Highlighted
jhd10374 Absent Member.
Absent Member.
2797 views

TCP/IP Read errors

Hi group,

I've got sporadic reports of TCP/IP read errors from some of our users -
they receive the following:



The message that you sent has been delayed.

The reason given for the delay:
420 TCP read error

Information about your message:
Subject: Re: [Call#20110503428148] Can't search for IP Addresses in Hosts
view again
GroupWise Message Id: 4DC11B67.9AF:116:31169
Message log tag: 764053
Number of send attempts: 1
Time of initial send attempt: 05-04-11 10:25:27

- the messages do get delivered after the first retry period (20 minutes)
and not all messages are delayed, but they are badgering me to get it
fixed. Where do I start?

Our GWIA hands off SMTP to the University's smtp server farm, oxmail.ox
which is a round-robin DNS alias for a bunch of machines. I suspect that
one of these machines is not accepting mail correctly, given the
randomness of the delays (not all users, and not all messages) but I could
do with tracking down what is going wrong.

The Gwia Status page does show 127 TCP/IP read errors.

We're on GW 8.0.2 Linux, sitting on OES2.

Cheers,
James Dore
IT Officer,
New College, Oxford

--
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/
Labels (2)
0 Likes
3 Replies
Knowledge Partner
Knowledge Partner

Re: TCP/IP Read errors

On 04.05.2011 13:15, James Dore wrote:
> Hi group,
>
> I've got sporadic reports of TCP/IP read errors from some of our users -
> they receive the following:
>
>
>
> The message that you sent has been delayed.
>
> The reason given for the delay:
> 420 TCP read error


There's not much you can do about the error itself, but you can disable
the message back to your users. However, in case of a real problem
you'll then hear complaints why your system didn't tell them... 😉

CU,
--
Massimo Rosen
Novell Product Support Forum Sysop
No emails please!
http://www.cfc-it.de
CU,
--
Massimo Rosen
Micro Focus Knowledge Partner
No emails please!
http://www.cfc-it.de
0 Likes
jhd10374 Absent Member.
Absent Member.

Re: TCP/IP Read errors

On Wed, 04 May 2011 13:47:26 +0100, Massimo Rosen <mrosenNO@spamcfc-it.de>
wrote:

> On 04.05.2011 13:15, James Dore wrote:
>> Hi group,
>>
>> I've got sporadic reports of TCP/IP read errors from some of our users -
>> they receive the following:
>>
>>
>>
>> The message that you sent has been delayed.
>>
>> The reason given for the delay:
>> 420 TCP read error

>
> There's not much you can do about the error itself, but you can disable
> the message back to your users. However, in case of a real problem
> you'll then hear complaints why your system didn't tell them... 😉
>
> CU,


Ok - is there anything I can do to gain some diagnostic info to pass on to
the admins upstream? (eg. message ID's and particular nodes that might be
giving problems?) Is there anything useful that might be caught in the
logs, or at more detailed log levels? (we're on "Normal" at the moment).

Cheers,
James

--
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/
0 Likes
jhd10374 Absent Member.
Absent Member.

Re: TCP/IP Read errors

On Wed, 04 May 2011 13:47:26 +0100, Massimo Rosen <mrosenNO@spamcfc-it.de>
wrote:

> On 04.05.2011 13:15, James Dore wrote:
>> Hi group,
>>
>> I've got sporadic reports of TCP/IP read errors from some of our users -
>> they receive the following:
>>
>>
>>
>> The message that you sent has been delayed.
>>
>> The reason given for the delay:
>> 420 TCP read error

>
> There's not much you can do about the error itself, but you can disable
> the message back to your users. However, in case of a real problem
> you'll then hear complaints why your system didn't tell them... 😉
>


Answering my own question:

Some digging in the logs turns up


16:09:03 464 DMN: MSG 765514 Send Failure: 420 TCP read error
16:09:03 520 MSG 765514 Analyzing result file:
/media/nss/GWMAIL/staf-dom/wpgate/gwia/result/rdc17a1e.385
16:09:03 520 MSG 765514 Detected error on SMTP command
16:09:03 520 MSG 765514 Command: bodleian.ox.ac.uk
16:09:03 520 MSG 765514 Response: 420 TCP read error

and I managed to find the message in
/media/nss/GWMAIL/staf-dom/wpgate/gwia/defer - the headers are interesting:


<IaMsgSize>000056c3</IaMsgSize>
<IaGwMsgId>4DC16BF1.91A:220:58862</IaGwMsgId>
<IaMsgSender>
<GivenName>User</GivenName>
<Surname>User</Surname>
<EmailAddress>user.user@new.ox.ac.uk</EmailAddress>
<Domain>new</Domain>
<PostOffice>staff</PostOffice>
<UserId>user</UserId>
<Idomain>new.ox.ac.uk</Idomain>
</IaMsgSender>
<IaMsgSubject>usersubject</IaMsgSubject>
<IaDestHost Index="1" />
<IaMsg8Bit>222910</IaMsg8Bit>
<IaDsnOptions Return="Headers" Notify="Success,Failure"
SendInboxNotice="No" />
<IaSendInfo>
<IaSendAttempts Count="0001"/>
<IaInitialSendAttempt>4dc16c0e</IaInitialSendAttempt>
<IaLastSendAttempt>00000000</IaLastSendAttempt>
</IaSendInfo>
</IaHead>
bodleian.ox.ac.uk
EHLO mail.new.ox.ac.uk
MAIL FROM:<user.user@new.ox.ac.uk>
*U1* RCPT TO:<user1.user1@bodleian.ox.ac.uk>
DATA
Received: from new-MTA by mail.new.ox.ac.uk
with Novell_GroupWise; Wed, 04 May 2011 16:09:02 +0100
Message-Id: <4DC17A01020000DC000106A1@mail.new.ox.ac.uk>
X-Mailer: Novell GroupWise Internet Agent 8.0.2
Date: Wed, 04 May 2011 16:08:33 +0100
From: "User User" <user.user@new.ox.ac.uk>


Why is that domain name (bodleian.ox.ac.uk) between </IaHead> and EHLO ?
Is that legit SMTP? I don't know enough about such things to be sure,
although the fact that it does get sent later suggests other SMTP servers
don't have a problem with it.

Cheers,
James

--
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.