Ticket #23063: wireshark_smtp_packet_1-7-1_bad.txt

File wireshark_smtp_packet_1-7-1_bad.txt, 53.5 KB (added by contact@…, 8 years ago)

Dump of package malformed sniffing from Django 1.7 c1

Line 
1No.     Time           Source                Destination           Protocol Length Info
2    311 25.402773000   213.186.33.20         192.168.0.11          SMTP     81     S: 235 ok, go ahead (#2.0.0)
3
4Frame 311: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) on interface 0
5    Interface id: 0
6    Encapsulation type: Ethernet (1)
7    Arrival Time: Jul 21, 2014 13:36:50.632821000 CEST
8    [Time shift for this packet: 0.000000000 seconds]
9    Epoch Time: 1405942610.632821000 seconds
10    [Time delta from previous captured frame: 0.013830000 seconds]
11    [Time delta from previous displayed frame: 0.017149000 seconds]
12    [Time since reference or first frame: 25.402773000 seconds]
13    Frame Number: 311
14    Frame Length: 81 bytes (648 bits)
15    Capture Length: 81 bytes (648 bits)
16    [Frame is marked: True]
17    [Frame is ignored: False]
18    [Protocols in frame: eth:ip:tcp:smtp]
19    [Coloring Rule Name: TCP]
20    [Coloring Rule String: tcp]
21Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
22    Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
23        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
24        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
25        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
26    Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
27        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
28        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
29        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
30    Type: IP (0x0800)
31Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
32    Version: 4
33    Header length: 20 bytes
34    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
35        0000 00.. = Differentiated Services Codepoint: Default (0x00)
36        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
37    Total Length: 67
38    Identification: 0xdd30 (56624)
39    Flags: 0x02 (Don't Fragment)
40        0... .... = Reserved bit: Not set
41        .1.. .... = Don't fragment: Set
42        ..0. .... = More fragments: Not set
43    Fragment offset: 0
44    Time to live: 54
45    Protocol: TCP (6)
46    Header checksum: 0xb002 [validation disabled]
47        [Good: False]
48        [Bad: False]
49    Source: 213.186.33.20 (213.186.33.20)
50    Destination: 192.168.0.11 (192.168.0.11)
51    [Source GeoIP: Unknown]
52    [Destination GeoIP: Unknown]
53Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 231, Ack: 71, Len: 27
54    Source port: submission (587)
55    Destination port: 41975 (41975)
56    [Stream index: 9]
57    Sequence number: 231    (relative sequence number)
58    [Next sequence number: 258    (relative sequence number)]
59    Acknowledgment number: 71    (relative ack number)
60    Header length: 20 bytes
61    Flags: 0x018 (PSH, ACK)
62        000. .... .... = Reserved: Not set
63        ...0 .... .... = Nonce: Not set
64        .... 0... .... = Congestion Window Reduced (CWR): Not set
65        .... .0.. .... = ECN-Echo: Not set
66        .... ..0. .... = Urgent: Not set
67        .... ...1 .... = Acknowledgment: Set
68        .... .... 1... = Push: Set
69        .... .... .0.. = Reset: Not set
70        .... .... ..0. = Syn: Not set
71        .... .... ...0 = Fin: Not set
72    Window size value: 5840
73    [Calculated window size: 5840]
74    [Window size scaling factor: -2 (no window scaling used)]
75    Checksum: 0x6bcc [validation disabled]
76        [Good Checksum: False]
77        [Bad Checksum: False]
78    [SEQ/ACK analysis]
79        [Bytes in flight: 27]
80Simple Mail Transfer Protocol
81    Response: 235 ok, go ahead (#2.0.0)\r\n
82        Response code: Authentication successful (235)
83        Response parameter: ok, go ahead (#2.0.0)
84
850000  74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00   t.5......B<...E.
860010  00 43 dd 30 40 00 36 06 b0 02 d5 ba 21 14 c0 a8   .C.0@.6.....!...
870020  00 0b 02 4b a3 f7 d7 23 b7 ad a5 b1 73 8c 50 18   ...K...#....s.P.
880030  16 d0 6b cc 00 00 32 33 35 20 6f 6b 2c 20 67 6f   ..k...235 ok, go
890040  20 61 68 65 61 64 20 28 23 32 2e 30 2e 30 29 0d    ahead (#2.0.0).
900050  0a                                                .
91
92No.     Time           Source                Destination           Protocol Length Info
93    312 25.405401000   192.168.0.11          213.186.33.20         SMTP     93     C: mail FROM:<contact@1avis.fr> size=259
94
95Frame 312: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) on interface 0
96    Interface id: 0
97    Encapsulation type: Ethernet (1)
98    Arrival Time: Jul 21, 2014 13:36:50.635449000 CEST
99    [Time shift for this packet: 0.000000000 seconds]
100    Epoch Time: 1405942610.635449000 seconds
101    [Time delta from previous captured frame: 0.002628000 seconds]
102    [Time delta from previous displayed frame: 0.002628000 seconds]
103    [Time since reference or first frame: 25.405401000 seconds]
104    Frame Number: 312
105    Frame Length: 93 bytes (744 bits)
106    Capture Length: 93 bytes (744 bits)
107    [Frame is marked: True]
108    [Frame is ignored: False]
109    [Protocols in frame: eth:ip:tcp:smtp]
110    [Number of per-protocol-data: 1]
111    [Simple Mail Transfer Protocol, key 0]
112    [Coloring Rule Name: TCP]
113    [Coloring Rule String: tcp]
114Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
115    Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
116        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
117        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
118        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
119    Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
120        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
121        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
122        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
123    Type: IP (0x0800)
124Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20)
125    Version: 4
126    Header length: 20 bytes
127    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
128        0000 00.. = Differentiated Services Codepoint: Default (0x00)
129        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
130    Total Length: 79
131    Identification: 0x84ef (34031)
132    Flags: 0x02 (Don't Fragment)
133        0... .... = Reserved bit: Not set
134        .1.. .... = Don't fragment: Set
135        ..0. .... = More fragments: Not set
136    Fragment offset: 0
137    Time to live: 64
138    Protocol: TCP (6)
139    Header checksum: 0xfe37 [validation disabled]
140        [Good: False]
141        [Bad: False]
142    Source: 192.168.0.11 (192.168.0.11)
143    Destination: 213.186.33.20 (213.186.33.20)
144    [Source GeoIP: Unknown]
145    [Destination GeoIP: Unknown]
146Transmission Control Protocol, Src Port: 41975 (41975), Dst Port: submission (587), Seq: 71, Ack: 258, Len: 39
147    Source port: 41975 (41975)
148    Destination port: submission (587)
149    [Stream index: 9]
150    Sequence number: 71    (relative sequence number)
151    [Next sequence number: 110    (relative sequence number)]
152    Acknowledgment number: 258    (relative ack number)
153    Header length: 20 bytes
154    Flags: 0x018 (PSH, ACK)
155        000. .... .... = Reserved: Not set
156        ...0 .... .... = Nonce: Not set
157        .... 0... .... = Congestion Window Reduced (CWR): Not set
158        .... .0.. .... = ECN-Echo: Not set
159        .... ..0. .... = Urgent: Not set
160        .... ...1 .... = Acknowledgment: Set
161        .... .... 1... = Push: Set
162        .... .... .0.. = Reset: Not set
163        .... .... ..0. = Syn: Not set
164        .... .... ...0 = Fin: Not set
165    Window size value: 30016
166    [Calculated window size: 30016]
167    [Window size scaling factor: -2 (no window scaling used)]
168    Checksum: 0x0a04 [validation disabled]
169        [Good Checksum: False]
170        [Bad Checksum: False]
171    [SEQ/ACK analysis]
172        [This is an ACK to the segment in frame: 311]
173        [The RTT to ACK the segment was: 0.002628000 seconds]
174        [Bytes in flight: 39]
175Simple Mail Transfer Protocol
176    Command Line: mail FROM:<contact@1avis.fr> size=259\r\n
177        Command: mail
178        Request parameter: FROM:<contact@1avis.fr> size=259
179
1800000  00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00   ...B<.t.5.....E.
