| 1 | No. Time Source Destination Protocol Length Info
|
|---|
| 2 | 311 25.402773000 213.186.33.20 192.168.0.11 SMTP 81 S: 235 ok, go ahead (#2.0.0)
|
|---|
| 3 |
|
|---|
| 4 | Frame 311: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) on interface 0
|
|---|
| 5 | Interface id: 0
|
|---|
| 6 | Encapsulation type: Ethernet (1)
|
|---|
| 7 | Arrival Time: Jul 21, 2014 13:36:50.632821000 CEST
|
|---|
| 8 | [Time shift for this packet: 0.000000000 seconds]
|
|---|
| 9 | Epoch Time: 1405942610.632821000 seconds
|
|---|
| 10 | [Time delta from previous captured frame: 0.013830000 seconds]
|
|---|
| 11 | [Time delta from previous displayed frame: 0.017149000 seconds]
|
|---|
| 12 | [Time since reference or first frame: 25.402773000 seconds]
|
|---|
| 13 | Frame Number: 311
|
|---|
| 14 | Frame Length: 81 bytes (648 bits)
|
|---|
| 15 | Capture Length: 81 bytes (648 bits)
|
|---|
| 16 | [Frame is marked: True]
|
|---|
| 17 | [Frame is ignored: False]
|
|---|
| 18 | [Protocols in frame: eth:ip:tcp:smtp]
|
|---|
| 19 | [Coloring Rule Name: TCP]
|
|---|
| 20 | [Coloring Rule String: tcp]
|
|---|
| 21 | Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 22 | Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 23 | Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 24 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 25 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 26 | Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 27 | Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 28 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 29 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 30 | Type: IP (0x0800)
|
|---|
| 31 | Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
|
|---|
| 32 | Version: 4
|
|---|
| 33 | Header length: 20 bytes
|
|---|
| 34 | Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
|
|---|
| 35 | 0000 00.. = Differentiated Services Codepoint: Default (0x00)
|
|---|
| 36 | .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
|
|---|
| 37 | Total Length: 67
|
|---|
| 38 | Identification: 0xdd30 (56624)
|
|---|
| 39 | Flags: 0x02 (Don't Fragment)
|
|---|
| 40 | 0... .... = Reserved bit: Not set
|
|---|
| 41 | .1.. .... = Don't fragment: Set
|
|---|
| 42 | ..0. .... = More fragments: Not set
|
|---|
| 43 | Fragment offset: 0
|
|---|
| 44 | Time to live: 54
|
|---|
| 45 | Protocol: TCP (6)
|
|---|
| 46 | Header checksum: 0xb002 [validation disabled]
|
|---|
| 47 | [Good: False]
|
|---|
| 48 | [Bad: False]
|
|---|
| 49 | Source: 213.186.33.20 (213.186.33.20)
|
|---|
| 50 | Destination: 192.168.0.11 (192.168.0.11)
|
|---|
| 51 | [Source GeoIP: Unknown]
|
|---|
| 52 | [Destination GeoIP: Unknown]
|
|---|
| 53 | Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 231, Ack: 71, Len: 27
|
|---|
| 54 | Source port: submission (587)
|
|---|
| 55 | Destination port: 41975 (41975)
|
|---|
| 56 | [Stream index: 9]
|
|---|
| 57 | Sequence number: 231 (relative sequence number)
|
|---|
| 58 | [Next sequence number: 258 (relative sequence number)]
|
|---|
| 59 | Acknowledgment number: 71 (relative ack number)
|
|---|
| 60 | Header length: 20 bytes
|
|---|
| 61 | Flags: 0x018 (PSH, ACK)
|
|---|
| 62 | 000. .... .... = Reserved: Not set
|
|---|
| 63 | ...0 .... .... = Nonce: Not set
|
|---|
| 64 | .... 0... .... = Congestion Window Reduced (CWR): Not set
|
|---|
| 65 | .... .0.. .... = ECN-Echo: Not set
|
|---|
| 66 | .... ..0. .... = Urgent: Not set
|
|---|
| 67 | .... ...1 .... = Acknowledgment: Set
|
|---|
| 68 | .... .... 1... = Push: Set
|
|---|
| 69 | .... .... .0.. = Reset: Not set
|
|---|
| 70 | .... .... ..0. = Syn: Not set
|
|---|
| 71 | .... .... ...0 = Fin: Not set
|
|---|
| 72 | Window size value: 5840
|
|---|
| 73 | [Calculated window size: 5840]
|
|---|
| 74 | [Window size scaling factor: -2 (no window scaling used)]
|
|---|
| 75 | Checksum: 0x6bcc [validation disabled]
|
|---|
| 76 | [Good Checksum: False]
|
|---|
| 77 | [Bad Checksum: False]
|
|---|
| 78 | [SEQ/ACK analysis]
|
|---|
| 79 | [Bytes in flight: 27]
|
|---|
| 80 | Simple Mail Transfer Protocol
|
|---|
| 81 | Response: 235 ok, go ahead (#2.0.0)\r\n
|
|---|
| 82 | Response code: Authentication successful (235)
|
|---|
| 83 | Response parameter: ok, go ahead (#2.0.0)
|
|---|
| 84 |
|
|---|
| 85 | 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E.
|
|---|
| 86 | 0010 00 43 dd 30 40 00 36 06 b0 02 d5 ba 21 14 c0 a8 .C.0@.6.....!...
|
|---|
| 87 | 0020 00 0b 02 4b a3 f7 d7 23 b7 ad a5 b1 73 8c 50 18 ...K...#....s.P.
|
|---|
| 88 | 0030 16 d0 6b cc 00 00 32 33 35 20 6f 6b 2c 20 67 6f ..k...235 ok, go
|
|---|
| 89 | 0040 20 61 68 65 61 64 20 28 23 32 2e 30 2e 30 29 0d ahead (#2.0.0).
|
|---|
| 90 | 0050 0a .
|
|---|
| 91 |
|
|---|
| 92 | No. Time Source Destination Protocol Length Info
|
|---|
| 93 | 312 25.405401000 192.168.0.11 213.186.33.20 SMTP 93 C: mail FROM:<contact@1avis.fr> size=259
|
|---|
| 94 |
|
|---|
| 95 | Frame 312: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) on interface 0
|
|---|
| 96 | Interface id: 0
|
|---|
| 97 | Encapsulation type: Ethernet (1)
|
|---|
| 98 | Arrival Time: Jul 21, 2014 13:36:50.635449000 CEST
|
|---|
| 99 | [Time shift for this packet: 0.000000000 seconds]
|
|---|
| 100 | Epoch Time: 1405942610.635449000 seconds
|
|---|
| 101 | [Time delta from previous captured frame: 0.002628000 seconds]
|
|---|
| 102 | [Time delta from previous displayed frame: 0.002628000 seconds]
|
|---|
| 103 | [Time since reference or first frame: 25.405401000 seconds]
|
|---|
| 104 | Frame Number: 312
|
|---|
| 105 | Frame Length: 93 bytes (744 bits)
|
|---|
| 106 | Capture Length: 93 bytes (744 bits)
|
|---|
| 107 | [Frame is marked: True]
|
|---|
| 108 | [Frame is ignored: False]
|
|---|
| 109 | [Protocols in frame: eth:ip:tcp:smtp]
|
|---|
| 110 | [Number of per-protocol-data: 1]
|
|---|
| 111 | [Simple Mail Transfer Protocol, key 0]
|
|---|
| 112 | [Coloring Rule Name: TCP]
|
|---|
| 113 | [Coloring Rule String: tcp]
|
|---|
| 114 | Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 115 | Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 116 | Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 117 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 118 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 119 | Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 120 | Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 121 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 122 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 123 | Type: IP (0x0800)
|
|---|
| 124 | Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20)
|
|---|
| 125 | Version: 4
|
|---|
| 126 | Header length: 20 bytes
|
|---|
| 127 | Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
|
|---|
| 128 | 0000 00.. = Differentiated Services Codepoint: Default (0x00)
|
|---|
| 129 | .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
|
|---|
| 130 | Total Length: 79
|
|---|
| 131 | Identification: 0x84ef (34031)
|
|---|
| 132 | Flags: 0x02 (Don't Fragment)
|
|---|
| 133 | 0... .... = Reserved bit: Not set
|
|---|
| 134 | .1.. .... = Don't fragment: Set
|
|---|
| 135 | ..0. .... = More fragments: Not set
|
|---|
| 136 | Fragment offset: 0
|
|---|
| 137 | Time to live: 64
|
|---|
| 138 | Protocol: TCP (6)
|
|---|
| 139 | Header checksum: 0xfe37 [validation disabled]
|
|---|
| 140 | [Good: False]
|
|---|
| 141 | [Bad: False]
|
|---|
| 142 | Source: 192.168.0.11 (192.168.0.11)
|
|---|
| 143 | Destination: 213.186.33.20 (213.186.33.20)
|
|---|
| 144 | [Source GeoIP: Unknown]
|
|---|
| 145 | [Destination GeoIP: Unknown]
|
|---|
| 146 | Transmission Control Protocol, Src Port: 41975 (41975), Dst Port: submission (587), Seq: 71, Ack: 258, Len: 39
|
|---|
| 147 | Source port: 41975 (41975)
|
|---|
| 148 | Destination port: submission (587)
|
|---|
| 149 | [Stream index: 9]
|
|---|
| 150 | Sequence number: 71 (relative sequence number)
|
|---|
| 151 | [Next sequence number: 110 (relative sequence number)]
|
|---|
| 152 | Acknowledgment number: 258 (relative ack number)
|
|---|
| 153 | Header length: 20 bytes
|
|---|
| 154 | Flags: 0x018 (PSH, ACK)
|
|---|
| 155 | 000. .... .... = Reserved: Not set
|
|---|
| 156 | ...0 .... .... = Nonce: Not set
|
|---|
| 157 | .... 0... .... = Congestion Window Reduced (CWR): Not set
|
|---|
| 158 | .... .0.. .... = ECN-Echo: Not set
|
|---|
| 159 | .... ..0. .... = Urgent: Not set
|
|---|
| 160 | .... ...1 .... = Acknowledgment: Set
|
|---|
| 161 | .... .... 1... = Push: Set
|
|---|
| 162 | .... .... .0.. = Reset: Not set
|
|---|
| 163 | .... .... ..0. = Syn: Not set
|
|---|
| 164 | .... .... ...0 = Fin: Not set
|
|---|
| 165 | Window size value: 30016
|
|---|
| 166 | [Calculated window size: 30016]
|
|---|
| 167 | [Window size scaling factor: -2 (no window scaling used)]
|
|---|
| 168 | Checksum: 0x0a04 [validation disabled]
|
|---|
| 169 | [Good Checksum: False]
|
|---|
| 170 | [Bad Checksum: False]
|
|---|
| 171 | [SEQ/ACK analysis]
|
|---|
| 172 | [This is an ACK to the segment in frame: 311]
|
|---|
| 173 | [The RTT to ACK the segment was: 0.002628000 seconds]
|
|---|
| 174 | [Bytes in flight: 39]
|
|---|
| 175 | Simple Mail Transfer Protocol
|
|---|
| 176 | Command Line: mail FROM:<contact@1avis.fr> size=259\r\n
|
|---|
| 177 | Command: mail
|
|---|
| 178 | Request parameter: FROM:<contact@1avis.fr> size=259
|
|---|
| 179 |
|
|---|
| 180 | 0000 00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00 ...B<.t.5.....E.
