No.     Time           Source                Destination           Protocol Length Info
   1391 116.892804000  213.186.33.20         192.168.0.11          SMTP     81     S: 235 ok, go ahead (#2.0.0)

Frame 1391: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Jul 21, 2014 13:33:45.616853000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1405942425.616853000 seconds
    [Time delta from previous captured frame: 0.016991000 seconds]
    [Time delta from previous displayed frame: 0.016991000 seconds]
    [Time since reference or first frame: 116.892804000 seconds]
    Frame Number: 1391
    Frame Length: 81 bytes (648 bits)
    Capture Length: 81 bytes (648 bits)
    [Frame is marked: True]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:smtp]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
    Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 67
    Identification: 0x4e3b (20027)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (6)
    Header checksum: 0x3ef8 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 213.186.33.20 (213.186.33.20)
    Destination: 192.168.0.11 (192.168.0.11)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: submission (587), Dst Port: 41028 (41028), Seq: 231, Ack: 71, Len: 27
    Source port: submission (587)
    Destination port: 41028 (41028)
    [Stream index: 10]
    Sequence number: 231    (relative sequence number)
    [Next sequence number: 258    (relative sequence number)]
    Acknowledgment number: 71    (relative ack number)
    Header length: 20 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 5840
    [Calculated window size: 5840]
    [Window size scaling factor: -2 (no window scaling used)]
    Checksum: 0xd81b [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    [SEQ/ACK analysis]
        [Bytes in flight: 27]
Simple Mail Transfer Protocol
    Response: 235 ok, go ahead (#2.0.0)\r\n
        Response code: Authentication successful (235)
        Response parameter: ok, go ahead (#2.0.0)

0000  74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00   t.5......B<...E.
0010  00 43 4e 3b 40 00 36 06 3e f8 d5 ba 21 14 c0 a8   .CN;@.6.>...!...
0020  00 0b 02 4b a0 44 5f bf 36 e5 dd 3c cb 91 50 18   ...K.D_.6..<..P.
0030  16 d0 d8 1b 00 00 32 33 35 20 6f 6b 2c 20 67 6f   ......235 ok, go
0040  20 61 68 65 61 64 20 28 23 32 2e 30 2e 30 29 0d    ahead (#2.0.0).
0050  0a                                                .

No.     Time           Source                Destination           Protocol Length Info
   1392 116.894480000  192.168.0.11          213.186.33.20         SMTP     93     C: mail FROM:<contact@1avis.fr> size=259

Frame 1392: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Jul 21, 2014 13:33:45.618529000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1405942425.618529000 seconds
    [Time delta from previous captured frame: 0.001676000 seconds]
    [Time delta from previous displayed frame: 0.001676000 seconds]
    [Time since reference or first frame: 116.894480000 seconds]
    Frame Number: 1392
    Frame Length: 93 bytes (744 bits)
    Capture Length: 93 bytes (744 bits)
    [Frame is marked: True]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:smtp]
    [Number of per-protocol-data: 1]
    [Simple Mail Transfer Protocol, key 0]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
    Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 79
    Identification: 0x8850 (34896)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0xfad6 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 192.168.0.11 (192.168.0.11)
    Destination: 213.186.33.20 (213.186.33.20)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 41028 (41028), Dst Port: submission (587), Seq: 71, Ack: 258, Len: 39
    Source port: 41028 (41028)
    Destination port: submission (587)
    [Stream index: 10]
    Sequence number: 71    (relative sequence number)
    [Next sequence number: 110    (relative sequence number)]
    Acknowledgment number: 258    (relative ack number)
    Header length: 20 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 30016
    [Calculated window size: 30016]
    [Window size scaling factor: -2 (no window scaling used)]
    Checksum: 0x7653 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 1391]
        [The RTT to ACK the segment was: 0.001676000 seconds]
        [Bytes in flight: 39]
Simple Mail Transfer Protocol
    Command Line: mail FROM:<contact@1avis.fr> size=259\r\n
        Command: mail
        Request parameter: FROM:<contact@1avis.fr> size=259