1810010  00 4f 84 ef 40 00 40 06 fe 37 c0 a8 00 0b d5 ba   .O..@.@..7......
1820020  21 14 a3 f7 02 4b a5 b1 73 8c d7 23 b7 c8 50 18   !....K..s..#..P.
1830030  75 40 0a 04 00 00 6d 61 69 6c 20 46 52 4f 4d 3a   u@....mail FROM:
1840040  3c 63 6f 6e 74 61 63 74 40 31 61 76 69 73 2e 66   <contact@1avis.f
1850050  72 3e 20 73 69 7a 65 3d 32 35 39 0d 0a            r> size=259..
186
187No.     Time           Source                Destination           Protocol Length Info
188    313 25.437986000   213.186.33.20         192.168.0.11          TCP      62     submission > 41975 [ACK] Seq=258 Ack=110 Win=5840 Len=0
189
190Frame 313: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0
191    Interface id: 0
192    Encapsulation type: Ethernet (1)
193    Arrival Time: Jul 21, 2014 13:36:50.668034000 CEST
194    [Time shift for this packet: 0.000000000 seconds]
195    Epoch Time: 1405942610.668034000 seconds
196    [Time delta from previous captured frame: 0.032585000 seconds]
197    [Time delta from previous displayed frame: 0.032585000 seconds]
198    [Time since reference or first frame: 25.437986000 seconds]
199    Frame Number: 313
200    Frame Length: 62 bytes (496 bits)
201    Capture Length: 62 bytes (496 bits)
202    [Frame is marked: True]
203    [Frame is ignored: False]
204    [Protocols in frame: eth:ip:tcp:vssmonitoring]
205    [Coloring Rule Name: TCP]
206    [Coloring Rule String: tcp]
207Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
208    Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
209        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
210        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
211        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
212    Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
213        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
214        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
215        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
216    Type: IP (0x0800)
217    Padding: 000000000000
218Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
219    Version: 4
220    Header length: 20 bytes
221    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
222        0000 00.. = Differentiated Services Codepoint: Default (0x00)
223        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
224    Total Length: 40
225    Identification: 0xdd31 (56625)
226    Flags: 0x02 (Don't Fragment)
227        0... .... = Reserved bit: Not set
228        .1.. .... = Don't fragment: Set
229        ..0. .... = More fragments: Not set
230    Fragment offset: 0
231    Time to live: 54
232    Protocol: TCP (6)
233    Header checksum: 0xb01c [validation disabled]
234        [Good: False]
235        [Bad: False]
236    Source: 213.186.33.20 (213.186.33.20)
237    Destination: 192.168.0.11 (192.168.0.11)
238    [Source GeoIP: Unknown]
239    [Destination GeoIP: Unknown]
240Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 258, Ack: 110, Len: 0
241    Source port: submission (587)
242    Destination port: 41975 (41975)
243    [Stream index: 9]
244    Sequence number: 258    (relative sequence number)
245    Acknowledgment number: 110    (relative ack number)
246    Header length: 20 bytes
247    Flags: 0x010 (ACK)
248        000. .... .... = Reserved: Not set
249        ...0 .... .... = Nonce: Not set
250        .... 0... .... = Congestion Window Reduced (CWR): Not set
251        .... .0.. .... = ECN-Echo: Not set
252        .... ..0. .... = Urgent: Not set
253        .... ...1 .... = Acknowledgment: Set
254        .... .... 0... = Push: Not set
255        .... .... .0.. = Reset: Not set
256        .... .... ..0. = Syn: Not set
257        .... .... ...0 = Fin: Not set
258    Window size value: 5840
259    [Calculated window size: 5840]
260    [Window size scaling factor: -2 (no window scaling used)]
261    Checksum: 0x92ee [validation disabled]
262        [Good Checksum: False]
263        [Bad Checksum: False]
264    [SEQ/ACK analysis]
265        [This is an ACK to the segment in frame: 312]
266        [The RTT to ACK the segment was: 0.032585000 seconds]
267VSS-Monitoring ethernet trailer, Source Port: 0
268    Src Port: 0
269
2700000  74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00   t.5......B<...E.
2710010  00 28 dd 31 40 00 36 06 b0 1c d5 ba 21 14 c0 a8   .(.1@.6.....!...
2720020  00 0b 02 4b a3 f7 d7 23 b7 c8 a5 b1 73 b3 50 10   ...K...#....s.P.
2730030  16 d0 92 ee 00 00 00 00 00 00 00 00 00 00         ..............