|
|---|
| 181 | 0010 00 4f 84 ef 40 00 40 06 fe 37 c0 a8 00 0b d5 ba .O..@.@..7......
|
|---|
| 182 | 0020 21 14 a3 f7 02 4b a5 b1 73 8c d7 23 b7 c8 50 18 !....K..s..#..P.
|
|---|
| 183 | 0030 75 40 0a 04 00 00 6d 61 69 6c 20 46 52 4f 4d 3a u@....mail FROM:
|
|---|
| 184 | 0040 3c 63 6f 6e 74 61 63 74 40 31 61 76 69 73 2e 66 <contact@1avis.f
|
|---|
| 185 | 0050 72 3e 20 73 69 7a 65 3d 32 35 39 0d 0a r> size=259..
|
|---|
| 186 |
|
|---|
| 187 | No. Time Source Destination Protocol Length Info
|
|---|
| 188 | 313 25.437986000 213.186.33.20 192.168.0.11 TCP 62 submission > 41975 [ACK] Seq=258 Ack=110 Win=5840 Len=0
|
|---|
| 189 |
|
|---|
| 190 | Frame 313: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0
|
|---|
| 191 | Interface id: 0
|
|---|
| 192 | Encapsulation type: Ethernet (1)
|
|---|
| 193 | Arrival Time: Jul 21, 2014 13:36:50.668034000 CEST
|
|---|
| 194 | [Time shift for this packet: 0.000000000 seconds]
|
|---|
| 195 | Epoch Time: 1405942610.668034000 seconds
|
|---|
| 196 | [Time delta from previous captured frame: 0.032585000 seconds]
|
|---|
| 197 | [Time delta from previous displayed frame: 0.032585000 seconds]
|
|---|
| 198 | [Time since reference or first frame: 25.437986000 seconds]
|
|---|
| 199 | Frame Number: 313
|
|---|
| 200 | Frame Length: 62 bytes (496 bits)
|
|---|
| 201 | Capture Length: 62 bytes (496 bits)
|
|---|
| 202 | [Frame is marked: True]
|
|---|
| 203 | [Frame is ignored: False]
|
|---|
| 204 | [Protocols in frame: eth:ip:tcp:vssmonitoring]
|
|---|
| 205 | [Coloring Rule Name: TCP]
|
|---|
| 206 | [Coloring Rule String: tcp]
|
|---|
| 207 | Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 208 | Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 209 | Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 210 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 211 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 212 | Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 213 | Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 214 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 215 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 216 | Type: IP (0x0800)
|
|---|
| 217 | Padding: 000000000000
|
|---|
| 218 | Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
|
|---|
| 219 | Version: 4
|
|---|
| 220 | Header length: 20 bytes
|
|---|
| 221 | Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
|
|---|
| 222 | 0000 00.. = Differentiated Services Codepoint: Default (0x00)
|
|---|
| 223 | .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
|
|---|
| 224 | Total Length: 40
|
|---|
| 225 | Identification: 0xdd31 (56625)
|
|---|
| 226 | Flags: 0x02 (Don't Fragment)
|
|---|
| 227 | 0... .... = Reserved bit: Not set
|
|---|
| 228 | .1.. .... = Don't fragment: Set
|
|---|
| 229 | ..0. .... = More fragments: Not set
|
|---|
| 230 | Fragment offset: 0
|
|---|
| 231 | Time to live: 54
|
|---|
| 232 | Protocol: TCP (6)
|
|---|
| 233 | Header checksum: 0xb01c [validation disabled]
|
|---|
| 234 | [Good: False]
|
|---|
| 235 | [Bad: False]
|
|---|
| 236 | Source: 213.186.33.20 (213.186.33.20)
|
|---|
| 237 | Destination: 192.168.0.11 (192.168.0.11)
|
|---|
| 238 | [Source GeoIP: Unknown]
|
|---|
| 239 | [Destination GeoIP: Unknown]
|
|---|
| 240 | Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 258, Ack: 110, Len: 0
|
|---|
| 241 | Source port: submission (587)
|
|---|
| 242 | Destination port: 41975 (41975)
|
|---|
| 243 | [Stream index: 9]
|
|---|
| 244 | Sequence number: 258 (relative sequence number)
|
|---|
| 245 | Acknowledgment number: 110 (relative ack number)
|
|---|
| 246 | Header length: 20 bytes
|
|---|
| 247 | Flags: 0x010 (ACK)
|
|---|
| 248 | 000. .... .... = Reserved: Not set
|
|---|
| 249 | ...0 .... .... = Nonce: Not set
|
|---|
| 250 | .... 0... .... = Congestion Window Reduced (CWR): Not set
|
|---|
| 251 | .... .0.. .... = ECN-Echo: Not set
|
|---|
| 252 | .... ..0. .... = Urgent: Not set
|
|---|
| 253 | .... ...1 .... = Acknowledgment: Set
|
|---|
| 254 | .... .... 0... = Push: Not set
|
|---|
| 255 | .... .... .0.. = Reset: Not set
|
|---|
| 256 | .... .... ..0. = Syn: Not set
|
|---|
| 257 | .... .... ...0 = Fin: Not set
|
|---|
| 258 | Window size value: 5840
|
|---|
| 259 | [Calculated window size: 5840]
|
|---|
| 260 | [Window size scaling factor: -2 (no window scaling used)]
|
|---|
| 261 | Checksum: 0x92ee [validation disabled]
|
|---|
| 262 | [Good Checksum: False]
|
|---|
| 263 | [Bad Checksum: False]
|
|---|
| 264 | [SEQ/ACK analysis]
|
|---|
| 265 | [This is an ACK to the segment in frame: 312]
|
|---|
| 266 | [The RTT to ACK the segment was: 0.032585000 seconds]
|
|---|
| 267 | VSS-Monitoring ethernet trailer, Source Port: 0
|
|---|
| 268 | Src Port: 0
|
|---|
| 269 |
|
|---|
| 270 | 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E.
|
|---|
| 271 | 0010 00 28 dd 31 40 00 36 06 b0 1c d5 ba 21 14 c0 a8 .(.1@.6.....!...
|
|---|
| 272 | 0020 00 0b 02 4b a3 f7 d7 23 b7 c8 a5 b1 73 b3 50 10 ...K...#....s.P.
|
|---|
| 273 | 0030 16 d0 92 ee 00 00 00 00 00 00 00 00 00 00 ..............
