Page 2 of 2

Re: Alerting

Posted: Wed May 27, 2015 10:30 am
by teirekos
[root@NagiosLogServer2 ~]# tcpdump -n host 10.1.1.16 -X
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
18:27:14.932624 IP 10.1.11.11.46369 > 10.1.1.16.vacdsm-sws: Flags , seq 1156755666, win 14600, options [mss 1460,sackOK,TS val 3050800576 ecr 0,nop,wscale 7], length 0
0x0000: 4500 003c 3512 4000 4006 e58d 0a01 0b0b E..<5.@.@.......
0x0010: 0a01 0110 b521 029e 44f2 b0d2 0000 0000 .....!..D.......
0x0020: a002 3908 05bf 0000 0204 05b4 0402 080a ..9.............
0x0030: b5d7 85c0 0000 0000 0103 0307 ............
18:27:14.933439 IP 10.1.1.16.vacdsm-sws > 10.1.11.11.46369: Flags [S.], seq 1174253637, ack 1156755667, win 16384, options [mss 1360,nop,wscale 0,nop,nop,TS val 0 ecr 0,nop,nop,sackOK], length 0
0x0000: 4500 0040 3719 0000 7e06 e582 0a01 0110 E..@7...~.......
0x0010: 0a01 0b0b 029e b521 45fd b045 44f2 b0d3 .......!E..ED...
0x0020: b012 4000 3270 0000 0204 0550 0103 0300 [email protected]....
0x0030: 0101 080a 0000 0000 0000 0000 0101 0402 ................
18:27:14.933462 IP 10.1.11.11.46369 > 10.1.1.16.vacdsm-sws: Flags [.], ack 1, win 115, options [nop,nop,TS val 3050800577 ecr 0], length 0
0x0000: 4500 0034 3513 4000 4006 e594 0a01 0b0b E..45.@.@.......
0x0010: 0a01 0110 b521 029e 44f2 b0d3 45fd b046 .....!..D...E..F
0x0020: 8010 0073 76cb 0000 0101 080a b5d7 85c1 ...sv...........
0x0030: 0000 0000 ....
18:27:14.934288 IP 10.1.1.16.vacdsm-sws > 10.1.11.11.46369: Flags [P.], seq 1:125, ack 1, win 65535, options [nop,nop,TS val 7348218 ecr 3050800576], length 124
0x0000: 4500 00b0 371a 4000 7e06 a511 0a01 0110 E...7.@.~.......
0x0010: 0a01 0b0b 029e b521 45fd b046 44f2 b0d3 .......!E..FD...
0x0020: 8018 ffff 3533 0000 0101 080a 0070 1ffa ....53.......p..
0x0030: b5d7 85c0 3232 3020 6174 6865 7863 3030 ....220.athexc00
0x0040: 312e 7465 6972 6573 6961 732e 6772 204d 1.teiresias.gr.M
0x0050: 6963 726f 736f 6674 2045 534d 5450 204d icrosoft.ESMTP.M
0x0060: 4149 4c20 5365 7276 6963 652c 2056 6572 AIL.Service,.Ver
0x0070: 7369 6f6e 3a20 362e 302e 3337 3930 2e34 sion:.6.0.3790.4
0x0080: 3637 3520 7265 6164 7920 6174 2020 5765 675.ready.at..We
0x0090: 642c 2032 3720 4d61 7920 3230 3135 2031 d,.27.May.2015.1
0x00a0: 383a 3237 3a32 3920 2b30 3330 3020 0d0a 8:27:29.+0300...
18:27:14.934309 IP 10.1.11.11.46369 > 10.1.1.16.vacdsm-sws: Flags [.], ack 125, win 115, options [nop,nop,TS val 3050800577 ecr 7348218], length 0
0x0000: 4500 0034 3514 4000 4006 e593 0a01 0b0b E..45.@.@.......
0x0010: 0a01 0110 b521 029e 44f2 b0d3 45fd b0c2 .....!..D...E...
0x0020: 8010 0073 55e5 0000 0101 080a b5d7 85c1 ...sU...........
0x0030: 0070 1ffa .p..
18:27:14.934885 IP 10.1.11.11.46369 > 10.1.1.16.vacdsm-sws: Flags [P.], seq 1:17, ack 125, win 115, options [nop,nop,TS val 3050800578 ecr 7348218], length 16