274
275No.     Time           Source                Destination           Protocol Length Info
276    314 25.439404000   213.186.33.20         192.168.0.11          SMTP     62     S: 250 ok
277
278Frame 314: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0
279    Interface id: 0
280    Encapsulation type: Ethernet (1)
281    Arrival Time: Jul 21, 2014 13:36:50.669452000 CEST
282    [Time shift for this packet: 0.000000000 seconds]
283    Epoch Time: 1405942610.669452000 seconds
284    [Time delta from previous captured frame: 0.001418000 seconds]
285    [Time delta from previous displayed frame: 0.001418000 seconds]
286    [Time since reference or first frame: 25.439404000 seconds]
287    Frame Number: 314
288    Frame Length: 62 bytes (496 bits)
289    Capture Length: 62 bytes (496 bits)
290    [Frame is marked: True]
291    [Frame is ignored: False]
292    [Protocols in frame: eth:ip:tcp:smtp]
293    [Coloring Rule Name: TCP]
294    [Coloring Rule String: tcp]
295Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
296    Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
297        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
298        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
299        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
300    Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
301        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
302        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
303        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
304    Type: IP (0x0800)
305Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
306    Version: 4
307    Header length: 20 bytes
308    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
309        0000 00.. = Differentiated Services Codepoint: Default (0x00)
310        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
311    Total Length: 48
312    Identification: 0xdd32 (56626)
313    Flags: 0x02 (Don't Fragment)
314        0... .... = Reserved bit: Not set
315        .1.. .... = Don't fragment: Set
316        ..0. .... = More fragments: Not set
317    Fragment offset: 0
318    Time to live: 54
319    Protocol: TCP (6)
320    Header checksum: 0xb013 [validation disabled]
321        [Good: False]
322        [Bad: False]
323    Source: 213.186.33.20 (213.186.33.20)
324    Destination: 192.168.0.11 (192.168.0.11)
325    [Source GeoIP: Unknown]
326    [Destination GeoIP: Unknown]
327Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 258, Ack: 110, Len: 8
328    Source port: submission (587)
329    Destination port: 41975 (41975)
330    [Stream index: 9]
331    Sequence number: 258    (relative sequence number)
332    [Next sequence number: 266    (relative sequence number)]
333    Acknowledgment number: 110    (relative ack number)
334    Header length: 20 bytes
335    Flags: 0x018 (PSH, ACK)
336        000. .... .... = Reserved: Not set
337        ...0 .... .... = Nonce: Not set
338        .... 0... .... = Congestion Window Reduced (CWR): Not set
339        .... .0.. .... = ECN-Echo: Not set
340        .... ..0. .... = Urgent: Not set
341        .... ...1 .... = Acknowledgment: Set
342        .... .... 1... = Push: Set
343        .... .... .0.. = Reset: Not set
344        .... .... ..0. = Syn: Not set
345        .... .... ...0 = Fin: Not set
346    Window size value: 5840
347    [Calculated window size: 5840]
348    [Window size scaling factor: -2 (no window scaling used)]
349    Checksum: 0xb413 [validation disabled]
350        [Good Checksum: False]
351        [Bad Checksum: False]
352    [SEQ/ACK analysis]
353        [Bytes in flight: 8]
354Simple Mail Transfer Protocol
355    Response: 250 ok\r\n
356        Response code: Requested mail action okay, completed (250)
357        Response parameter: ok
358
3590000  74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00   t.5......B<...E.
3600010  00 30 dd 32 40 00 36 06 b0 13 d5 ba 21 14 c0 a8   .0.2@.6.....!...
3610020  00 0b 02 4b a3 f7 d7 23 b7 c8 a5 b1 73 b3 50 18   ...K...#....s.P.
3620030  16 d0 b4 13 00 00 32 35 30 20 6f 6b 0d 0a         ......250 ok..
363
364No.     Time           Source                Destination           Protocol Length Info
365    315 25.439709000   192.168.0.11          213.186.33.20         SMTP     91     C: rcpt TO:<grignon.florian@gmail.com>
366
367Frame 315: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) on interface 0
368    Interface id: 0
369    Encapsulation type: Ethernet (1)
370    Arrival Time: Jul 21, 2014 13:36:50.669757000 CEST
371    [Time shift for this packet: 0.000000000 seconds]
372    Epoch Time: 1405942610.669757000 seconds
373    [Time delta from previous captured frame: 0.000305000 seconds]
374    [Time delta from previous displayed frame: 0.000305000 seconds]
375    [Time since reference or first frame: 25.439709000 seconds]
376    Frame Number: 315
377    Frame Length: 91 bytes (728 bits)
378    Capture Length: 91 bytes (728 bits)
379    [Frame is marked: True]
380    [Frame is ignored: False]
381    [Protocols in frame: eth:ip:tcp:smtp]
382    [Number of per-protocol-data: 1]
383    [Simple Mail Transfer Protocol, key 0]
384    [Coloring Rule Name: TCP]
385    [Coloring Rule String: tcp]
386Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
387    Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
388        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
389        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
390        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
391    Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
392        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
393        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
394        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
395    Type: IP (0x0800)
396Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20)
397    Version: 4
398    Header length: 20 bytes
399    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
400        0000 00.. = Differentiated Services Codepoint: Default (0x00)
401        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
402    Total Length: 77
403    Identification: 0x84f0 (34032)
404    Flags: 0x02 (Don't Fragment)
405        0... .... = Reserved bit: Not set
406        .1.. .... = Don't fragment: Set
407        ..0. .... = More fragments: Not set
408    Fragment offset: 0
409    Time to live: 64
410    Protocol: TCP (6)
411    Header checksum: 0xfe38 [validation disabled]
412        [Good: False]
413        [Bad: False]
414    Source: 192.168.0.11 (192.168.0.11)
415    Destination: 213.186.33.20 (213.186.33.20)
416    [Source GeoIP: Unknown]
417    [Destination GeoIP: Unknown]
418Transmission Control Protocol, Src Port: 41975 (41975), Dst Port: submission (587), Seq: 110, Ack: 266, Len: 37
419    Source port: 41975 (41975)
420    Destination port: submission (587)
421    [Stream index: 9]
422    Sequence number: 110    (relative sequence number)
423    [Next sequence number: 147    (relative sequence number)]
424    Acknowledgment number: 266    (relative ack number)
425    Header length: 20 bytes
426    Flags: 0x018 (PSH, ACK)
427        000. .... .... = Reserved: Not set
428        ...0 .... .... = Nonce: Not set
429        .... 0... .... = Congestion Window Reduced (CWR): Not set
430        .... .0.. .... = ECN-Echo: Not set
431        .... ..0. .... = Urgent: Not set
432        .... ...1 .... = Acknowledgment: Set
433        .... .... 1... = Push: Set
434        .... .... .0.. = Reset: Not set
435        .... .... ..0. = Syn: Not set
436        .... .... ...0 = Fin: Not set
437    Window size value: 30016
438    [Calculated window size: 30016]
439    [Window size scaling factor: -2 (no window scaling used)]
440    Checksum: 0xf074 [validation disabled]
441        [Good Checksum: False]
442        [Bad Checksum: False]
443    [SEQ/ACK analysis]
444        [This is an ACK to the segment in frame: 314]
445        [The RTT to ACK the segment was: 0.000305000 seconds]
446        [Bytes in flight: 37]
447Simple Mail Transfer Protocol
448    Command Line: rcpt TO:<grignon.florian@gmail.com>\r\n
449        Command: rcpt
450        Request parameter: TO:<grignon.florian@gmail.com>
451
4520000  00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00   ...B<.t.5.....E.
4530010  00 4d 84 f0 40 00 40 06 fe 38 c0 a8 00 0b d5 ba   .M..@.@..8......
