cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Cisco Secure Email Support Community

Product Support Talos Support Cisco Support Reference + Current Release
Gateway Reputation Lookup Open a support case Secure Email Guided Setup
Gateway: 14.0.0-698
Cloud Gateway Email Status Portal Support & Downloads docs.ces.cisco.com
Email and Web Manager: 14.0.0-404
Email and Web Manager Web & Email Reputation Worldwide Contacts Product Naming Quick Reference
Reporting Plug-in: 1.1.0.136
Encryption Bug Search
Encryption Plug-in: 1.2.1.167
Cloud Mailbox Notification Service
Outlook Add-in(s): More info

1873
Views
0
Helpful
1
Replies
keita suzuki
Beginner

What does "ICID lost" mean?

I checked maillog.

--------------------------------------------
incoming connection (ICID aaabbbcccc)

SMTP delivery connection (DCID dddeeeffff)

SMTP response ok

Incoming connection (ICID aaabbbcccc) lost.
--------------------------------------------

Why is ICID displayed as "lost"?
In what kind of case does it happen?

Thanks.

1 REPLY 1
Donald Nash
Participant

It means the incoming connection terminated before the SMTP client sent the QUIT command. It could mean that the client is badly behaved (the standard requires that clients always issue a QUIT command before closing the connection), or that the connection was forcibly closed by some other means (like maybe a firewall policy kicking in, or the SMTP client process being killed), or that something caused the connection to time out (connectivity problem, crashed client, etc.) If this happens after the DATA phase successfully completes, then the message was successfully handed off before the error and the error is harmless. Otherwise, the message was not complete and the client will need to try it again later.

++Don

Content for Community-Ad