No. Time Source Destination Protocol Length Info 1391 116.892804000 213.186.33.20 192.168.0.11 SMTP 81 S: 235 ok, go ahead (#2.0.0) Frame 1391: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) on interface 0 Interface id: 0 Encapsulation type: Ethernet (1) Arrival Time: Jul 21, 2014 13:33:45.616853000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1405942425.616853000 seconds [Time delta from previous captured frame: 0.016991000 seconds] [Time delta from previous displayed frame: 0.016991000 seconds] [Time since reference or first frame: 116.892804000 seconds] Frame Number: 1391 Frame Length: 81 bytes (648 bits) Capture Length: 81 bytes (648 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:smtp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 67 Identification: 0x4e3b (20027) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 54 Protocol: TCP (6) Header checksum: 0x3ef8 [validation disabled] [Good: False] [Bad: False] Source: 213.186.33.20 (213.186.33.20) Destination: 192.168.0.11 (192.168.0.11) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] Transmission Control Protocol, Src Port: submission (587), Dst Port: 41028 (41028), Seq: 231, Ack: 71, Len: 27 Source port: submission (587) Destination port: 41028 (41028) [Stream index: 10] Sequence number: 231 (relative sequence number) [Next sequence number: 258 (relative sequence number)] Acknowledgment number: 71 (relative ack number) Header length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 5840 [Calculated window size: 5840] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd81b [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [Bytes in flight: 27] Simple Mail Transfer Protocol Response: 235 ok, go ahead (#2.0.0)\r\n Response code: Authentication successful (235) Response parameter: ok, go ahead (#2.0.0) 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E. 0010 00 43 4e 3b 40 00 36 06 3e f8 d5 ba 21 14 c0 a8 .CN;@.6.>...!... 0020 00 0b 02 4b a0 44 5f bf 36 e5 dd 3c cb 91 50 18 ...K.D_.6..<..P. 0030 16 d0 d8 1b 00 00 32 33 35 20 6f 6b 2c 20 67 6f ......235 ok, go 0040 20 61 68 65 61 64 20 28 23 32 2e 30 2e 30 29 0d ahead (#2.0.0). 0050 0a . No. Time Source Destination Protocol Length Info 1392 116.894480000 192.168.0.11 213.186.33.20 SMTP 93 C: mail FROM: size=259 Frame 1392: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) on interface 0 Interface id: 0 Encapsulation type: Ethernet (1) Arrival Time: Jul 21, 2014 13:33:45.618529000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1405942425.618529000 seconds [Time delta from previous captured frame: 0.001676000 seconds] [Time delta from previous displayed frame: 0.001676000 seconds] [Time since reference or first frame: 116.894480000 seconds] Frame Number: 1392 Frame Length: 93 bytes (744 bits) Capture Length: 93 bytes (744 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:smtp] [Number of per-protocol-data: 1] [Simple Mail Transfer Protocol, key 0] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 79 Identification: 0x8850 (34896) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0xfad6 [validation disabled] [Good: False] [Bad: False] Source: 192.168.0.11 (192.168.0.11) Destination: 213.186.33.20 (213.186.33.20) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] Transmission Control Protocol, Src Port: 41028 (41028), Dst Port: submission (587), Seq: 71, Ack: 258, Len: 39 Source port: 41028 (41028) Destination port: submission (587) [Stream index: 10] Sequence number: 71 (relative sequence number) [Next sequence number: 110 (relative sequence number)] Acknowledgment number: 258 (relative ack number) Header length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 30016 [Calculated window size: 30016] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7653 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1391] [The RTT to ACK the segment was: 0.001676000 seconds] [Bytes in flight: 39] Simple Mail Transfer Protocol Command Line: mail FROM: size=259\r\n Command: mail Request parameter: FROM: size=259 0000 00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00 ...B<.t.5.....E. 0010 00 4f 88 50 40 00 40 06 fa d6 c0 a8 00 0b d5 ba .O.P@.