| 1 | No. Time Source Destination Protocol Length Info
|
|---|
| 2 | 1391 116.892804000 213.186.33.20 192.168.0.11 SMTP 81 S: 235 ok, go ahead (#2.0.0)
|
|---|
| 3 |
|
|---|
| 4 | Frame 1391: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) on interface 0
|
|---|
| 5 | Interface id: 0
|
|---|
| 6 | Encapsulation type: Ethernet (1)
|
|---|
| 7 | Arrival Time: Jul 21, 2014 13:33:45.616853000 CEST
|
|---|
| 8 | [Time shift for this packet: 0.000000000 seconds]
|
|---|
| 9 | Epoch Time: 1405942425.616853000 seconds
|
|---|
| 10 | [Time delta from previous captured frame: 0.016991000 seconds]
|
|---|
| 11 | [Time delta from previous displayed frame: 0.016991000 seconds]
|
|---|
| 12 | [Time since reference or first frame: 116.892804000 seconds]
|
|---|
| 13 | Frame Number: 1391
|
|---|
| 14 | Frame Length: 81 bytes (648 bits)
|
|---|
| 15 | Capture Length: 81 bytes (648 bits)
|
|---|
| 16 | [Frame is marked: True]
|
|---|
| 17 | [Frame is ignored: False]
|
|---|
| 18 | [Protocols in frame: eth:ip:tcp:smtp]
|
|---|
| 19 | [Coloring Rule Name: TCP]
|
|---|
| 20 | [Coloring Rule String: tcp]
|
|---|
| 21 | Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 22 | Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 23 | Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 24 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 25 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 26 | Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 27 | Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 28 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 29 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 30 | Type: IP (0x0800)
|
|---|
| 31 | Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
|
|---|
| 32 | Version: 4
|
|---|
| 33 | Header length: 20 bytes
|
|---|
| 34 | Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
|
|---|
| 35 | 0000 00.. = Differentiated Services Codepoint: Default (0x00)
|
|---|
| 36 | .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
|
|---|
| 37 | Total Length: 67
|
|---|
| 38 | Identification: 0x4e3b (20027)
|
|---|
| 39 | Flags: 0x02 (Don't Fragment)
|
|---|
| 40 | 0... .... = Reserved bit: Not set
|
|---|
| 41 | .1.. .... = Don't fragment: Set
|
|---|
| 42 | ..0. .... = More fragments: Not set
|
|---|
| 43 | Fragment offset: 0
|
|---|
| 44 | Time to live: 54
|
|---|
| 45 | Protocol: TCP (6)
|
|---|
| 46 | Header checksum: 0x3ef8 [validation disabled]
|
|---|
| 47 | [Good: False]
|
|---|
| 48 | [Bad: False]
|
|---|
| 49 | Source: 213.186.33.20 (213.186.33.20)
|
|---|
| 50 | Destination: 192.168.0.11 (192.168.0.11)
|
|---|
| 51 | [Source GeoIP: Unknown]
|
|---|
| 52 | [Destination GeoIP: Unknown]
|
|---|
| 53 | Transmission Control Protocol, Src Port: submission (587), Dst Port: 41028 (41028), Seq: 231, Ack: 71, Len: 27
|
|---|
| 54 | Source port: submission (587)
|
|---|
| 55 | Destination port: 41028 (41028)
|
|---|
| 56 | [Stream index: 10]
|
|---|
| 57 | Sequence number: 231 (relative sequence number)
|
|---|
| 58 | [Next sequence number: 258 (relative sequence number)]
|
|---|
| 59 | Acknowledgment number: 71 (relative ack number)
|
|---|
| 60 | Header length: 20 bytes
|
|---|
| 61 | Flags: 0x018 (PSH, ACK)
|
|---|
| 62 | 000. .... .... = Reserved: Not set
|
|---|
| 63 | ...0 .... .... = Nonce: Not set
|
|---|
| 64 | .... 0... .... = Congestion Window Reduced (CWR): Not set
|
|---|
| 65 | .... .0.. .... = ECN-Echo: Not set
|
|---|
| 66 | .... ..0. .... = Urgent: Not set
|
|---|
| 67 | .... ...1 .... = Acknowledgment: Set
|
|---|
| 68 | .... .... 1... = Push: Set
|
|---|
| 69 | .... .... .0.. = Reset: Not set
|
|---|
| 70 | .... .... ..0. = Syn: Not set
|
|---|
| 71 | .... .... ...0 = Fin: Not set
|
|---|
| 72 | Window size value: 5840
|
|---|
| 73 | [Calculated window size: 5840]
|
|---|
| 74 | [Window size scaling factor: -2 (no window scaling used)]
|
|---|
| 75 | Checksum: 0xd81b [validation disabled]
|
|---|
| 76 | [Good Checksum: False]
|
|---|
| 77 | [Bad Checksum: False]
|
|---|
| 78 | [SEQ/ACK analysis]
|
|---|
| 79 | [Bytes in flight: 27]
|
|---|
| 80 | Simple Mail Transfer Protocol
|
|---|
| 81 | Response: 235 ok, go ahead (#2.0.0)\r\n
|
|---|
| 82 | Response code: Authentication successful (235)
|
|---|
| 83 | Response parameter: ok, go ahead (#2.0.0)
|
|---|
| 84 |
|
|---|
| 85 | 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E.
|
|---|
| 86 | 0010 00 43 4e 3b 40 00 36 06 3e f8 d5 ba 21 14 c0 a8 .CN;@.6.>...!...
|
|---|
| 87 | 0020 00 0b 02 4b a0 44 5f bf 36 e5 dd 3c cb 91 50 18 ...K.D_.6..<..P.
|
|---|
| 88 | 0030 16 d0 d8 1b 00 00 32 33 35 20 6f 6b 2c 20 67 6f ......235 ok, go
|
|---|
| 89 | 0040 20 61 68 65 61 64 20 28 23 32 2e 30 2e 30 29 0d ahead (#2.0.0).
|
|---|
| 90 | 0050 0a .
|
|---|
| 91 |
|
|---|
| 92 | No. Time Source Destination Protocol Length Info
|
|---|
| 93 | 1392 116.894480000 192.168.0.11 213.186.33.20 SMTP 93 C: mail FROM:<contact@1avis.fr> size=259
|
|---|
| 94 |
|
|---|
| 95 | Frame 1392: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) on interface 0
|
|---|
| 96 | Interface id: 0
|
|---|
| 97 | Encapsulation type: Ethernet (1)
|
|---|
| 98 | Arrival Time: Jul 21, 2014 13:33:45.618529000 CEST
|
|---|
| 99 | [Time shift for this packet: 0.000000000 seconds]
|
|---|
| 100 | Epoch Time: 1405942425.618529000 seconds
|
|---|
| 101 | [Time delta from previous captured frame: 0.001676000 seconds]
|
|---|
| 102 | [Time delta from previous displayed frame: 0.001676000 seconds]
|
|---|
| 103 | [Time since reference or first frame: 116.894480000 seconds]
|
|---|
| 104 | Frame Number: 1392
|
|---|
| 105 | Frame Length: 93 bytes (744 bits)
|
|---|
| 106 | Capture Length: 93 bytes (744 bits)
|
|---|
| 107 | [Frame is marked: True]
|
|---|
| 108 | [Frame is ignored: False]
|
|---|
| 109 | [Protocols in frame: eth:ip:tcp:smtp]
|
|---|
| 110 | [Number of per-protocol-data: 1]
|
|---|
| 111 | [Simple Mail Transfer Protocol, key 0]
|
|---|
| 112 | [Coloring Rule Name: TCP]
|
|---|
| 113 | [Coloring Rule String: tcp]
|
|---|
| 114 | Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 115 | Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 116 | Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 117 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 118 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 119 | Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 120 | Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 121 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 122 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 123 | Type: IP (0x0800)
|
|---|
| 124 | Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20)
|
|---|
| 125 | Version: 4
|
|---|
| 126 | Header length: 20 bytes
|
|---|
| 127 | Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
|
|---|
| 128 | 0000 00.. = Differentiated Services Codepoint: Default (0x00)
|
|---|
| 129 | .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
|
|---|
| 130 | Total Length: 79
|
|---|
| 131 | Identification: 0x8850 (34896)
|
|---|
| 132 | Flags: 0x02 (Don't Fragment)
|
|---|
| 133 | 0... .... = Reserved bit: Not set
|
|---|
| 134 | .1.. .... = Don't fragment: Set
|
|---|
| 135 | ..0. .... = More fragments: Not set
|
|---|
| 136 | Fragment offset: 0
|
|---|
| 137 | Time to live: 64
|
|---|
| 138 | Protocol: TCP (6)
|
|---|
| 139 | Header checksum: 0xfad6 [validation disabled]
|
|---|
| 140 | [Good: False]
|
|---|
| 141 | [Bad: False]
|
|---|
| 142 | Source: 192.168.0.11 (192.168.0.11)
|
|---|
| 143 | Destination: 213.186.33.20 (213.186.33.20)
|
|---|
| 144 | [Source GeoIP: Unknown]
|
|---|
| 145 | [Destination GeoIP: Unknown]
|
|---|
| 146 | Transmission Control Protocol, Src Port: 41028 (41028), Dst Port: submission (587), Seq: 71, Ack: 258, Len: 39
|
|---|
| 147 | Source port: 41028 (41028)
|
|---|
| 148 | Destination port: submission (587)
|
|---|
| 149 | [Stream index: 10]
|
|---|
| 150 | Sequence number: 71 (relative sequence number)
|
|---|
| 151 | [Next sequence number: 110 (relative sequence number)]
|
|---|
| 152 | Acknowledgment number: 258 (relative ack number)
|
|---|
| 153 | Header length: 20 bytes
|
|---|
| 154 | Flags: 0x018 (PSH, ACK)
|
|---|
| 155 | 000. .... .... = Reserved: Not set
|
|---|
| 156 | ...0 .... .... = Nonce: Not set
|
|---|
| 157 | .... 0... .... = Congestion Window Reduced (CWR): Not set
|
|---|
| 158 | .... .0.. .... = ECN-Echo: Not set
|
|---|
| 159 | .... ..0. .... = Urgent: Not set
|
|---|
| 160 | .... ...1 .... = Acknowledgment: Set
|
|---|
| 161 | .... .... 1... = Push: Set
|
|---|
| 162 | .... .... .0.. = Reset: Not set
|
|---|
| 163 | .... .... ..0. = Syn: Not set
|
|---|
| 164 | .... .... ...0 = Fin: Not set
|
|---|
| 165 | Window size value: 30016
|
|---|
| 166 | [Calculated window size: 30016]
|
|---|
| 167 | [Window size scaling factor: -2 (no window scaling used)]
|
|---|
| 168 | Checksum: 0x7653 [validation disabled]
|
|---|
| 169 | [Good Checksum: False]
|
|---|
| 170 | [Bad Checksum: False]
|
|---|
| 171 | [SEQ/ACK analysis]
|
|---|
| 172 | [This is an ACK to the segment in frame: 1391]
|
|---|
| 173 | [The RTT to ACK the segment was: 0.001676000 seconds]
|
|---|
| 174 | [Bytes in flight: 39]
|
|---|
| 175 | Simple Mail Transfer Protocol
|
|---|
| 176 | Command Line: mail FROM:<contact@1avis.fr> size=259\r\n
|
|---|
| 177 | Command: mail
|
|---|
| 178 | Request parameter: FROM:<contact@1avis.fr> size=259
|
|---|
| 179 |
|
|---|
| 180 | 0000 00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00 ...B<.t.5.....E.
