Solved

Thunderbird connection log

Posted on 2014-11-30
5
291 Views
Last Modified: 2014-12-04
Hi:

I'm configuring Thunderbird under Windows 7 to connect via StartTLS. I would like to view a log of the connection in order to a) debug configuration settings, and b) make sure that it actually is connecting via TLS and accepting certificates correctly.

It appears that there is no native log in the application. Did I miss it?  

If there is no log, would a viable approach be with a packet sniffer - and which is the easiest to use?

Thanks much,
0
Comment
Question by:fredo783
  • 2
  • 2
5 Comments
 
LVL 83

Expert Comment

by:Dave Baldwin
ID: 40473095
I don't see a log mentioned.  I just set up a 'secure' email on my Comcast account and it 'automatically' set it up for SSL/TLS.  Apparently Comcast POP3 is one of the 'known' email setups in Thunderbird although I could have chosen IMAP.  I'm pretty sure that it did work because my Avast anti-virus intercepted it and I had to accept the 'security exception' caused by the Avast self-signed certificate.
0
 
LVL 83

Expert Comment

by:Dave Baldwin
ID: 40473098
0
 
LVL 14

Accepted Solution

by:
frankhelk earned 500 total points
ID: 40473700
For packet inspection, I generally use Wireshark.

Open Wireshark, choose "capture options" from the menu, select the appropriate network interface and, presuming 1.2.3.4 as IP of the distant mailserver, apply a capture filter of

    host 1.2.3.4

That would limit the captured data to the conversation between your station and the mail server.

Capture the entire conversation when sending a test mail. Inspect the packets. If you could recognize text from your message in the lower pane, it's unencrypted. If it looks like completely junk, it's encrypted. If you see "SSL..." or "TLS..." as protocol in the packet list, the connection seems to be encrypted with SSL.

Right click on one of the packets and choosing "Follow TCP stream" will show the conversation concerning the stream the packet is part of.
0
 

Author Closing Comment

by:fredo783
ID: 40477670
This is a perfect solution. By using Wireshark I was able to determine that TLS was used and that connection was encrypted. Your tips on using Wireshark were very helpful. Thanks! (By the way, Wireshark is quite easy to use. )
0
 
LVL 14

Expert Comment

by:frankhelk
ID: 40480604
You're welcome :)

Wireshark's ease of use depends on how familiar you're with such things as networks, TCP/IP, Ethernet, etc, I think. Maybe I've underestimated your skills - sorry for that ;-)

By the way, Wireshark is a basic tool for many network / data flow associated problems, and I use it regulary for such things. A good advice in such cases ... follow the data ...
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Ransomware continues to be a growing problem for both personal and business users alike and Antivirus companies are still struggling to find a reliable way to protect you from this dangerous threat.
Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
Many of my clients call in with monstrous Gmail overloading issues with Outlook. A quick tip is to turn off the All Mail and Important folders from synching. Here is a quick video I made to show you how to turn off these and other folders in Gmail s…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question