@......... 0020 21 14 a0 44 02 4b dd 3c cb 91 5f bf 37 00 50 18 !..D.K.<.._.7.P. 0030 75 40 76 53 00 00 6d 61 69 6c 20 46 52 4f 4d 3a u@vS..mail FROM: 0040 3c 63 6f 6e 74 61 63 74 40 31 61 76 69 73 2e 66 size=259.. No. Time Source Destination Protocol Length Info 1394 116.927967000 213.186.33.20 192.168.0.11 TCP 62 submission > 41028 [ACK] Seq=258 Ack=110 Win=5840 Len=0 Frame 1394: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 Encapsulation type: Ethernet (1) Arrival Time: Jul 21, 2014 13:33:45.652016000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1405942425.652016000 seconds [Time delta from previous captured frame: 0.019805000 seconds] [Time delta from previous displayed frame: 0.033487000 seconds] [Time since reference or first frame: 116.927967000 seconds] Frame Number: 1394 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:vssmonitoring] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Padding: 000000000000 Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 40 Identification: 0x4e3c (20028) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 54 Protocol: TCP (6) Header checksum: 0x3f12 [validation disabled] [Good: False] [Bad: False] Source: 213.186.33.20 (213.186.33.20) Destination: 192.168.0.11 (192.168.0.11) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] Transmission Control Protocol, Src Port: submission (587), Dst Port: 41028 (41028), Seq: 258, Ack: 110, Len: 0 Source port: submission (587) Destination port: 41028 (41028) [Stream index: 10] Sequence number: 258 (relative sequence number) Acknowledgment number: 110 (relative ack number) Header length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 5840 [Calculated window size: 5840] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xff3d [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1392] [The RTT to ACK the segment was: 0.033487000 seconds] VSS-Monitoring ethernet trailer, Source Port: 0 Src Port: 0 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E. 0010 00 28 4e 3c 40 00 36 06 3f 12 d5 ba 21 14 c0 a8 .(N<@.6.?...!... 0020 00 0b 02 4b a0 44 5f bf 37 00 dd 3c cb b8 50 10 ...K.D_.7..<..P. 0030 16 d0 ff 3d 00 00 00 00 00 00 00 00 00 00 ...=.......... No. Time Source Destination Protocol Length Info 1395 116.928672000 213.186.33.20 192.168.0.11 SMTP 62 S: 250 ok Frame 1395: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 Encapsulation type: Ethernet (1) Arrival Time: Jul 21, 2014 13:33:45.652721000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1405942425.652721000 seconds [Time delta from previous captured frame: 0.000705000 seconds] [Time delta from previous displayed frame: 0.000705000 seconds] [Time since reference or first frame: 116.928672000 seconds] Frame Number: 1395 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:smtp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 48 Identification: 0x4e3d (20029) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 54 Protocol: TCP (6) Header checksum: 0x3f09 [validation disabled] [Good: False] [Bad: False] Source: 213.186.33.20 (213.186.33.20) Destination: 192.168.0.11 (192.168.0.11) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] Transmission Control Protocol, Src Port: submission (587), Dst Port: 41028 (41028), Seq: 258, Ack: 110, Len: 8 Source port: submission (587) Destination port: 41028 (41028) [Stream index: 10] Sequence number: 258 (relative sequence number) [Next sequence number: 266 (relative sequence number)] Acknowledgment number: 110 (relative ack number) Header length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 5840 [Calculated window size: 5840] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2063 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [Bytes in flight: 8] Simple Mail Transfer Protocol Response: 250 ok\r\n Response code: Requested mail action okay, completed (250) Response parameter: ok 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E. 0010 00 30 4e 3d 40 00 36 06 3f 09 d5 ba 21 14 c0 a8 .0N=@.6.?...!... 