|
|---|
| 181 | 0010 00 4f 88 50 40 00 40 06 fa d6 c0 a8 00 0b d5 ba .O.P@.@.........
|
|---|
| 182 | 0020 21 14 a0 44 02 4b dd 3c cb 91 5f bf 37 00 50 18 !..D.K.<.._.7.P.
|
|---|
| 183 | 0030 75 40 76 53 00 00 6d 61 69 6c 20 46 52 4f 4d 3a u@vS..mail FROM:
|
|---|
| 184 | 0040 3c 63 6f 6e 74 61 63 74 40 31 61 76 69 73 2e 66 <contact@1avis.f
|
|---|
| 185 | 0050 72 3e 20 73 69 7a 65 3d 32 35 39 0d 0a r> size=259..
|
|---|
| 186 |
|
|---|
| 187 | No. Time Source Destination Protocol Length Info
|
|---|
| 188 | 1394 116.927967000 213.186.33.20 192.168.0.11 TCP 62 submission > 41028 [ACK] Seq=258 Ack=110 Win=5840 Len=0
|
|---|
| 189 |
|
|---|
| 190 | Frame 1394: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0
|
|---|
| 191 | Interface id: 0
|
|---|
| 192 | Encapsulation type: Ethernet (1)
|
|---|
| 193 | Arrival Time: Jul 21, 2014 13:33:45.652016000 CEST
|
|---|
| 194 | [Time shift for this packet: 0.000000000 seconds]
|
|---|
| 195 | Epoch Time: 1405942425.652016000 seconds
|
|---|
| 196 | [Time delta from previous captured frame: 0.019805000 seconds]
|
|---|
| 197 | [Time delta from previous displayed frame: 0.033487000 seconds]
|
|---|
| 198 | [Time since reference or first frame: 116.927967000 seconds]
|
|---|
| 199 | Frame Number: 1394
|
|---|
| 200 | Frame Length: 62 bytes (496 bits)
|
|---|
| 201 | Capture Length: 62 bytes (496 bits)
|
|---|
| 202 | [Frame is marked: True]
|
|---|
| 203 | [Frame is ignored: False]
|
|---|
| 204 | [Protocols in frame: eth:ip:tcp:vssmonitoring]
|
|---|
| 205 | [Coloring Rule Name: TCP]
|
|---|
| 206 | [Coloring Rule String: tcp]
|
|---|
| 207 | Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 208 | Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 209 | Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 210 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 211 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 212 | Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 213 | Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 214 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 215 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 216 | Type: IP (0x0800)
|
|---|
| 217 | Padding: 000000000000
|
|---|
| 218 | Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
|
|---|
| 219 | Version: 4
|
|---|
| 220 | Header length: 20 bytes
|
|---|
| 221 | Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
|
|---|
| 222 | 0000 00.. = Differentiated Services Codepoint: Default (0x00)
|
|---|
| 223 | .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
|
|---|
| 224 | Total Length: 40
|
|---|
| 225 | Identification: 0x4e3c (20028)
|
|---|
| 226 | Flags: 0x02 (Don't Fragment)
|
|---|
| 227 | 0... .... = Reserved bit: Not set
|
|---|
| 228 | .1.. .... = Don't fragment: Set
|
|---|
| 229 | ..0. .... = More fragments: Not set
|
|---|
| 230 | Fragment offset: 0
|
|---|
| 231 | Time to live: 54
|
|---|
| 232 | Protocol: TCP (6)
|
|---|
| 233 | Header checksum: 0x3f12 [validation disabled]
|
|---|
| 234 | [Good: False]
|
|---|
| 235 | [Bad: False]
|
|---|
| 236 | Source: 213.186.33.20 (213.186.33.20)
|
|---|
| 237 | Destination: 192.168.0.11 (192.168.0.11)
|
|---|
| 238 | [Source GeoIP: Unknown]
|
|---|
| 239 | [Destination GeoIP: Unknown]
|
|---|
| 240 | Transmission Control Protocol, Src Port: submission (587), Dst Port: 41028 (41028), Seq: 258, Ack: 110, Len: 0
|
|---|
| 241 | Source port: submission (587)
|
|---|
| 242 | Destination port: 41028 (41028)
|
|---|
| 243 | [Stream index: 10]
|
|---|
| 244 | Sequence number: 258 (relative sequence number)
|
|---|
| 245 | Acknowledgment number: 110 (relative ack number)
|
|---|
| 246 | Header length: 20 bytes
|
|---|
| 247 | Flags: 0x010 (ACK)
|
|---|
| 248 | 000. .... .... = Reserved: Not set
|
|---|
| 249 | ...0 .... .... = Nonce: Not set
|
|---|
| 250 | .... 0... .... = Congestion Window Reduced (CWR): Not set
|
|---|
| 251 | .... .0.. .... = ECN-Echo: Not set
|
|---|
| 252 | .... ..0. .... = Urgent: Not set
|
|---|
| 253 | .... ...1 .... = Acknowledgment: Set
|
|---|
| 254 | .... .... 0... = Push: Not set
|
|---|
| 255 | .... .... .0.. = Reset: Not set
|
|---|
| 256 | .... .... ..0. = Syn: Not set
|
|---|
| 257 | .... .... ...0 = Fin: Not set
|
|---|
| 258 | Window size value: 5840
|
|---|
| 259 | [Calculated window size: 5840]
|
|---|
| 260 | [Window size scaling factor: -2 (no window scaling used)]
|
|---|
| 261 | Checksum: 0xff3d [validation disabled]
|
|---|
| 262 | [Good Checksum: False]
|
|---|
| 263 | [Bad Checksum: False]
|
|---|
| 264 | [SEQ/ACK analysis]
|
|---|
| 265 | [This is an ACK to the segment in frame: 1392]
|
|---|
| 266 | [The RTT to ACK the segment was: 0.033487000 seconds]
|
|---|
| 267 | VSS-Monitoring ethernet trailer, Source Port: 0
|
|---|
| 268 | Src Port: 0
|
|---|
| 269 |
|
|---|
| 270 | 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E.
|
|---|
| 271 | 0010 00 28 4e 3c 40 00 36 06 3f 12 d5 ba 21 14 c0 a8 .(N<@.6.?...!...
|
|---|
| 272 | 0020 00 0b 02 4b a0 44 5f bf 37 00 dd 3c cb b8 50 10 ...K.D_.7..<..P.
|
|---|
| 273 | 0030 16 d0 ff 3d 00 00 00 00 00 00 00 00 00 00 ...=..........
