No. Time Source Destination Protocol Length Info 311 25.402773000 213.186.33.20 192.168.0.11 SMTP 81 S: 235 ok, go ahead (#2.0.0) Frame 311: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) on interface 0 Interface id: 0 Encapsulation type: Ethernet (1) Arrival Time: Jul 21, 2014 13:36:50.632821000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1405942610.632821000 seconds [Time delta from previous captured frame: 0.013830000 seconds] [Time delta from previous displayed frame: 0.017149000 seconds] [Time since reference or first frame: 25.402773000 seconds] Frame Number: 311 Frame Length: 81 bytes (648 bits) Capture Length: 81 bytes (648 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:smtp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 67 Identification: 0xdd30 (56624) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 54 Protocol: TCP (6) Header checksum: 0xb002 [validation disabled] [Good: False] [Bad: False] Source: 213.186.33.20 (213.186.33.20) Destination: 192.168.0.11 (192.168.0.11) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 231, Ack: 71, Len: 27 Source port: submission (587) Destination port: 41975 (41975) [Stream index: 9] Sequence number: 231 (relative sequence number) [Next sequence number: 258 (relative sequence number)] Acknowledgment number: 71 (relative ack number) Header length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 5840 [Calculated window size: 5840] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6bcc [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [Bytes in flight: 27] Simple Mail Transfer Protocol Response: 235 ok, go ahead (#2.0.0)\r\n Response code: Authentication successful (235) Response parameter: ok, go ahead (#2.0.0) 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E. 0010 00 43 dd 30 40 00 36 06 b0 02 d5 ba 21 14 c0 a8 .C.0@.6.....!... 0020 00 0b 02 4b a3 f7 d7 23 b7 ad a5 b1 73 8c 50 18 ...K...#....s.P. 0030 16 d0 6b cc 00 00 32 33 35 20 6f 6b 2c 20 67 6f ..k...235 ok, go 0040 20 61 68 65 61 64 20 28 23 32 2e 30 2e 30 29 0d ahead (#2.0.0). 0050 0a . No. Time Source Destination Protocol Length Info 312 25.405401000 192.168.0.11 213.186.33.20 SMTP 93 C: mail FROM: size=259 Frame 312: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) on interface 0 Interface id: 0 Encapsulation type: Ethernet (1) Arrival Time: Jul 21, 2014 13:36:50.635449000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1405942610.635449000 seconds [Time delta from previous captured frame: 0.002628000 seconds] [Time delta from previous displayed frame: 0.002628000 seconds] [Time since reference or first frame: 25.405401000 seconds] Frame Number: 312 Frame Length: 93 bytes (744 bits) Capture Length: 93 bytes (744 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:smtp] [Number of per-protocol-data: 1] [Simple Mail Transfer Protocol, key 0] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 79 Identification: 0x84ef (34031) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0xfe37 [validation disabled] [Good: False] [Bad: False] Source: 192.168.0.11 (192.168.0.11) Destination: 213.186.33.20 (213.186.33.20) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] Transmission Control Protocol, Src Port: 41975 (41975), Dst Port: submission (587), Seq: 71, Ack: 258, Len: 39 Source port: 41975 (41975) Destination port: submission (587) [Stream index: 9] Sequence number: 71 (relative sequence number) [Next sequence number: 110 (relative sequence number)] Acknowledgment number: 258 (relative ack number) Header length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 30016 [Calculated window size: 30016] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0a04 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 311] [The RTT to ACK the segment was: 0.002628000 seconds] [Bytes in flight: 39] Simple Mail Transfer Protocol Command Line: mail FROM: size=259\r\n Command: mail Request parameter: FROM: size=259 0000 00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00 ...B<.t.5.....E. 0010 00 4f 84 ef 40 00 40 06 fe 37 c0 a8 00 0b d5 ba .O..