|
|---|
| 274 |
|
|---|
| 275 | No. Time Source Destination Protocol Length Info
|
|---|
| 276 | 314 25.439404000 213.186.33.20 192.168.0.11 SMTP 62 S: 250 ok
|
|---|
| 277 |
|
|---|
| 278 | Frame 314: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0
|
|---|
| 279 | Interface id: 0
|
|---|
| 280 | Encapsulation type: Ethernet (1)
|
|---|
| 281 | Arrival Time: Jul 21, 2014 13:36:50.669452000 CEST
|
|---|
| 282 | [Time shift for this packet: 0.000000000 seconds]
|
|---|
| 283 | Epoch Time: 1405942610.669452000 seconds
|
|---|
| 284 | [Time delta from previous captured frame: 0.001418000 seconds]
|
|---|
| 285 | [Time delta from previous displayed frame: 0.001418000 seconds]
|
|---|
| 286 | [Time since reference or first frame: 25.439404000 seconds]
|
|---|
| 287 | Frame Number: 314
|
|---|
| 288 | Frame Length: 62 bytes (496 bits)
|
|---|
| 289 | Capture Length: 62 bytes (496 bits)
|
|---|
| 290 | [Frame is marked: True]
|
|---|
| 291 | [Frame is ignored: False]
|
|---|
| 292 | [Protocols in frame: eth:ip:tcp:smtp]
|
|---|
| 293 | [Coloring Rule Name: TCP]
|
|---|
| 294 | [Coloring Rule String: tcp]
|
|---|
| 295 | Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 296 | Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 297 | Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 298 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 299 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 300 | Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 301 | Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 302 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 303 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 304 | Type: IP (0x0800)
|
|---|
| 305 | Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
|
|---|
| 306 | Version: 4
|
|---|
| 307 | Header length: 20 bytes
|
|---|
| 308 | Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
|
|---|
| 309 | 0000 00.. = Differentiated Services Codepoint: Default (0x00)
|
|---|
| 310 | .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
|
|---|
| 311 | Total Length: 48
|
|---|
| 312 | Identification: 0xdd32 (56626)
|
|---|
| 313 | Flags: 0x02 (Don't Fragment)
|
|---|
| 314 | 0... .... = Reserved bit: Not set
|
|---|
| 315 | .1.. .... = Don't fragment: Set
|
|---|
| 316 | ..0. .... = More fragments: Not set
|
|---|
| 317 | Fragment offset: 0
|
|---|
| 318 | Time to live: 54
|
|---|
| 319 | Protocol: TCP (6)
|
|---|
| 320 | Header checksum: 0xb013 [validation disabled]
|
|---|
| 321 | [Good: False]
|
|---|
| 322 | [Bad: False]
|
|---|
| 323 | Source: 213.186.33.20 (213.186.33.20)
|
|---|
| 324 | Destination: 192.168.0.11 (192.168.0.11)
|
|---|
| 325 | [Source GeoIP: Unknown]
|
|---|
| 326 | [Destination GeoIP: Unknown]
|
|---|
| 327 | Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 258, Ack: 110, Len: 8
|
|---|
| 328 | Source port: submission (587)
|
|---|
| 329 | Destination port: 41975 (41975)
|
|---|
| 330 | [Stream index: 9]
|
|---|
| 331 | Sequence number: 258 (relative sequence number)
|
|---|
| 332 | [Next sequence number: 266 (relative sequence number)]
|
|---|
| 333 | Acknowledgment number: 110 (relative ack number)
|
|---|
| 334 | Header length: 20 bytes
|
|---|
| 335 | Flags: 0x018 (PSH, ACK)
|
|---|
| 336 | 000. .... .... = Reserved: Not set
|
|---|
| 337 | ...0 .... .... = Nonce: Not set
|
|---|
| 338 | .... 0... .... = Congestion Window Reduced (CWR): Not set
|
|---|
| 339 | .... .0.. .... = ECN-Echo: Not set
|
|---|
| 340 | .... ..0. .... = Urgent: Not set
|
|---|
| 341 | .... ...1 .... = Acknowledgment: Set
|
|---|
| 342 | .... .... 1... = Push: Set
|
|---|
| 343 | .... .... .0.. = Reset: Not set
|
|---|
| 344 | .... .... ..0. = Syn: Not set
|
|---|
| 345 | .... .... ...0 = Fin: Not set
|
|---|
| 346 | Window size value: 5840
|
|---|
| 347 | [Calculated window size: 5840]
|
|---|
| 348 | [Window size scaling factor: -2 (no window scaling used)]
|
|---|
| 349 | Checksum: 0xb413 [validation disabled]
|
|---|
| 350 | [Good Checksum: False]
|
|---|
| 351 | [Bad Checksum: False]
|
|---|
| 352 | [SEQ/ACK analysis]
|
|---|
| 353 | [Bytes in flight: 8]
|
|---|
| 354 | Simple Mail Transfer Protocol
|
|---|
| 355 | Response: 250 ok\r\n
|
|---|
| 356 | Response code: Requested mail action okay, completed (250)
|
|---|
| 357 | Response parameter: ok
|
|---|
| 358 |
|
|---|
| 359 | 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E.
|
|---|
| 360 | 0010 00 30 dd 32 40 00 36 06 b0 13 d5 ba 21 14 c0 a8 .0.2@.6.....!...
|
|---|
| 361 | 0020 00 0b 02 4b a3 f7 d7 23 b7 c8 a5 b1 73 b3 50 18 ...K...#....s.P.
|
|---|
| 362 | 0030 16 d0 b4 13 00 00 32 35 30 20 6f 6b 0d 0a ......250 ok..
|
|---|
| 363 |
|
|---|
| 364 | No. Time Source Destination Protocol Length Info
|
|---|
| 365 | 315 25.439709000 192.168.0.11 213.186.33.20 SMTP 91 C: rcpt TO:<grignon.florian@gmail.com>
|
|---|
| 366 |
|
|---|
| 367 | Frame 315: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) on interface 0
|
|---|
| 368 | Interface id: 0
|
|---|
| 369 | Encapsulation type: Ethernet (1)
|
|---|
| 370 | Arrival Time: Jul 21, 2014 13:36:50.669757000 CEST
|
|---|
| 371 | [Time shift for this packet: 0.000000000 seconds]
|
|---|
| 372 | Epoch Time: 1405942610.669757000 seconds
|
|---|
| 373 | [Time delta from previous captured frame: 0.000305000 seconds]
|
|---|
| 374 | [Time delta from previous displayed frame: 0.000305000 seconds]
|
|---|
| 375 | [Time since reference or first frame: 25.439709000 seconds]
|
|---|
| 376 | Frame Number: 315
|
|---|
| 377 | Frame Length: 91 bytes (728 bits)
|
|---|
| 378 | Capture Length: 91 bytes (728 bits)
|
|---|
| 379 | [Frame is marked: True]
|
|---|
| 380 | [Frame is ignored: False]
|
|---|
| 381 | [Protocols in frame: eth:ip:tcp:smtp]
|
|---|
| 382 | [Number of per-protocol-data: 1]
|
|---|
| 383 | [Simple Mail Transfer Protocol, key 0]
|
|---|
| 384 | [Coloring Rule Name: TCP]
|
|---|
| 385 | [Coloring Rule String: tcp]
|
|---|
| 386 | Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 387 | Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 388 | Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 389 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 390 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 391 | Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 392 | Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 393 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 394 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 395 | Type: IP (0x0800)
|
|---|
| 396 | Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20)
|
|---|
| 397 | Version: 4
|
|---|
| 398 | Header length: 20 bytes
|
|---|
| 399 | Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
|
|---|
| 400 | 0000 00.. = Differentiated Services Codepoint: Default (0x00)
|
|---|
| 401 | .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
|
|---|
| 402 | Total Length: 77
|
|---|
| 403 | Identification: 0x84f0 (34032)
|
|---|
| 404 | Flags: 0x02 (Don't Fragment)
|
|---|
| 405 | 0... .... = Reserved bit: Not set
|
|---|
| 406 | .1.. .... = Don't fragment: Set
|
|---|
| 407 | ..0. .... = More fragments: Not set
|
|---|
| 408 | Fragment offset: 0
|
|---|
| 409 | Time to live: 64
|
|---|
| 410 | Protocol: TCP (6)
|
|---|
| 411 | Header checksum: 0xfe38 [validation disabled]
|
|---|
| 412 | [Good: False]
|
|---|
| 413 | [Bad: False]
|
|---|
| 414 | Source: 192.168.0.11 (192.168.0.11)
|
|---|
| 415 | Destination: 213.186.33.20 (213.186.33.20)
|
|---|
| 416 | [Source GeoIP: Unknown]
|
|---|
| 417 | [Destination GeoIP: Unknown]
|
|---|
| 418 | Transmission Control Protocol, Src Port: 41975 (41975), Dst Port: submission (587), Seq: 110, Ack: 266, Len: 37
|
|---|
| 419 | Source port: 41975 (41975)
|
|---|
| 420 | Destination port: submission (587)
|
|---|
| 421 | [Stream index: 9]
|
|---|
| 422 | Sequence number: 110 (relative sequence number)
|
|---|
| 423 | [Next sequence number: 147 (relative sequence number)]
|
|---|
| 424 | Acknowledgment number: 266 (relative ack number)
|
|---|
| 425 | Header length: 20 bytes
|
|---|
| 426 | Flags: 0x018 (PSH, ACK)
|
|---|
| 427 | 000. .... .... = Reserved: Not set
|
|---|
| 428 | ...0 .... .... = Nonce: Not set
|
|---|
| 429 | .... 0... .... = Congestion Window Reduced (CWR): Not set
|
|---|
| 430 | .... .0.. .... = ECN-Echo: Not set
|
|---|
| 431 | .... ..0. .... = Urgent: Not set
|
|---|
| 432 | .... ...1 .... = Acknowledgment: Set
|
|---|
| 433 | .... .... 1... = Push: Set
|
|---|
| 434 | .... .... .0.. = Reset: Not set
|
|---|
| 435 | .... .... ..0. = Syn: Not set
|
|---|
| 436 | .... .... ...0 = Fin: Not set
|
|---|
| 437 | Window size value: 30016
|
|---|
| 438 | [Calculated window size: 30016]
|
|---|
| 439 | [Window size scaling factor: -2 (no window scaling used)]
|
|---|
| 440 | Checksum: 0xf074 [validation disabled]
|
|---|
| 441 | [Good Checksum: False]
|
|---|
| 442 | [Bad Checksum: False]
|
|---|
| 443 | [SEQ/ACK analysis]
|
|---|
| 444 | [This is an ACK to the segment in frame: 314]
|
|---|
| 445 | [The RTT to ACK the segment was: 0.000305000 seconds]
|
|---|
| 446 | [Bytes in flight: 37]
|
|---|
| 447 | Simple Mail Transfer Protocol
|
|---|
| 448 | Command Line: rcpt TO:<grignon.florian@gmail.com>\r\n
|
|---|
| 449 | Command: rcpt
|
|---|
| 450 | Request parameter: TO:<grignon.florian@gmail.com>
|
|---|
| 451 |
|
|---|
| 452 | 0000 00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00 ...B<.t.5.....E.