|
|---|
| 274 |
|
|---|
| 275 | No. Time Source Destination Protocol Length Info
|
|---|
| 276 | 1395 116.928672000 213.186.33.20 192.168.0.11 SMTP 62 S: 250 ok
|
|---|
| 277 |
|
|---|
| 278 | Frame 1395: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0
|
|---|
| 279 | Interface id: 0
|
|---|
| 280 | Encapsulation type: Ethernet (1)
|
|---|
| 281 | Arrival Time: Jul 21, 2014 13:33:45.652721000 CEST
|
|---|
| 282 | [Time shift for this packet: 0.000000000 seconds]
|
|---|
| 283 | Epoch Time: 1405942425.652721000 seconds
|
|---|
| 284 | [Time delta from previous captured frame: 0.000705000 seconds]
|
|---|
| 285 | [Time delta from previous displayed frame: 0.000705000 seconds]
|
|---|
| 286 | [Time since reference or first frame: 116.928672000 seconds]
|
|---|
| 287 | Frame Number: 1395
|
|---|
| 288 | Frame Length: 62 bytes (496 bits)
|
|---|
| 289 | Capture Length: 62 bytes (496 bits)
|
|---|
| 290 | [Frame is marked: True]
|
|---|
| 291 | [Frame is ignored: False]
|
|---|
| 292 | [Protocols in frame: eth:ip:tcp:smtp]
|
|---|
| 293 | [Coloring Rule Name: TCP]
|
|---|
| 294 | [Coloring Rule String: tcp]
|
|---|
| 295 | Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 296 | Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 297 | Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 298 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 299 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 300 | Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 301 | Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 302 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 303 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 304 | Type: IP (0x0800)
|
|---|
| 305 | Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
|
|---|
| 306 | Version: 4
|
|---|
| 307 | Header length: 20 bytes
|
|---|
| 308 | Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
|
|---|
| 309 | 0000 00.. = Differentiated Services Codepoint: Default (0x00)
|
|---|
| 310 | .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
|
|---|
| 311 | Total Length: 48
|
|---|
| 312 | Identification: 0x4e3d (20029)
|
|---|
| 313 | Flags: 0x02 (Don't Fragment)
|
|---|
| 314 | 0... .... = Reserved bit: Not set
|
|---|
| 315 | .1.. .... = Don't fragment: Set
|
|---|
| 316 | ..0. .... = More fragments: Not set
|
|---|
| 317 | Fragment offset: 0
|
|---|
| 318 | Time to live: 54
|
|---|
| 319 | Protocol: TCP (6)
|
|---|
| 320 | Header checksum: 0x3f09 [validation disabled]
|
|---|
| 321 | [Good: False]
|
|---|
| 322 | [Bad: False]
|
|---|
| 323 | Source: 213.186.33.20 (213.186.33.20)
|
|---|
| 324 | Destination: 192.168.0.11 (192.168.0.11)
|
|---|
| 325 | [Source GeoIP: Unknown]
|
|---|
| 326 | [Destination GeoIP: Unknown]
|
|---|
| 327 | Transmission Control Protocol, Src Port: submission (587), Dst Port: 41028 (41028), Seq: 258, Ack: 110, Len: 8
|
|---|
| 328 | Source port: submission (587)
|
|---|
| 329 | Destination port: 41028 (41028)
|
|---|
| 330 | [Stream index: 10]
|
|---|
| 331 | Sequence number: 258 (relative sequence number)
|
|---|
| 332 | [Next sequence number: 266 (relative sequence number)]
|
|---|
| 333 | Acknowledgment number: 110 (relative ack number)
|
|---|
| 334 | Header length: 20 bytes
|
|---|
| 335 | Flags: 0x018 (PSH, ACK)
|
|---|
| 336 | 000. .... .... = Reserved: Not set
|
|---|
| 337 | ...0 .... .... = Nonce: Not set
|
|---|
| 338 | .... 0... .... = Congestion Window Reduced (CWR): Not set
|
|---|
| 339 | .... .0.. .... = ECN-Echo: Not set
|
|---|
| 340 | .... ..0. .... = Urgent: Not set
|
|---|
| 341 | .... ...1 .... = Acknowledgment: Set
|
|---|
| 342 | .... .... 1... = Push: Set
|
|---|
| 343 | .... .... .0.. = Reset: Not set
|
|---|
| 344 | .... .... ..0. = Syn: Not set
|
|---|
| 345 | .... .... ...0 = Fin: Not set
|
|---|
| 346 | Window size value: 5840
|
|---|
| 347 | [Calculated window size: 5840]
|
|---|
| 348 | [Window size scaling factor: -2 (no window scaling used)]
|
|---|
| 349 | Checksum: 0x2063 [validation disabled]
|
|---|
| 350 | [Good Checksum: False]
|
|---|
| 351 | [Bad Checksum: False]
|
|---|
| 352 | [SEQ/ACK analysis]
|
|---|
| 353 | [Bytes in flight: 8]
|
|---|
| 354 | Simple Mail Transfer Protocol
|
|---|
| 355 | Response: 250 ok\r\n
|
|---|
| 356 | Response code: Requested mail action okay, completed (250)
|
|---|
| 357 | Response parameter: ok
|
|---|
| 358 |
|
|---|
| 359 | 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E.
|
|---|
| 360 | 0010 00 30 4e 3d 40 00 36 06 3f 09 d5 ba 21 14 c0 a8 .0N=@.6.?...!...
|
|---|
| 361 | 0020 00 0b 02 4b a0 44 5f bf 37 00 dd 3c cb b8 50 18 ...K.D_.7..<..P.
|
|---|
| 362 | 0030 16 d0 20 63 00 00 32 35 30 20 6f 6b 0d 0a .. c..250 ok..
|
|---|
| 363 |
|
|---|
| 364 | No. Time Source Destination Protocol Length Info
|
|---|
| 365 | 1396 116.929080000 192.168.0.11 213.186.33.20 SMTP 91 C: rcpt TO:<grignon.florian@gmail.com>
|
|---|
| 366 |
|
|---|
| 367 | Frame 1396: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) on interface 0
|
|---|
| 368 | Interface id: 0
|
|---|
| 369 | Encapsulation type: Ethernet (1)
|
|---|
| 370 | Arrival Time: Jul 21, 2014 13:33:45.653129000 CEST
|
|---|
| 371 | [Time shift for this packet: 0.000000000 seconds]
|
|---|
| 372 | Epoch Time: 1405942425.653129000 seconds
|
|---|
| 373 | [Time delta from previous captured frame: 0.000408000 seconds]
|
|---|
| 374 | [Time delta from previous displayed frame: 0.000408000 seconds]
|
|---|
| 375 | [Time since reference or first frame: 116.929080000 seconds]
|
|---|
| 376 | Frame Number: 1396
|
|---|
| 377 | Frame Length: 91 bytes (728 bits)
|
|---|
| 378 | Capture Length: 91 bytes (728 bits)
|
|---|
| 379 | [Frame is marked: True]
|
|---|
| 380 | [Frame is ignored: False]
|
|---|
| 381 | [Protocols in frame: eth:ip:tcp:smtp]
|
|---|
| 382 | [Number of per-protocol-data: 1]
|
|---|
| 383 | [Simple Mail Transfer Protocol, key 0]
|
|---|
| 384 | [Coloring Rule Name: TCP]
|
|---|
| 385 | [Coloring Rule String: tcp]
|
|---|
| 386 | Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 387 | Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 388 | Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 389 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 390 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 391 | Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 392 | Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 393 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 394 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 395 | Type: IP (0x0800)
|
|---|
| 396 | Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20)
|
|---|
| 397 | Version: 4
|
|---|
| 398 | Header length: 20 bytes
|
|---|
| 399 | Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
|
|---|
| 400 | 0000 00.. = Differentiated Services Codepoint: Default (0x00)
|
|---|
| 401 | .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
|
|---|
| 402 | Total Length: 77
|
|---|
| 403 | Identification: 0x8851 (34897)
|
|---|
| 404 | Flags: 0x02 (Don't Fragment)
|
|---|
| 405 | 0... .... = Reserved bit: Not set
|
|---|
| 406 | .1.. .... = Don't fragment: Set
|
|---|
| 407 | ..0. .... = More fragments: Not set
|
|---|
| 408 | Fragment offset: 0
|
|---|
| 409 | Time to live: 64
|
|---|
| 410 | Protocol: TCP (6)
|
|---|
| 411 | Header checksum: 0xfad7 [validation disabled]
|
|---|
| 412 | [Good: False]
|
|---|
| 413 | [Bad: False]
|
|---|
| 414 | Source: 192.168.0.11 (192.168.0.11)
|
|---|
| 415 | Destination: 213.186.33.20 (213.186.33.20)
|
|---|
| 416 | [Source GeoIP: Unknown]
|
|---|
| 417 | [Destination GeoIP: Unknown]
|
|---|
| 418 | Transmission Control Protocol, Src Port: 41028 (41028), Dst Port: submission (587), Seq: 110, Ack: 266, Len: 37
|
|---|
| 419 | Source port: 41028 (41028)
|
|---|
| 420 | Destination port: submission (587)
|
|---|
| 421 | [Stream index: 10]
|
|---|
| 422 | Sequence number: 110 (relative sequence number)
|
|---|
| 423 | [Next sequence number: 147 (relative sequence number)]
|
|---|
| 424 | Acknowledgment number: 266 (relative ack number)
|
|---|
| 425 | Header length: 20 bytes
|
|---|
| 426 | Flags: 0x018 (PSH, ACK)
|
|---|
| 427 | 000. .... .... = Reserved: Not set
|
|---|
| 428 | ...0 .... .... = Nonce: Not set
|
|---|
| 429 | .... 0... .... = Congestion Window Reduced (CWR): Not set
|
|---|
| 430 | .... .0.. .... = ECN-Echo: Not set
|
|---|
| 431 | .... ..0. .... = Urgent: Not set
|
|---|
| 432 | .... ...1 .... = Acknowledgment: Set
|
|---|
| 433 | .... .... 1... = Push: Set
|
|---|
| 434 | .... .... .0.. = Reset: Not set
|
|---|
| 435 | .... .... ..0. = Syn: Not set
|
|---|
| 436 | .... .... ...0 = Fin: Not set
|
|---|
| 437 | Window size value: 30016
|
|---|
| 438 | [Calculated window size: 30016]
|
|---|
| 439 | [Window size scaling factor: -2 (no window scaling used)]
|
|---|
| 440 | Checksum: 0x5cc4 [validation disabled]
|
|---|
| 441 | [Good Checksum: False]
|
|---|
| 442 | [Bad Checksum: False]
|
|---|
| 443 | [SEQ/ACK analysis]
|
|---|
| 444 | [This is an ACK to the segment in frame: 1395]
|
|---|
| 445 | [The RTT to ACK the segment was: 0.000408000 seconds]
|
|---|
| 446 | [Bytes in flight: 37]
|
|---|
| 447 | Simple Mail Transfer Protocol
|
|---|
| 448 | Command Line: rcpt TO:<grignon.florian@gmail.com>\r\n
|
|---|
| 449 | Command: rcpt
|
|---|
| 450 | Request parameter: TO:<grignon.florian@gmail.com>
|
|---|
| 451 |
|
|---|
| 452 | 0000 00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00 ...B<.t.5.....E.
|
|---|
| 453 | 0010 00 4d 88 51 40 00 40 06 fa d7 c0 a8 00 0b d5 ba .M.Q@.@.........
|
|---|
| 454 | 0020 21 14 a0 44 02 4b dd 3c cb b8 5f bf 37 08 50 18 !..D.K.<.._.7.P.