0000  00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00   ...B<.t.5.....E.
0010  00 4f 88 50 40 00 40 06 fa d6 c0 a8 00 0b d5 ba   .O.P@.@.........
0020  21 14 a0 44 02 4b dd 3c cb 91 5f bf 37 00 50 18   !..D.K.<.._.7.P.
0030  75 40 76 53 00 00 6d 61 69 6c 20 46 52 4f 4d 3a   u@vS..mail FROM:
0040  3c 63 6f 6e 74 61 63 74 40 31 61 76 69 73 2e 66   <contact@1avis.f
0050  72 3e 20 73 69 7a 65 3d 32 35 39 0d 0a            r> size=259..

No.     Time           Source                Destination           Protocol Length Info
   1394 116.927967000  213.186.33.20         192.168.0.11          TCP      62     submission > 41028 [ACK] Seq=258 Ack=110 Win=5840 Len=0

Frame 1394: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Jul 21, 2014 13:33:45.652016000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1405942425.652016000 seconds
    [Time delta from previous captured frame: 0.019805000 seconds]
    [Time delta from previous displayed frame: 0.033487000 seconds]
    [Time since reference or first frame: 116.927967000 seconds]
    Frame Number: 1394
    Frame Length: 62 bytes (496 bits)
    Capture Length: 62 bytes (496 bits)
    [Frame is marked: True]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:vssmonitoring]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
    Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
    Padding: 000000000000
Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 40
    Identification: 0x4e3c (20028)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (6)
    Header checksum: 0x3f12 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 213.186.33.20 (213.186.33.20)
    Destination: 192.168.0.11 (192.168.0.11)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: submission (587), Dst Port: 41028 (41028), Seq: 258, Ack: 110, Len: 0
    Source port: submission (587)
    Destination port: 41028 (41028)
    [Stream index: 10]
    Sequence number: 258    (relative sequence number)
    Acknowledgment number: 110    (relative ack number)
    Header length: 20 bytes
    Flags: 0x010 (ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 0... = Push: Not set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 5840
    [Calculated window size: 5840]
    [Window size scaling factor: -2 (no window scaling used)]
    Checksum: 0xff3d [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 1392]
        [The RTT to ACK the segment was: 0.033487000 seconds]
VSS-Monitoring ethernet trailer, Source Port: 0
    Src Port: 0

0000  74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00   t.5......B<...E.
0010  00 28 4e 3c 40 00 36 06 3f 12 d5 ba 21 14 c0 a8   .(N<@.6.?...!...
0020  00 0b 02 4b a0 44 5f bf 37 00 dd 3c cb b8 50 10   ...K.D_.7..<..P.
0030  16 d0 ff 3d 00 00 00 00 00 00 00 00 00 00         ...=..........

No.     Time           Source                Destination           Protocol Length Info
   1395 116.928672000  213.186.33.20         192.168.0.11          SMTP     62     S: 250 ok

Frame 1395: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Jul 21, 2014 13:33:45.652721000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1405942425.652721000 seconds
    [Time delta from previous captured frame: 0.000705000 seconds]
    [Time delta from previous displayed frame: 0.000705000 seconds]
    [Time since reference or first frame: 116.928672000 seconds]
    Frame Number: 1395
    Frame Length: 62 bytes (496 bits)
    Capture Length: 62 bytes (496 bits)
    [Frame is marked: True]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:smtp]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
    Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 48
    Identification: 0x4e3d (20029)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (6)
    Header checksum: 0x3f09 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 213.186.33.20 (213.186.33.20)
    Destination: 192.168.0.11 (192.168.0.11)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: submission (587), Dst Port: 41028 (41028), Seq: 258, Ack: 110, Len: 8
    Source port: submission (587)
    Destination port: 41028 (41028)
    [Stream index: 10]
    Sequence number: 258    (relative sequence number)
    [Next sequence number: 266    (relative sequence number)]
    Acknowledgment number: 110    (relative ack number)
    Header length: 20 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 5840
    [Calculated window size: 5840]
    [Window size scaling factor: -2 (no window scaling used)]
    Checksum: 0x2063 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    [SEQ/ACK analysis]
        [Bytes in flight: 8]
Simple Mail Transfer Protocol
    Response: 250 ok\r\n
        Response code: Requested mail action okay, completed (250)
        Response parameter: ok