@.@..7...... 0020 21 14 a3 f7 02 4b a5 b1 73 8c d7 23 b7 c8 50 18 !....K..s..#..P. 0030 75 40 0a 04 00 00 6d 61 69 6c 20 46 52 4f 4d 3a u@....mail FROM: 0040 3c 63 6f 6e 74 61 63 74 40 31 61 76 69 73 2e 66 size=259.. No. Time Source Destination Protocol Length Info 313 25.437986000 213.186.33.20 192.168.0.11 TCP 62 submission > 41975 [ACK] Seq=258 Ack=110 Win=5840 Len=0 Frame 313: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 Encapsulation type: Ethernet (1) Arrival Time: Jul 21, 2014 13:36:50.668034000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1405942610.668034000 seconds [Time delta from previous captured frame: 0.032585000 seconds] [Time delta from previous displayed frame: 0.032585000 seconds] [Time since reference or first frame: 25.437986000 seconds] Frame Number: 313 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:vssmonitoring] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Padding: 000000000000 Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 40 Identification: 0xdd31 (56625) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 54 Protocol: TCP (6) Header checksum: 0xb01c [validation disabled] [Good: False] [Bad: False] Source: 213.186.33.20 (213.186.33.20) Destination: 192.168.0.11 (192.168.0.11) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 258, Ack: 110, Len: 0 Source port: submission (587) Destination port: 41975 (41975) [Stream index: 9] Sequence number: 258 (relative sequence number) Acknowledgment number: 110 (relative ack number) Header length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 5840 [Calculated window size: 5840] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x92ee [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 312] [The RTT to ACK the segment was: 0.032585000 seconds] VSS-Monitoring ethernet trailer, Source Port: 0 Src Port: 0 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E. 0010 00 28 dd 31 40 00 36 06 b0 1c d5 ba 21 14 c0 a8 .(.1@.6.....!... 0020 00 0b 02 4b a3 f7 d7 23 b7 c8 a5 b1 73 b3 50 10 ...K...#....s.P. 0030 16 d0 92 ee 00 00 00 00 00 00 00 00 00 00 .............. No. Time Source Destination Protocol Length Info 314 25.439404000 213.186.33.20 192.168.0.11 SMTP 62 S: 250 ok Frame 314: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 Encapsulation type: Ethernet (1) Arrival Time: Jul 21, 2014 13:36:50.669452000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1405942610.669452000 seconds [Time delta from previous captured frame: 0.001418000 seconds] [Time delta from previous displayed frame: 0.001418000 seconds] [Time since reference or first frame: 25.439404000 seconds] Frame Number: 314 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:smtp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 48 Identification: 0xdd32 (56626) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 54 Protocol: TCP (6) Header checksum: 0xb013 [validation disabled] [Good: False] [Bad: False] Source: 213.186.33.20 (213.186.33.20) Destination: 192.168.0.11 (192.168.0.11) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 258, Ack: 110, Len: 8 Source port: submission (587) Destination port: 41975 (41975) [Stream index: 9] Sequence number: 258 (relative sequence number) [Next sequence number: 266 (relative sequence number)] Acknowledgment number: 110 (relative ack number) Header length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 5840 [Calculated window size: 5840] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb413 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [Bytes in flight: 8] Simple Mail Transfer Protocol Response: 250 ok\r\n Response code: Requested mail action okay, completed (250) Response parameter: ok 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E. 0010 00 30 dd 32 40 00 36 06 b0 13 d5 ba 21 14 c0 a8 .0.2@.6.....!... 