OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: duplicate SMTP ID?

From: Andrew Noonan (anoonanindeed.com)
Date: Wed Aug 01 2007 - 13:55:03 CDT


On Wed, August 1, 2007 1:41 pm, Mike Kenny <inzanixgmail.com> said: > If you mean 7035988.1185963106924.SendAlerts.tomcatweb10, these are not > duplicates. These are the same message. Once in the cleanup queue and 1 > second later in the smtp queue. > > mike > > > On 8/1/07, Andrew Noonan <anoonanindeed.com> wrote: >> >> Hi all, >> >> I seem to have a duplicate SMTP ID on two messages sent from the same >> machine. I didn't think that was likely (or really possible), but this >> happened the first day we put postfix into Production rotation. Is there >> something I'm missing? We depend on ID uniqueness to match status of >> messages we send since the to, from, and message-ID are in different log >> lines. Here are the log lines: >> >> Aug 1 04:38:38 web6 postfix/smtpd[10839]: E00D03D417C: client= >> web10.example.com[10.1.1.20] >> Aug 1 04:38:38 web6 postfix/cleanup[17562]: E00D03D417C: message-id=< >> 6738886.1185961118923.SendAlerts.tomcatweb10> >> Aug 1 04:38:38 web6 postfix/qmgr[11784]: E00D03D417C: from=< >> alertexample.com>, size=6025, nrcpt=1 (queue active) >> Aug 1 04:38:39 web6 postfix/smtp[17069]: E00D03D417C: to=< >> BBBBBBBgmail.com>, relay=gmail-smtp-in.l.google.com[209.85.163.27], >> delay=1, status=sent (250 2.0.0 OK 1185961119 i27si733438elf) >> Aug 1 04:38:39 web6 postfix/qmgr[11784]: E00D03D417C: removed >> Aug 1 05:11:46 web6 postfix/smtpd[10839]: E00D03D417C: client= >> web10.example.com[10.1.1.20] >> Aug 1 05:11:46 web6 postfix/cleanup[18545]: E00D03D417C: message-id=< >> 7035988.1185963106924.SendAlerts.tomcatweb10> >> Aug 1 05:11:46 web6 postfix/qmgr[11784]: E00D03D417C: from=< >> alertexample.com>, size=3977, nrcpt=1 (queue active) >> Aug 1 05:11:47 web6 postfix/smtp[18354]: E00D03D417C: to=< >> BBBBBBBhotmail.com>, relay=mx3.hotmail.com[65.54.244.200], delay=1, >> status=sent (250 <7035988.1185963106924.SendAlerts.tomcatweb10> Queued >> mail for delivery) >> Aug 1 05:11:47 web6 postfix/qmgr[11784]: E00D03D417C: removed >> >> Is this as strange as I think it is, and is there any way to make sure >> this stays unique? >> >> Thanks, >> Andrew >> >> > No, I'm talking about the E00D03D417C SMTP ID. These are two different messages, one to a gmail account and one to a hotmail account. We have scripts that basically parse this data to map the message-ids: 6738886.1185961118923.SendAlerts.tomcatweb10 and 7035988.1185963106924.SendAlerts.tomcatweb10 to their "to" addresses and status: BBBBBBBgmail.com/Sent and BBBBBBBhotmail.com/Sent. It's a little more sophisticated then that, but it uses the SMTP ID to build the hash that associates these individual lines into detailed information about each email transaction that comes from our application. Andrew