0000  74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00   t.5......B<...E.
0010  00 30 4e 3d 40 00 36 06 3f 09 d5 ba 21 14 c0 a8   .0N=@.6.?...!...
0020  00 0b 02 4b a0 44 5f bf 37 00 dd 3c cb b8 50 18   ...K.D_.7..<..P.
0030  16 d0 20 63 00 00 32 35 30 20 6f 6b 0d 0a         .. c..250 ok..

No.     Time           Source                Destination           Protocol Length Info
   1396 116.929080000  192.168.0.11          213.186.33.20         SMTP     91     C: rcpt TO:<grignon.florian@gmail.com>

Frame 1396: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Jul 21, 2014 13:33:45.653129000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1405942425.653129000 seconds
    [Time delta from previous captured frame: 0.000408000 seconds]
    [Time delta from previous displayed frame: 0.000408000 seconds]
    [Time since reference or first frame: 116.929080000 seconds]
    Frame Number: 1396
    Frame Length: 91 bytes (728 bits)
    Capture Length: 91 bytes (728 bits)
    [Frame is marked: True]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:smtp]
    [Number of per-protocol-data: 1]
    [Simple Mail Transfer Protocol, key 0]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
    Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 77
    Identification: 0x8851 (34897)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0xfad7 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 192.168.0.11 (192.168.0.11)
    Destination: 213.186.33.20 (213.186.33.20)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 41028 (41028), Dst Port: submission (587), Seq: 110, Ack: 266, Len: 37
    Source port: 41028 (41028)
    Destination port: submission (587)
    [Stream index: 10]
    Sequence number: 110    (relative sequence number)
    [Next sequence number: 147    (relative sequence number)]
    Acknowledgment number: 266    (relative ack number)
    Header length: 20 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 30016
    [Calculated window size: 30016]
    [Window size scaling factor: -2 (no window scaling used)]
    Checksum: 0x5cc4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 1395]
        [The RTT to ACK the segment was: 0.000408000 seconds]
        [Bytes in flight: 37]
Simple Mail Transfer Protocol
    Command Line: rcpt TO:<grignon.florian@gmail.com>\r\n
        Command: rcpt
        Request parameter: TO:<grignon.florian@gmail.com>

0000  00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00   ...B<.t.5.....E.
0010  00 4d 88 51 40 00 40 06 fa d7 c0 a8 00 0b d5 ba   .M.Q@.@.........
0020  21 14 a0 44 02 4b dd 3c cb b8 5f bf 37 08 50 18   !..D.K.<.._.7.P.
0030  75 40 5c c4 00 00 72 63 70 74 20 54 4f 3a 3c 67   u@\...rcpt TO:<g
0040  72 69 67 6e 6f 6e 2e 66 6c 6f 72 69 61 6e 40 67   rignon.florian@g
0050  6d 61 69 6c 2e 63 6f 6d 3e 0d 0a                  mail.com>..