|
|---|
| 453 | 0010 00 4d 84 f0 40 00 40 06 fe 38 c0 a8 00 0b d5 ba .M..@.@..8......
|
|---|
| 454 | 0020 21 14 a3 f7 02 4b a5 b1 73 b3 d7 23 b7 d0 50 18 !....K..s..#..P.
|
|---|
| 455 | 0030 75 40 f0 74 00 00 72 63 70 74 20 54 4f 3a 3c 67 u@.t..rcpt TO:<g
|
|---|
| 456 | 0040 72 69 67 6e 6f 6e 2e 66 6c 6f 72 69 61 6e 40 67 rignon.florian@g
|
|---|
| 457 | 0050 6d 61 69 6c 2e 63 6f 6d 3e 0d 0a mail.com>..
|
|---|
| 458 |
|
|---|
| 459 | No. Time Source Destination Protocol Length Info
|
|---|
| 460 | 316 25.471723000 213.186.33.20 192.168.0.11 SMTP 62 S: 250 ok
|
|---|
| 461 |
|
|---|
| 462 | Frame 316: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0
|
|---|
| 463 | Interface id: 0
|
|---|
| 464 | Encapsulation type: Ethernet (1)
|
|---|
| 465 | Arrival Time: Jul 21, 2014 13:36:50.701771000 CEST
|
|---|
| 466 | [Time shift for this packet: 0.000000000 seconds]
|
|---|
| 467 | Epoch Time: 1405942610.701771000 seconds
|
|---|
| 468 | [Time delta from previous captured frame: 0.032014000 seconds]
|
|---|
| 469 | [Time delta from previous displayed frame: 0.032014000 seconds]
|
|---|
| 470 | [Time since reference or first frame: 25.471723000 seconds]
|
|---|
| 471 | Frame Number: 316
|
|---|
| 472 | Frame Length: 62 bytes (496 bits)
|
|---|
| 473 | Capture Length: 62 bytes (496 bits)
|
|---|
| 474 | [Frame is marked: True]
|
|---|
| 475 | [Frame is ignored: False]
|
|---|
| 476 | [Protocols in frame: eth:ip:tcp:smtp]
|
|---|
| 477 | [Coloring Rule Name: TCP]
|
|---|
| 478 | [Coloring Rule String: tcp]
|
|---|
| 479 | Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 480 | Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 481 | Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 482 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 483 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 484 | Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 485 | Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 486 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 487 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 488 | Type: IP (0x0800)
|
|---|
| 489 | Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
|
|---|
| 490 | Version: 4
|
|---|
| 491 | Header length: 20 bytes
|
|---|
| 492 | Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
|
|---|
| 493 | 0000 00.. = Differentiated Services Codepoint: Default (0x00)
|
|---|
| 494 | .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
|
|---|
| 495 | Total Length: 48
|
|---|
| 496 | Identification: 0xdd33 (56627)
|
|---|
| 497 | Flags: 0x02 (Don't Fragment)
|
|---|
| 498 | 0... .... = Reserved bit: Not set
|
|---|
| 499 | .1.. .... = Don't fragment: Set
|
|---|
| 500 | ..0. .... = More fragments: Not set
|
|---|
| 501 | Fragment offset: 0
|
|---|
| 502 | Time to live: 54
|
|---|
| 503 | Protocol: TCP (6)
|
|---|
| 504 | Header checksum: 0xb012 [validation disabled]
|
|---|
| 505 | [Good: False]
|
|---|
| 506 | [Bad: False]
|
|---|
| 507 | Source: 213.186.33.20 (213.186.33.20)
|
|---|
| 508 | Destination: 192.168.0.11 (192.168.0.11)
|
|---|
| 509 | [Source GeoIP: Unknown]
|
|---|
| 510 | [Destination GeoIP: Unknown]
|
|---|
| 511 | Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 266, Ack: 147, Len: 8
|
|---|
| 512 | Source port: submission (587)
|
|---|
| 513 | Destination port: 41975 (41975)
|
|---|
| 514 | [Stream index: 9]
|
|---|
| 515 | Sequence number: 266 (relative sequence number)
|
|---|
| 516 | [Next sequence number: 274 (relative sequence number)]
|
|---|
| 517 | Acknowledgment number: 147 (relative ack number)
|
|---|
| 518 | Header length: 20 bytes
|
|---|
| 519 | Flags: 0x018 (PSH, ACK)
|
|---|
| 520 | 000. .... .... = Reserved: Not set
|
|---|
| 521 | ...0 .... .... = Nonce: Not set
|
|---|
| 522 | .... 0... .... = Congestion Window Reduced (CWR): Not set
|
|---|
| 523 | .... .0.. .... = ECN-Echo: Not set
|
|---|
| 524 | .... ..0. .... = Urgent: Not set
|
|---|
| 525 | .... ...1 .... = Acknowledgment: Set
|
|---|
| 526 | .... .... 1... = Push: Set
|
|---|
| 527 | .... .... .0.. = Reset: Not set
|
|---|
| 528 | .... .... ..0. = Syn: Not set
|
|---|
| 529 | .... .... ...0 = Fin: Not set
|
|---|
| 530 | Window size value: 5840
|
|---|
| 531 | [Calculated window size: 5840]
|
|---|
| 532 | [Window size scaling factor: -2 (no window scaling used)]
|
|---|
| 533 | Checksum: 0xb3e6 [validation disabled]
|
|---|
| 534 | [Good Checksum: False]
|
|---|
| 535 | [Bad Checksum: False]
|
|---|
| 536 | [SEQ/ACK analysis]
|
|---|
| 537 | [This is an ACK to the segment in frame: 315]
|
|---|
| 538 | [The RTT to ACK the segment was: 0.032014000 seconds]
|
|---|
| 539 | [Bytes in flight: 8]
|
|---|
| 540 | Simple Mail Transfer Protocol
|
|---|
| 541 | Response: 250 ok\r\n
|
|---|
| 542 | Response code: Requested mail action okay, completed (250)
|
|---|
| 543 | Response parameter: ok
|
|---|
| 544 |
|
|---|
| 545 | 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E.
|
|---|
| 546 | 0010 00 30 dd 33 40 00 36 06 b0 12 d5 ba 21 14 c0 a8 .0.3@.6.....!...
|
|---|
| 547 | 0020 00 0b 02 4b a3 f7 d7 23 b7 d0 a5 b1 73 d8 50 18 ...K...#....s.P.
|
|---|
| 548 | 0030 16 d0 b3 e6 00 00 32 35 30 20 6f 6b 0d 0a ......250 ok..
|
|---|
| 549 |
|
|---|
| 550 | No. Time Source Destination Protocol Length Info
|
|---|
| 551 | 317 25.471846000 192.168.0.11 213.186.33.20 SMTP 60 C: data
|
|---|
| 552 |
|
|---|
| 553 | Frame 317: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0
|
|---|
| 554 | Interface id: 0
|
|---|
| 555 | Encapsulation type: Ethernet (1)
|
|---|
| 556 | Arrival Time: Jul 21, 2014 13:36:50.701894000 CEST
|
|---|
| 557 | [Time shift for this packet: 0.000000000 seconds]
|
|---|
| 558 | Epoch Time: 1405942610.701894000 seconds
|
|---|
| 559 | [Time delta from previous captured frame: 0.000123000 seconds]
|
|---|
| 560 | [Time delta from previous displayed frame: 0.000123000 seconds]
|
|---|
| 561 | [Time since reference or first frame: 25.471846000 seconds]
|
|---|
| 562 | Frame Number: 317
|
|---|
| 563 | Frame Length: 60 bytes (480 bits)
|
|---|
| 564 | Capture Length: 60 bytes (480 bits)
|
|---|
| 565 | [Frame is marked: True]
|
|---|
| 566 | [Frame is ignored: False]
|
|---|
| 567 | [Protocols in frame: eth:ip:tcp:smtp]
|
|---|
| 568 | [Number of per-protocol-data: 1]
|
|---|
| 569 | [Simple Mail Transfer Protocol, key 0]
|
|---|
| 570 | [Coloring Rule Name: TCP]
|
|---|
| 571 | [Coloring Rule String: tcp]
|
|---|
| 572 | Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 573 | Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 574 | Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 575 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 576 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 577 | Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 578 | Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 579 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 580 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 581 | Type: IP (0x0800)
|
|---|
| 582 | Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20)
|
|---|
| 583 | Version: 4
|
|---|
| 584 | Header length: 20 bytes
|
|---|
| 585 | Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
|
|---|
| 586 | 0000 00.. = Differentiated Services Codepoint: Default (0x00)
|
|---|
| 587 | .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
|
|---|
| 588 | Total Length: 46
|
|---|
| 589 | Identification: 0x84f1 (34033)
|
|---|
| 590 | Flags: 0x02 (Don't Fragment)
|
|---|
| 591 | 0... .... = Reserved bit: Not set
|
|---|
| 592 | .1.. .... = Don't fragment: Set
|
|---|
| 593 | ..0. .... = More fragments: Not set
|
|---|
| 594 | Fragment offset: 0
|
|---|
| 595 | Time to live: 64
|
|---|
| 596 | Protocol: TCP (6)
|
|---|
| 597 | Header checksum: 0xfe56 [validation disabled]
|
|---|
| 598 | [Good: False]
|
|---|
| 599 | [Bad: False]
|
|---|
| 600 | Source: 192.168.0.11 (192.168.0.11)
|
|---|
| 601 | Destination: 213.186.33.20 (213.186.33.20)
|
|---|
| 602 | [Source GeoIP: Unknown]
|
|---|
| 603 | [Destination GeoIP: Unknown]
|
|---|
| 604 | Transmission Control Protocol, Src Port: 41975 (41975), Dst Port: submission (587), Seq: 147, Ack: 274, Len: 6
|
|---|
| 605 | Source port: 41975 (41975)
|
|---|
| 606 | Destination port: submission (587)
|
|---|
| 607 | [Stream index: 9]
|
|---|
| 608 | Sequence number: 147 (relative sequence number)
|
|---|
| 609 | [Next sequence number: 153 (relative sequence number)]
|
|---|
| 610 | Acknowledgment number: 274 (relative ack number)
|
|---|
| 611 | Header length: 20 bytes
|
|---|
| 612 | Flags: 0x018 (PSH, ACK)
|
|---|
| 613 | 000. .... .... = Reserved: Not set
|
|---|
| 614 | ...0 .... .... = Nonce: Not set
|
|---|
| 615 | .... 0... .... = Congestion Window Reduced (CWR): Not set
|
|---|
| 616 | .... .0.. .... = ECN-Echo: Not set
|
|---|
| 617 | .... ..0. .... = Urgent: Not set
|
|---|
| 618 | .... ...1 .... = Acknowledgment: Set
|
|---|
| 619 | .... .... 1... = Push: Set
|
|---|
| 620 | .... .... .0.. = Reset: Not set
|
|---|
| 621 | .... .... ..0. = Syn: Not set
|
|---|
| 622 | .... .... ...0 = Fin: Not set
|
|---|
| 623 | Window size value: 30016
|
|---|
| 624 | [Calculated window size: 30016]
|
|---|
| 625 | [Window size scaling factor: -2 (no window scaling used)]
|
|---|
| 626 | Checksum: 0x4e6e [validation disabled]
|
|---|
| 627 | [Good Checksum: False]
|
|---|
| 628 | [Bad Checksum: False]
|
|---|
| 629 | [SEQ/ACK analysis]
|
|---|
| 630 | [This is an ACK to the segment in frame: 316]
|
|---|
| 631 | [The RTT to ACK the segment was: 0.000123000 seconds]
|
|---|
| 632 | [Bytes in flight: 6]
|
|---|
| 633 | Simple Mail Transfer Protocol
|
|---|
| 634 | Command Line: data\r\n
|
|---|
| 635 | Command: data
|
|---|
| 636 |
|
|---|
| 637 | 0000 00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00 ...B<.t.5.....E.
