I can
only guess. Since SMTP is a TCP based protocol, so it is possible
that
many
of the individual emails got bunched together in a single TCP
segment
and
got transported. Since they make up one single TCP and IP packet
each
you
might be getting statistics like the ones you see if you simply monitor
the
port.
You need to go and check the contents of those packets, to see if
it
expands to multiple SMTP messages or
not?
bdutta.
I was monitoring traffic
between a server that generates e-mails to be sent out of my building via an
Exchange Server. When I ran the capture setting to monitor the two host
IP Addresses it only captured 275 out of the 1442 e-mails that actually got
sent out. I started the monitoring traffic well before the e-mails were
generated and left the capture on for an entire day even though the entire
event occurred over a couple of hours.
Has anything like this been
reported before.
Thanks,
Wayne M. Sladen
e-Services Specialist
Synergent
2 Ledgeview
Drive
Westbrook Maine 04092
Work - 207-773-5671 Ext 223
Mobile - 207-653-8092
wsladen@xxxxxxxxxxxxxxxxx
IMPORTANT MESSAGE TO RECIPIENT: This email, along with any attached files, is
intended only for the use of the individual or individuals to which it is
addressed. This email may contain information that is confidential, subject to
copyright or constitutes a trade secret. If you are not the intended
recipient, you are hereby notified that any dissemination, copying or
distribution of this email or files associated with this email, is strictly
prohibited. If you have received this email in error please notify the sender
immediately by replying to the message and deleting it from your computer.
Messages sent to and from employees in our organization may be monitored.