4540020  21 14 a3 f7 02 4b a5 b1 73 b3 d7 23 b7 d0 50 18   !....K..s..#..P.
4550030  75 40 f0 74 00 00 72 63 70 74 20 54 4f 3a 3c 67   u@.t..rcpt TO:<g
4560040  72 69 67 6e 6f 6e 2e 66 6c 6f 72 69 61 6e 40 67   rignon.florian@g
4570050  6d 61 69 6c 2e 63 6f 6d 3e 0d 0a                  mail.com>..
458
459No.     Time           Source                Destination           Protocol Length Info
460    316 25.471723000   213.186.33.20         192.168.0.11          SMTP     62     S: 250 ok
461
462Frame 316: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0
463    Interface id: 0
464    Encapsulation type: Ethernet (1)
465    Arrival Time: Jul 21, 2014 13:36:50.701771000 CEST
466    [Time shift for this packet: 0.000000000 seconds]
467    Epoch Time: 1405942610.701771000 seconds
468    [Time delta from previous captured frame: 0.032014000 seconds]
469    [Time delta from previous displayed frame: 0.032014000 seconds]
470    [Time since reference or first frame: 25.471723000 seconds]
471    Frame Number: 316
472    Frame Length: 62 bytes (496 bits)
473    Capture Length: 62 bytes (496 bits)
474    [Frame is marked: True]
475    [Frame is ignored: False]
476    [Protocols in frame: eth:ip:tcp:smtp]
477    [Coloring Rule Name: TCP]
478    [Coloring Rule String: tcp]
479Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
480    Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
481        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
482        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
483        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
484    Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
485        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
486        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
487        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
488    Type: IP (0x0800)
489Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
490    Version: 4
491    Header length: 20 bytes
492    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
493        0000 00.. = Differentiated Services Codepoint: Default (0x00)
494        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
495    Total Length: 48
496    Identification: 0xdd33 (56627)
497    Flags: 0x02 (Don't Fragment)
498        0... .... = Reserved bit: Not set
499        .1.. .... = Don't fragment: Set
500        ..0. .... = More fragments: Not set
501    Fragment offset: 0
502    Time to live: 54
503    Protocol: TCP (6)
504    Header checksum: 0xb012 [validation disabled]
505        [Good: False]
506        [Bad: False]
507    Source: 213.186.33.20 (213.186.33.20)
508    Destination: 192.168.0.11 (192.168.0.11)
509    [Source GeoIP: Unknown]
510    [Destination GeoIP: Unknown]
511Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 266, Ack: 147, Len: 8
512    Source port: submission (587)
513    Destination port: 41975 (41975)
514    [Stream index: 9]
515    Sequence number: 266    (relative sequence number)
516    [Next sequence number: 274    (relative sequence number)]
517    Acknowledgment number: 147    (relative ack number)
518    Header length: 20 bytes
519    Flags: 0x018 (PSH, ACK)
520        000. .... .... = Reserved: Not set
521        ...0 .... .... = Nonce: Not set
522        .... 0... .... = Congestion Window Reduced (CWR): Not set
523        .... .0.. .... = ECN-Echo: Not set
524        .... ..0. .... = Urgent: Not set
525        .... ...1 .... = Acknowledgment: Set
526        .... .... 1... = Push: Set
527        .... .... .0.. = Reset: Not set
528        .... .... ..0. = Syn: Not set
529        .... .... ...0 = Fin: Not set
530    Window size value: 5840
531    [Calculated window size: 5840]
532    [Window size scaling factor: -2 (no window scaling used)]
533    Checksum: 0xb3e6 [validation disabled]
534        [Good Checksum: False]
535        [Bad Checksum: False]
536    [SEQ/ACK analysis]
537        [This is an ACK to the segment in frame: 315]
538        [The RTT to ACK the segment was: 0.032014000 seconds]
539        [Bytes in flight: 8]
540Simple Mail Transfer Protocol
541    Response: 250 ok\r\n
542        Response code: Requested mail action okay, completed (250)
543        Response parameter: ok
544
5450000  74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00   t.5......B<...E.
5460010  00 30 dd 33 40 00 36 06 b0 12 d5 ba 21 14 c0 a8   .0.3@.6.....!...
5470020  00 0b 02 4b a3 f7 d7 23 b7 d0 a5 b1 73 d8 50 18   ...K...#....s.P.
5480030  16 d0 b3 e6 00 00 32 35 30 20 6f 6b 0d 0a         ......250 ok..
549
550No.     Time           Source                Destination           Protocol Length Info
551    317 25.471846000   192.168.0.11          213.186.33.20         SMTP     60     C: data
552
553Frame 317: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0
554    Interface id: 0
555    Encapsulation type: Ethernet (1)
556    Arrival Time: Jul 21, 2014 13:36:50.701894000 CEST
557    [Time shift for this packet: 0.000000000 seconds]
558    Epoch Time: 1405942610.701894000 seconds
559    [Time delta from previous captured frame: 0.000123000 seconds]
560    [Time delta from previous displayed frame: 0.000123000 seconds]
561    [Time since reference or first frame: 25.471846000 seconds]
562    Frame Number: 317
563    Frame Length: 60 bytes (480 bits)
564    Capture Length: 60 bytes (480 bits)
565    [Frame is marked: True]
566    [Frame is ignored: False]
567    [Protocols in frame: eth:ip:tcp:smtp]
568    [Number of per-protocol-data: 1]
569    [Simple Mail Transfer Protocol, key 0]
570    [Coloring Rule Name: TCP]
571    [Coloring Rule String: tcp]
572Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
573    Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
574        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
575        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
576        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
577    Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
578        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
579        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
580        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
581    Type: IP (0x0800)
582Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20)
583    Version: 4
584    Header length: 20 bytes
585    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
586        0000 00.. = Differentiated Services Codepoint: Default (0x00)
587        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
588    Total Length: 46
589    Identification: 0x84f1 (34033)
590    Flags: 0x02 (Don't Fragment)
591        0... .... = Reserved bit: Not set
592        .1.. .... = Don't fragment: Set
593        ..0. .... = More fragments: Not set
594    Fragment offset: 0
595    Time to live: 64
596    Protocol: TCP (6)
597    Header checksum: 0xfe56 [validation disabled]
598        [Good: False]
599        [Bad: False]
600    Source: 192.168.0.11 (192.168.0.11)
601    Destination: 213.186.33.20 (213.186.33.20)
602    [Source GeoIP: Unknown]
603    [Destination GeoIP: Unknown]
604Transmission Control Protocol, Src Port: 41975 (41975), Dst Port: submission (587), Seq: 147, Ack: 274, Len: 6
605    Source port: 41975 (41975)
606    Destination port: submission (587)
607    [Stream index: 9]
608    Sequence number: 147    (relative sequence number)
609    [Next sequence number: 153    (relative sequence number)]
610    Acknowledgment number: 274    (relative ack number)
611    Header length: 20 bytes
612    Flags: 0x018 (PSH, ACK)
613        000. .... .... = Reserved: Not set
614        ...0 .... .... = Nonce: Not set
615        .... 0... .... = Congestion Window Reduced (CWR): Not set
616        .... .0.. .... = ECN-Echo: Not set
617        .... ..0. .... = Urgent: Not set
618        .... ...1 .... = Acknowledgment: Set
619        .... .... 1... = Push: Set
620        .... .... .0.. = Reset: Not set
621        .... .... ..0. = Syn: Not set
622        .... .... ...0 = Fin: Not set
623    Window size value: 30016
624    [Calculated window size: 30016]
625    [Window size scaling factor: -2 (no window scaling used)]
626    Checksum: 0x4e6e [validation disabled]
627        [Good Checksum: False]
628        [Bad Checksum: False]
629    [SEQ/ACK analysis]
630        [This is an ACK to the segment in frame: 316]
631        [The RTT to ACK the segment was: 0.000123000 seconds]
632        [Bytes in flight: 6]
633Simple Mail Transfer Protocol
634    Command Line: data\r\n
635        Command: data
636
6370000  00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00   ...B<.t.5.....E.