0020 00 0b 02 4b a0 44 5f bf 37 00 dd 3c cb b8 50 18 ...K.D_.7..<..P. 0030 16 d0 20 63 00 00 32 35 30 20 6f 6b 0d 0a .. c..250 ok.. No. Time Source Destination Protocol Length Info 1396 116.929080000 192.168.0.11 213.186.33.20 SMTP 91 C: rcpt TO: Frame 1396: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) on interface 0 Interface id: 0 Encapsulation type: Ethernet (1) Arrival Time: Jul 21, 2014 13:33:45.653129000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1405942425.653129000 seconds [Time delta from previous captured frame: 0.000408000 seconds] [Time delta from previous displayed frame: 0.000408000 seconds] [Time since reference or first frame: 116.929080000 seconds] Frame Number: 1396 Frame Length: 91 bytes (728 bits) Capture Length: 91 bytes (728 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:smtp] [Number of per-protocol-data: 1] [Simple Mail Transfer Protocol, key 0] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 77 Identification: 0x8851 (34897) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0xfad7 [validation disabled] [Good: False] [Bad: False] Source: 192.168.0.11 (192.168.0.11) Destination: 213.186.33.20 (213.186.33.20) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] Transmission Control Protocol, Src Port: 41028 (41028), Dst Port: submission (587), Seq: 110, Ack: 266, Len: 37 Source port: 41028 (41028) Destination port: submission (587) [Stream index: 10] Sequence number: 110 (relative sequence number) [Next sequence number: 147 (relative sequence number)] Acknowledgment number: 266 (relative ack number) Header length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 30016 [Calculated window size: 30016] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x5cc4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1395] [The RTT to ACK the segment was: 0.000408000 seconds] [Bytes in flight: 37] Simple Mail Transfer Protocol Command Line: rcpt TO:\r\n Command: rcpt Request parameter: TO: 0000 00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00 ...B<.t.5.....E. 0010 00 4d 88 51 40 00 40 06 fa d7 c0 a8 00 0b d5 ba .M.Q@.@......... 0020 21 14 a0 44 02 4b dd 3c cb b8 5f bf 37 08 50 18 !..D.K.<.._.7.P. 0030 75 40 5c c4 00 00 72 63 70 74 20 54 4f 3a 3c 67 u@\...rcpt TO:.. No. Time Source Destination Protocol Length Info 1397 116.961784000 213.186.33.20 192.168.0.11 SMTP 62 S: 250 ok Frame 1397: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 Encapsulation type: Ethernet (1) Arrival Time: Jul 21, 2014 13:33:45.685833000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1405942425.685833000 seconds [Time delta from previous captured frame: 0.032704000 seconds] [Time delta from previous displayed frame: 0.032704000 seconds] [Time since reference or first frame: 116.961784000 seconds] Frame Number: 1397 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:smtp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 48 Identification: 0x4e3e (20030) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 54 Protocol: TCP (6) Header checksum: 0x3f08 [validation disabled] [Good: False] [Bad: False] Source: 213.186.33.20 (213.186.33.20) Destination: 192.168.0.11 (192.168.0.11) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] Transmission Control Protocol, Src Port: submission (587), Dst Port: 41028 (41028), Seq: 266, Ack: 147, Len: 8 Source port: submission (587) Destination port: 41028 (41028) [Stream index: 10] Sequence number: 266 (relative sequence number) [Next sequence number: 274 (relative sequence number)] Acknowledgment number: 147 (relative ack number) Header length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 5840 [Calculated window size: 5840] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2036 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1396] [The RTT to ACK the segment was: 0.032704000 seconds] [Bytes in flight: 8] Simple Mail Transfer Protocol Response: 250 ok\r\n Response code: Requested mail action okay, completed (250) Response parameter: ok 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E. 0010 00 30 4e 3e 40 00 36 06 3f 08 d5 ba 21 14 c0 a8 .0N>@.6.?...!... 