxx.org.737 > sanders.yyy.xxx.org.printer: . ack 122 win 5840 <nop,nop,timestamp 1385082 1520878059> (DF) 13:26:27.180666 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.737: F 122:122(0) ack 5 win 24616 <nop,nop,timestamp 1520878059 1385082> (DF) 13:26:27.180863 piglet.yyy.xxx.org.737 > sanders.yyy.xxx.org.printer: F 5:5(0) ack 123 win 5840 <nop,nop,timestamp 1385082 1520878059> (DF) 13:26:27.181221 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.737: . ack 6 win 24616 <nop,nop,timestamp 1520878059 1385082> (DF) 13:26:28.069992 piglet.yyy.xxx.org.695 > sanders.yyy.xxx.org.printer: S 2015208228:2015208228(0) win 5840 <mss 1460,sackOK,timestamp 1385171 0,nop,wscale 0> (DF) 13:26:28.070404 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.695: S 3957971911:3957971911(0) ack 2015208229 win 24616 <nop,nop,timestamp 1520878148 1385171,nop,wscale 0,nop,nop,sackOK,mss 1460> (DF) 13:26:28.070429 piglet.yyy.xxx.org.695 > sanders.yyy.xxx.org.printer: . ack 1 win 5840 <nop,nop,timestamp 1385171 1520878148> (DF) 13:26:28.070695 piglet.yyy.xxx.org.695 > sanders.yyy.xxx.org.printer: P 1:5(4) ack 1 win 5840 <nop,nop,timestamp 1385171 1520878148> (DF) 13:26:28.070825 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.695: . ack 5 win 24612 <nop,nop,timestamp 1520878148 1385171> (DF) 13:26:28.219704 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.695: P 1:122(121) ack 5 win 24616 <nop,nop,timestamp 1520878163 1385171> (DF) 13:26:28.219942 piglet.yyy.xxx.org.695 > sanders.yyy.xxx.org.printer: . ack 122 win 5840 <nop,nop,timestamp 1385186 1520878163> (DF) 13:26:28.223362 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.695: F 122:122(0) ack 5 win 24616 <nop,nop,timestamp 1520878163 1385186> (DF) 13:26:28.223558 piglet.yyy.xxx.org.695 > sanders.yyy.xxx.org.printer: F 5:5(0) ack 123 win 5840 <nop,nop,timestamp 1385186 1520878163> (DF) 13:26:28.223916 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.695: . ack 6 win 24616 <nop,nop,timestamp 1520878163 1385186> (DF) 13:26:29.108769 piglet.yyy.xxx.org.896 > sanders.yyy.xxx.org.printer: S 2007477286:2007477286(0) win 5840 <mss 1460,sackOK,timestamp 1385275 0,nop,wscale 0> (DF) 13:26:29.109168 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.896: S 3958426914:3958426914(0) ack 2007477287 win 24616 <nop,nop,timestamp 1520878252 1385275,nop,wscale 0,nop,nop,sackOK,mss 1460> (DF) 13:26:29.109192 piglet.yyy.xxx.org.896 > sanders.yyy.xxx.org.printer: . ack 1 win 5840 <nop,nop,timestamp 1385275 1520878252> (DF) 13:26:29.109451 piglet.yyy.xxx.org.896 > sanders.yyy.xxx.org.printer: P 1:5(4) ack 1 win 5840 <nop,nop,timestamp 1385275 1520878252> (DF) 13:26:29.109737 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.896: . ack 5 win 24612 <nop,nop,timestamp 1520878252 1385275> (DF) 13:26:29.154618 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.896: P 1:122(121) ack 5 win 24616 <nop,nop,timestamp 1520878256 1385275> (DF) 13:26:29.154846 piglet.yyy.xxx.org.896 > sanders.yyy.xxx.org.printer: . ack 122 win 5840 <nop,nop,timestamp 1385279 1520878256> (DF) 13:26:29.155707 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.896: F 122:122(0) ack 5 win 24616 <nop,nop,timestamp 1520878256 1385279> (DF) 13:26:29.155902 piglet.yyy.xxx.org.896 > sanders.yyy.xxx.org.printer: F 5:5(0) ack 123 win 5840 <nop,nop,timestamp 1385279 1520878256> (DF) 13:26:29.156258 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.896: . ack 6 win 24616 <nop,nop,timestamp 1520878256 1385279> (DF) 13:26:30.039451 piglet.yyy.xxx.org.946 > sanders.yyy.xxx.org.printer: S 2021913810:2021913810(0) win 5840 <mss 1460,sackOK,timestamp 1385368 0,nop,wscale 0> (DF) 13:26:30.039875 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.946: S 3958854891:3958854891(0) ack 2021913811 win 24616 <nop,nop,timestamp 1520878345 1385368,nop,wscale 0,nop,nop,sackOK,mss 1460> (DF) 13:26:30.039899 piglet.yyy.xxx.org.946 > sanders.yyy.xxx.org.printer: . ack 1 win 5840 <nop,nop,timestamp 1385368 1520878345> (DF) 13:26:30.040161 piglet.yyy.xxx.org.946 > sanders.yyy.xxx.org.printer: P 1:5(4) ack 1 win 5840 <nop,nop,timestamp 1385368 1520878345> (DF) 13:26:30.040446 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.946: . ack 5 win 24612 <nop,nop,timestamp 1520878345 1385368> (DF) 13:26:30.203335 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.946: P 1:122(121) ack 5 win 24616 <nop,nop,timestamp 1520878361 1385368> (DF) 13:26:30.203595 piglet.yyy.xxx.org.946 > sanders.yyy.xxx.org.printer: . ack 122 win 5840 <nop,nop,timestamp 1385384 1520878361> (DF) 13:26:30.204465 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.946: F 122:122(0) ack 5 win 24616 <nop,nop,timestamp 1520878361 1385384> (DF) 13:26:30.204664 piglet.yyy.xxx.org.946 > sanders.yyy.xxx.org.printer: F 5:5(0) ack 123 win 5840 <nop,nop,timestamp 1385384 1520878361> (DF) 13:26:30.205021 sanders.yyy.xxx.org.printer > piglet.yyy.xxx.org.946: . ack 6 win 24616 <nop,nop,timestamp 1520878361 1385384> (DF) That was the last line in the dump after stopping the daemon. My apologies to everyone for this large message. I am not really a specialist as far as TCP/IP is concerned, my knowledge is just good enough to succesfully configure a strict iptables ruleset (disabled during this test to be sure everything was captured). So if anyone sees a possible cause for my problem in this dump I'd really like to know about it. Grx HdV ----------------------------------------------------------------------------- YOU MUST BE A LIST MEMBER IN ORDER TO POST TO THE LPRNG MAILING LIST The address you post from MUST be your subscription address If you need help, send email to [EMAIL PROTECTED] (or lprng-requests or lprng-digest-requests) with the word 'help' in the body. For the impatient, to subscribe to a list with name LIST, send mail to [EMAIL PROTECTED] with: | example: subscribe LIST <mailaddr> | subscribe lprng-digest [EMAIL PROTECTED] unsubscribe LIST <mailaddr> | unsubscribe lprng [EMAIL PROTECTED] If you have major problems, send email to [EMAIL PROTECTED] with the word LPRNGLIST in the SUBJECT line. -----------------------------------------------------------------------------