|
|---|
| 455 | 0030 75 40 5c c4 00 00 72 63 70 74 20 54 4f 3a 3c 67 u@\...rcpt TO:<g
|
|---|
| 456 | 0040 72 69 67 6e 6f 6e 2e 66 6c 6f 72 69 61 6e 40 67 rignon.florian@g
|
|---|
| 457 | 0050 6d 61 69 6c 2e 63 6f 6d 3e 0d 0a mail.com>..
|
|---|
| 458 |
|
|---|
| 459 | No. Time Source Destination Protocol Length Info
|
|---|
| 460 | 1397 116.961784000 213.186.33.20 192.168.0.11 SMTP 62 S: 250 ok
|
|---|
| 461 |
|
|---|
| 462 | Frame 1397: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0
|
|---|
| 463 | Interface id: 0
|
|---|
| 464 | Encapsulation type: Ethernet (1)
|
|---|
| 465 | Arrival Time: Jul 21, 2014 13:33:45.685833000 CEST
|
|---|
| 466 | [Time shift for this packet: 0.000000000 seconds]
|
|---|
| 467 | Epoch Time: 1405942425.685833000 seconds
|
|---|
| 468 | [Time delta from previous captured frame: 0.032704000 seconds]
|
|---|
| 469 | [Time delta from previous displayed frame: 0.032704000 seconds]
|
|---|
| 470 | [Time since reference or first frame: 116.961784000 seconds]
|
|---|
| 471 | Frame Number: 1397
|
|---|
| 472 | Frame Length: 62 bytes (496 bits)
|
|---|
| 473 | Capture Length: 62 bytes (496 bits)
|
|---|
| 474 | [Frame is marked: True]
|
|---|
| 475 | [Frame is ignored: False]
|
|---|
| 476 | [Protocols in frame: eth:ip:tcp:smtp]
|
|---|
| 477 | [Coloring Rule Name: TCP]
|
|---|
| 478 | [Coloring Rule String: tcp]
|
|---|
| 479 | Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 480 | Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 481 | Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 482 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 483 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 484 | Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 485 | Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 486 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 487 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 488 | Type: IP (0x0800)
|
|---|
| 489 | Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
|
|---|
| 490 | Version: 4
|
|---|
| 491 | Header length: 20 bytes
|
|---|
| 492 | Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
|
|---|
| 493 | 0000 00.. = Differentiated Services Codepoint: Default (0x00)
|
|---|
| 494 | .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
|
|---|
| 495 | Total Length: 48
|
|---|
| 496 | Identification: 0x4e3e (20030)
|
|---|
| 497 | Flags: 0x02 (Don't Fragment)
|
|---|
| 498 | 0... .... = Reserved bit: Not set
|
|---|
| 499 | .1.. .... = Don't fragment: Set
|
|---|
| 500 | ..0. .... = More fragments: Not set
|
|---|
| 501 | Fragment offset: 0
|
|---|
| 502 | Time to live: 54
|
|---|
| 503 | Protocol: TCP (6)
|
|---|
| 504 | Header checksum: 0x3f08 [validation disabled]
|
|---|
| 505 | [Good: False]
|
|---|
| 506 | [Bad: False]
|
|---|
| 507 | Source: 213.186.33.20 (213.186.33.20)
|
|---|
| 508 | Destination: 192.168.0.11 (192.168.0.11)
|
|---|
| 509 | [Source GeoIP: Unknown]
|
|---|
| 510 | [Destination GeoIP: Unknown]
|
|---|
| 511 | Transmission Control Protocol, Src Port: submission (587), Dst Port: 41028 (41028), Seq: 266, Ack: 147, Len: 8
|
|---|
| 512 | Source port: submission (587)
|
|---|
| 513 | Destination port: 41028 (41028)
|
|---|
| 514 | [Stream index: 10]
|
|---|
| 515 | Sequence number: 266 (relative sequence number)
|
|---|
| 516 | [Next sequence number: 274 (relative sequence number)]
|
|---|
| 517 | Acknowledgment number: 147 (relative ack number)
|
|---|
| 518 | Header length: 20 bytes
|
|---|
| 519 | Flags: 0x018 (PSH, ACK)
|
|---|
| 520 | 000. .... .... = Reserved: Not set
|
|---|
| 521 | ...0 .... .... = Nonce: Not set
|
|---|
| 522 | .... 0... .... = Congestion Window Reduced (CWR): Not set
|
|---|
| 523 | .... .0.. .... = ECN-Echo: Not set
|
|---|
| 524 | .... ..0. .... = Urgent: Not set
|
|---|
| 525 | .... ...1 .... = Acknowledgment: Set
|
|---|
| 526 | .... .... 1... = Push: Set
|
|---|
| 527 | .... .... .0.. = Reset: Not set
|
|---|
| 528 | .... .... ..0. = Syn: Not set
|
|---|
| 529 | .... .... ...0 = Fin: Not set
|
|---|
| 530 | Window size value: 5840
|
|---|
| 531 | [Calculated window size: 5840]
|
|---|
| 532 | [Window size scaling factor: -2 (no window scaling used)]
|
|---|
| 533 | Checksum: 0x2036 [validation disabled]
|
|---|
| 534 | [Good Checksum: False]
|
|---|
| 535 | [Bad Checksum: False]
|
|---|
| 536 | [SEQ/ACK analysis]
|
|---|
| 537 | [This is an ACK to the segment in frame: 1396]
|
|---|
| 538 | [The RTT to ACK the segment was: 0.032704000 seconds]
|
|---|
| 539 | [Bytes in flight: 8]
|
|---|
| 540 | Simple Mail Transfer Protocol
|
|---|
| 541 | Response: 250 ok\r\n
|
|---|
| 542 | Response code: Requested mail action okay, completed (250)
|
|---|
| 543 | Response parameter: ok
|
|---|
| 544 |
|
|---|
| 545 | 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E.
|
|---|
| 546 | 0010 00 30 4e 3e 40 00 36 06 3f 08 d5 ba 21 14 c0 a8 .0N>@.6.?...!...
|
|---|
| 547 | 0020 00 0b 02 4b a0 44 5f bf 37 08 dd 3c cb dd 50 18 ...K.D_.7..<..P.
|
|---|
| 548 | 0030 16 d0 20 36 00 00 32 35 30 20 6f 6b 0d 0a .. 6..250 ok..
|
|---|
| 549 |
|
|---|
| 550 | No. Time Source Destination Protocol Length Info
|
|---|
| 551 | 1398 116.961923000 192.168.0.11 213.186.33.20 SMTP 60 C: data
|
|---|
| 552 |
|
|---|
| 553 | Frame 1398: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0
|
|---|
| 554 | Interface id: 0
|
|---|
| 555 | Encapsulation type: Ethernet (1)
|
|---|
| 556 | Arrival Time: Jul 21, 2014 13:33:45.685972000 CEST
|
|---|
| 557 | [Time shift for this packet: 0.000000000 seconds]
|
|---|
| 558 | Epoch Time: 1405942425.685972000 seconds
|
|---|
| 559 | [Time delta from previous captured frame: 0.000139000 seconds]
|
|---|
| 560 | [Time delta from previous displayed frame: 0.000139000 seconds]
|
|---|
| 561 | [Time since reference or first frame: 116.961923000 seconds]
|
|---|
| 562 | Frame Number: 1398
|
|---|
| 563 | Frame Length: 60 bytes (480 bits)
|
|---|
| 564 | Capture Length: 60 bytes (480 bits)
|
|---|
| 565 | [Frame is marked: True]
|
|---|
| 566 | [Frame is ignored: False]
|
|---|
| 567 | [Protocols in frame: eth:ip:tcp:smtp]
|
|---|
| 568 | [Number of per-protocol-data: 1]
|
|---|
| 569 | [Simple Mail Transfer Protocol, key 0]
|
|---|
| 570 | [Coloring Rule Name: TCP]
|
|---|
| 571 | [Coloring Rule String: tcp]
|
|---|
| 572 | Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 573 | Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 574 | Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 575 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 576 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 577 | Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 578 | Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 579 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 580 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 581 | Type: IP (0x0800)
|
|---|
| 582 | Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20)
|
|---|
| 583 | Version: 4
|
|---|
| 584 | Header length: 20 bytes
|
|---|
| 585 | Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
|
|---|
| 586 | 0000 00.. = Differentiated Services Codepoint: Default (0x00)
|
|---|
| 587 | .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
|
|---|
| 588 | Total Length: 46
|
|---|
| 589 | Identification: 0x8852 (34898)
|
|---|
| 590 | Flags: 0x02 (Don't Fragment)
|
|---|
| 591 | 0... .... = Reserved bit: Not set
|
|---|
| 592 | .1.. .... = Don't fragment: Set
|
|---|
| 593 | ..0. .... = More fragments: Not set
|
|---|
| 594 | Fragment offset: 0
|
|---|
| 595 | Time to live: 64
|
|---|
| 596 | Protocol: TCP (6)
|
|---|
| 597 | Header checksum: 0xfaf5 [validation disabled]
|
|---|
| 598 | [Good: False]
|
|---|
| 599 | [Bad: False]
|
|---|
| 600 | Source: 192.168.0.11 (192.168.0.11)
|
|---|
| 601 | Destination: 213.186.33.20 (213.186.33.20)
|
|---|
| 602 | [Source GeoIP: Unknown]
|
|---|
| 603 | [Destination GeoIP: Unknown]
|
|---|
| 604 | Transmission Control Protocol, Src Port: 41028 (41028), Dst Port: submission (587), Seq: 147, Ack: 274, Len: 6
|
|---|
| 605 | Source port: 41028 (41028)
|
|---|
| 606 | Destination port: submission (587)
|
|---|
| 607 | [Stream index: 10]
|
|---|
| 608 | Sequence number: 147 (relative sequence number)
|
|---|
| 609 | [Next sequence number: 153 (relative sequence number)]
|
|---|
| 610 | Acknowledgment number: 274 (relative ack number)
|
|---|
| 611 | Header length: 20 bytes
|
|---|
| 612 | Flags: 0x018 (PSH, ACK)
|
|---|
| 613 | 000. .... .... = Reserved: Not set
|
|---|
| 614 | ...0 .... .... = Nonce: Not set
|
|---|
| 615 | .... 0... .... = Congestion Window Reduced (CWR): Not set
|
|---|
| 616 | .... .0.. .... = ECN-Echo: Not set
|
|---|
| 617 | .... ..0. .... = Urgent: Not set
|
|---|
| 618 | .... ...1 .... = Acknowledgment: Set
|
|---|
| 619 | .... .... 1... = Push: Set
|
|---|
| 620 | .... .... .0.. = Reset: Not set
|
|---|
| 621 | .... .... ..0. = Syn: Not set
|
|---|
| 622 | .... .... ...0 = Fin: Not set
|
|---|
| 623 | Window size value: 30016
|
|---|
| 624 | [Calculated window size: 30016]
|
|---|
| 625 | [Window size scaling factor: -2 (no window scaling used)]
|
|---|
| 626 | Checksum: 0xbabd [validation disabled]
|
|---|
| 627 | [Good Checksum: False]
|
|---|
| 628 | [Bad Checksum: False]
|
|---|
| 629 | [SEQ/ACK analysis]
|
|---|
| 630 | [This is an ACK to the segment in frame: 1397]
|
|---|
| 631 | [The RTT to ACK the segment was: 0.000139000 seconds]
|
|---|
| 632 | [Bytes in flight: 6]
|
|---|
| 633 | Simple Mail Transfer Protocol
|
|---|
| 634 | Command Line: data\r\n
|
|---|
| 635 | Command: data
|
|---|
| 636 |
|
|---|
| 637 | 0000 00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00 ...B<.t.5.....E.
