Microsoft KB Archive/303118

= XCON: Link States Continually Change and Event ID 451 and Reset Event Messages Are Logged in the Network Trace =

Article ID: 303118

Article Last Modified on 2/27/2007

-

APPLIES TO


 * Microsoft Exchange 2000 Server Standard Edition

-



This article was previously published under Q303118



SYMPTOMS
You may experience the following symptoms:
 * Mail flow is sporadic between servers.
 * Links states continually change (the states go up and down) between servers that are known to have good links. If you either use a ping command, initiate a telnet session, or send a message to test the links, these tests succeed.
 * If you run Network Monitor to create a network trace, a large number of 451 events (which indicate &quot;Timeout waiting for client input&quot;) and reset events may be logged from the server that is receiving the mail.

NOTE: This article assumes that you understand how to use Network Monitor, network traces, and Simple Mail Transfer Protocol (SMTP).



CAUSE
Typically, if you run a network trace, you note that the receiving server sends a &quot;250 2.6.1&quot; return code to the originating server after the sender successfully completes the DATA portion of the message. In the trace, the last lines of this 250 return code resemble the following data (this data is displayed in the network trace hexadecimal data):

NOTE: Review the last four hexadecimal values in your trace. If these values match the values that are displayed in the preceding table, this the article does not apply to you.

The last hexadecimal values (0D 0A) represent a carriage return and line feed. These values indicate that the 250 return code is complete and that the server is acting correctly.

The symptoms that are described in the &quot;Symptoms&quot; section of this article occur because the MTS-ID message that is returned with the 250 return code is greater than the buffer size that is allocated for the return string (the buffer size is 1024 kilobytes [KB]). If this behavior occurs, the server that sends the 250 return code does not send the carriage return and line feed codes (0D 0A), and a &quot;250 2.6.1&quot; return code is not created. As a result the sender is not notified that the message was successfully received. The connection times out while the server that sent the message is waiting for the 250 return code, and a 451 packet is sent back by the receiving server. As a result the connection is marked as &quot;down&quot; (a link state problem), messages get stuck in the queue, and non-delivery reports (NDRs) are sent to the senders.



RESOLUTION
To resolve this problem, install Windows 2000 SP2. The file that is responsible for this problem is Smtpsvc.dll.



STATUS
Microsoft has confirmed that this is a problem in Microsoft Exchange 2000 Server.



MORE INFORMATION
Typically, the packet size of the problem 250 return packet is exactly 1024 KB. The following data is an example of the communication between the problem sender (Server A) and the receiver (Server B):

CONNECTION ESTABLISHMENT to port 25 from Server A

.......Server B: 220

Server A: HELO (or EHLO)

.......Server B: 250

Server A: MAIL FROM: Person1@domain.com

.......Server B: 250

Server A: RCPT TO: Person@domain.com

.......Server B: 250

Server A: DATA

.......Server B: 354

Server A: data .

.......Server B: 250

(Typically, a ten-minute gap occurs now)

.......Server B: 451, ACK..FIN

Server A: QUIT, ACK. FIN

.......Server B: R (reset)

For additional information about this problem, click the article number below to view the article in the Microsoft Knowledge Base:

290725 SMTP Service Does Not Handle Large Message ID Correctly

Keywords: kbbug KB303118

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.