No.     Time           Source                Destination           Protocol Length Info
   1397 116.961784000  213.186.33.20         192.168.0.11          SMTP     62     S: 250 ok

Frame 1397: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Jul 21, 2014 13:33:45.685833000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1405942425.685833000 seconds
    [Time delta from previous captured frame: 0.032704000 seconds]
    [Time delta from previous displayed frame: 0.032704000 seconds]
    [Time since reference or first frame: 116.961784000 seconds]
    Frame Number: 1397
    Frame Length: 62 bytes (496 bits)
    Capture Length: 62 bytes (496 bits)
    [Frame is marked: True]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:smtp]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
    Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 48
    Identification: 0x4e3e (20030)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (6)
    Header checksum: 0x3f08 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 213.186.33.20 (213.186.33.20)
    Destination: 192.168.0.11 (192.168.0.11)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: submission (587), Dst Port: 41028 (41028), Seq: 266, Ack: 147, Len: 8
    Source port: submission (587)
    Destination port: 41028 (41028)
    [Stream index: 10]
    Sequence number: 266    (relative sequence number)
    [Next sequence number: 274    (relative sequence number)]
    Acknowledgment number: 147    (relative ack number)
    Header length: 20 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 5840
    [Calculated window size: 5840]
    [Window size scaling factor: -2 (no window scaling used)]
    Checksum: 0x2036 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 1396]
        [The RTT to ACK the segment was: 0.032704000 seconds]
        [Bytes in flight: 8]
Simple Mail Transfer Protocol
    Response: 250 ok\r\n
        Response code: Requested mail action okay, completed (250)
        Response parameter: ok

0000  74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00   t.5......B<...E.
0010  00 30 4e 3e 40 00 36 06 3f 08 d5 ba 21 14 c0 a8   .0N>@.6.?...!...
0020  00 0b 02 4b a0 44 5f bf 37 08 dd 3c cb dd 50 18   ...K.D_.7..<..P.
0030  16 d0 20 36 00 00 32 35 30 20 6f 6b 0d 0a         .. 6..250 ok..

No.     Time           Source                Destination           Protocol Length Info
   1398 116.961923000  192.168.0.11          213.186.33.20         SMTP     60     C: data

Frame 1398: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Jul 21, 2014 13:33:45.685972000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1405942425.685972000 seconds
    [Time delta from previous captured frame: 0.000139000 seconds]
    [Time delta from previous displayed frame: 0.000139000 seconds]
    [Time since reference or first frame: 116.961923000 seconds]
    Frame Number: 1398
    Frame Length: 60 bytes (480 bits)
    Capture Length: 60 bytes (480 bits)
    [Frame is marked: True]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:smtp]
    [Number of per-protocol-data: 1]
    [Simple Mail Transfer Protocol, key 0]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
    Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 46
    Identification: 0x8852 (34898)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0xfaf5 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 192.168.0.11 (192.168.0.11)
    Destination: 213.186.33.20 (213.186.33.20)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 41028 (41028), Dst Port: submission (587), Seq: 147, Ack: 274, Len: 6
    Source port: 41028 (41028)
    Destination port: submission (587)
    [Stream index: 10]
    Sequence number: 147    (relative sequence number)
    [Next sequence number: 153    (relative sequence number)]
    Acknowledgment number: 274    (relative ack number)
    Header length: 20 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 30016
    [Calculated window size: 30016]
    [Window size scaling factor: -2 (no window scaling used)]
    Checksum: 0xbabd [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 1397]
        [The RTT to ACK the segment was: 0.000139000 seconds]
        [Bytes in flight: 6]
Simple Mail Transfer Protocol
    Command Line: data\r\n
        Command: data

0000  00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00   ...B<.t.5.....E.
0010  00 2e 88 52 40 00 40 06 fa f5 c0 a8 00 0b d5 ba   ...R@.@.........
0020  21 14 a0 44 02 4b dd 3c cb dd 5f bf 37 10 50 18   !..D.K.<.._.7.P.
0030  75 40 ba bd 00 00 64 61 74 61 0d 0a               u@....data..