|
|---|
| 638 | 0010 00 2e 88 52 40 00 40 06 fa f5 c0 a8 00 0b d5 ba ...R@.@.........
|
|---|
| 639 | 0020 21 14 a0 44 02 4b dd 3c cb dd 5f bf 37 10 50 18 !..D.K.<.._.7.P.
|
|---|
| 640 | 0030 75 40 ba bd 00 00 64 61 74 61 0d 0a u@....data..
|
|---|
| 641 |
|
|---|
| 642 | No. Time Source Destination Protocol Length Info
|
|---|
| 643 | 1399 116.992566000 213.186.33.20 192.168.0.11 SMTP 68 S: 354 go ahead
|
|---|
| 644 |
|
|---|
| 645 | Frame 1399: 68 bytes on wire (544 bits), 68 bytes captured (544 bits) on interface 0
|
|---|
| 646 | Interface id: 0
|
|---|
| 647 | Encapsulation type: Ethernet (1)
|
|---|
| 648 | Arrival Time: Jul 21, 2014 13:33:45.716615000 CEST
|
|---|
| 649 | [Time shift for this packet: 0.000000000 seconds]
|
|---|
| 650 | Epoch Time: 1405942425.716615000 seconds
|
|---|
| 651 | [Time delta from previous captured frame: 0.030643000 seconds]
|
|---|
| 652 | [Time delta from previous displayed frame: 0.030643000 seconds]
|
|---|
| 653 | [Time since reference or first frame: 116.992566000 seconds]
|
|---|
| 654 | Frame Number: 1399
|
|---|
| 655 | Frame Length: 68 bytes (544 bits)
|
|---|
| 656 | Capture Length: 68 bytes (544 bits)
|
|---|
| 657 | [Frame is marked: True]
|
|---|
| 658 | [Frame is ignored: False]
|
|---|
| 659 | [Protocols in frame: eth:ip:tcp:smtp]
|
|---|
| 660 | [Coloring Rule Name: TCP]
|
|---|
| 661 | [Coloring Rule String: tcp]
|
|---|
| 662 | Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 663 | Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 664 | Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 665 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 666 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 667 | Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 668 | Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 669 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 670 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 671 | Type: IP (0x0800)
|
|---|
| 672 | Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
|
|---|
| 673 | Version: 4
|
|---|
| 674 | Header length: 20 bytes
|
|---|
| 675 | Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
|
|---|
| 676 | 0000 00.. = Differentiated Services Codepoint: Default (0x00)
|
|---|
| 677 | .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
|
|---|
| 678 | Total Length: 54
|
|---|
| 679 | Identification: 0x4e3f (20031)
|
|---|
| 680 | Flags: 0x02 (Don't Fragment)
|
|---|
| 681 | 0... .... = Reserved bit: Not set
|
|---|
| 682 | .1.. .... = Don't fragment: Set
|
|---|
| 683 | ..0. .... = More fragments: Not set
|
|---|
| 684 | Fragment offset: 0
|
|---|
| 685 | Time to live: 54
|
|---|
| 686 | Protocol: TCP (6)
|
|---|
| 687 | Header checksum: 0x3f01 [validation disabled]
|
|---|
| 688 | [Good: False]
|
|---|
| 689 | [Bad: False]
|
|---|
| 690 | Source: 213.186.33.20 (213.186.33.20)
|
|---|
| 691 | Destination: 192.168.0.11 (192.168.0.11)
|
|---|
| 692 | [Source GeoIP: Unknown]
|
|---|
| 693 | [Destination GeoIP: Unknown]
|
|---|
| 694 | Transmission Control Protocol, Src Port: submission (587), Dst Port: 41028 (41028), Seq: 274, Ack: 153, Len: 14
|
|---|
| 695 | Source port: submission (587)
|
|---|
| 696 | Destination port: 41028 (41028)
|
|---|
| 697 | [Stream index: 10]
|
|---|
| 698 | Sequence number: 274 (relative sequence number)
|
|---|
| 699 | [Next sequence number: 288 (relative sequence number)]
|
|---|
| 700 | Acknowledgment number: 153 (relative ack number)
|
|---|
| 701 | Header length: 20 bytes
|
|---|
| 702 | Flags: 0x018 (PSH, ACK)
|
|---|
| 703 | 000. .... .... = Reserved: Not set
|
|---|
| 704 | ...0 .... .... = Nonce: Not set
|
|---|
| 705 | .... 0... .... = Congestion Window Reduced (CWR): Not set
|
|---|
| 706 | .... .0.. .... = ECN-Echo: Not set
|
|---|
| 707 | .... ..0. .... = Urgent: Not set
|
|---|
| 708 | .... ...1 .... = Acknowledgment: Set
|
|---|
| 709 | .... .... 1... = Push: Set
|
|---|
| 710 | .... .... .0.. = Reset: Not set
|
|---|
| 711 | .... .... ..0. = Syn: Not set
|
|---|
| 712 | .... .... ...0 = Fin: Not set
|
|---|
| 713 | Window size value: 5840
|
|---|
| 714 | [Calculated window size: 5840]
|
|---|
| 715 | [Window size scaling factor: -2 (no window scaling used)]
|
|---|
| 716 | Checksum: 0x38f3 [validation disabled]
|
|---|
| 717 | [Good Checksum: False]
|
|---|
| 718 | [Bad Checksum: False]
|
|---|
| 719 | [SEQ/ACK analysis]
|
|---|
| 720 | [This is an ACK to the segment in frame: 1398]
|
|---|
| 721 | [The RTT to ACK the segment was: 0.030643000 seconds]
|
|---|
| 722 | [Bytes in flight: 14]
|
|---|
| 723 | Simple Mail Transfer Protocol
|
|---|
| 724 | Response: 354 go ahead\r\n
|
|---|
| 725 | Response code: Start mail input; end with <CRLF>.<CRLF> (354)
|
|---|
| 726 | Response parameter: go ahead
|
|---|
| 727 |
|
|---|
| 728 | 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E.
|
|---|
| 729 | 0010 00 36 4e 3f 40 00 36 06 3f 01 d5 ba 21 14 c0 a8 .6N?@.6.?...!...
|
|---|
| 730 | 0020 00 0b 02 4b a0 44 5f bf 37 10 dd 3c cb e3 50 18 ...K.D_.7..<..P.
|
|---|
| 731 | 0030 16 d0 38 f3 00 00 33 35 34 20 67 6f 20 61 68 65 ..8...354 go ahe
|
|---|
| 732 | 0040 61 64 0d 0a ad..