0020 00 0b 02 4b a3 f7 d7 23 b7 c8 a5 b1 73 b3 50 18 ...K...#....s.P. 0030 16 d0 b4 13 00 00 32 35 30 20 6f 6b 0d 0a ......250 ok.. No. Time Source Destination Protocol Length Info 315 25.439709000 192.168.0.11 213.186.33.20 SMTP 91 C: rcpt TO: Frame 315: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) on interface 0 Interface id: 0 Encapsulation type: Ethernet (1) Arrival Time: Jul 21, 2014 13:36:50.669757000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1405942610.669757000 seconds [Time delta from previous captured frame: 0.000305000 seconds] [Time delta from previous displayed frame: 0.000305000 seconds] [Time since reference or first frame: 25.439709000 seconds] Frame Number: 315 Frame Length: 91 bytes (728 bits) Capture Length: 91 bytes (728 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:smtp] [Number of per-protocol-data: 1] [Simple Mail Transfer Protocol, key 0] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 77 Identification: 0x84f0 (34032) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0xfe38 [validation disabled] [Good: False] [Bad: False] Source: 192.168.0.11 (192.168.0.11) Destination: 213.186.33.20 (213.186.33.20) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] Transmission Control Protocol, Src Port: 41975 (41975), Dst Port: submission (587), Seq: 110, Ack: 266, Len: 37 Source port: 41975 (41975) Destination port: submission (587) [Stream index: 9] Sequence number: 110 (relative sequence number) [Next sequence number: 147 (relative sequence number)] Acknowledgment number: 266 (relative ack number) Header length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 30016 [Calculated window size: 30016] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf074 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 314] [The RTT to ACK the segment was: 0.000305000 seconds] [Bytes in flight: 37] Simple Mail Transfer Protocol Command Line: rcpt TO:\r\n Command: rcpt Request parameter: TO: 0000 00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00 ...B<.t.5.....E. 0010 00 4d 84 f0 40 00 40 06 fe 38 c0 a8 00 0b d5 ba .M..@.@..8...... 0020 21 14 a3 f7 02 4b a5 b1 73 b3 d7 23 b7 d0 50 18 !....K..s..#..P. 0030 75 40 f0 74 00 00 72 63 70 74 20 54 4f 3a 3c 67 u@.t..rcpt TO:.. No. Time Source Destination Protocol Length Info 316 25.471723000 213.186.33.20 192.168.0.11 SMTP 62 S: 250 ok Frame 316: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 Encapsulation type: Ethernet (1) Arrival Time: Jul 21, 2014 13:36:50.701771000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1405942610.701771000 seconds [Time delta from previous captured frame: 0.032014000 seconds] [Time delta from previous displayed frame: 0.032014000 seconds] [Time since reference or first frame: 25.471723000 seconds] Frame Number: 316 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:smtp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 48 Identification: 0xdd33 (56627) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 54 Protocol: TCP (6) Header checksum: 0xb012 [validation disabled] [Good: False] [Bad: False] Source: 213.186.33.20 (213.186.33.20) Destination: 192.168.0.11 (192.168.0.11) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 266, Ack: 147, Len: 8 Source port: submission (587) Destination port: 41975 (41975) [Stream index: 9] Sequence number: 266 (relative sequence number) [Next sequence number: 274 (relative sequence number)] Acknowledgment number: 147 (relative ack number) Header length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 5840 [Calculated window size: 5840] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb3e6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 315] [The RTT to ACK the segment was: 0.032014000 seconds] [Bytes in flight: 8] Simple Mail Transfer Protocol Response: 250 ok\r\n Response code: Requested mail action okay, completed (250) Response parameter: ok 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E. 0010 00 30 dd 33 40 00 36 06 b0 12 d5 ba 21 14 c0 a8 .0.3@.6.....!... 