0020 00 0b 02 4b a0 44 5f bf 37 08 dd 3c cb dd 50 18 ...K.D_.7..<..P. 0030 16 d0 20 36 00 00 32 35 30 20 6f 6b 0d 0a .. 6..250 ok.. No. Time Source Destination Protocol Length Info 1398 116.961923000 192.168.0.11 213.186.33.20 SMTP 60 C: data Frame 1398: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0 Interface id: 0 Encapsulation type: Ethernet (1) Arrival Time: Jul 21, 2014 13:33:45.685972000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1405942425.685972000 seconds [Time delta from previous captured frame: 0.000139000 seconds] [Time delta from previous displayed frame: 0.000139000 seconds] [Time since reference or first frame: 116.961923000 seconds] Frame Number: 1398 Frame Length: 60 bytes (480 bits) Capture Length: 60 bytes (480 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:smtp] [Number of per-protocol-data: 1] [Simple Mail Transfer Protocol, key 0] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 46 Identification: 0x8852 (34898) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0xfaf5 [validation disabled] [Good: False] [Bad: False] Source: 192.168.0.11 (192.168.0.11) Destination: 213.186.33.20 (213.186.33.20) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] Transmission Control Protocol, Src Port: 41028 (41028), Dst Port: submission (587), Seq: 147, Ack: 274, Len: 6 Source port: 41028 (41028) Destination port: submission (587) [Stream index: 10] Sequence number: 147 (relative sequence number) [Next sequence number: 153 (relative sequence number)] Acknowledgment number: 274 (relative ack number) Header length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 30016 [Calculated window size: 30016] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xbabd [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1397] [The RTT to ACK the segment was: 0.000139000 seconds] [Bytes in flight: 6] Simple Mail Transfer Protocol Command Line: data\r\n Command: data 0000 00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00 ...B<.t.5.....E. 0010 00 2e 88 52 40 00 40 06 fa f5 c0 a8 00 0b d5 ba ...R@.@......... 0020 21 14 a0 44 02 4b dd 3c cb dd 5f bf 37 10 50 18 !..D.K.<.._.7.P. 0030 75 40 ba bd 00 00 64 61 74 61 0d 0a u@....data.. No. Time Source Destination Protocol Length Info 1399 116.992566000 213.186.33.20 192.168.0.11 SMTP 68 S: 354 go ahead Frame 1399: 68 bytes on wire (544 bits), 68 bytes captured (544 bits) on interface 0 Interface id: 0 Encapsulation type: Ethernet (1) Arrival Time: Jul 21, 2014 13:33:45.716615000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1405942425.716615000 seconds [Time delta from previous captured frame: 0.030643000 seconds] [Time delta from previous displayed frame: 0.030643000 seconds] [Time since reference or first frame: 116.992566000 seconds] Frame Number: 1399 Frame Length: 68 bytes (544 bits) Capture Length: 68 bytes (544 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:smtp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 54 Identification: 0x4e3f (20031) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 54 Protocol: TCP (6) Header checksum: 0x3f01 [validation disabled] [Good: False] [Bad: False] Source: 213.186.33.20 (213.186.33.20) Destination: 192.168.0.11 (192.168.0.11) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] Transmission Control Protocol, Src Port: submission (587), Dst Port: 41028 (41028), Seq: 274, Ack: 153, Len: 14 Source port: submission (587) Destination port: 41028 (41028) [Stream index: 10] Sequence number: 274 (relative sequence number) [Next sequence number: 288 (relative sequence number)] Acknowledgment number: 153 (relative ack number) Header length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 5840 [Calculated window size: 5840] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x38f3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1398] [The RTT to ACK the segment was: 0.030643000 seconds] [Bytes in flight: 14] Simple Mail Transfer Protocol Response: 354 go ahead\r\n Response code: Start mail input; end with . (354) Response parameter: go ahead 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E. 0010 00 36 4e 3f 40 00 36 06 3f 01 d5 ba 21 14 c0 a8 .6N?