|
|---|
| 733 |
|
|---|
| 734 | No. Time Source Destination Protocol Length Info
|
|---|
| 735 | 1400 116.992725000 192.168.0.11 213.186.33.20 IMF 327 subject: susu, from: contact@1avis.fr, (text/plain)
|
|---|
| 736 |
|
|---|
| 737 | Frame 1400: 327 bytes on wire (2616 bits), 327 bytes captured (2616 bits) on interface 0
|
|---|
| 738 | Interface id: 0
|
|---|
| 739 | Encapsulation type: Ethernet (1)
|
|---|
| 740 | Arrival Time: Jul 21, 2014 13:33:45.716774000 CEST
|
|---|
| 741 | [Time shift for this packet: 0.000000000 seconds]
|
|---|
| 742 | Epoch Time: 1405942425.716774000 seconds
|
|---|
| 743 | [Time delta from previous captured frame: 0.000159000 seconds]
|
|---|
| 744 | [Time delta from previous displayed frame: 0.000159000 seconds]
|
|---|
| 745 | [Time since reference or first frame: 116.992725000 seconds]
|
|---|
| 746 | Frame Number: 1400
|
|---|
| 747 | Frame Length: 327 bytes (2616 bits)
|
|---|
| 748 | Capture Length: 327 bytes (2616 bits)
|
|---|
| 749 | [Frame is marked: True]
|
|---|
| 750 | [Frame is ignored: False]
|
|---|
| 751 | [Protocols in frame: eth:ip:tcp:smtp:imf:data-text-lines]
|
|---|
| 752 | [Number of per-protocol-data: 1]
|
|---|
| 753 | [Simple Mail Transfer Protocol, key 0]
|
|---|
| 754 | [Coloring Rule Name: TCP]
|
|---|
| 755 | [Coloring Rule String: tcp]
|
|---|
| 756 | Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 757 | Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 758 | Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 759 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 760 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 761 | Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 762 | Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 763 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 764 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 765 | Type: IP (0x0800)
|
|---|
| 766 | Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20)
|
|---|
| 767 | Version: 4
|
|---|
| 768 | Header length: 20 bytes
|
|---|
| 769 | Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
|
|---|
| 770 | 0000 00.. = Differentiated Services Codepoint: Default (0x00)
|
|---|
| 771 | .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
|
|---|
| 772 | Total Length: 313
|
|---|
| 773 | Identification: 0x8853 (34899)
|
|---|
| 774 | Flags: 0x02 (Don't Fragment)
|
|---|
| 775 | 0... .... = Reserved bit: Not set
|
|---|
| 776 | .1.. .... = Don't fragment: Set
|
|---|
| 777 | ..0. .... = More fragments: Not set
|
|---|
| 778 | Fragment offset: 0
|
|---|
| 779 | Time to live: 64
|
|---|
| 780 | Protocol: TCP (6)
|
|---|
| 781 | Header checksum: 0xf9e9 [validation disabled]
|
|---|
| 782 | [Good: False]
|
|---|
| 783 | [Bad: False]
|
|---|
| 784 | Source: 192.168.0.11 (192.168.0.11)
|
|---|
| 785 | Destination: 213.186.33.20 (213.186.33.20)
|
|---|
| 786 | [Source GeoIP: Unknown]
|
|---|
| 787 | [Destination GeoIP: Unknown]
|
|---|
| 788 | Transmission Control Protocol, Src Port: 41028 (41028), Dst Port: submission (587), Seq: 153, Ack: 288, Len: 273
|
|---|
| 789 | Source port: 41028 (41028)
|
|---|
| 790 | Destination port: submission (587)
|
|---|
| 791 | [Stream index: 10]
|
|---|
| 792 | Sequence number: 153 (relative sequence number)
|
|---|
| 793 | [Next sequence number: 426 (relative sequence number)]
|
|---|
| 794 | Acknowledgment number: 288 (relative ack number)
|
|---|
| 795 | Header length: 20 bytes
|
|---|
| 796 | Flags: 0x018 (PSH, ACK)
|
|---|
| 797 | 000. .... .... = Reserved: Not set
|
|---|
| 798 | ...0 .... .... = Nonce: Not set
|
|---|
| 799 | .... 0... .... = Congestion Window Reduced (CWR): Not set
|
|---|
| 800 | .... .0.. .... = ECN-Echo: Not set
|
|---|
| 801 | .... ..0. .... = Urgent: Not set
|
|---|
| 802 | .... ...1 .... = Acknowledgment: Set
|
|---|
| 803 | .... .... 1... = Push: Set
|
|---|
| 804 | .... .... .0.. = Reset: Not set
|
|---|
| 805 | .... .... ..0. = Syn: Not set
|
|---|
| 806 | .... .... ...0 = Fin: Not set
|
|---|
| 807 | Window size value: 30016
|
|---|
| 808 | [Calculated window size: 30016]
|
|---|
| 809 | [Window size scaling factor: -2 (no window scaling used)]
|
|---|
| 810 | Checksum: 0xe0f0 [validation disabled]
|
|---|
| 811 | [Good Checksum: False]
|
|---|
| 812 | [Bad Checksum: False]
|
|---|
| 813 | [SEQ/ACK analysis]
|
|---|
| 814 | [This is an ACK to the segment in frame: 1399]
|
|---|
| 815 | [The RTT to ACK the segment was: 0.000159000 seconds]
|
|---|
| 816 | [Bytes in flight: 273]
|
|---|
| 817 | Simple Mail Transfer Protocol
|
|---|
| 818 | C: .
|
|---|
| 819 | [1 DATA fragment (270 bytes): #1400(270)]
|
|---|
| 820 | [Frame: 1400, payload: 0-269 (270 bytes)]
|
|---|
| 821 | [DATA fragment count: 1]
|
|---|
| 822 | [Reassembled DATA length: 270]
|
|---|
| 823 | Internet Message Format
|
|---|
| 824 | MIME-Version: 1.0
|
|---|
| 825 | Content-Type: text/plain; charset="utf-8"
|
|---|
| 826 | Type: text/plain
|
|---|
| 827 | Parameters: charset="utf-8"
|
|---|
| 828 | Content-Transfer-Encoding: 7bit
|
|---|
| 829 | Subject: susu
|
|---|
| 830 | From: contact@1avis.fr, 1 item
|
|---|
| 831 | Item: contact@1avis.fr\r\n
|
|---|
| 832 | Address: contact@1avis.fr\r\n
|
|---|
| 833 | To: grignon.florian@gmail.com, 1 item
|
|---|
| 834 | Item: grignon.florian@gmail.com\r\n
|
|---|
| 835 | Address: grignon.florian@gmail.com\r\n
|
|---|
| 836 | Date: Mon, 21 Jul 2014 11:33:45 -0000
|
|---|
| 837 | Message-ID: <20140721113345.29404.88044@arkade.com>\r\n
|
|---|
| 838 | Line-based text data: text/plain
|
|---|
| 839 | body body\r\n
|
|---|
| 840 |
|
|---|
| 841 | Frame (327 bytes):
|
|---|
| 842 | 0000 00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00 ...B<.t.5.....E.
|
|---|
| 843 | 0010 01 39 88 53 40 00 40 06 f9 e9 c0 a8 00 0b d5 ba .9.S@.@.........
|
|---|
| 844 | 0020 21 14 a0 44 02 4b dd 3c cb e3 5f bf 37 1e 50 18 !..D.K.<.._.7.P.
|
|---|
| 845 | 0030 75 40 e0 f0 00 00 4d 49 4d 45 2d 56 65 72 73 69 u@....MIME-Versi
|
|---|
| 846 | 0040 6f 6e 3a 20 31 2e 30 0d 0a 43 6f 6e 74 65 6e 74 on: 1.0..Content
|
|---|
| 847 | 0050 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 -Type: text/plai
|
|---|
| 848 | 0060 6e 3b 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d n; charset="utf-
|
|---|
| 849 | 0070 38 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 72 61 6e 8"..Content-Tran
|
|---|
| 850 | 0080 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 37 sfer-Encoding: 7
|
|---|
| 851 | 0090 62 69 74 0d 0a 53 75 62 6a 65 63 74 3a 20 73 75 bit..Subject: su
|
|---|
| 852 | 00a0 73 75 0d 0a 46 72 6f 6d 3a 20 63 6f 6e 74 61 63 su..From: contac
|
|---|
| 853 | 00b0 74 40 31 61 76 69 73 2e 66 72 0d 0a 54 6f 3a 20 t@1avis.fr..To:
|
|---|
| 854 | 00c0 67 72 69 67 6e 6f 6e 2e 66 6c 6f 72 69 61 6e 40 grignon.florian@
|
|---|
| 855 | 00d0 67 6d 61 69 6c 2e 63 6f 6d 0d 0a 44 61 74 65 3a gmail.com..Date:
|
|---|
| 856 | 00e0 20 4d 6f 6e 2c 20 32 31 20 4a 75 6c 20 32 30 31 Mon, 21 Jul 201
|
|---|
| 857 | 00f0 34 20 31 31 3a 33 33 3a 34 35 20 2d 30 30 30 30 4 11:33:45 -0000
|
|---|
| 858 | 0100 0d 0a 4d 65 73 73 61 67 65 2d 49 44 3a 20 3c 32 ..Message-ID: <2
|
|---|
| 859 | 0110 30 31 34 30 37 32 31 31 31 33 33 34 35 2e 32 39 0140721113345.29
|
|---|
| 860 | 0120 34 30 34 2e 38 38 30 34 34 40 61 72 6b 61 64 65 404.88044@arkade
|
|---|
| 861 | 0130 2e 63 6f 6d 3e 0d 0a 0d 0a 62 6f 64 79 20 62 6f .com>....body bo
|
|---|
| 862 | 0140 64 79 0d 0a 2e 0d 0a dy.....
|
|---|
| 863 | Reassembled SMTP (270 bytes):
|
|---|
| 864 | 0000 4d 49 4d 45 2d 56 65 72 73 69 6f 6e 3a 20 31 2e MIME-Version: 1.
|
|---|
| 865 | 0010 30 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 0..Content-Type:
|
|---|
| 866 | 0020 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 text/plain; cha
|
|---|
| 867 | 0030 72 73 65 74 3d 22 75 74 66 2d 38 22 0d 0a 43 6f rset="utf-8"..Co
|
|---|
| 868 | 0040 6e 74 65 6e 74 2d 54 72 61 6e 73 66 65 72 2d 45 ntent-Transfer-E
|
|---|
| 869 | 0050 6e 63 6f 64 69 6e 67 3a 20 37 62 69 74 0d 0a 53 ncoding: 7bit..S
|
|---|
| 870 | 0060 75 62 6a 65 63 74 3a 20 73 75 73 75 0d 0a 46 72 ubject: susu..Fr
|
|---|
| 871 | 0070 6f 6d 3a 20 63 6f 6e 74 61 63 74 40 31 61 76 69 om: contact@1avi
|
|---|
| 872 | 0080 73 2e 66 72 0d 0a 54 6f 3a 20 67 72 69 67 6e 6f s.fr..To: grigno
|
|---|
| 873 | 0090 6e 2e 66 6c 6f 72 69 61 6e 40 67 6d 61 69 6c 2e n.florian@gmail.