0x0000: 4500 0044 3515 4000 4006 e582 0a01 0b0b E..D5.@.@.......
0x0010: 0a01 0110 b521 029e 44f2 b0d3 45fd b0c2 .....!..D...E...
0x0020: 8018 0073 2053 0000 0101 080a b5d7 85c2 ...s.S..........
0x0030: 0070 1ffa 4548 4c4f 2031 302e 312e 3131 .p..EHLO.10.1.11
0x0040: 2e31 310a .11.
18:27:15.092667 IP 10.1.1.16.vacdsm-sws > 10.1.11.11.46369: Flags [.], ack 17, win 65519, options [nop,nop,TS val 7348220 ecr 3050800578], length 0
0x0000: 4500 0034 3ac6 4000 7e06 a1e1 0a01 0110 E..4:.@.~.......
0x0010: 0a01 0b0b 029e b521 45fd b0c2 44f2 b0e3 .......!E...D...
0x0020: 8010 ffef 5655 0000 0101 080a 0070 1ffc ....VU.......p..
0x0030: b5d7 85c2 ....
18:28:14.982370 IP 10.1.11.11.46369 > 10.1.1.16.vacdsm-sws: Flags [P.], seq 17:28, ack 125, win 115, options [nop,nop,TS val 3050860625 ecr 7348220], length 11
0x0000: 4500 003f 3516 4000 4006 e586 0a01 0b0b E..?5.@.@.......
0x0010: 0a01 0110 b521 029e 44f2 b0e3 45fd b0c2 .....!..D...E...
0x0020: 8018 0073 204e 0000 0101 080a b5d8 7051 ...s.N........pQ
0x0030: 0070 1ffc 4155 5448 204c 4f47 494e 0a .p..AUTH.LOGIN.
18:28:15.138197 IP 10.1.1.16.vacdsm-sws > 10.1.11.11.46369: Flags [.], ack 28, win 65508, options [nop,nop,TS val 7348820 ecr 3050860625], length 0
0x0000: 4500 0034 4757 4000 7e06 9550 0a01 0110 E..4GW@.~..P....
0x0010: 0a01 0b0b 029e b521 45fd b0c2 44f2 b0ee .......!E...D...
0x0020: 8010 ffe4 696d 0000 0101 080a 0070 2254 ....im.......p"T
0x0030: b5d8 7051 ..pQ
18:29:15.042646 IP 10.1.11.11.46369 > 10.1.1.16.vacdsm-sws: Flags [P.], seq 28:56, ack 125, win 115, options [nop,nop,TS val 3050920686 ecr 7348820], length 28
0x0000: 4500 0050 3517 4000 4006 e574 0a01 0b0b E..P5.@[email protected]....
0x0010: 0a01 0110 b521 029e 44f2 b0ee 45fd b0c2 .....!..D...E...
0x0020: 8018 0073 205f 0000 0101 080a b5d9 5aee ...s._........Z.
0x0030: 0070 2254 4d41 494c 2046 524f 4d3a 3c6e .p"TMAIL.FROM:<n
0x0040: 6c73 4074 6972 6573 6961 732e 6772 3e0a [email protected]>.
18:29:15.183720 IP 10.1.1.16.vacdsm-sws > 10.1.11.11.46369: Flags [.], ack 56, win 65480, options [nop,nop,TS val 7349421 ecr 3050920686], length 0
0x0000: 4500 0034 0e38 4000 7e06 ce6f 0a01 0110 E..4.8@.~..o....
0x0010: 0a01 0b0b 029e b521 45fd b0c2 44f2 b10a .......!E...D...
0x0020: 8010 ffc8 7c76 0000 0101 080a 0070 24ad ....|v.......p$.
0x0030: b5d9 5aee ..Z.

Re: Alerting

Posted: Wed May 27, 2015 2:13 pm
by jolson
We can verify from the trace that your mail server is being logged into, but the message is not transmitted properly. Any chance you could check your mail server logs for issues? Do any other devices in your network relay through this SMTP server without problems?

Re: Alerting

Posted: Fri May 29, 2015 9:10 am
by teirekos
The smtp server email method is not working via the GUI.
I had to use the php mail.
Pls close the thread.

Thanx a lot for your help.