@.6.?...!... 0020 00 0b 02 4b a0 44 5f bf 37 10 dd 3c cb e3 50 18 ...K.D_.7..<..P. 0030 16 d0 38 f3 00 00 33 35 34 20 67 6f 20 61 68 65 ..8...354 go ahe 0040 61 64 0d 0a ad.. No. Time Source Destination Protocol Length Info 1400 116.992725000 192.168.0.11 213.186.33.20 IMF 327 subject: susu, from: contact@1avis.fr, (text/plain) Frame 1400: 327 bytes on wire (2616 bits), 327 bytes captured (2616 bits) on interface 0 Interface id: 0 Encapsulation type: Ethernet (1) Arrival Time: Jul 21, 2014 13:33:45.716774000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1405942425.716774000 seconds [Time delta from previous captured frame: 0.000159000 seconds] [Time delta from previous displayed frame: 0.000159000 seconds] [Time since reference or first frame: 116.992725000 seconds] Frame Number: 1400 Frame Length: 327 bytes (2616 bits) Capture Length: 327 bytes (2616 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:smtp:imf:data-text-lines] [Number of per-protocol-data: 1] [Simple Mail Transfer Protocol, key 0] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 313 Identification: 0x8853 (34899) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0xf9e9 [validation disabled] [Good: False] [Bad: False] Source: 192.168.0.11 (192.168.0.11) Destination: 213.186.33.20 (213.186.33.20) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] Transmission Control Protocol, Src Port: 41028 (41028), Dst Port: submission (587), Seq: 153, Ack: 288, Len: 273 Source port: 41028 (41028) Destination port: submission (587) [Stream index: 10] Sequence number: 153 (relative sequence number) [Next sequence number: 426 (relative sequence number)] Acknowledgment number: 288 (relative ack number) Header length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 30016 [Calculated window size: 30016] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xe0f0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1399] [The RTT to ACK the segment was: 0.000159000 seconds] [Bytes in flight: 273] Simple Mail Transfer Protocol C: . [1 DATA fragment (270 bytes): #1400(270)] [Frame: 1400, payload: 0-269 (270 bytes)] [DATA fragment count: 1] [Reassembled DATA length: 270] Internet Message Format MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Type: text/plain Parameters: charset="utf-8" Content-Transfer-Encoding: 7bit Subject: susu From: contact@1avis.fr, 1 item Item: contact@1avis.fr\r\n Address: contact@1avis.fr\r\n To: grignon.florian@gmail.com, 1 item Item: grignon.florian@gmail.com\r\n Address: grignon.florian@gmail.com\r\n Date: Mon, 21 Jul 2014 11:33:45 -0000 Message-ID: <20140721113345.29404.88044@arkade.com>\r\n Line-based text data: text/plain body body\r\n Frame (327 bytes): 0000 00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00 ...B<.t.5.....E. 0010 01 39 88 53 40 00 40 06 f9 e9 c0 a8 00 0b d5 ba .9.S@.@......... 0020 21 14 a0 44 02 4b dd 3c cb e3 5f bf 37 1e 50 18 !..D.K.<.._.7.P. 0030 75 40 e0 f0 00 00 4d 49 4d 45 2d 56 65 72 73 69 u@....MIME-Versi 0040 6f 6e 3a 20 31 2e 30 0d 0a 43 6f 6e 74 65 6e 74 on: 1.0..Content 0050 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 -Type: text/plai 0060 6e 3b 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d n; charset="utf- 0070 38 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 72 61 6e 8"..Content-Tran 0080 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 37 sfer-Encoding: 7 0090 62 69 74 0d 0a 53 75 62 6a 65 63 74 3a 20 73 75 bit..Subject: su 00a0 73 75 0d 0a 46 72 6f 6d 3a 20 63 6f 6e 74 61 63 su..From: contac 00b0 74 40 31 61 76 69 73 2e 66 72 0d 0a 54 6f 3a 20 t@1avis.fr..To: 00c0 67 72 69 67 6e 6f 6e 2e 66 6c 6f 72 69 61 6e 40 grignon.florian@ 00d0 67 6d 61 69 6c 2e 63 6f 6d 0d 0a 44 61 74 65 3a gmail.com..Date: 00e0 20 4d 6f 6e 2c 20 32 31 20 4a 75 6c 20 32 30 31 Mon, 21 Jul 201 00f0 34 20 31 31 3a 33 33 3a 34 35 20 2d 30 30 30 30 4 11:33:45 -0000 0100 0d 0a 4d 65 73 73 61 67 65 2d 49 44 3a 20 3c 32 ..Message-ID: <2 0110 30 31 34 30 37 32 31 31 31 33 33 34 35 2e 32 39 0140721113345.29 0120 34 30 34 2e 38 38 30 34 34 40 61 72 6b 61 64 65 404.88044@arkade 0130 2e 63 6f 6d 3e 0d 0a 0d 0a 62 6f 64 79 20 62 6f .com>....body bo 0140 64 79 0d 0a 2e 0d 0a dy..... Reassembled SMTP (270 bytes): 0000 4d 49 4d 45 2d 56 65 72 73 69 6f 6e 3a 20 31 2e MIME-Version: 1. 