Here are two packet captures. First one is clicking 'test' under /ZenUsers /admin and works fine. Second is an example alert that doesnt work.
Capture for Test ------------------ 1190309188.746792 127.0.0.1 -> 127.0.0.1 TCP 55858 > smtp [SYN] Seq=0 Len=0 MSS=16396 TSV=2210265 TSER=0 WS=7 1190309188.746811 127.0.0.1 -> 127.0.0.1 TCP smtp > 55858 [SYN, ACK] Seq=0 Ack=1 Win=32768 Len=0 MSS=16396 TSV=2210265 TSER=2210265 WS=7 1190309188.746823 127.0.0.1 -> 127.0.0.1 TCP 55858 > smtp [ACK] Seq=1 Ack=1 Win=32896 Len=0 TSV=2210265 TSER=2210265 1190309188.749278 127.0.0.1 -> 127.0.0.1 SMTP Response: 220 test01.gocentrix.net ESMTP Sendmail 8.14.1/8.14.1; Thu, 20 Sep 2007 13:26:28 -0400 1190309188.749303 127.0.0.1 -> 127.0.0.1 TCP 55858 > smtp [ACK] Seq=1 Ack=88 Win=32896 Len=0 TSV=2210265 TSER=2210265 1190309188.845178 127.0.0.1 -> 127.0.0.1 SMTP Command: ehlo test01.gocentrix.net 1190309188.845188 127.0.0.1 -> 127.0.0.1 TCP smtp > 55858 [ACK] Seq=88 Ack=27 Win=32768 Len=0 TSV=2210289 TSER=2210289 1190309188.845274 127.0.0.1 -> 127.0.0.1 SMTP Response: 250-test01.gocentrix.net Hello localhost.localdomain [127.0.0.1], pleased to meet you 1190309188.845295 127.0.0.1 -> 127.0.0.1 TCP 55858 > smtp [ACK] Seq=27 Ack=283 Win=33920 Len=0 TSV=2210289 TSER=2210289 1190309188.845808 127.0.0.1 -> 127.0.0.1 SMTP Command: mail FROM:<[EMAIL PROTECTED]> size=305 1190309188.888968 127.0.0.1 -> 127.0.0.1 TCP smtp > 55858 [ACK] Seq=283 Ack=70 Win=32768 Len=0 TSV=2210300 TSER=2210290 1190309188.890123 127.0.0.1 -> 127.0.0.1 SMTP Response: 250 2.1.0 <[EMAIL PROTECTED]>... Sender ok 1190309188.890413 127.0.0.1 -> 127.0.0.1 SMTP Command: rcpt TO:<[EMAIL PROTECTED]> 1190309188.890422 127.0.0.1 -> 127.0.0.1 TCP smtp > 55858 [ACK] Seq=330 Ack=105 Win=32768 Len=0 TSV=2210301 TSER=2210301 1190309188.890970 127.0.0.1 -> 127.0.0.1 SMTP Response: 250 2.1.5 <[EMAIL PROTECTED]>... Recipient ok 1190309188.891033 127.0.0.1 -> 127.0.0.1 SMTP Command: data 1190309188.891096 127.0.0.1 -> 127.0.0.1 SMTP Response: 354 Enter mail, end with "." on a line by itself 1190309188.891223 127.0.0.1 -> 127.0.0.1 SMTP Message Body 1190309188.932990 127.0.0.1 -> 127.0.0.1 TCP smtp > 55858 [ACK] Seq=433 Ack=429 Win=33920 Len=0 TSV=2210311 TSER=2210301 1190309189.061820 127.0.0.1 -> 127.0.0.1 SMTP Response: 250 2.0.0 l8KHQSTj005079 Message accepted for delivery 1190309189.062060 127.0.0.1 -> 127.0.0.1 SMTP Message Body 1190309189.062071 127.0.0.1 -> 127.0.0.1 TCP smtp > 55858 [ACK] Seq=489 Ack=435 Win=33920 Len=0 TSV=2210344 TSER=2210344 1190309189.062346 127.0.0.1 -> 127.0.0.1 SMTP Response: 221 2.0.0 test01.gocentrix.net closing connection 1190309189.062484 127.0.0.1 -> 127.0.0.1 TCP 55858 > smtp [FIN, ACK] Seq=435 Ack=539 Win=33920 Len=0 TSV=2210344 TSER=2210344 1190309189.073203 127.0.0.1 -> 127.0.0.1 TCP smtp > 55858 [FIN, ACK] Seq=539 Ack=436 Win=33920 Len=0 TSV=2210346 TSER=2210344 1190309189.073217 127.0.0.1 -> 127.0.0.1 TCP 55858 > smtp [ACK] Seq=436 Ack=540 Win=33920 Len=0 TSV=2210346 TSER=2210346 Capture for Alert ------------------- 1190309049.372059 127.0.0.1 -> 127.0.0.1 TCP 48795 > smtp [SYN] Seq=0 Len=0 MSS=16396 TSV=2175421 TSER=0 WS=7 1190309049.372074 127.0.0.1 -> 127.0.0.1 TCP smtp > 48795 [SYN, ACK] Seq=0 Ack=1 Win=32768 Len=0 MSS=16396 TSV=2175421 TSER=2175421 WS=7 1190309049.372085 127.0.0.1 -> 127.0.0.1 TCP 48795 > smtp [ACK] Seq=1 Ack=1 Win=32896 Len=0 TSV=2175421 TSER=2175421 1190309049.377934 127.0.0.1 -> 127.0.0.1 SMTP Response: 220 test01.gocentrix.net ESMTP Sendmail 8.14.1/8.14.1; Thu, 20 Sep 2007 13:24:09 -0400 1190309049.377955 127.0.0.1 -> 127.0.0.1 TCP 48795 > smtp [ACK] Seq=1 Ack=88 Win=32896 Len=0 TSV=2175423 TSER=2175423 1190309049.378358 127.0.0.1 -> 127.0.0.1 TCP 48795 > smtp [FIN, ACK] Seq=1 Ack=88 Win=32896 Len=0 TSV=2175423 TSER=2175423 1190309049.378415 127.0.0.1 -> 127.0.0.1 TCP smtp > 48795 [FIN, ACK] Seq=88 Ack=2 Win=32768 Len=0 TSV=2175423 TSER=2175423 1190309049.378426 127.0.0.1 -> 127.0.0.1 TCP 48795 > smtp [ACK] Seq=2 Ack=89 Win=32896 Len=0 TSV=2175423 TSER=2175423 ------------------------ K Anderson -------------------- m2f -------------------- Read this topic online here: http://community.zenoss.com/forums/viewtopic.php?p=10900#10900 -------------------- m2f -------------------- _______________________________________________ zenoss-users mailing list [email protected] http://lists.zenoss.org/mailman/listinfo/zenoss-users