|
|---|
| 638 | 0010 00 2e 84 f1 40 00 40 06 fe 56 c0 a8 00 0b d5 ba ....@.@..V......
|
|---|
| 639 | 0020 21 14 a3 f7 02 4b a5 b1 73 d8 d7 23 b7 d8 50 18 !....K..s..#..P.
|
|---|
| 640 | 0030 75 40 4e 6e 00 00 64 61 74 61 0d 0a u@Nn..data..
|
|---|
| 641 |
|
|---|
| 642 | No. Time Source Destination Protocol Length Info
|
|---|
| 643 | 318 25.503549000 213.186.33.20 192.168.0.11 SMTP 68 S: 354 go ahead
|
|---|
| 644 |
|
|---|
| 645 | Frame 318: 68 bytes on wire (544 bits), 68 bytes captured (544 bits) on interface 0
|
|---|
| 646 | Interface id: 0
|
|---|
| 647 | Encapsulation type: Ethernet (1)
|
|---|
| 648 | Arrival Time: Jul 21, 2014 13:36:50.733597000 CEST
|
|---|
| 649 | [Time shift for this packet: 0.000000000 seconds]
|
|---|
| 650 | Epoch Time: 1405942610.733597000 seconds
|
|---|
| 651 | [Time delta from previous captured frame: 0.031703000 seconds]
|
|---|
| 652 | [Time delta from previous displayed frame: 0.031703000 seconds]
|
|---|
| 653 | [Time since reference or first frame: 25.503549000 seconds]
|
|---|
| 654 | Frame Number: 318
|
|---|
| 655 | Frame Length: 68 bytes (544 bits)
|
|---|
| 656 | Capture Length: 68 bytes (544 bits)
|
|---|
| 657 | [Frame is marked: True]
|
|---|
| 658 | [Frame is ignored: False]
|
|---|
| 659 | [Protocols in frame: eth:ip:tcp:smtp]
|
|---|
| 660 | [Coloring Rule Name: TCP]
|
|---|
| 661 | [Coloring Rule String: tcp]
|
|---|
| 662 | Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 663 | Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 664 | Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 665 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 666 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 667 | Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 668 | Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 669 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 670 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 671 | Type: IP (0x0800)
|
|---|
| 672 | Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
|
|---|
| 673 | Version: 4
|
|---|
| 674 | Header length: 20 bytes
|
|---|
| 675 | Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
|
|---|
| 676 | 0000 00.. = Differentiated Services Codepoint: Default (0x00)
|
|---|
| 677 | .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
|
|---|
| 678 | Total Length: 54
|
|---|
| 679 | Identification: 0xdd34 (56628)
|
|---|
| 680 | Flags: 0x02 (Don't Fragment)
|
|---|
| 681 | 0... .... = Reserved bit: Not set
|
|---|
| 682 | .1.. .... = Don't fragment: Set
|
|---|
| 683 | ..0. .... = More fragments: Not set
|
|---|
| 684 | Fragment offset: 0
|
|---|
| 685 | Time to live: 54
|
|---|
| 686 | Protocol: TCP (6)
|
|---|
| 687 | Header checksum: 0xb00b [validation disabled]
|
|---|
| 688 | [Good: False]
|
|---|
| 689 | [Bad: False]
|
|---|
| 690 | Source: 213.186.33.20 (213.186.33.20)
|
|---|
| 691 | Destination: 192.168.0.11 (192.168.0.11)
|
|---|
| 692 | [Source GeoIP: Unknown]
|
|---|
| 693 | [Destination GeoIP: Unknown]
|
|---|
| 694 | Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 274, Ack: 153, Len: 14
|
|---|
| 695 | Source port: submission (587)
|
|---|
| 696 | Destination port: 41975 (41975)
|
|---|
| 697 | [Stream index: 9]
|
|---|
| 698 | Sequence number: 274 (relative sequence number)
|
|---|
| 699 | [Next sequence number: 288 (relative sequence number)]
|
|---|
| 700 | Acknowledgment number: 153 (relative ack number)
|
|---|
| 701 | Header length: 20 bytes
|
|---|
| 702 | Flags: 0x018 (PSH, ACK)
|
|---|
| 703 | 000. .... .... = Reserved: Not set
|
|---|
| 704 | ...0 .... .... = Nonce: Not set
|
|---|
| 705 | .... 0... .... = Congestion Window Reduced (CWR): Not set
|
|---|
| 706 | .... .0.. .... = ECN-Echo: Not set
|
|---|
| 707 | .... ..0. .... = Urgent: Not set
|
|---|
| 708 | .... ...1 .... = Acknowledgment: Set
|
|---|
| 709 | .... .... 1... = Push: Set
|
|---|
| 710 | .... .... .0.. = Reset: Not set
|
|---|
| 711 | .... .... ..0. = Syn: Not set
|
|---|
| 712 | .... .... ...0 = Fin: Not set
|
|---|
| 713 | Window size value: 5840
|
|---|
| 714 | [Calculated window size: 5840]
|
|---|
| 715 | [Window size scaling factor: -2 (no window scaling used)]
|
|---|
| 716 | Checksum: 0xcca3 [validation disabled]
|
|---|
| 717 | [Good Checksum: False]
|
|---|
| 718 | [Bad Checksum: False]
|
|---|
| 719 | [SEQ/ACK analysis]
|
|---|
| 720 | [This is an ACK to the segment in frame: 317]
|
|---|
| 721 | [The RTT to ACK the segment was: 0.031703000 seconds]
|
|---|
| 722 | [Bytes in flight: 14]
|
|---|
| 723 | Simple Mail Transfer Protocol
|
|---|
| 724 | Response: 354 go ahead\r\n
|
|---|
| 725 | Response code: Start mail input; end with <CRLF>.<CRLF> (354)
|
|---|
| 726 | Response parameter: go ahead
|
|---|
| 727 |
|
|---|
| 728 | 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E.
|
|---|
| 729 | 0010 00 36 dd 34 40 00 36 06 b0 0b d5 ba 21 14 c0 a8 .6.4@.6.....!...
|
|---|
| 730 | 0020 00 0b 02 4b a3 f7 d7 23 b7 d8 a5 b1 73 de 50 18 ...K...#....s.P.
|
|---|
| 731 | 0030 16 d0 cc a3 00 00 33 35 34 20 67 6f 20 61 68 65 ......354 go ahe
|
|---|
| 732 | 0040 61 64 0d 0a ad..