6380010  00 2e 84 f1 40 00 40 06 fe 56 c0 a8 00 0b d5 ba   ....@.@..V......
6390020  21 14 a3 f7 02 4b a5 b1 73 d8 d7 23 b7 d8 50 18   !....K..s..#..P.
6400030  75 40 4e 6e 00 00 64 61 74 61 0d 0a               u@Nn..data..
641
642No.     Time           Source                Destination           Protocol Length Info
643    318 25.503549000   213.186.33.20         192.168.0.11          SMTP     68     S: 354 go ahead
644
645Frame 318: 68 bytes on wire (544 bits), 68 bytes captured (544 bits) on interface 0
646    Interface id: 0
647    Encapsulation type: Ethernet (1)
648    Arrival Time: Jul 21, 2014 13:36:50.733597000 CEST
649    [Time shift for this packet: 0.000000000 seconds]
650    Epoch Time: 1405942610.733597000 seconds
651    [Time delta from previous captured frame: 0.031703000 seconds]
652    [Time delta from previous displayed frame: 0.031703000 seconds]
653    [Time since reference or first frame: 25.503549000 seconds]
654    Frame Number: 318
655    Frame Length: 68 bytes (544 bits)
656    Capture Length: 68 bytes (544 bits)
657    [Frame is marked: True]
658    [Frame is ignored: False]
659    [Protocols in frame: eth:ip:tcp:smtp]
660    [Coloring Rule Name: TCP]
661    [Coloring Rule String: tcp]
662Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
663    Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
664        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
665        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
666        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
667    Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
668        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
669        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
670        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
671    Type: IP (0x0800)
672Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
673    Version: 4
674    Header length: 20 bytes
675    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
676        0000 00.. = Differentiated Services Codepoint: Default (0x00)
677        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
678    Total Length: 54
679    Identification: 0xdd34 (56628)
680    Flags: 0x02 (Don't Fragment)
681        0... .... = Reserved bit: Not set
682        .1.. .... = Don't fragment: Set
683        ..0. .... = More fragments: Not set
684    Fragment offset: 0
685    Time to live: 54
686    Protocol: TCP (6)
687    Header checksum: 0xb00b [validation disabled]
688        [Good: False]
689        [Bad: False]
690    Source: 213.186.33.20 (213.186.33.20)
691    Destination: 192.168.0.11 (192.168.0.11)
692    [Source GeoIP: Unknown]
693    [Destination GeoIP: Unknown]
694Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 274, Ack: 153, Len: 14
695    Source port: submission (587)
696    Destination port: 41975 (41975)
697    [Stream index: 9]
698    Sequence number: 274    (relative sequence number)
699    [Next sequence number: 288    (relative sequence number)]
700    Acknowledgment number: 153    (relative ack number)
701    Header length: 20 bytes
702    Flags: 0x018 (PSH, ACK)
703        000. .... .... = Reserved: Not set
704        ...0 .... .... = Nonce: Not set
705        .... 0... .... = Congestion Window Reduced (CWR): Not set
706        .... .0.. .... = ECN-Echo: Not set
707        .... ..0. .... = Urgent: Not set
708        .... ...1 .... = Acknowledgment: Set
709        .... .... 1... = Push: Set
710        .... .... .0.. = Reset: Not set
711        .... .... ..0. = Syn: Not set
712        .... .... ...0 = Fin: Not set
713    Window size value: 5840
714    [Calculated window size: 5840]
715    [Window size scaling factor: -2 (no window scaling used)]
716    Checksum: 0xcca3 [validation disabled]
717        [Good Checksum: False]
718        [Bad Checksum: False]
719    [SEQ/ACK analysis]
720        [This is an ACK to the segment in frame: 317]
721        [The RTT to ACK the segment was: 0.031703000 seconds]
722        [Bytes in flight: 14]
723Simple Mail Transfer Protocol
724    Response: 354 go ahead\r\n
725        Response code: Start mail input; end with <CRLF>.<CRLF> (354)
726        Response parameter: go ahead
727
7280000  74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00   t.5......B<...E.
7290010  00 36 dd 34 40 00 36 06 b0 0b d5 ba 21 14 c0 a8   .6.4@.6.....!...
7300020  00 0b 02 4b a3 f7 d7 23 b7 d8 a5 b1 73 de 50 18   ...K...#....s.P.
7310030  16 d0 cc a3 00 00 33 35 34 20 67 6f 20 61 68 65   ......354 go ahe
7320040  61 64 0d 0a                                       ad..