No.     Time           Source                Destination           Protocol Length Info
   1399 116.992566000  213.186.33.20         192.168.0.11          SMTP     68     S: 354 go ahead

Frame 1399: 68 bytes on wire (544 bits), 68 bytes captured (544 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Jul 21, 2014 13:33:45.716615000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1405942425.716615000 seconds
    [Time delta from previous captured frame: 0.030643000 seconds]
    [Time delta from previous displayed frame: 0.030643000 seconds]
    [Time since reference or first frame: 116.992566000 seconds]
    Frame Number: 1399
    Frame Length: 68 bytes (544 bits)
    Capture Length: 68 bytes (544 bits)
    [Frame is marked: True]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:smtp]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
    Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 54
    Identification: 0x4e3f (20031)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (6)
    Header checksum: 0x3f01 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 213.186.33.20 (213.186.33.20)
    Destination: 192.168.0.11 (192.168.0.11)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: submission (587), Dst Port: 41028 (41028), Seq: 274, Ack: 153, Len: 14
    Source port: submission (587)
    Destination port: 41028 (41028)
    [Stream index: 10]
    Sequence number: 274    (relative sequence number)
    [Next sequence number: 288    (relative sequence number)]
    Acknowledgment number: 153    (relative ack number)
    Header length: 20 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 5840
    [Calculated window size: 5840]
    [Window size scaling factor: -2 (no window scaling used)]
    Checksum: 0x38f3 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 1398]
        [The RTT to ACK the segment was: 0.030643000 seconds]
        [Bytes in flight: 14]
Simple Mail Transfer Protocol
    Response: 354 go ahead\r\n
        Response code: Start mail input; end with <CRLF>.<CRLF> (354)
        Response parameter: go ahead

0000  74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00   t.5......B<...E.
0010  00 36 4e 3f 40 00 36 06 3f 01 d5 ba 21 14 c0 a8   .6N?@.6.?...!...
0020  00 0b 02 4b a0 44 5f bf 37 10 dd 3c cb e3 50 18   ...K.D_.7..<..P.
0030  16 d0 38 f3 00 00 33 35 34 20 67 6f 20 61 68 65   ..8...354 go ahe
0040  61 64 0d 0a                                       ad..

No.     Time           Source                Destination           Protocol Length Info
   1400 116.992725000  192.168.0.11          213.186.33.20         IMF      327    subject: susu, from: contact@1avis.fr,  (text/plain)

Frame 1400: 327 bytes on wire (2616 bits), 327 bytes captured (2616 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Jul 21, 2014 13:33:45.716774000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1405942425.716774000 seconds
    [Time delta from previous captured frame: 0.000159000 seconds]
    [Time delta from previous displayed frame: 0.000159000 seconds]
    [Time since reference or first frame: 116.992725000 seconds]
    Frame Number: 1400
    Frame Length: 327 bytes (2616 bits)
    Capture Length: 327 bytes (2616 bits)
    [Frame is marked: True]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:smtp:imf:data-text-lines]
    [Number of per-protocol-data: 1]
    [Simple Mail Transfer Protocol, key 0]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
    Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 313
    Identification: 0x8853 (34899)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0xf9e9 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 192.168.0.11 (192.168.0.11)
    Destination: 213.186.33.20 (213.186.33.20)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 41028 (41028), Dst Port: submission (587), Seq: 153, Ack: 288, Len: 273
    Source port: 41028 (41028)
    Destination port: submission (587)
    [Stream index: 10]
    Sequence number: 153    (relative sequence number)
    [Next sequence number: 426    (relative sequence number)]
    Acknowledgment number: 288    (relative ack number)
    Header length: 20 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 30016
    [Calculated window size: 30016]
    [Window size scaling factor: -2 (no window scaling used)]
    Checksum: 0xe0f0 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 1399]
        [The RTT to ACK the segment was: 0.000159000 seconds]
        [Bytes in flight: 273]
Simple Mail Transfer Protocol
    C: .
    [1 DATA fragment (270 bytes): #1400(270)]
        [Frame: 1400, payload: 0-269 (270 bytes)]
        [DATA fragment count: 1]
        [Reassembled DATA length: 270]
Internet Message Format
    MIME-Version: 1.0
    Content-Type: text/plain; charset="utf-8"
        Type: text/plain
        Parameters:  charset="utf-8"
    Content-Transfer-Encoding: 7bit
    Subject: susu
    From: contact@1avis.fr, 1 item
        Item: contact@1avis.fr\r\n
            Address: contact@1avis.fr\r\n
    To: grignon.florian@gmail.com, 1 item
        Item: grignon.florian@gmail.com\r\n
            Address: grignon.florian@gmail.com\r\n
    Date: Mon, 21 Jul 2014 11:33:45 -0000
    Message-ID: <20140721113345.29404.88044@arkade.com>\r\n
    Line-based text data: text/plain
        body body\r\n