|
|---|
| 733 |
|
|---|
| 734 | No. Time Source Destination Protocol Length Info
|
|---|
| 735 | 319 25.503854000 192.168.0.11 213.186.33.20 IMF 318 [Malformed Packet]
|
|---|
| 736 |
|
|---|
| 737 | Frame 319: 318 bytes on wire (2544 bits), 318 bytes captured (2544 bits) on interface 0
|
|---|
| 738 | Interface id: 0
|
|---|
| 739 | Encapsulation type: Ethernet (1)
|
|---|
| 740 | Arrival Time: Jul 21, 2014 13:36:50.733902000 CEST
|
|---|
| 741 | [Time shift for this packet: 0.000000000 seconds]
|
|---|
| 742 | Epoch Time: 1405942610.733902000 seconds
|
|---|
| 743 | [Time delta from previous captured frame: 0.000305000 seconds]
|
|---|
| 744 | [Time delta from previous displayed frame: 0.000305000 seconds]
|
|---|
| 745 | [Time since reference or first frame: 25.503854000 seconds]
|
|---|
| 746 | Frame Number: 319
|
|---|
| 747 | Frame Length: 318 bytes (2544 bits)
|
|---|
| 748 | Capture Length: 318 bytes (2544 bits)
|
|---|
| 749 | [Frame is marked: True]
|
|---|
| 750 | [Frame is ignored: False]
|
|---|
| 751 | [Protocols in frame: eth:ip:tcp:smtp:imf]
|
|---|
| 752 | [Number of per-protocol-data: 1]
|
|---|
| 753 | [Simple Mail Transfer Protocol, key 0]
|
|---|
| 754 | [Coloring Rule Name: TCP]
|
|---|
| 755 | [Coloring Rule String: tcp]
|
|---|
| 756 | Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 757 | Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 758 | Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 759 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 760 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 761 | Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 762 | Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 763 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 764 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 765 | Type: IP (0x0800)
|
|---|
| 766 | Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20)
|
|---|
| 767 | Version: 4
|
|---|
| 768 | Header length: 20 bytes
|
|---|
| 769 | Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
|
|---|
| 770 | 0000 00.. = Differentiated Services Codepoint: Default (0x00)
|
|---|
| 771 | .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
|
|---|
| 772 | Total Length: 304
|
|---|
| 773 | Identification: 0x84f2 (34034)
|
|---|
| 774 | Flags: 0x02 (Don't Fragment)
|
|---|
| 775 | 0... .... = Reserved bit: Not set
|
|---|
| 776 | .1.. .... = Don't fragment: Set
|
|---|
| 777 | ..0. .... = More fragments: Not set
|
|---|
| 778 | Fragment offset: 0
|
|---|
| 779 | Time to live: 64
|
|---|
| 780 | Protocol: TCP (6)
|
|---|
| 781 | Header checksum: 0xfd53 [validation disabled]
|
|---|
| 782 | [Good: False]
|
|---|
| 783 | [Bad: False]
|
|---|
| 784 | Source: 192.168.0.11 (192.168.0.11)
|
|---|
| 785 | Destination: 213.186.33.20 (213.186.33.20)
|
|---|
| 786 | [Source GeoIP: Unknown]
|
|---|
| 787 | [Destination GeoIP: Unknown]
|
|---|
| 788 | Transmission Control Protocol, Src Port: 41975 (41975), Dst Port: submission (587), Seq: 153, Ack: 288, Len: 264
|
|---|
| 789 | Source port: 41975 (41975)
|
|---|
| 790 | Destination port: submission (587)
|
|---|
| 791 | [Stream index: 9]
|
|---|
| 792 | Sequence number: 153 (relative sequence number)
|
|---|
| 793 | [Next sequence number: 417 (relative sequence number)]
|
|---|
| 794 | Acknowledgment number: 288 (relative ack number)
|
|---|
| 795 | Header length: 20 bytes
|
|---|
| 796 | Flags: 0x018 (PSH, ACK)
|
|---|
| 797 | 000. .... .... = Reserved: Not set
|
|---|
| 798 | ...0 .... .... = Nonce: Not set
|
|---|
| 799 | .... 0... .... = Congestion Window Reduced (CWR): Not set
|
|---|
| 800 | .... .0.. .... = ECN-Echo: Not set
|
|---|
| 801 | .... ..0. .... = Urgent: Not set
|
|---|
| 802 | .... ...1 .... = Acknowledgment: Set
|
|---|
| 803 | .... .... 1... = Push: Set
|
|---|
| 804 | .... .... .0.. = Reset: Not set
|
|---|
| 805 | .... .... ..0. = Syn: Not set
|
|---|
| 806 | .... .... ...0 = Fin: Not set
|
|---|
| 807 | Window size value: 30016
|
|---|
| 808 | [Calculated window size: 30016]
|
|---|
| 809 | [Window size scaling factor: -2 (no window scaling used)]
|
|---|
| 810 | Checksum: 0xc8d4 [validation disabled]
|
|---|
| 811 | [Good Checksum: False]
|
|---|
| 812 | [Bad Checksum: False]
|
|---|
| 813 | [SEQ/ACK analysis]
|
|---|
| 814 | [This is an ACK to the segment in frame: 318]
|
|---|
| 815 | [The RTT to ACK the segment was: 0.000305000 seconds]
|
|---|
| 816 | [Bytes in flight: 264]
|
|---|
| 817 | Simple Mail Transfer Protocol
|
|---|
| 818 | C: .
|
|---|
| 819 | [1 DATA fragment (261 bytes): #319(261)]
|
|---|
| 820 | [Frame: 319, payload: 0-260 (261 bytes)]
|
|---|
| 821 | [DATA fragment count: 1]
|
|---|
| 822 | [Reassembled DATA length: 261]
|
|---|
| 823 | Internet Message Format
|
|---|
| 824 | [Malformed Packet: IMF]
|
|---|
| 825 | [Expert Info (Error/Malformed): Malformed Packet (Exception occurred)]
|
|---|
| 826 | [Message: Malformed Packet (Exception occurred)]
|
|---|
| 827 | [Severity level: Error]
|
|---|
| 828 | [Group: Malformed]
|
|---|
| 829 |
|
|---|
| 830 | Frame (318 bytes):
|
|---|
| 831 | 0000 00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00 ...B<.t.5.....E.
|
|---|
| 832 | 0010 01 30 84 f2 40 00 40 06 fd 53 c0 a8 00 0b d5 ba .0..@.@..S......
|
|---|
| 833 | 0020 21 14 a3 f7 02 4b a5 b1 73 de d7 23 b7 e6 50 18 !....K..s..#..P.
|
|---|
| 834 | 0030 75 40 c8 d4 00 00 4d 49 4d 45 2d 56 65 72 73 69 u@....MIME-Versi
|
|---|
| 835 | 0040 6f 6e 3a 20 31 2e 30 0a 43 6f 6e 74 65 6e 74 2d on: 1.0.Content-
|
|---|
| 836 | 0050 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e Type: text/plain
|
|---|
| 837 | 0060 3b 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 ; charset="utf-8
|
|---|
| 838 | 0070 22 0a 43 6f 6e 74 65 6e 74 2d 54 72 61 6e 73 66 ".Content-Transf
|
|---|
| 839 | 0080 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 37 62 69 er-Encoding: 7bi
|
|---|
| 840 | 0090 74 0a 53 75 62 6a 65 63 74 3a 20 73 75 73 75 0a t.Subject: susu.
|
|---|
| 841 | 00a0 46 72 6f 6d 3a 20 63 6f 6e 74 61 63 74 40 31 61 From: contact@1a
|
|---|
| 842 | 00b0 76 69 73 2e 66 72 0a 54 6f 3a 20 67 72 69 67 6e vis.fr.To: grign
|
|---|
| 843 | 00c0 6f 6e 2e 66 6c 6f 72 69 61 6e 40 67 6d 61 69 6c on.florian@gmail
|
|---|
| 844 | 00d0 2e 63 6f 6d 0a 44 61 74 65 3a 20 4d 6f 6e 2c 20 .com.Date: Mon,
|
|---|
| 845 | 00e0 32 31 20 4a 75 6c 20 32 30 31 34 20 31 31 3a 33 21 Jul 2014 11:3
|
|---|
| 846 | 00f0 36 3a 35 30 20 2d 30 30 30 30 0a 4d 65 73 73 61 6:50 -0000.Messa
|
|---|
| 847 | 0100 67 65 2d 49 44 3a 20 3c 32 30 31 34 30 37 32 31 ge-ID: <20140721
|
|---|
| 848 | 0110 31 31 33 36 35 30 2e 33 31 30 33 39 2e 34 30 35 113650.31039.405
|
|---|
| 849 | 0120 35 36 40 61 72 6b 61 64 65 2e 63 6f 6d 3e 0a 0a 56@arkade.com>..
|
|---|
| 850 | 0130 62 6f 64 79 20 62 6f 64 79 0d 0a 2e 0d 0a body body.....
|
|---|
| 851 | Reassembled SMTP (261 bytes):
|
|---|
| 852 | 0000 4d 49 4d 45 2d 56 65 72 73 69 6f 6e 3a 20 31 2e MIME-Version: 1.
|
|---|
| 853 | 0010 30 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 0.Content-Type:
|
|---|
| 854 | 0020 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 text/plain; char
|
|---|
| 855 | 0030 73 65 74 3d 22 75 74 66 2d 38 22 0a 43 6f 6e 74 set="utf-8".Cont
|
|---|
| 856 | 0040 65 6e 74 2d 54 72 61 6e 73 66 65 72 2d 45 6e 63 ent-Transfer-Enc
|
|---|
| 857 | 0050 6f 64 69 6e 67 3a 20 37 62 69 74 0a 53 75 62 6a oding: 7bit.Subj
|
|---|
| 858 | 0060 65 63 74 3a 20 73 75 73 75 0a 46 72 6f 6d 3a 20 ect: susu.From:
|
|---|
| 859 | 0070 63 6f 6e 74 61 63 74 40 31 61 76 69 73 2e 66 72 contact@1avis.fr
|
|---|
| 860 | 0080 0a 54 6f 3a 20 67 72 69 67 6e 6f 6e 2e 66 6c 6f .To: grignon.flo
|
|---|
| 861 | 0090 72 69 61 6e 40 67 6d 61 69 6c 2e 63 6f 6d 0a 44 rian@gmail.com.D
|
|---|
| 862 | 00a0 61 74 65 3a 20 4d 6f 6e 2c 20 32 31 20 4a 75 6c ate: Mon, 21 Jul
|
|---|
| 863 | 00b0 20 32 30 31 34 20 31 31 3a 33 36 3a 35 30 20 2d 2014 11:36:50 -
|
|---|
| 864 | 00c0 30 30 30 30 0a 4d 65 73 73 61 67 65 2d 49 44 3a 0000.Message-ID:
|
|---|
| 865 | 00d0 20 3c 32 30 31 34 30 37 32 31 31 31 33 36 35 30 <20140721113650
|
|---|
| 866 | 00e0 2e 33 31 30 33 39 2e 34 30 35 35 36 40 61 72 6b .31039.40556@ark
|
|---|
| 867 | 00f0 61 64 65 2e 63 6f 6d 3e 0a 0a 62 6f 64 79 20 62 ade.com>..body b
|
|---|
| 868 | 0100 6f 64 79 0d 0a ody..
