This may help you understand the "what". Regarding the "why" may require a full net sniff... Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/pages/author_index.asp?aut=3 http://isatools.org Read the help / books / articles! ----- Original Message ----- From: "Izael" <izael.ochoa@xxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Thursday, November 21, 2002 2:41 PM Subject: [isalist] MS Proxy Protocol command 0x0800 http://www.ISAserver.org Hi everyone, we have a problem with our ISA server clients, periodically the client disconects from the ISA server, the client icon shows a red exclamation mark, and the PC can´t resolve internet names any longer, 15 or 30 secons later the client recover, and everything works again. I used an sniffer in order to find what is happennig, I have only discover that when everything works ok, the client sends a HELLO command to the server, and the server answers with a HELLO ACKNOWLEDGE(hexadecimal command 0x1000), but when the client disconect from the server, the server send to the client a command 0x0800, hexadecimal. My Sniffer doesn´t know what does this command mean, and I can´t find in microsoft or anywhere else what does this command mean. Has anybody experienced something like this, or does anybody know where can I find a full description of MS Proxy Protocol commands, or could someone please tell me what does the hexadecimal number 0x08000 in the command field of the MS-Proxy protocol mean?... Thanks in advance ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')