johnson httlfleqgmailcom thanks yeah im actually getting behavior looking traffic monitoring port mirrored server coming linux workstation captured tcpdump arent filtering appliances route t1 cisco 2651 router hp 2626 switch mailserver t1 comes datacenter really really hope theyre chopping anything ill see get tcpdump one sending servers offsite fulfillment co see shows patterns would anything fact sending server maybe 30 separate connections smtpd volume low maybe 510 messageshr 22008 wietse venema wrote johnson thanks ill start looking variables different kernel different nic etc network interface cards dont chop tcp streams 23 byte segments would implement tcpip stack likely antispam firewalling system bandwidth management throttling selected tcp flows wietse thu 07 aug 2008 035941 0800 queue file write error domains