Service smtp on hostname is not OK : Unexpected service response
Den 2014-03-25 16:54, Wilcox, Theodore A -FS skrev:
Which SMTP server software are you using?
These are Domino and Lotus Notes servers running on AIX.
okay, that's a bit unusual. Might be why it hasn't shown up before.
Would it be possible for you to do a network "snif" of the traffic between Xymon and these servers? E.g. on the Xymon server run "tcpdump -s 1500 -w xymon-smtp.dump host <ip-of-smtp-server> and tcp port 25". (Assuming this is not encrypted smtp).
Thanks, Henrik
Hi guys
One of my clients is using Notes on Solaris, and the smtp test as defined in hosts.cfg is working perfectly. We are using Xymon 4.3.12
Hope it helps in tracking down any issues.
Regards Vernon
On 26 March 2014 19:55, Henrik Størner <henrik at hswn.dk> wrote:
Den 2014-03-25 16:54, Wilcox, Theodore A -FS skrev:
Which SMTP server software are you using?
These are Domino and Lotus Notes servers running on AIX.
okay, that's a bit unusual. Might be why it hasn't shown up before.
Would it be possible for you to do a network "snif" of the traffic between Xymon and these servers? E.g. on the Xymon server run "tcpdump -s 1500 -w xymon-smtp.dump host <ip-of-smtp-server> and tcp port 25". (Assuming this is not encrypted smtp).
Thanks,
Henrik
Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon
-- "Accept the challenges so that you can feel the exhilaration of victory"
- General George Patton
I commented out the lines that began with "send" in protocols.cfg and it is all green now.
Theodore (Ted) Wilcox, PMP , ITIL Incident Management Program Manager, EOC Monitor CIO/EOC USDA Forest Service p: 505-500-7648 tawilcox at fs.fed.us 100 Sun Avenue NE Albuquerque, NM 87109 www.fs.fed.us
Caring for the land and serving people
-----Original Message----- From: Henrik Størner [mailto:henrik at hswn.dk] Sent: Wednesday, March 26, 2014 5:55 AM To: Wilcox, Theodore A -FS Cc: xymon at xymon.com Subject: RE: [Xymon] Service smtp on hostname is not OK : Unexpected service response
Den 2014-03-25 16:54, Wilcox, Theodore A -FS skrev:
Which SMTP server software are you using?
These are Domino and Lotus Notes servers running on AIX.
okay, that's a bit unusual. Might be why it hasn't shown up before.
Would it be possible for you to do a network "snif" of the traffic between Xymon and these servers? E.g. on the Xymon server run "tcpdump -s 1500 -w xymon-smtp.dump host <ip-of-smtp-server> and tcp port 25". (Assuming this is not encrypted smtp).
Thanks, Henrik
This electronic message contains information generated by the USDA solely for the intended recipients. Any unauthorized interception of this message or the use or disclosure of the information it contains may violate the law and subject the violator to civil or criminal penalties. If you believe you have received this message in error, please notify the sender and delete the email immediately.
Oops, it turned yellow again. I didn't wait long enough. So commenting out the line beginning with "expect" in addition turned them green
Theodore (Ted) Wilcox, PMP , ITIL Incident Management Program Manager, EOC Monitor CIO/EOC USDA Forest Service p: 505-500-7648 tawilcox at fs.fed.us 100 Sun Avenue NE Albuquerque, NM 87109 www.fs.fed.us
Caring for the land and serving people
-----Original Message----- From: Wilcox, Theodore A -FS Sent: Friday, March 28, 2014 12:53 PM To: 'Henrik Størner' Cc: xymon at xymon.com Subject: RE: [Xymon] Service smtp on hostname is not OK : Unexpected service response
I commented out the lines that began with "send" in protocols.cfg and it is all green now.
Theodore (Ted) Wilcox, PMP , ITIL Incident Management Program Manager, EOC Monitor CIO/EOC USDA Forest Service p: 505-500-7648 tawilcox at fs.fed.us 100 Sun Avenue NE Albuquerque, NM 87109 www.fs.fed.us
Caring for the land and serving people
-----Original Message----- From: Henrik Størner [mailto:henrik at hswn.dk] Sent: Wednesday, March 26, 2014 5:55 AM To: Wilcox, Theodore A -FS Cc: xymon at xymon.com Subject: RE: [Xymon] Service smtp on hostname is not OK : Unexpected service response
Den 2014-03-25 16:54, Wilcox, Theodore A -FS skrev:
Which SMTP server software are you using?
These are Domino and Lotus Notes servers running on AIX.
okay, that's a bit unusual. Might be why it hasn't shown up before.
Would it be possible for you to do a network "snif" of the traffic between Xymon and these servers? E.g. on the Xymon server run "tcpdump -s 1500 -w xymon-smtp.dump host <ip-of-smtp-server> and tcp port 25". (Assuming this is not encrypted smtp).
Thanks, Henrik
This electronic message contains information generated by the USDA solely for the intended recipients. Any unauthorized interception of this message or the use or disclosure of the information it contains may violate the law and subject the violator to civil or criminal penalties. If you believe you have received this message in error, please notify the sender and delete the email immediately.
On 29 March 2014 06:09, Wilcox, Theodore A -FS <tawilcox at fs.fed.us> wrote:
Oops, it turned yellow again. I didn't wait long enough. So commenting out the line beginning with "expect" in addition turned them green
Could be that you won't notice when if fails also. What I would do is to work out the required send/expect strings to get it working correctly. A tcpdump, as suggested by Henrik, would be a good start.
Do you have the "banner" keyword defined for [smtp] in protocols.cfg? If you do (and it's the default) then you should see the message that comes back from the server in the "smtp" status page. This string is what would be matched against the expect string. If the banner doesn't include "220" anywhere, then that's the reason it's failing, and what it shows instead could be useful in working out what's wrong.
Or try this one-liner and see what comes back:
{ printf "mail\r\nquit\r\n"; sleep 1; } | telnet mail.cdn.telstra.com.au 25
J
participants (4)
-
everett.vernon＠gmail.com
-
henrik＠hswn.dk
-
jlaidman＠rebel-it.com.au
-
tawilcox＠fs.fed.us