0020 00 0b 02 4b a3 f7 d7 23 b7 d0 a5 b1 73 d8 50 18 ...K...#....s.P. 0030 16 d0 b3 e6 00 00 32 35 30 20 6f 6b 0d 0a ......250 ok.. No. Time Source Destination Protocol Length Info 317 25.471846000 192.168.0.11 213.186.33.20 SMTP 60 C: data Frame 317: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0 Interface id: 0 Encapsulation type: Ethernet (1) Arrival Time: Jul 21, 2014 13:36:50.701894000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1405942610.701894000 seconds [Time delta from previous captured frame: 0.000123000 seconds] [Time delta from previous displayed frame: 0.000123000 seconds] [Time since reference or first frame: 25.471846000 seconds] Frame Number: 317 Frame Length: 60 bytes (480 bits) Capture Length: 60 bytes (480 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:smtp] [Number of per-protocol-data: 1] [Simple Mail Transfer Protocol, key 0] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 46 Identification: 0x84f1 (34033) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0xfe56 [validation disabled] [Good: False] [Bad: False] Source: 192.168.0.11 (192.168.0.11) Destination: 213.186.33.20 (213.186.33.20) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] Transmission Control Protocol, Src Port: 41975 (41975), Dst Port: submission (587), Seq: 147, Ack: 274, Len: 6 Source port: 41975 (41975) Destination port: submission (587) [Stream index: 9] Sequence number: 147 (relative sequence number) [Next sequence number: 153 (relative sequence number)] Acknowledgment number: 274 (relative ack number) Header length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 30016 [Calculated window size: 30016] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x4e6e [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 316] [The RTT to ACK the segment was: 0.000123000 seconds] [Bytes in flight: 6] Simple Mail Transfer Protocol Command Line: data\r\n Command: data 0000 00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00 ...B<.t.5.....E. 0010 00 2e 84 f1 40 00 40 06 fe 56 c0 a8 00 0b d5 ba ....@.@..V...... 0020 21 14 a3 f7 02 4b a5 b1 73 d8 d7 23 b7 d8 50 18 !....K..s..#..P. 0030 75 40 4e 6e 00 00 64 61 74 61 0d 0a u@Nn..data.. No. Time Source Destination Protocol Length Info 318 25.503549000 213.186.33.20 192.168.0.11 SMTP 68 S: 354 go ahead Frame 318: 68 bytes on wire (544 bits), 68 bytes captured (544 bits) on interface 0 Interface id: 0 Encapsulation type: Ethernet (1) Arrival Time: Jul 21, 2014 13:36:50.733597000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1405942610.733597000 seconds [Time delta from previous captured frame: 0.031703000 seconds] [Time delta from previous displayed frame: 0.031703000 seconds] [Time since reference or first frame: 25.503549000 seconds] Frame Number: 318 Frame Length: 68 bytes (544 bits) Capture Length: 68 bytes (544 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:smtp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 54 Identification: 0xdd34 (56628) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 54 Protocol: TCP (6) Header checksum: 0xb00b [validation disabled] [Good: False] [Bad: False] Source: 213.186.33.20 (213.186.33.20) Destination: 192.168.0.11 (192.168.0.11) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 274, Ack: 153, Len: 14 Source port: submission (587) Destination port: 41975 (41975) [Stream index: 9] Sequence number: 274 (relative sequence number) [Next sequence number: 288 (relative sequence number)] Acknowledgment number: 153 (relative ack number) Header length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 5840 [Calculated window size: 5840] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xcca3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 317] [The RTT to ACK the segment was: 0.031703000 seconds] [Bytes in flight: 14] Simple Mail Transfer Protocol Response: 354 go ahead\r\n Response code: Start mail input; end with . (354) Response parameter: go ahead 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E. 0010 00 36 dd 34 40 00 36 06 b0 0b d5 ba 21 14 c0 a8 .6.4@.6.....!... 