733
734No.     Time           Source                Destination           Protocol Length Info
735    319 25.503854000   192.168.0.11          213.186.33.20         IMF      318    [Malformed Packet]
736
737Frame 319: 318 bytes on wire (2544 bits), 318 bytes captured (2544 bits) on interface 0
738    Interface id: 0
739    Encapsulation type: Ethernet (1)
740    Arrival Time: Jul 21, 2014 13:36:50.733902000 CEST
741    [Time shift for this packet: 0.000000000 seconds]
742    Epoch Time: 1405942610.733902000 seconds
743    [Time delta from previous captured frame: 0.000305000 seconds]
744    [Time delta from previous displayed frame: 0.000305000 seconds]
745    [Time since reference or first frame: 25.503854000 seconds]
746    Frame Number: 319
747    Frame Length: 318 bytes (2544 bits)
748    Capture Length: 318 bytes (2544 bits)
749    [Frame is marked: True]
750    [Frame is ignored: False]
751    [Protocols in frame: eth:ip:tcp:smtp:imf]
752    [Number of per-protocol-data: 1]
753    [Simple Mail Transfer Protocol, key 0]
754    [Coloring Rule Name: TCP]
755    [Coloring Rule String: tcp]
756Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
757    Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
758        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
759        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
760        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
761    Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
762        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
763        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
764        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
765    Type: IP (0x0800)
766Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20)
767    Version: 4
768    Header length: 20 bytes
769    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
770        0000 00.. = Differentiated Services Codepoint: Default (0x00)
771        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
772    Total Length: 304
773    Identification: 0x84f2 (34034)
774    Flags: 0x02 (Don't Fragment)
775        0... .... = Reserved bit: Not set
776        .1.. .... = Don't fragment: Set
777        ..0. .... = More fragments: Not set
778    Fragment offset: 0
779    Time to live: 64
780    Protocol: TCP (6)
781    Header checksum: 0xfd53 [validation disabled]
782        [Good: False]
783        [Bad: False]
784    Source: 192.168.0.11 (192.168.0.11)
785    Destination: 213.186.33.20 (213.186.33.20)
786    [Source GeoIP: Unknown]
787    [Destination GeoIP: Unknown]
788Transmission Control Protocol, Src Port: 41975 (41975), Dst Port: submission (587), Seq: 153, Ack: 288, Len: 264
789    Source port: 41975 (41975)
790    Destination port: submission (587)
791    [Stream index: 9]
792    Sequence number: 153    (relative sequence number)
793    [Next sequence number: 417    (relative sequence number)]
794    Acknowledgment number: 288    (relative ack number)
795    Header length: 20 bytes
796    Flags: 0x018 (PSH, ACK)
797        000. .... .... = Reserved: Not set
798        ...0 .... .... = Nonce: Not set
799        .... 0... .... = Congestion Window Reduced (CWR): Not set
800        .... .0.. .... = ECN-Echo: Not set
801        .... ..0. .... = Urgent: Not set
802        .... ...1 .... = Acknowledgment: Set
803        .... .... 1... = Push: Set
804        .... .... .0.. = Reset: Not set
805        .... .... ..0. = Syn: Not set
806        .... .... ...0 = Fin: Not set
807    Window size value: 30016
808    [Calculated window size: 30016]
809    [Window size scaling factor: -2 (no window scaling used)]
810    Checksum: 0xc8d4 [validation disabled]
811        [Good Checksum: False]
812        [Bad Checksum: False]
813    [SEQ/ACK analysis]
814        [This is an ACK to the segment in frame: 318]
815        [The RTT to ACK the segment was: 0.000305000 seconds]
816        [Bytes in flight: 264]
817Simple Mail Transfer Protocol
818    C: .
819    [1 DATA fragment (261 bytes): #319(261)]
820        [Frame: 319, payload: 0-260 (261 bytes)]
821        [DATA fragment count: 1]
822        [Reassembled DATA length: 261]
823Internet Message Format
824[Malformed Packet: IMF]
825    [Expert Info (Error/Malformed): Malformed Packet (Exception occurred)]
826        [Message: Malformed Packet (Exception occurred)]
827        [Severity level: Error]
828        [Group: Malformed]
829
830Frame (318 bytes):
8310000  00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00   ...B<.t.5.....E.
8320010  01 30 84 f2 40 00 40 06 fd 53 c0 a8 00 0b d5 ba   .0..@.@..S......
8330020  21 14 a3 f7 02 4b a5 b1 73 de d7 23 b7 e6 50 18   !....K..s..#..P.
8340030  75 40 c8 d4 00 00 4d 49 4d 45 2d 56 65 72 73 69   u@....MIME-Versi
8350040  6f 6e 3a 20 31 2e 30 0a 43 6f 6e 74 65 6e 74 2d   on: 1.0.Content-
8360050  54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e   Type: text/plain
8370060  3b 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38   ; charset="utf-8
8380070  22 0a 43 6f 6e 74 65 6e 74 2d 54 72 61 6e 73 66   ".Content-Transf
8390080  65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 37 62 69   er-Encoding: 7bi
8400090  74 0a 53 75 62 6a 65 63 74 3a 20 73 75 73 75 0a   t.Subject: susu.
84100a0  46 72 6f 6d 3a 20 63 6f 6e 74 61 63 74 40 31 61   From: contact@1a
84200b0  76 69 73 2e 66 72 0a 54 6f 3a 20 67 72 69 67 6e   vis.fr.To: grign
84300c0  6f 6e 2e 66 6c 6f 72 69 61 6e 40 67 6d 61 69 6c   on.florian@gmail
84400d0  2e 63 6f 6d 0a 44 61 74 65 3a 20 4d 6f 6e 2c 20   .com.Date: Mon,
84500e0  32 31 20 4a 75 6c 20 32 30 31 34 20 31 31 3a 33   21 Jul 2014 11:3
84600f0  36 3a 35 30 20 2d 30 30 30 30 0a 4d 65 73 73 61   6:50 -0000.Messa
8470100  67 65 2d 49 44 3a 20 3c 32 30 31 34 30 37 32 31   ge-ID: <20140721
8480110  31 31 33 36 35 30 2e 33 31 30 33 39 2e 34 30 35   113650.31039.405
8490120  35 36 40 61 72 6b 61 64 65 2e 63 6f 6d 3e 0a 0a   56@arkade.com>..
8500130  62 6f 64 79 20 62 6f 64 79 0d 0a 2e 0d 0a         body body.....
851Reassembled SMTP (261 bytes):
8520000  4d 49 4d 45 2d 56 65 72 73 69 6f 6e 3a 20 31 2e   MIME-Version: 1.
8530010  30 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20   0.Content-Type:
8540020  74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72   text/plain; char
8550030  73 65 74 3d 22 75 74 66 2d 38 22 0a 43 6f 6e 74   set="utf-8".Cont
8560040  65 6e 74 2d 54 72 61 6e 73 66 65 72 2d 45 6e 63   ent-Transfer-Enc
8570050  6f 64 69 6e 67 3a 20 37 62 69 74 0a 53 75 62 6a   oding: 7bit.Subj
8580060  65 63 74 3a 20 73 75 73 75 0a 46 72 6f 6d 3a 20   ect: susu.From:
8590070  63 6f 6e 74 61 63 74 40 31 61 76 69 73 2e 66 72   contact@1avis.fr
8600080  0a 54 6f 3a 20 67 72 69 67 6e 6f 6e 2e 66 6c 6f   .To: grignon.flo
8610090  72 69 61 6e 40 67 6d 61 69 6c 2e 63 6f 6d 0a 44   rian@gmail.com.D
86200a0  61 74 65 3a 20 4d 6f 6e 2c 20 32 31 20 4a 75 6c   ate: Mon, 21 Jul
86300b0  20 32 30 31 34 20 31 31 3a 33 36 3a 35 30 20 2d    2014 11:36:50 -
86400c0  30 30 30 30 0a 4d 65 73 73 61 67 65 2d 49 44 3a   0000.Message-ID:
86500d0  20 3c 32 30 31 34 30 37 32 31 31 31 33 36 35 30    <20140721113650
86600e0  2e 33 31 30 33 39 2e 34 30 35 35 36 40 61 72 6b   .31039.40556@ark
86700f0  61 64 65 2e 63 6f 6d 3e 0a 0a 62 6f 64 79 20 62   ade.com>..body b
8680100  6f 64 79 0d 0a                                    ody..