|
|---|
| 869 |
|
|---|
| 870 | No. Time Source Destination Protocol Length Info
|
|---|
| 871 | 320 25.541763000 213.186.33.20 192.168.0.11 SMTP 109 S: 554 mail server permanently rejected message (#5.3.0)
|
|---|
| 872 |
|
|---|
| 873 | Frame 320: 109 bytes on wire (872 bits), 109 bytes captured (872 bits) on interface 0
|
|---|
| 874 | Interface id: 0
|
|---|
| 875 | Encapsulation type: Ethernet (1)
|
|---|
| 876 | Arrival Time: Jul 21, 2014 13:36:50.771811000 CEST
|
|---|
| 877 | [Time shift for this packet: 0.000000000 seconds]
|
|---|
| 878 | Epoch Time: 1405942610.771811000 seconds
|
|---|
| 879 | [Time delta from previous captured frame: 0.037909000 seconds]
|
|---|
| 880 | [Time delta from previous displayed frame: 0.037909000 seconds]
|
|---|
| 881 | [Time since reference or first frame: 25.541763000 seconds]
|
|---|
| 882 | Frame Number: 320
|
|---|
| 883 | Frame Length: 109 bytes (872 bits)
|
|---|
| 884 | Capture Length: 109 bytes (872 bits)
|
|---|
| 885 | [Frame is marked: True]
|
|---|
| 886 | [Frame is ignored: False]
|
|---|
| 887 | [Protocols in frame: eth:ip:tcp:smtp]
|
|---|
| 888 | [Coloring Rule Name: TCP]
|
|---|
| 889 | [Coloring Rule String: tcp]
|
|---|
| 890 | Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 891 | Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 892 | Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 893 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 894 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 895 | Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 896 | Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 897 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 898 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 899 | Type: IP (0x0800)
|
|---|
| 900 | Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
|
|---|
| 901 | Version: 4
|
|---|
| 902 | Header length: 20 bytes
|
|---|
| 903 | Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
|
|---|
| 904 | 0000 00.. = Differentiated Services Codepoint: Default (0x00)
|
|---|
| 905 | .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
|
|---|
| 906 | Total Length: 95
|
|---|
| 907 | Identification: 0xdd35 (56629)
|
|---|
| 908 | Flags: 0x02 (Don't Fragment)
|
|---|
| 909 | 0... .... = Reserved bit: Not set
|
|---|
| 910 | .1.. .... = Don't fragment: Set
|
|---|
| 911 | ..0. .... = More fragments: Not set
|
|---|
| 912 | Fragment offset: 0
|
|---|
| 913 | Time to live: 54
|
|---|
| 914 | Protocol: TCP (6)
|
|---|
| 915 | Header checksum: 0xafe1 [validation disabled]
|
|---|
| 916 | [Good: False]
|
|---|
| 917 | [Bad: False]
|
|---|
| 918 | Source: 213.186.33.20 (213.186.33.20)
|
|---|
| 919 | Destination: 192.168.0.11 (192.168.0.11)
|
|---|
| 920 | [Source GeoIP: Unknown]
|
|---|
| 921 | [Destination GeoIP: Unknown]
|
|---|
| 922 | Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 288, Ack: 417, Len: 55
|
|---|
| 923 | Source port: submission (587)
|
|---|
| 924 | Destination port: 41975 (41975)
|
|---|
| 925 | [Stream index: 9]
|
|---|
| 926 | Sequence number: 288 (relative sequence number)
|
|---|
| 927 | [Next sequence number: 343 (relative sequence number)]
|
|---|
| 928 | Acknowledgment number: 417 (relative ack number)
|
|---|
| 929 | Header length: 20 bytes
|
|---|
| 930 | Flags: 0x018 (PSH, ACK)
|
|---|
| 931 | 000. .... .... = Reserved: Not set
|
|---|
| 932 | ...0 .... .... = Nonce: Not set
|
|---|
| 933 | .... 0... .... = Congestion Window Reduced (CWR): Not set
|
|---|
| 934 | .... .0.. .... = ECN-Echo: Not set
|
|---|
| 935 | .... ..0. .... = Urgent: Not set
|
|---|
| 936 | .... ...1 .... = Acknowledgment: Set
|
|---|
| 937 | .... .... 1... = Push: Set
|
|---|
| 938 | .... .... .0.. = Reset: Not set
|
|---|
| 939 | .... .... ..0. = Syn: Not set
|
|---|
| 940 | .... .... ...0 = Fin: Not set
|
|---|
| 941 | Window size value: 6432
|
|---|
| 942 | [Calculated window size: 6432]
|
|---|
| 943 | [Window size scaling factor: -2 (no window scaling used)]
|
|---|
| 944 | Checksum: 0x702a [validation disabled]
|
|---|
| 945 | [Good Checksum: False]
|
|---|
| 946 | [Bad Checksum: False]
|
|---|
| 947 | [SEQ/ACK analysis]
|
|---|
| 948 | [This is an ACK to the segment in frame: 319]
|
|---|
| 949 | [The RTT to ACK the segment was: 0.037909000 seconds]
|
|---|
| 950 | [Bytes in flight: 55]
|
|---|
| 951 | Simple Mail Transfer Protocol
|
|---|
| 952 | Response: 554 mail server permanently rejected message (#5.3.0)\r\n
|
|---|
| 953 | Response code: Transaction failed (554)
|
|---|
| 954 | Response parameter: mail server permanently rejected message (#5.3.0)
|
|---|
| 955 |
|
|---|
| 956 | 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E.
|
|---|
| 957 | 0010 00 5f dd 35 40 00 36 06 af e1 d5 ba 21 14 c0 a8 ._.5@.6.....!...
|
|---|
| 958 | 0020 00 0b 02 4b a3 f7 d7 23 b7 e6 a5 b1 74 e6 50 18 ...K...#....t.P.
|
|---|
| 959 | 0030 19 20 70 2a 00 00 35 35 34 20 6d 61 69 6c 20 73 . p*..554 mail s
|
|---|
| 960 | 0040 65 72 76 65 72 20 70 65 72 6d 61 6e 65 6e 74 6c erver permanentl
|
|---|
| 961 | 0050 79 20 72 65 6a 65 63 74 65 64 20 6d 65 73 73 61 y rejected messa
|
|---|
| 962 | 0060 67 65 20 28 23 35 2e 33 2e 30 29 0d 0a ge (#5.3.0)..