Frame (327 bytes):
0000  00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00   ...B<.t.5.....E.
0010  01 39 88 53 40 00 40 06 f9 e9 c0 a8 00 0b d5 ba   .9.S@.@.........
0020  21 14 a0 44 02 4b dd 3c cb e3 5f bf 37 1e 50 18   !..D.K.<.._.7.P.
0030  75 40 e0 f0 00 00 4d 49 4d 45 2d 56 65 72 73 69   u@....MIME-Versi
0040  6f 6e 3a 20 31 2e 30 0d 0a 43 6f 6e 74 65 6e 74   on: 1.0..Content
0050  2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69   -Type: text/plai
0060  6e 3b 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d   n; charset="utf-
0070  38 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 72 61 6e   8"..Content-Tran
0080  73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 37   sfer-Encoding: 7
0090  62 69 74 0d 0a 53 75 62 6a 65 63 74 3a 20 73 75   bit..Subject: su
00a0  73 75 0d 0a 46 72 6f 6d 3a 20 63 6f 6e 74 61 63   su..From: contac
00b0  74 40 31 61 76 69 73 2e 66 72 0d 0a 54 6f 3a 20   t@1avis.fr..To: 
00c0  67 72 69 67 6e 6f 6e 2e 66 6c 6f 72 69 61 6e 40   grignon.florian@
00d0  67 6d 61 69 6c 2e 63 6f 6d 0d 0a 44 61 74 65 3a   gmail.com..Date:
00e0  20 4d 6f 6e 2c 20 32 31 20 4a 75 6c 20 32 30 31    Mon, 21 Jul 201
00f0  34 20 31 31 3a 33 33 3a 34 35 20 2d 30 30 30 30   4 11:33:45 -0000
0100  0d 0a 4d 65 73 73 61 67 65 2d 49 44 3a 20 3c 32   ..Message-ID: <2
0110  30 31 34 30 37 32 31 31 31 33 33 34 35 2e 32 39   0140721113345.29
0120  34 30 34 2e 38 38 30 34 34 40 61 72 6b 61 64 65   404.88044@arkade
0130  2e 63 6f 6d 3e 0d 0a 0d 0a 62 6f 64 79 20 62 6f   .com>....body bo
0140  64 79 0d 0a 2e 0d 0a                              dy.....
Reassembled SMTP (270 bytes):
0000  4d 49 4d 45 2d 56 65 72 73 69 6f 6e 3a 20 31 2e   MIME-Version: 1.
0010  30 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a   0..Content-Type:
0020  20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61    text/plain; cha
0030  72 73 65 74 3d 22 75 74 66 2d 38 22 0d 0a 43 6f   rset="utf-8"..Co
0040  6e 74 65 6e 74 2d 54 72 61 6e 73 66 65 72 2d 45   ntent-Transfer-E
0050  6e 63 6f 64 69 6e 67 3a 20 37 62 69 74 0d 0a 53   ncoding: 7bit..S
0060  75 62 6a 65 63 74 3a 20 73 75 73 75 0d 0a 46 72   ubject: susu..Fr
0070  6f 6d 3a 20 63 6f 6e 74 61 63 74 40 31 61 76 69   om: contact@1avi
0080  73 2e 66 72 0d 0a 54 6f 3a 20 67 72 69 67 6e 6f   s.fr..To: grigno
0090  6e 2e 66 6c 6f 72 69 61 6e 40 67 6d 61 69 6c 2e   n.florian@gmail.
00a0  63 6f 6d 0d 0a 44 61 74 65 3a 20 4d 6f 6e 2c 20   com..Date: Mon, 
00b0  32 31 20 4a 75 6c 20 32 30 31 34 20 31 31 3a 33   21 Jul 2014 11:3
00c0  33 3a 34 35 20 2d 30 30 30 30 0d 0a 4d 65 73 73   3:45 -0000..Mess
00d0  61 67 65 2d 49 44 3a 20 3c 32 30 31 34 30 37 32   age-ID: <2014072
00e0  31 31 31 33 33 34 35 2e 32 39 34 30 34 2e 38 38   1113345.29404.88
00f0  30 34 34 40 61 72 6b 61 64 65 2e 63 6f 6d 3e 0d   044@arkade.com>.
0100  0a 0d 0a 62 6f 64 79 20 62 6f 64 79 0d 0a         ...body body..