0020 00 0b 02 4b a3 f7 d7 23 b7 d8 a5 b1 73 de 50 18 ...K...#....s.P. 0030 16 d0 cc a3 00 00 33 35 34 20 67 6f 20 61 68 65 ......354 go ahe 0040 61 64 0d 0a ad.. No. Time Source Destination Protocol Length Info 319 25.503854000 192.168.0.11 213.186.33.20 IMF 318 [Malformed Packet] Frame 319: 318 bytes on wire (2544 bits), 318 bytes captured (2544 bits) on interface 0 Interface id: 0 Encapsulation type: Ethernet (1) Arrival Time: Jul 21, 2014 13:36:50.733902000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1405942610.733902000 seconds [Time delta from previous captured frame: 0.000305000 seconds] [Time delta from previous displayed frame: 0.000305000 seconds] [Time since reference or first frame: 25.503854000 seconds] Frame Number: 319 Frame Length: 318 bytes (2544 bits) Capture Length: 318 bytes (2544 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:smtp:imf] [Number of per-protocol-data: 1] [Simple Mail Transfer Protocol, key 0] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 304 Identification: 0x84f2 (34034) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0xfd53 [validation disabled] [Good: False] [Bad: False] Source: 192.168.0.11 (192.168.0.11) Destination: 213.186.33.20 (213.186.33.20) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] Transmission Control Protocol, Src Port: 41975 (41975), Dst Port: submission (587), Seq: 153, Ack: 288, Len: 264 Source port: 41975 (41975) Destination port: submission (587) [Stream index: 9] Sequence number: 153 (relative sequence number) [Next sequence number: 417 (relative sequence number)] Acknowledgment number: 288 (relative ack number) Header length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 30016 [Calculated window size: 30016] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xc8d4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 318] [The RTT to ACK the segment was: 0.000305000 seconds] [Bytes in flight: 264] Simple Mail Transfer Protocol C: . [1 DATA fragment (261 bytes): #319(261)] [Frame: 319, payload: 0-260 (261 bytes)] [DATA fragment count: 1] [Reassembled DATA length: 261] Internet Message Format [Malformed Packet: IMF] [Expert Info (Error/Malformed): Malformed Packet (Exception occurred)] [Message: Malformed Packet (Exception occurred)] [Severity level: Error] [Group: Malformed] Frame (318 bytes): 0000 00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00 ...B<.t.5.....E. 0010 01 30 84 f2 40 00 40 06 fd 53 c0 a8 00 0b d5 ba .0..@.@..S...... 0020 21 14 a3 f7 02 4b a5 b1 73 de d7 23 b7 e6 50 18 !....K..s..#..P. 0030 75 40 c8 d4 00 00 4d 49 4d 45 2d 56 65 72 73 69 u@....MIME-Versi 0040 6f 6e 3a 20 31 2e 30 0a 43 6f 6e 74 65 6e 74 2d on: 1.0.Content- 0050 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e Type: text/plain 0060 3b 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 ; charset="utf-8 0070 22 0a 43 6f 6e 74 65 6e 74 2d 54 72 61 6e 73 66 ".Content-Transf 0080 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 37 62 69 er-Encoding: 7bi 0090 74 0a 53 75 62 6a 65 63 74 3a 20 73 75 73 75 0a t.Subject: susu. 00a0 46 72 6f 6d 3a 20 63 6f 6e 74 61 63 74 40 31 61 From: contact@1a 00b0 76 69 73 2e 66 72 0a 54 6f 3a 20 67 72 69 67 6e vis.fr.To: grign 00c0 6f 6e 2e 66 6c 6f 72 69 61 6e 40 67 6d 61 69 6c on.florian@gmail 00d0 2e 63 6f 6d 0a 44 61 74 65 3a 20 4d 6f 6e 2c 20 .com.Date: Mon, 00e0 32 31 20 4a 75 6c 20 32 30 31 34 20 31 31 3a 33 21 Jul 2014 11:3 00f0 36 3a 35 30 20 2d 30 30 30 30 0a 4d 65 73 73 61 6:50 -0000.Messa 0100 67 65 2d 49 44 3a 20 3c 32 30 31 34 30 37 32 31 ge-ID: <20140721 0110 31 31 33 36 35 30 2e 33 31 30 33 39 2e 34 30 35 113650.31039.405 0120 35 36 40 61 72 6b 61 64 65 2e 63 6f 6d 3e 0a 0a 56@arkade.com>.. 