869
870No.     Time           Source                Destination           Protocol Length Info
871    320 25.541763000   213.186.33.20         192.168.0.11          SMTP     109    S: 554 mail server permanently rejected message (#5.3.0)
872
873Frame 320: 109 bytes on wire (872 bits), 109 bytes captured (872 bits) on interface 0
874    Interface id: 0
875    Encapsulation type: Ethernet (1)
876    Arrival Time: Jul 21, 2014 13:36:50.771811000 CEST
877    [Time shift for this packet: 0.000000000 seconds]
878    Epoch Time: 1405942610.771811000 seconds
879    [Time delta from previous captured frame: 0.037909000 seconds]
880    [Time delta from previous displayed frame: 0.037909000 seconds]
881    [Time since reference or first frame: 25.541763000 seconds]
882    Frame Number: 320
883    Frame Length: 109 bytes (872 bits)
884    Capture Length: 109 bytes (872 bits)
885    [Frame is marked: True]
886    [Frame is ignored: False]
887    [Protocols in frame: eth:ip:tcp:smtp]
888    [Coloring Rule Name: TCP]
889    [Coloring Rule String: tcp]
890Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
891    Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
892        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
893        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
894        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
895    Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
896        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
897        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
898        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
899    Type: IP (0x0800)
900Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
901    Version: 4
902    Header length: 20 bytes
903    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
904        0000 00.. = Differentiated Services Codepoint: Default (0x00)
905        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
906    Total Length: 95
907    Identification: 0xdd35 (56629)
908    Flags: 0x02 (Don't Fragment)
909        0... .... = Reserved bit: Not set
910        .1.. .... = Don't fragment: Set
911        ..0. .... = More fragments: Not set
912    Fragment offset: 0
913    Time to live: 54
914    Protocol: TCP (6)
915    Header checksum: 0xafe1 [validation disabled]
916        [Good: False]
917        [Bad: False]
918    Source: 213.186.33.20 (213.186.33.20)
919    Destination: 192.168.0.11 (192.168.0.11)
920    [Source GeoIP: Unknown]
921    [Destination GeoIP: Unknown]
922Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 288, Ack: 417, Len: 55
923    Source port: submission (587)
924    Destination port: 41975 (41975)
925    [Stream index: 9]
926    Sequence number: 288    (relative sequence number)
927    [Next sequence number: 343    (relative sequence number)]
928    Acknowledgment number: 417    (relative ack number)
929    Header length: 20 bytes
930    Flags: 0x018 (PSH, ACK)
931        000. .... .... = Reserved: Not set
932        ...0 .... .... = Nonce: Not set
933        .... 0... .... = Congestion Window Reduced (CWR): Not set
934        .... .0.. .... = ECN-Echo: Not set
935        .... ..0. .... = Urgent: Not set
936        .... ...1 .... = Acknowledgment: Set
937        .... .... 1... = Push: Set
938        .... .... .0.. = Reset: Not set
939        .... .... ..0. = Syn: Not set
940        .... .... ...0 = Fin: Not set
941    Window size value: 6432
942    [Calculated window size: 6432]
943    [Window size scaling factor: -2 (no window scaling used)]
944    Checksum: 0x702a [validation disabled]
945        [Good Checksum: False]
946        [Bad Checksum: False]
947    [SEQ/ACK analysis]
948        [This is an ACK to the segment in frame: 319]
949        [The RTT to ACK the segment was: 0.037909000 seconds]
950        [Bytes in flight: 55]
951Simple Mail Transfer Protocol
952    Response: 554 mail server permanently rejected message (#5.3.0)\r\n
953        Response code: Transaction failed (554)
954        Response parameter: mail server permanently rejected message (#5.3.0)
955
9560000  74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00   t.5......B<...E.
9570010  00 5f dd 35 40 00 36 06 af e1 d5 ba 21 14 c0 a8   ._.5@.6.....!...
9580020  00 0b 02 4b a3 f7 d7 23 b7 e6 a5 b1 74 e6 50 18   ...K...#....t.P.
9590030  19 20 70 2a 00 00 35 35 34 20 6d 61 69 6c 20 73   . p*..554 mail s
9600040  65 72 76 65 72 20 70 65 72 6d 61 6e 65 6e 74 6c   erver permanentl
9610050  79 20 72 65 6a 65 63 74 65 64 20 6d 65 73 73 61   y rejected messa
9620060  67 65 20 28 23 35 2e 33 2e 30 29 0d 0a            ge (#5.3.0)..