0010 30 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 0..Content-Type: 0020 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 text/plain; cha 0030 72 73 65 74 3d 22 75 74 66 2d 38 22 0d 0a 43 6f rset="utf-8"..Co 0040 6e 74 65 6e 74 2d 54 72 61 6e 73 66 65 72 2d 45 ntent-Transfer-E 0050 6e 63 6f 64 69 6e 67 3a 20 37 62 69 74 0d 0a 53 ncoding: 7bit..S 0060 75 62 6a 65 63 74 3a 20 73 75 73 75 0d 0a 46 72 ubject: susu..Fr 0070 6f 6d 3a 20 63 6f 6e 74 61 63 74 40 31 61 76 69 om: contact@1avi 0080 73 2e 66 72 0d 0a 54 6f 3a 20 67 72 69 67 6e 6f s.fr..To: grigno 0090 6e 2e 66 6c 6f 72 69 61 6e 40 67 6d 61 69 6c 2e n.florian@gmail. 00a0 63 6f 6d 0d 0a 44 61 74 65 3a 20 4d 6f 6e 2c 20 com..Date: Mon, 00b0 32 31 20 4a 75 6c 20 32 30 31 34 20 31 31 3a 33 21 Jul 2014 11:3 00c0 33 3a 34 35 20 2d 30 30 30 30 0d 0a 4d 65 73 73 3:45 -0000..Mess 00d0 61 67 65 2d 49 44 3a 20 3c 32 30 31 34 30 37 32 age-ID: <2014072 00e0 31 31 31 33 33 34 35 2e 32 39 34 30 34 2e 38 38 1113345.29404.88 00f0 30 34 34 40 61 72 6b 61 64 65 2e 63 6f 6d 3e 0d 044@arkade.com>. 0100 0a 0d 0a 62 6f 64 79 20 62 6f 64 79 0d 0a ...body body.. No. Time Source Destination Protocol Length Info 1420 117.034436000 213.186.33.20 192.168.0.11 SMTP 81 S: 250 ok 1405942441 qp 2645 Frame 1420: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) on interface 0 Interface id: 0 Encapsulation type: Ethernet (1) Arrival Time: Jul 21, 2014 13:33:45.758485000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1405942425.758485000 seconds [Time delta from previous captured frame: 0.020742000 seconds] [Time delta from previous displayed frame: 0.041711000 seconds] [Time since reference or first frame: 117.034436000 seconds] Frame Number: 1420 Frame Length: 81 bytes (648 bits) Capture Length: 81 bytes (648 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:smtp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 67 Identification: 0x4e40 (20032) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 54 Protocol: TCP (6) Header checksum: 0x3ef3 [validation disabled] [Good: False] [Bad: False] Source: 213.186.33.20 (213.186.33.20) Destination: 192.168.0.11 (192.168.0.11) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] Transmission Control Protocol, Src Port: submission (587), Dst Port: 41028 (41028), Seq: 288, Ack: 426, Len: 27 Source port: submission (587) Destination port: 41028 (41028) [Stream index: 10] Sequence number: 288 (relative sequence number) [Next sequence number: 315 (relative sequence number)] Acknowledgment number: 426 (relative ack number) Header length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 6432 [Calculated window size: 6432] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xffaa [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1400] [The RTT to ACK the segment was: 0.041711000 seconds] [Bytes in flight: 27] Simple Mail Transfer Protocol Response: 250 ok 1405942441 qp 2645\r\n Response code: Requested mail action okay, completed (250) Response parameter: ok 1405942441 qp 2645 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E. 0010 00 43 4e 40 40 00 36 06 3e f3 d5 ba 21 14 c0 a8 .CN@@.6.>...!... 0020 00 0b 02 4b a0 44 5f bf 37 1e dd 3c cc f4 50 18 ...K.D_.7..<..P. 0030 19 20 ff aa 00 00 32 35 30 20 6f 6b 20 31 34 30 . ....250 ok 140 0040 35 39 34 32 34 34 31 20 71 70 20 32 36 34 35 0d 5942441 qp 2645. 