0130 62 6f 64 79 20 62 6f 64 79 0d 0a 2e 0d 0a body body..... Reassembled SMTP (261 bytes): 0000 4d 49 4d 45 2d 56 65 72 73 69 6f 6e 3a 20 31 2e MIME-Version: 1. 0010 30 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 0.Content-Type: 0020 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 text/plain; char 0030 73 65 74 3d 22 75 74 66 2d 38 22 0a 43 6f 6e 74 set="utf-8".Cont 0040 65 6e 74 2d 54 72 61 6e 73 66 65 72 2d 45 6e 63 ent-Transfer-Enc 0050 6f 64 69 6e 67 3a 20 37 62 69 74 0a 53 75 62 6a oding: 7bit.Subj 0060 65 63 74 3a 20 73 75 73 75 0a 46 72 6f 6d 3a 20 ect: susu.From: 0070 63 6f 6e 74 61 63 74 40 31 61 76 69 73 2e 66 72 contact@1avis.fr 0080 0a 54 6f 3a 20 67 72 69 67 6e 6f 6e 2e 66 6c 6f .To: grignon.flo 0090 72 69 61 6e 40 67 6d 61 69 6c 2e 63 6f 6d 0a 44 rian@gmail.com.D 00a0 61 74 65 3a 20 4d 6f 6e 2c 20 32 31 20 4a 75 6c ate: Mon, 21 Jul 00b0 20 32 30 31 34 20 31 31 3a 33 36 3a 35 30 20 2d 2014 11:36:50 - 00c0 30 30 30 30 0a 4d 65 73 73 61 67 65 2d 49 44 3a 0000.Message-ID: 00d0 20 3c 32 30 31 34 30 37 32 31 31 31 33 36 35 30 <20140721113650 00e0 2e 33 31 30 33 39 2e 34 30 35 35 36 40 61 72 6b .31039.40556@ark 00f0 61 64 65 2e 63 6f 6d 3e 0a 0a 62 6f 64 79 20 62 ade.com>..body b 0100 6f 64 79 0d 0a ody.. No. Time Source Destination Protocol Length Info 320 25.541763000 213.186.33.20 192.168.0.11 SMTP 109 S: 554 mail server permanently rejected message (#5.3.0) Frame 320: 109 bytes on wire (872 bits), 109 bytes captured (872 bits) on interface 0 Interface id: 0 Encapsulation type: Ethernet (1) Arrival Time: Jul 21, 2014 13:36:50.771811000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1405942610.771811000 seconds [Time delta from previous captured frame: 0.037909000 seconds] [Time delta from previous displayed frame: 0.037909000 seconds] [Time since reference or first frame: 25.541763000 seconds] Frame Number: 320 Frame Length: 109 bytes (872 bits) Capture Length: 109 bytes (872 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:smtp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 95 Identification: 0xdd35 (56629) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 54 Protocol: TCP (6) Header checksum: 0xafe1 [validation disabled] [Good: False] [Bad: False] Source: 213.186.33.20 (213.186.33.20) Destination: 192.168.0.11 (192.168.0.11) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 288, Ack: 417, Len: 55 Source port: submission (587) Destination port: 41975 (41975) [Stream index: 9] Sequence number: 288 (relative sequence number) [Next sequence number: 343 (relative sequence number)] Acknowledgment number: 417 (relative ack number) Header length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 6432 [Calculated window size: 6432] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x702a [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 319] [The RTT to ACK the segment was: 0.037909000 seconds] [Bytes in flight: 55] Simple Mail Transfer Protocol Response: 554 mail server permanently rejected message (#5.3.0)\r\n Response code: Transaction failed (554) Response parameter: mail server permanently rejected message (#5.3.0) 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E. 0010 00 5f dd 35 40 00 36 06 af e1 d5 ba 21 14 c0 a8 ._.5@.6.....!... 0020 00 0b 02 4b a3 f7 d7 23 b7 e6 a5 b1 74 e6 50 18 ...K...