|
|---|
| 874 | 00a0 63 6f 6d 0d 0a 44 61 74 65 3a 20 4d 6f 6e 2c 20 com..Date: Mon,
|
|---|
| 875 | 00b0 32 31 20 4a 75 6c 20 32 30 31 34 20 31 31 3a 33 21 Jul 2014 11:3
|
|---|
| 876 | 00c0 33 3a 34 35 20 2d 30 30 30 30 0d 0a 4d 65 73 73 3:45 -0000..Mess
|
|---|
| 877 | 00d0 61 67 65 2d 49 44 3a 20 3c 32 30 31 34 30 37 32 age-ID: <2014072
|
|---|
| 878 | 00e0 31 31 31 33 33 34 35 2e 32 39 34 30 34 2e 38 38 1113345.29404.88
|
|---|
| 879 | 00f0 30 34 34 40 61 72 6b 61 64 65 2e 63 6f 6d 3e 0d 044@arkade.com>.
|
|---|
| 880 | 0100 0a 0d 0a 62 6f 64 79 20 62 6f 64 79 0d 0a ...body body..
|
|---|
| 881 |
|
|---|
| 882 | No. Time Source Destination Protocol Length Info
|
|---|
| 883 | 1420 117.034436000 213.186.33.20 192.168.0.11 SMTP 81 S: 250 ok 1405942441 qp 2645
|
|---|
| 884 |
|
|---|
| 885 | Frame 1420: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) on interface 0
|
|---|
| 886 | Interface id: 0
|
|---|
| 887 | Encapsulation type: Ethernet (1)
|
|---|
| 888 | Arrival Time: Jul 21, 2014 13:33:45.758485000 CEST
|
|---|
| 889 | [Time shift for this packet: 0.000000000 seconds]
|
|---|
| 890 | Epoch Time: 1405942425.758485000 seconds
|
|---|
| 891 | [Time delta from previous captured frame: 0.020742000 seconds]
|
|---|
| 892 | [Time delta from previous displayed frame: 0.041711000 seconds]
|
|---|
| 893 | [Time since reference or first frame: 117.034436000 seconds]
|
|---|
| 894 | Frame Number: 1420
|
|---|
| 895 | Frame Length: 81 bytes (648 bits)
|
|---|
| 896 | Capture Length: 81 bytes (648 bits)
|
|---|
| 897 | [Frame is marked: True]
|
|---|
| 898 | [Frame is ignored: False]
|
|---|
| 899 | [Protocols in frame: eth:ip:tcp:smtp]
|
|---|
| 900 | [Coloring Rule Name: TCP]
|
|---|
| 901 | [Coloring Rule String: tcp]
|
|---|
| 902 | Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 903 | Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 904 | Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 905 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 906 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 907 | Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 908 | Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 909 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 910 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 911 | Type: IP (0x0800)
|
|---|
| 912 | Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
|
|---|
| 913 | Version: 4
|
|---|
| 914 | Header length: 20 bytes
|
|---|
| 915 | Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
|
|---|
| 916 | 0000 00.. = Differentiated Services Codepoint: Default (0x00)
|
|---|
| 917 | .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
|
|---|
| 918 | Total Length: 67
|
|---|
| 919 | Identification: 0x4e40 (20032)
|
|---|
| 920 | Flags: 0x02 (Don't Fragment)
|
|---|
| 921 | 0... .... = Reserved bit: Not set
|
|---|
| 922 | .1.. .... = Don't fragment: Set
|
|---|
| 923 | ..0. .... = More fragments: Not set
|
|---|
| 924 | Fragment offset: 0
|
|---|
| 925 | Time to live: 54
|
|---|
| 926 | Protocol: TCP (6)
|
|---|
| 927 | Header checksum: 0x3ef3 [validation disabled]
|
|---|
| 928 | [Good: False]
|
|---|
| 929 | [Bad: False]
|
|---|
| 930 | Source: 213.186.33.20 (213.186.33.20)
|
|---|
| 931 | Destination: 192.168.0.11 (192.168.0.11)
|
|---|
| 932 | [Source GeoIP: Unknown]
|
|---|
| 933 | [Destination GeoIP: Unknown]
|
|---|
| 934 | Transmission Control Protocol, Src Port: submission (587), Dst Port: 41028 (41028), Seq: 288, Ack: 426, Len: 27
|
|---|
| 935 | Source port: submission (587)
|
|---|
| 936 | Destination port: 41028 (41028)
|
|---|
| 937 | [Stream index: 10]
|
|---|
| 938 | Sequence number: 288 (relative sequence number)
|
|---|
| 939 | [Next sequence number: 315 (relative sequence number)]
|
|---|
| 940 | Acknowledgment number: 426 (relative ack number)
|
|---|
| 941 | Header length: 20 bytes
|
|---|
| 942 | Flags: 0x018 (PSH, ACK)
|
|---|
| 943 | 000. .... .... = Reserved: Not set
|
|---|
| 944 | ...0 .... .... = Nonce: Not set
|
|---|
| 945 | .... 0... .... = Congestion Window Reduced (CWR): Not set
|
|---|
| 946 | .... .0.. .... = ECN-Echo: Not set
|
|---|
| 947 | .... ..0. .... = Urgent: Not set
|
|---|
| 948 | .... ...1 .... = Acknowledgment: Set
|
|---|
| 949 | .... .... 1... = Push: Set
|
|---|
| 950 | .... .... .0.. = Reset: Not set
|
|---|
| 951 | .... .... ..0. = Syn: Not set
|
|---|
| 952 | .... .... ...0 = Fin: Not set
|
|---|
| 953 | Window size value: 6432
|
|---|
| 954 | [Calculated window size: 6432]
|
|---|
| 955 | [Window size scaling factor: -2 (no window scaling used)]
|
|---|
| 956 | Checksum: 0xffaa [validation disabled]
|
|---|
| 957 | [Good Checksum: False]
|
|---|
| 958 | [Bad Checksum: False]
|
|---|
| 959 | [SEQ/ACK analysis]
|
|---|
| 960 | [This is an ACK to the segment in frame: 1400]
|
|---|
| 961 | [The RTT to ACK the segment was: 0.041711000 seconds]
|
|---|
| 962 | [Bytes in flight: 27]
|
|---|
| 963 | Simple Mail Transfer Protocol
|
|---|
| 964 | Response: 250 ok 1405942441 qp 2645\r\n
|
|---|
| 965 | Response code: Requested mail action okay, completed (250)
|
|---|
| 966 | Response parameter: ok 1405942441 qp 2645
|
|---|
| 967 |
|
|---|
| 968 | 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E.
|
|---|
| 969 | 0010 00 43 4e 40 40 00 36 06 3e f3 d5 ba 21 14 c0 a8 .CN@@.6.>...!...
|
|---|
| 970 | 0020 00 0b 02 4b a0 44 5f bf 37 1e dd 3c cc f4 50 18 ...K.D_.7..<..P.
|
|---|
| 971 | 0030 19 20 ff aa 00 00 32 35 30 20 6f 6b 20 31 34 30 . ....250 ok 140
|
|---|
| 972 | 0040 35 39 34 32 34 34 31 20 71 70 20 32 36 34 35 0d 5942441 qp 2645.
|
|---|
| 973 | 0050 0a .
|
|---|
| 974 |
|
|---|
| 975 | No. Time Source Destination Protocol Length Info
|
|---|
| 976 | 1421 117.034537000 192.168.0.11 213.186.33.20 SMTP 60 C: quit
|
|---|
| 977 |
|
|---|
| 978 | Frame 1421: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0
|
|---|
| 979 | Interface id: 0
|
|---|
| 980 | Encapsulation type: Ethernet (1)
|
|---|
| 981 | Arrival Time: Jul 21, 2014 13:33:45.758586000 CEST
|
|---|
| 982 | [Time shift for this packet: 0.000000000 seconds]
|
|---|
| 983 | Epoch Time: 1405942425.758586000 seconds
|
|---|
| 984 | [Time delta from previous captured frame: 0.000101000 seconds]
|
|---|
| 985 | [Time delta from previous displayed frame: 0.000101000 seconds]
|
|---|
| 986 | [Time since reference or first frame: 117.034537000 seconds]
|
|---|
| 987 | Frame Number: 1421
|
|---|
| 988 | Frame Length: 60 bytes (480 bits)
|
|---|
| 989 | Capture Length: 60 bytes (480 bits)
|
|---|
| 990 | [Frame is marked: True]
|
|---|
| 991 | [Frame is ignored: False]
|
|---|
| 992 | [Protocols in frame: eth:ip:tcp:smtp]
|
|---|
| 993 | [Number of per-protocol-data: 1]
|
|---|
| 994 | [Simple Mail Transfer Protocol, key 0]
|
|---|
| 995 | [Coloring Rule Name: TCP]
|
|---|
| 996 | [Coloring Rule String: tcp]
|
|---|
| 997 | Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 998 | Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 999 | Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 1000 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 1001 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 1002 | Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 1003 | Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 1004 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 1005 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 1006 | Type: IP (0x0800)
|
|---|
| 1007 | Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20)
|
|---|
| 1008 | Version: 4
|
|---|
| 1009 | Header length: 20 bytes
|
|---|
| 1010 | Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
|
|---|
| 1011 | 0000 00.. = Differentiated Services Codepoint: Default (0x00)
|
|---|
| 1012 | .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
|
|---|
| 1013 | Total Length: 46
|
|---|
| 1014 | Identification: 0x8854 (34900)
|
|---|
| 1015 | Flags: 0x02 (Don't Fragment)
|
|---|
| 1016 | 0... .... = Reserved bit: Not set
|
|---|
| 1017 | .1.. .... = Don't fragment: Set
|
|---|
| 1018 | ..0. .... = More fragments: Not set
|
|---|
| 1019 | Fragment offset: 0
|
|---|
| 1020 | Time to live: 64
|
|---|
| 1021 | Protocol: TCP (6)
|
|---|
| 1022 | Header checksum: 0xfaf3 [validation disabled]
|
|---|
| 1023 | [Good: False]
|
|---|
| 1024 | [Bad: False]
|
|---|
| 1025 | Source: 192.168.0.11 (192.168.0.11)
|
|---|
| 1026 | Destination: 213.186.33.20 (213.186.33.20)
|
|---|
| 1027 | [Source GeoIP: Unknown]
|
|---|
| 1028 | [Destination GeoIP: Unknown]
|
|---|
| 1029 | Transmission Control Protocol, Src Port: 41028 (41028), Dst Port: submission (587), Seq: 426, Ack: 315, Len: 6
|
|---|
| 1030 | Source port: 41028 (41028)
|
|---|
| 1031 | Destination port: submission (587)
|
|---|
| 1032 | [Stream index: 10]
|
|---|
| 1033 | Sequence number: 426 (relative sequence number)
|
|---|
| 1034 | [Next sequence number: 432 (relative sequence number)]
|
|---|
| 1035 | Acknowledgment number: 315 (relative ack number)
|
|---|
| 1036 | Header length: 20 bytes
|
|---|
| 1037 | Flags: 0x018 (PSH, ACK)
|
|---|
| 1038 | 000. .... .... = Reserved: Not set
|
|---|
| 1039 | ...0 .... .... = Nonce: Not set
|
|---|
| 1040 | .... 0... .... = Congestion Window Reduced (CWR): Not set
|
|---|
| 1041 | .... .0.. .... = ECN-Echo: Not set
|
|---|
| 1042 | .... ..0. .... = Urgent: Not set
|
|---|
| 1043 | .... ...1 .... = Acknowledgment: Set
|
|---|
| 1044 | .... .... 1... = Push: Set
|
|---|
| 1045 | .... .... .0.. = Reset: Not set
|
|---|
| 1046 | .... .... ..0. = Syn: Not set
|
|---|
| 1047 | .... .... ...0 = Fin: Not set
|
|---|
| 1048 | Window size value: 30016
|
|---|
| 1049 | [Calculated window size: 30016]
|
|---|
| 1050 | [Window size scaling factor: -2 (no window scaling used)]
|
|---|
| 1051 | Checksum: 0xb756 [validation disabled]
|
|---|
| 1052 | [Good Checksum: False]
|
|---|
| 1053 | [Bad Checksum: False]
|
|---|
| 1054 | [SEQ/ACK analysis]
|
|---|
| 1055 | [This is an ACK to the segment in frame: 1420]
|
|---|
| 1056 | [The RTT to ACK the segment was: 0.000101000 seconds]
|
|---|
| 1057 | [Bytes in flight: 6]
|
|---|
| 1058 | Simple Mail Transfer Protocol
|
|---|
| 1059 | Command Line: quit\r\n
|
|---|
| 1060 | Command: quit
|
|---|
| 1061 |
|
|---|
| 1062 | 0000 00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00 ...B<.t.5.....E.