0050 0a . No. Time Source Destination Protocol Length Info 1421 117.034537000 192.168.0.11 213.186.33.20 SMTP 60 C: quit Frame 1421: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0 Interface id: 0 Encapsulation type: Ethernet (1) Arrival Time: Jul 21, 2014 13:33:45.758586000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1405942425.758586000 seconds [Time delta from previous captured frame: 0.000101000 seconds] [Time delta from previous displayed frame: 0.000101000 seconds] [Time since reference or first frame: 117.034537000 seconds] Frame Number: 1421 Frame Length: 60 bytes (480 bits) Capture Length: 60 bytes (480 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:smtp] [Number of per-protocol-data: 1] [Simple Mail Transfer Protocol, key 0] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 46 Identification: 0x8854 (34900) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0xfaf3 [validation disabled] [Good: False] [Bad: False] Source: 192.168.0.11 (192.168.0.11) Destination: 213.186.33.20 (213.186.33.20) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] Transmission Control Protocol, Src Port: 41028 (41028), Dst Port: submission (587), Seq: 426, Ack: 315, Len: 6 Source port: 41028 (41028) Destination port: submission (587) [Stream index: 10] Sequence number: 426 (relative sequence number) [Next sequence number: 432 (relative sequence number)] Acknowledgment number: 315 (relative ack number) Header length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 30016 [Calculated window size: 30016] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb756 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1420] [The RTT to ACK the segment was: 0.000101000 seconds] [Bytes in flight: 6] Simple Mail Transfer Protocol Command Line: quit\r\n Command: quit 0000 00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00 ...B<.t.5.....E. 0010 00 2e 88 54 40 00 40 06 fa f3 c0 a8 00 0b d5 ba ...T@.@......... 0020 21 14 a0 44 02 4b dd 3c cc f4 5f bf 37 39 50 18 !..D.K.<.._.79P. 0030 75 40 b7 56 00 00 71 75 69 74 0d 0a u@.V..quit.. No. Time Source Destination Protocol Length Info 1423 117.065033000 213.186.33.20 192.168.0.11 SMTP 119 S: 221 ns0.ovh.net ssl0.ovh.net. You connect to mail407.ha.ovh.net Frame 1423: 119 bytes on wire (952 bits), 119 bytes captured (952 bits) on interface 0 Interface id: 0 Encapsulation type: Ethernet (1) Arrival Time: Jul 21, 2014 13:33:45.789082000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1405942425.789082000 seconds [Time delta from previous captured frame: 0.013086000 seconds] [Time delta from previous displayed frame: 0.030496000 seconds] [Time since reference or first frame: 117.065033000 seconds] Frame Number: 1423 Frame Length: 119 bytes (952 bits) Capture Length: 119 bytes (952 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:smtp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 105 Identification: 0x4e41 (20033) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 54 Protocol: TCP (6) Header checksum: 0x3ecc [validation disabled] [Good: False] [Bad: False] Source: 213.186.33.20 (213.186.33.20) Destination: 192.168.0.11 (192.168.0.11) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] Transmission Control Protocol, Src Port: submission (587), Dst Port: 41028 (41028), Seq: 315, Ack: 432, Len: 65 Source port: submission (587) Destination port: 41028 (41028) [Stream index: 10] Sequence number: 315 (relative sequence number) [Next sequence number: 380 (relative sequence number)] Acknowledgment number: 432 (relative ack number) Header length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 6432 [Calculated window size: 6432] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x983b [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1421] [The RTT to ACK the segment was: 0.030496000 seconds] [Bytes in flight: 65] Simple Mail Transfer Protocol Response: 221 ns0.ovh.net ssl0.ovh.net. You connect to mail407.ha.ovh.net\r\n Response code: Service closing transmission channel (221) Response parameter: ns0.ovh.net ssl0.ovh.net. You connect to mail407.ha.ovh.net 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E. 0010 00 69 4e 41 40 00 36 06 3e cc d5 ba 21 14 c0 a8 .iNA@.6.>...!... 0020 00 0b 02 4b a0 44 5f bf 37 39 dd 3c cc fa 50 18 ...K.D_.79.<..P. 0030 19 20 98 3b 00 00 32 32 31 20 6e 73 30 2e 6f 76 . .;..221 ns0.ov 0040 68 2e 6e 65 74 20 73 73 6c 30 2e 6f 76 68 2e 6e h.net ssl0.ovh.n 0050 65 74 2e 20 59 6f 75 20 63 6f 6e 6e 65 63 74 20 et. You connect 0060 74 6f 20 6d 61 69 6c 34 30 37 2e 68 61 2e 6f 76 to mail407.ha.ov 0070 68 2e 6e 65 74 0d 0a h.net..