#....t.P. 0030 19 20 70 2a 00 00 35 35 34 20 6d 61 69 6c 20 73 . p*..554 mail s 0040 65 72 76 65 72 20 70 65 72 6d 61 6e 65 6e 74 6c erver permanentl 0050 79 20 72 65 6a 65 63 74 65 64 20 6d 65 73 73 61 y rejected messa 0060 67 65 20 28 23 35 2e 33 2e 30 29 0d 0a ge (#5.3.0).. No. Time Source Destination Protocol Length Info 321 25.541931000 192.168.0.11 213.186.33.20 SMTP 60 C: rset Frame 321: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0 Interface id: 0 Encapsulation type: Ethernet (1) Arrival Time: Jul 21, 2014 13:36:50.771979000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1405942610.771979000 seconds [Time delta from previous captured frame: 0.000168000 seconds] [Time delta from previous displayed frame: 0.000168000 seconds] [Time since reference or first frame: 25.541931000 seconds] Frame Number: 321 Frame Length: 60 bytes (480 bits) Capture Length: 60 bytes (480 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:smtp] [Number of per-protocol-data: 1] [Simple Mail Transfer Protocol, key 0] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 46 Identification: 0x84f3 (34035) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0xfe54 [validation disabled] [Good: False] [Bad: False] Source: 192.168.0.11 (192.168.0.11) Destination: 213.186.33.20 (213.186.33.20) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] Transmission Control Protocol, Src Port: 41975 (41975), Dst Port: submission (587), Seq: 417, Ack: 343, Len: 6 Source port: 41975 (41975) Destination port: submission (587) [Stream index: 9] Sequence number: 417 (relative sequence number) [Next sequence number: 423 (relative sequence number)] Acknowledgment number: 343 (relative ack number) Header length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 30016 [Calculated window size: 30016] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x4df6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 320] [The RTT to ACK the segment was: 0.000168000 seconds] [Bytes in flight: 6] Simple Mail Transfer Protocol Command Line: rset\r\n Command: rset 0000 00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00 ...B<.t.5.....E. 0010 00 2e 84 f3 40 00 40 06 fe 54 c0 a8 00 0b d5 ba ....@.@..T...... 0020 21 14 a3 f7 02 4b a5 b1 74 e6 d7 23 b8 1d 50 18 !....K..t..#..P. 0030 75 40 4d f6 00 00 72 73 65 74 0d 0a u@M...rset.. No. Time Source Destination Protocol Length Info 322 25.572810000 213.186.33.20 192.168.0.11 SMTP 67 S: 250 flushed Frame 322: 67 bytes on wire (536 bits), 67 bytes captured (536 bits) on interface 0 Interface id: 0 Encapsulation type: Ethernet (1) Arrival Time: Jul 21, 2014 13:36:50.802858000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1405942610.802858000 seconds [Time delta from previous captured frame: 0.030879000 seconds] [Time delta from previous displayed frame: 0.030879000 seconds] [Time since reference or first frame: 25.572810000 seconds] Frame Number: 322 Frame Length: 67 bytes (536 bits) Capture Length: 67 bytes (536 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:smtp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 53 Identification: 0xdd36 (56630) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 54 Protocol: TCP (6) Header checksum: 0xb00a [validation disabled] [Good: False] [Bad: False] Source: 213.186.33.20 (213.186.33.20) Destination: 192.168.0.11 (192.168.0.11) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 343, Ack: 423, Len: 13 Source port: submission (587) Destination port: 41975 (41975) [Stream index: 9] Sequence number: 343 (relative sequence number) [Next sequence number: 356 (relative sequence number)] Acknowledgment number: 423 (relative ack number) Header length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 6432 [Calculated window size: 6432] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7a53 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 321] [The RTT to ACK the segment was: 0.030879000 seconds] [Bytes in flight: 13] Simple Mail Transfer Protocol Response: 250 flushed\r\n Response code: Requested mail action okay, completed (250) Response parameter: flushed 0000 74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00 t.5......B<...E. 0010 00 35 dd 36 40 00 36 06 b0 0a d5 ba 21 14 c0 a8 .5.6@.6.....!... 0020 00 0b 02 4b a3 f7 d7 23 b8 1d a5 b1 74 ec 50 18 ...K...#....t.P. 0030 19 20 7a 53 00 00 32 35 30 20 66 6c 75 73 68 65 . zS..250 flushe 0040 64 0d 0a d..