|
|---|
| 963 |
|
|---|
| 964 | No. Time Source Destination Protocol Length Info
|
|---|
| 965 | 321 25.541931000 192.168.0.11 213.186.33.20 SMTP 60 C: rset
|
|---|
| 966 |
|
|---|
| 967 | Frame 321: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0
|
|---|
| 968 | Interface id: 0
|
|---|
| 969 | Encapsulation type: Ethernet (1)
|
|---|
| 970 | Arrival Time: Jul 21, 2014 13:36:50.771979000 CEST
|
|---|
| 971 | [Time shift for this packet: 0.000000000 seconds]
|
|---|
| 972 | Epoch Time: 1405942610.771979000 seconds
|
|---|
| 973 | [Time delta from previous captured frame: 0.000168000 seconds]
|
|---|
| 974 | [Time delta from previous displayed frame: 0.000168000 seconds]
|
|---|
| 975 | [Time since reference or first frame: 25.541931000 seconds]
|
|---|
| 976 | Frame Number: 321
|
|---|
| 977 | Frame Length: 60 bytes (480 bits)
|
|---|
| 978 | Capture Length: 60 bytes (480 bits)
|
|---|
| 979 | [Frame is marked: True]
|
|---|
| 980 | [Frame is ignored: False]
|
|---|
| 981 | [Protocols in frame: eth:ip:tcp:smtp]
|
|---|
| 982 | [Number of per-protocol-data: 1]
|
|---|
| 983 | [Simple Mail Transfer Protocol, key 0]
|
|---|
| 984 | [Coloring Rule Name: TCP]
|
|---|
| 985 | [Coloring Rule String: tcp]
|
|---|
| 986 | Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 987 | Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 988 | Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 989 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 990 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 991 | Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 992 | Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 993 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 994 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 995 | Type: IP (0x0800)
|
|---|
| 996 | Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20)
|
|---|
| 997 | Version: 4
|
|---|
| 998 | Header length: 20 bytes
|
|---|
| 999 | Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
|
|---|
| 1000 | 0000 00.. = Differentiated Services Codepoint: Default (0x00)
|
|---|
| 1001 | .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
|
|---|
| 1002 | Total Length: 46
|
|---|
| 1003 | Identification: 0x84f3 (34035)
|
|---|
| 1004 | Flags: 0x02 (Don't Fragment)
|
|---|
| 1005 | 0... .... = Reserved bit: Not set
|
|---|
| 1006 | .1.. .... = Don't fragment: Set
|
|---|
| 1007 | ..0. .... = More fragments: Not set
|
|---|
| 1008 | Fragment offset: 0
|
|---|
| 1009 | Time to live: 64
|
|---|
| 1010 | Protocol: TCP (6)
|
|---|
| 1011 | Header checksum: 0xfe54 [validation disabled]
|
|---|
| 1012 | [Good: False]
|
|---|
| 1013 | [Bad: False]
|
|---|
| 1014 | Source: 192.168.0.11 (192.168.0.11)
|
|---|
| 1015 | Destination: 213.186.33.20 (213.186.33.20)
|
|---|
| 1016 | [Source GeoIP: Unknown]
|
|---|
| 1017 | [Destination GeoIP: Unknown]
|
|---|
| 1018 | Transmission Control Protocol, Src Port: 41975 (41975), Dst Port: submission (587), Seq: 417, Ack: 343, Len: 6
|
|---|
| 1019 | Source port: 41975 (41975)
|
|---|
| 1020 | Destination port: submission (587)
|
|---|
| 1021 | [Stream index: 9]
|
|---|
| 1022 | Sequence number: 417 (relative sequence number)
|
|---|
| 1023 | [Next sequence number: 423 (relative sequence number)]
|
|---|
| 1024 | Acknowledgment number: 343 (relative ack number)
|
|---|
| 1025 | Header length: 20 bytes
|
|---|
| 1026 | Flags: 0x018 (PSH, ACK)
|
|---|
| 1027 | 000. .... .... = Reserved: Not set
|
|---|
| 1028 | ...0 .... .... = Nonce: Not set
|
|---|
| 1029 | .... 0... .... = Congestion Window Reduced (CWR): Not set
|
|---|
| 1030 | .... .0.. .... = ECN-Echo: Not set
|
|---|
| 1031 | .... ..0. .... = Urgent: Not set
|
|---|
| 1032 | .... ...1 .... = Acknowledgment: Set
|
|---|
| 1033 | .... .... 1... = Push: Set
|
|---|
| 1034 | .... .... .0.. = Reset: Not set
|
|---|
| 1035 | .... .... ..0. = Syn: Not set
|
|---|
| 1036 | .... .... ...0 = Fin: Not set
|
|---|
| 1037 | Window size value: 30016
|
|---|
| 1038 | [Calculated window size: 30016]
|
|---|
| 1039 | [Window size scaling factor: -2 (no window scaling used)]
|
|---|
| 1040 | Checksum: 0x4df6 [validation disabled]
|
|---|
| 1041 | [Good Checksum: False]
|
|---|
| 1042 | [Bad Checksum: False]
|
|---|
| 1043 | [SEQ/ACK analysis]
|
|---|
| 1044 | [This is an ACK to the segment in frame: 320]
|
|---|
| 1045 | [The RTT to ACK the segment was: 0.000168000 seconds]
|
|---|
| 1046 | [Bytes in flight: 6]
|
|---|
| 1047 | Simple Mail Transfer Protocol
|
|---|
| 1048 | Command Line: rset\r\n
|
|---|
| 1049 | Command: rset
|
|---|
| 1050 |
|
|---|
| 1051 | 0000 00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00 ...B<.t.5.....E.
|
|---|
| 1052 | 0010 00 2e 84 f3 40 00 40 06 fe 54 c0 a8 00 0b d5 ba ....@.@..T......
|
|---|
| 1053 | 0020 21 14 a3 f7 02 4b a5 b1 74 e6 d7 23 b8 1d 50 18 !....K..t..#..P.
|
|---|
| 1054 | 0030 75 40 4d f6 00 00 72 73 65 74 0d 0a u@M...rset..
|
|---|
| 1055 |
|
|---|
| 1056 | No. Time Source Destination Protocol Length Info
|
|---|
| 1057 | 322 25.572810000 213.186.33.20 192.168.0.11 SMTP 67 S: 250 flushed
|
|---|
| 1058 |
|
|---|
| 1059 | Frame 322: 67 bytes on wire (536 bits), 67 bytes captured (536 bits) on interface 0
|
|---|
| 1060 | Interface id: 0
|
|---|
| 1061 | Encapsulation type: Ethernet (1)
|
|---|
| 1062 | Arrival Time: Jul 21, 2014 13:36:50.802858000 CEST
|
|---|
| 1063 | [Time shift for this packet: 0.000000000 seconds]
|
|---|
| 1064 | Epoch Time: 1405942610.802858000 seconds
|
|---|
| 1065 | [Time delta from previous captured frame: 0.030879000 seconds]
|
|---|
| 1066 | [Time delta from previous displayed frame: 0.030879000 seconds]
|
|---|
| 1067 | [Time since reference or first frame: 25.572810000 seconds]
|
|---|
| 1068 | Frame Number: 322
|
|---|
| 1069 | Frame Length: 67 bytes (536 bits)
|
|---|
| 1070 | Capture Length: 67 bytes (536 bits)
|
|---|
| 1071 | [Frame is marked: True]
|
|---|
| 1072 | [Frame is ignored: False]
|
|---|
| 1073 | [Protocols in frame: eth:ip:tcp:smtp]
|
|---|
| 1074 | [Coloring Rule Name: TCP]
|
|---|
| 1075 | [Coloring Rule String: tcp]
|
|---|
| 1076 | Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 1077 | Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 1078 | Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
|
|---|
| 1079 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 1080 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 1081 | Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 1082 | Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
|
|---|
| 1083 | .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|---|
| 1084 | .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|---|
| 1085 | Type: IP (0x0800)
|
|---|
| 1086 | Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
|
|---|
| 1087 | Version: 4
|
|---|
| 1088 | Header length: 20 bytes
|
|---|
| 1089 | Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
|
|---|
| 1090 | 0000 00.. = Differentiated Services Codepoint: Default (0x00)
|
|---|
| 1091 | .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
|
|---|
| 1092 | Total Length: 53
|
|---|
| 1093 | Identification: 0xdd36 (56630)
|
|---|
| 1094 | Flags: 0x02 (Don't Fragment)
|
|---|
| 1095 | 0... .... = Reserved bit: Not set
|
|---|
| 1096 | .1.. .... = Don't fragment: Set
|
|---|
| 1097 | ..0. .... = More fragments: Not set
|
|---|
| 1098 | Fragment offset: 0
|
|---|
| 1099 | Time to live: 54
|
|---|
| 1100 | Protocol: TCP (6)
|
|---|
| 1101 | Header checksum: 0xb00a [validation disabled]
|
|---|
| 1102 | [Good: False]
|
|---|
| 1103 | [Bad: False]
|
|---|
| 1104 | Source: 213.186.33.20 (213.186.33.20)
|
|---|
| 1105 | Destination: 192.168.0.11 (192.168.0.11)
|
|---|
| 1106 | [Source GeoIP: Unknown]
|
|---|
| 1107 | [Destination GeoIP: Unknown]
|
|---|
| 1108 | Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 343, Ack: 423, Len: 13
|
|---|
| 1109 | Source port: submission (587)
|
|---|
| 1110 | Destination port: 41975 (41975)
|
|---|
| 1111 | [Stream index: 9]
|
|---|
| 1112 | Sequence number: 343 (relative sequence number)
|
|---|
| 1113 | [Next sequence number: 356 (relative sequence number)]
|
|---|
| 1114 | Acknowledgment number: 423 (relative ack number)
|
|---|
| 1115 | Header length: 20 bytes
|
|---|
| 1116 | Flags: 0x018 (PSH, ACK)
|
|---|
| 1117 | 000. .... .... = Reserved: Not set
|
|---|
| 1118 | ...0 .... .... = Nonce: Not set
|
|---|
| 1119 | .... 0... .... = Congestion Window Reduced (CWR): Not set
|
|---|
| 1120 | .... .0.. .... = ECN-Echo: Not set
|
|---|
| 1121 | .... ..0. .... = Urgent: Not set
|
|---|
| 1122 | .... ...1 .... = Acknowledgment: Set
|
|---|
| 1123 | .... .... 1... = Push: Set
|
|---|
| 1124 | .... .... .0.. = Reset: Not set
|
|---|
| 1125 | .... .... ..0. = Syn: Not set
|
|---|
| 1126 | .... .... ...0 = Fin: Not set
|
|---|
| 1127 | Window size value: 6432
|
|---|
| 1128 | [Calculated window size: 6432]
|
|---|
| 1129 | [Window size scaling factor: -2 (no window scaling used)]
|
|---|
| 1130 | Checksum: 0x7a53 [validation disabled]
|
|---|
| 1131 | [Good Checksum: False]
|
|---|
| 1132 | [Bad Checksum: False]
|
|---|
| 1133 | [SEQ/ACK analysis]
|
|---|
| 1134 | [This is an ACK to the segment in frame: 321]
|
|---|
| 1135 | [The RTT to ACK the segment was: 0.030879000 seconds]
|
|---|
| 1136 | [Bytes in flight: 13]
|
|---|
| 1137 | Simple Mail Transfer Protocol
|
|---|
| 1138 | Response: 250 flushed\r\n
|
|---|
| 1139 | Response code: Requested mail action okay, completed (250)
|
|---|
| 1140 | Response parameter: flushed
|
|---|
| 1141 |
|
|---|
| 1142 | 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E.
|
|---|
| 1143 | 0010 00 35 dd 36 40 00 36 06 b0 0a d5 ba 21 14 c0 a8 .5.6@.6.....!...
|
|---|
| 1144 | 0020 00 0b 02 4b a3 f7 d7 23 b8 1d a5 b1 74 ec 50 18 ...K...#....t.P.
|
|---|
| 1145 | 0030 19 20 7a 53 00 00 32 35 30 20 66 6c 75 73 68 65 . zS..250 flushe
|
|---|
| 1146 | 0040 64 0d 0a d..
|
|---|