Ok, I've captured some more traffic:
### looks like start of conversation
### idle timer on the remove end is 120 seconds
16:17:09.517465 mail.xxx.yy.6905 > ns.aaa.bbb.smtp: S 2925892656:2925892656(0) win 512 <mss 1460>
16:17:12.507059 mail.xxx.yy.6905 > ns.aaa.bbb.smtp: S 2925892656:2925892656(0) win 31744 <mss 1460>
16:17:16.486517 ns.aaa.bbb.smtp > mail.xxx.yy.6905: S 1409872547:1409872547(0) ack 2925892657 win 8760 <mss 1460> (DF)
16:17:16.486517 ns.aaa.bbb.smtp > mail.xxx.yy.6905: . ack 1 win 8760 (DF)
16:17:16.736483 mail.xxx.yy.6905 > ns.aaa.bbb.smtp: . ack 1 win 31744 (DF)
16:17:16.896461 ns.aaa.bbb.smtp > mail.xxx.yy.6905: P 1:99(98) ack 1 win 8760 (DF)
16:17:17.226416 mail.xxx.yy.6905 > ns.aaa.bbb.smtp: P 1:21(20) ack 99 win 31744 (DF)
16:17:17.266411 ns.aaa.bbb.smtp > mail.xxx.yy.6905: P 99:118(19) ack 21 win 8740 (DF)
16:17:17.526376 mail.xxx.yy.6905 > ns.aaa.bbb.smtp: P 21:52(31) ack 118 win 31744 (DF)
16:17:17.576369 ns.aaa.bbb.smtp > mail.xxx.yy.6905: P 118:153(35) ack 52 win 8709 (DF)
16:17:17.866329 mail.xxx.yy.6905 > ns.aaa.bbb.smtp: P 52:85(33) ack 153 win 31744 (DF)
16:17:17.916323 ns.aaa.bbb.smtp > mail.xxx.yy.6905: P 153:195(42) ack 85 win 8676 (DF)
16:17:18.116295 mail.xxx.yy.6905 > ns.aaa.bbb.smtp: P 85:91(6) ack 195 win 31744 (DF)
16:17:18.156290 ns.aaa.bbb.smtp > mail.xxx.yy.6905: P 195:239(44) ack 91 win 8670 (DF)
16:17:18.296271 mail.xxx.yy.6905 > ns.aaa.bbb.smtp: . ack 239 win 31744 (DF)
### 120 seconds left until the connection drops
16:17:18.736211 mail.xxx.yy.6905 > ns.aaa.bbb.smtp: P 91:1115(1024) ack 239 win 31744 (DF)
16:17:19.636089 mail.xxx.yy.6905 > ns.aaa.bbb.smtp: P 91:1115(1024) ack 239 win 31744 (DF)
16:17:21.655814 mail.xxx.yy.6905 > ns.aaa.bbb.smtp: P 91:1115(1024) ack 239 win 31744 (DF)
16:17:25.505290 mail.xxx.yy.6905 > ns.aaa.bbb.smtp: P 91:1115(1024) ack 239 win 31744 (DF)
16:17:33.264234 mail.xxx.yy.6905 > ns.aaa.bbb.smtp: P 91:1115(1024) ack 239 win 31744 (DF)
16:17:48.772124 mail.xxx.yy.6905 > ns.aaa.bbb.smtp: P 91:1115(1024) ack 239 win 31744 (DF)
16:18:19.827896 mail.xxx.yy.6905 > ns.aaa.bbb.smtp: P 91:1115(1024) ack 239 win 31744 (DF)
### HERE the connection dropped for ``user request''
### exacly at 16:19:18 (from detail log)
16:19:21.919442 mail.xxx.yy.6905 > ns.aaa.bbb.smtp: P 91:1115(1024) ack 239 win 31744 (DF)
16:21:21.843009 mail.xxx.yy.6905 > ns.aaa.bbb.smtp: P 91:1115(1024) ack 239 win 31744 (DF)
16:23:21.866422 mail.xxx.yy.6905 > ns.aaa.bbb.smtp: P 91:1115(1024) ack 239 win 31744 (DF)
16:25:21.899833 mail.xxx.yy.6905 > ns.aaa.bbb.smtp: P 91:1115(1024) ack 239 win 31744 (DF)
While I could imagine that the remote end doesn't consider all packets as worth
for holding the connection (maybe firewall and some filters),
I can't see why my PM doesn't redial the location when packets are
arriving. (no filters here)
Heiko
-- email : heiko@lotte.sax.de heiko@debian.org heiko@sax.de pgp : A1 7D F6 7B 69 73 48 35 E1 DE 21 A7 A8 9A 77 92 finger: heiko@sax.sax.de heiko@master.debian.org - To unsubscribe, email 'majordomo@livingston.com' with 'unsubscribe portmaster-users' in the body of the message.