963
964No.     Time           Source                Destination           Protocol Length Info
965    321 25.541931000   192.168.0.11          213.186.33.20         SMTP     60     C: rset
966
967Frame 321: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0
968    Interface id: 0
969    Encapsulation type: Ethernet (1)
970    Arrival Time: Jul 21, 2014 13:36:50.771979000 CEST
971    [Time shift for this packet: 0.000000000 seconds]
972    Epoch Time: 1405942610.771979000 seconds
973    [Time delta from previous captured frame: 0.000168000 seconds]
974    [Time delta from previous displayed frame: 0.000168000 seconds]
975    [Time since reference or first frame: 25.541931000 seconds]
976    Frame Number: 321
977    Frame Length: 60 bytes (480 bits)
978    Capture Length: 60 bytes (480 bits)
979    [Frame is marked: True]
980    [Frame is ignored: False]
981    [Protocols in frame: eth:ip:tcp:smtp]
982    [Number of per-protocol-data: 1]
983    [Simple Mail Transfer Protocol, key 0]
984    [Coloring Rule Name: TCP]
985    [Coloring Rule String: tcp]
986Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
987    Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
988        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
989        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
990        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
991    Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
992        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
993        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
994        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
995    Type: IP (0x0800)
996Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20)
997    Version: 4
998    Header length: 20 bytes
999    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
1000        0000 00.. = Differentiated Services Codepoint: Default (0x00)
1001        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
1002    Total Length: 46
1003    Identification: 0x84f3 (34035)
1004    Flags: 0x02 (Don't Fragment)
1005        0... .... = Reserved bit: Not set
1006        .1.. .... = Don't fragment: Set
1007        ..0. .... = More fragments: Not set
1008    Fragment offset: 0
1009    Time to live: 64
1010    Protocol: TCP (6)
1011    Header checksum: 0xfe54 [validation disabled]
1012        [Good: False]
1013        [Bad: False]
1014    Source: 192.168.0.11 (192.168.0.11)
1015    Destination: 213.186.33.20 (213.186.33.20)
1016    [Source GeoIP: Unknown]
1017    [Destination GeoIP: Unknown]
1018Transmission Control Protocol, Src Port: 41975 (41975), Dst Port: submission (587), Seq: 417, Ack: 343, Len: 6
1019    Source port: 41975 (41975)
1020    Destination port: submission (587)
1021    [Stream index: 9]
1022    Sequence number: 417    (relative sequence number)
1023    [Next sequence number: 423    (relative sequence number)]
1024    Acknowledgment number: 343    (relative ack number)
1025    Header length: 20 bytes
1026    Flags: 0x018 (PSH, ACK)
1027        000. .... .... = Reserved: Not set
1028        ...0 .... .... = Nonce: Not set
1029        .... 0... .... = Congestion Window Reduced (CWR): Not set
1030        .... .0.. .... = ECN-Echo: Not set
1031        .... ..0. .... = Urgent: Not set
1032        .... ...1 .... = Acknowledgment: Set
1033        .... .... 1... = Push: Set
1034        .... .... .0.. = Reset: Not set
1035        .... .... ..0. = Syn: Not set
1036        .... .... ...0 = Fin: Not set
1037    Window size value: 30016
1038    [Calculated window size: 30016]
1039    [Window size scaling factor: -2 (no window scaling used)]
1040    Checksum: 0x4df6 [validation disabled]
1041        [Good Checksum: False]
1042        [Bad Checksum: False]
1043    [SEQ/ACK analysis]
1044        [This is an ACK to the segment in frame: 320]
1045        [The RTT to ACK the segment was: 0.000168000 seconds]
1046        [Bytes in flight: 6]
1047Simple Mail Transfer Protocol
1048    Command Line: rset\r\n
1049        Command: rset
1050
10510000  00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00   ...B<.t.5.....E.
10520010  00 2e 84 f3 40 00 40 06 fe 54 c0 a8 00 0b d5 ba   ....@.@..T......
10530020  21 14 a3 f7 02 4b a5 b1 74 e6 d7 23 b8 1d 50 18   !....K..t..#..P.
10540030  75 40 4d f6 00 00 72 73 65 74 0d 0a               u@M...rset..
1055
1056No.     Time           Source                Destination           Protocol Length Info
1057    322 25.572810000   213.186.33.20         192.168.0.11          SMTP     67     S: 250 flushed
1058
1059Frame 322: 67 bytes on wire (536 bits), 67 bytes captured (536 bits) on interface 0
1060    Interface id: 0
1061    Encapsulation type: Ethernet (1)
1062    Arrival Time: Jul 21, 2014 13:36:50.802858000 CEST
1063    [Time shift for this packet: 0.000000000 seconds]
1064    Epoch Time: 1405942610.802858000 seconds
1065    [Time delta from previous captured frame: 0.030879000 seconds]
1066    [Time delta from previous displayed frame: 0.030879000 seconds]
1067    [Time since reference or first frame: 25.572810000 seconds]
1068    Frame Number: 322
1069    Frame Length: 67 bytes (536 bits)
1070    Capture Length: 67 bytes (536 bits)
1071    [Frame is marked: True]
1072    [Frame is ignored: False]
1073    [Protocols in frame: eth:ip:tcp:smtp]
1074    [Coloring Rule Name: TCP]
1075    [Coloring Rule String: tcp]
1076Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
1077    Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
1078        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
1079        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
1080        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
1081    Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
1082        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
1083        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
1084        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
1085    Type: IP (0x0800)
1086Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
1087    Version: 4
1088    Header length: 20 bytes
1089    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
1090        0000 00.. = Differentiated Services Codepoint: Default (0x00)
1091        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
1092    Total Length: 53
1093    Identification: 0xdd36 (56630)
1094    Flags: 0x02 (Don't Fragment)
1095        0... .... = Reserved bit: Not set
1096        .1.. .... = Don't fragment: Set
1097        ..0. .... = More fragments: Not set
1098    Fragment offset: 0
1099    Time to live: 54
1100    Protocol: TCP (6)
1101    Header checksum: 0xb00a [validation disabled]
1102        [Good: False]
1103        [Bad: False]
1104    Source: 213.186.33.20 (213.186.33.20)
1105    Destination: 192.168.0.11 (192.168.0.11)
1106    [Source GeoIP: Unknown]
1107    [Destination GeoIP: Unknown]
1108Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 343, Ack: 423, Len: 13
1109    Source port: submission (587)
1110    Destination port: 41975 (41975)
1111    [Stream index: 9]
1112    Sequence number: 343    (relative sequence number)
1113    [Next sequence number: 356    (relative sequence number)]
1114    Acknowledgment number: 423    (relative ack number)
1115    Header length: 20 bytes
1116    Flags: 0x018 (PSH, ACK)
1117        000. .... .... = Reserved: Not set
1118        ...0 .... .... = Nonce: Not set
1119        .... 0... .... = Congestion Window Reduced (CWR): Not set
1120        .... .0.. .... = ECN-Echo: Not set
1121        .... ..0. .... = Urgent: Not set
1122        .... ...1 .... = Acknowledgment: Set
1123        .... .... 1... = Push: Set
1124        .... .... .0.. = Reset: Not set
1125        .... .... ..0. = Syn: Not set
1126        .... .... ...0 = Fin: Not set
1127    Window size value: 6432
1128    [Calculated window size: 6432]
1129    [Window size scaling factor: -2 (no window scaling used)]
1130    Checksum: 0x7a53 [validation disabled]
1131        [Good Checksum: False]
1132        [Bad Checksum: False]
1133    [SEQ/ACK analysis]
1134        [This is an ACK to the segment in frame: 321]
1135        [The RTT to ACK the segment was: 0.030879000 seconds]
1136        [Bytes in flight: 13]
1137Simple Mail Transfer Protocol
1138    Response: 250 flushed\r\n
1139        Response code: Requested mail action okay, completed (250)
1140        Response parameter: flushed
1141
11420000  74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00   t.5......B<...E.
11430010  00 35 dd 36 40 00 36 06 b0 0a d5 ba 21 14 c0 a8   .5.6@.6.....!...
11440020  00 0b 02 4b a3 f7 d7 23 b8 1d a5 b1 74 ec 50 18   ...K...#....t.P.
11450030  19 20 7a 53 00 00 32 35 30 20 66 6c 75 73 68 65   . zS..250 flushe
11460040  64 0d 0a                                          d..
Back to Top