|
|---|
| 1063 | 0010 00 2e 88 54 40 00 40 06 fa f3 c0 a8 00 0b d5 ba ...T@.@.........
|
|---|
| 1064 | 0020 21 14 a0 44 02 4b dd 3c cc f4 5f bf 37 39 50 18 !..D.K.<.._.79P.
|
|---|
| 1065 | 0030 75 40 b7 56 00 00 71 75 69 74 0d 0a u@.V..quit..
|
|---|
| 1066 |
|
|---|
| 1067 | No. Time Source Destination Protocol Length Info
|
|---|
| 1068 | 1423 117.065033000 213.186.33.20 192.168.0.11 SMTP 119 S: 221 ns0.ovh.net ssl0.ovh.net. You connect to mail407.ha.ovh.net
|
|---|
| 1069 |
|
|---|
| 1070 | Frame 1423: 119 bytes on wire (952 bits), 119 bytes captured (952 bits) on interface 0
|
|---|
| 1071 | Interface id: 0
|
|---|
| 1072 | Encapsulation type: Ethernet (1)
|
|---|
| 1073 | Arrival Time: Jul 21, 2014 13:33:45.789082000 CEST
|
|---|
| 1074 | [Time shift for this packet: 0.000000000 seconds]
|
|---|
| 1075 | Epoch Time: 1405942425.789082000 seconds
|
|---|
| 1076 | [Time delta from previous captured frame: 0.013086000 seconds]
|
|---|
| 1077 | [Time delta from previous displayed frame: 0.030496000 seconds]
|
|---|
| 1078 | [Time since reference or first frame: 117.065033000 seconds]
|
|---|
| 1079 | Frame Number: 1423
|
|---|
| 1080 | Frame Length: 119 bytes (952 bits)
|
|---|
| 1081 | Capture Length: 119 bytes (952 bits)
|
|---|
| 1082 | [Frame is marked: True]
|
|---|
| 1083 | [Frame is ignored: False]
|
|---|
| 1084 | [Protocols in frame: eth:ip:tcp:smtp]
|
|---|
| 1085 | [Coloring Rule Name: TCP]
|
|---|
| 1086 | [Coloring Rule String: tcp]
|
|---|
| 1087 | Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 1088 | Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 1089 | Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 1090 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 1091 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 1092 | Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 1093 | Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 1094 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 1095 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 1096 | Type: IP (0x0800)
|
|---|
| 1097 | Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
|
|---|
| 1098 | Version: 4
|
|---|
| 1099 | Header length: 20 bytes
|
|---|
| 1100 | Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
|
|---|
| 1101 | 0000 00.. = Differentiated Services Codepoint: Default (0x00)
|
|---|
| 1102 | .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
|
|---|
| 1103 | Total Length: 105
|
|---|
| 1104 | Identification: 0x4e41 (20033)
|
|---|
| 1105 | Flags: 0x02 (Don't Fragment)
|
|---|
| 1106 | 0... .... = Reserved bit: Not set
|
|---|
| 1107 | .1.. .... = Don't fragment: Set
|
|---|
| 1108 | ..0. .... = More fragments: Not set
|
|---|
| 1109 | Fragment offset: 0
|
|---|
| 1110 | Time to live: 54
|
|---|
| 1111 | Protocol: TCP (6)
|
|---|
| 1112 | Header checksum: 0x3ecc [validation disabled]
|
|---|
| 1113 | [Good: False]
|
|---|
| 1114 | [Bad: False]
|
|---|
| 1115 | Source: 213.186.33.20 (213.186.33.20)
|
|---|
| 1116 | Destination: 192.168.0.11 (192.168.0.11)
|
|---|
| 1117 | [Source GeoIP: Unknown]
|
|---|
| 1118 | [Destination GeoIP: Unknown]
|
|---|
| 1119 | Transmission Control Protocol, Src Port: submission (587), Dst Port: 41028 (41028), Seq: 315, Ack: 432, Len: 65
|
|---|
| 1120 | Source port: submission (587)
|
|---|
| 1121 | Destination port: 41028 (41028)
|
|---|
| 1122 | [Stream index: 10]
|
|---|
| 1123 | Sequence number: 315 (relative sequence number)
|
|---|
| 1124 | [Next sequence number: 380 (relative sequence number)]
|
|---|
| 1125 | Acknowledgment number: 432 (relative ack number)
|
|---|
| 1126 | Header length: 20 bytes
|
|---|
| 1127 | Flags: 0x018 (PSH, ACK)
|
|---|
| 1128 | 000. .... .... = Reserved: Not set
|
|---|
| 1129 | ...0 .... .... = Nonce: Not set
|
|---|
| 1130 | .... 0... .... = Congestion Window Reduced (CWR): Not set
|
|---|
| 1131 | .... .0.. .... = ECN-Echo: Not set
|
|---|
| 1132 | .... ..0. .... = Urgent: Not set
|
|---|
| 1133 | .... ...1 .... = Acknowledgment: Set
|
|---|
| 1134 | .... .... 1... = Push: Set
|
|---|
| 1135 | .... .... .0.. = Reset: Not set
|
|---|
| 1136 | .... .... ..0. = Syn: Not set
|
|---|
| 1137 | .... .... ...0 = Fin: Not set
|
|---|
| 1138 | Window size value: 6432
|
|---|
| 1139 | [Calculated window size: 6432]
|
|---|
| 1140 | [Window size scaling factor: -2 (no window scaling used)]
|
|---|
| 1141 | Checksum: 0x983b [validation disabled]
|
|---|
| 1142 | [Good Checksum: False]
|
|---|
| 1143 | [Bad Checksum: False]
|
|---|
| 1144 | [SEQ/ACK analysis]
|
|---|
| 1145 | [This is an ACK to the segment in frame: 1421]
|
|---|
| 1146 | [The RTT to ACK the segment was: 0.030496000 seconds]
|
|---|
| 1147 | [Bytes in flight: 65]
|
|---|
| 1148 | Simple Mail Transfer Protocol
|
|---|
| 1149 | Response: 221 ns0.ovh.net ssl0.ovh.net. You connect to mail407.ha.ovh.net\r\n
|
|---|
| 1150 | Response code: <domain> Service closing transmission channel (221)
|
|---|
| 1151 | Response parameter: ns0.ovh.net ssl0.ovh.net. You connect to mail407.ha.ovh.net
|
|---|
| 1152 |
|
|---|
| 1153 | 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E.
|
|---|
| 1154 | 0010 00 69 4e 41 40 00 36 06 3e cc d5 ba 21 14 c0 a8 .iNA@.6.>...!...
|
|---|
| 1155 | 0020 00 0b 02 4b a0 44 5f bf 37 39 dd 3c cc fa 50 18 ...K.D_.79.<..P.
|
|---|
| 1156 | 0030 19 20 98 3b 00 00 32 32 31 20 6e 73 30 2e 6f 76 . .;..221 ns0.ov
|
|---|
| 1157 | 0040 68 2e 6e 65 74 20 73 73 6c 30 2e 6f 76 68 2e 6e h.net ssl0.ovh.n
|
|---|
| 1158 | 0050 65 74 2e 20 59 6f 75 20 63 6f 6e 6e 65 63 74 20 et. You connect
|
|---|
| 1159 | 0060 74 6f 20 6d 61 69 6c 34 30 37 2e 68 61 2e 6f 76 to mail407.ha.ov
|
|---|
| 1160 | 0070 68 2e 6e 65 74 0d 0a h.net..
|
|---|