No.     Time           Source                Destination           Protocol Length Info
   1420 117.034436000  213.186.33.20         192.168.0.11          SMTP     81     S: 250 ok 1405942441 qp 2645

Frame 1420: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Jul 21, 2014 13:33:45.758485000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1405942425.758485000 seconds
    [Time delta from previous captured frame: 0.020742000 seconds]
    [Time delta from previous displayed frame: 0.041711000 seconds]
    [Time since reference or first frame: 117.034436000 seconds]
    Frame Number: 1420
    Frame Length: 81 bytes (648 bits)
    Capture Length: 81 bytes (648 bits)
    [Frame is marked: True]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:smtp]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
    Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 67
    Identification: 0x4e40 (20032)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (6)
    Header checksum: 0x3ef3 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 213.186.33.20 (213.186.33.20)
    Destination: 192.168.0.11 (192.168.0.11)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: submission (587), Dst Port: 41028 (41028), Seq: 288, Ack: 426, Len: 27
    Source port: submission (587)
    Destination port: 41028 (41028)
    [Stream index: 10]
    Sequence number: 288    (relative sequence number)
    [Next sequence number: 315    (relative sequence number)]
    Acknowledgment number: 426    (relative ack number)
    Header length: 20 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 6432
    [Calculated window size: 6432]
    [Window size scaling factor: -2 (no window scaling used)]
    Checksum: 0xffaa [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 1400]
        [The RTT to ACK the segment was: 0.041711000 seconds]
        [Bytes in flight: 27]
Simple Mail Transfer Protocol
    Response: 250 ok 1405942441 qp 2645\r\n
        Response code: Requested mail action okay, completed (250)
        Response parameter: ok 1405942441 qp 2645

0000  74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00   t.5......B<...E.
0010  00 43 4e 40 40 00 36 06 3e f3 d5 ba 21 14 c0 a8   .CN@@.6.>...!...
0020  00 0b 02 4b a0 44 5f bf 37 1e dd 3c cc f4 50 18   ...K.D_.7..<..P.
0030  19 20 ff aa 00 00 32 35 30 20 6f 6b 20 31 34 30   . ....250 ok 140
0040  35 39 34 32 34 34 31 20 71 70 20 32 36 34 35 0d   5942441 qp 2645.
0050  0a                                                .

No.     Time           Source                Destination           Protocol Length Info
   1421 117.034537000  192.168.0.11          213.186.33.20         SMTP     60     C: quit

Frame 1421: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Jul 21, 2014 13:33:45.758586000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1405942425.758586000 seconds
    [Time delta from previous captured frame: 0.000101000 seconds]
    [Time delta from previous displayed frame: 0.000101000 seconds]
    [Time since reference or first frame: 117.034537000 seconds]
    Frame Number: 1421
    Frame Length: 60 bytes (480 bits)
    Capture Length: 60 bytes (480 bits)
    [Frame is marked: True]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:smtp]
    [Number of per-protocol-data: 1]
    [Simple Mail Transfer Protocol, key 0]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
    Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 46
    Identification: 0x8854 (34900)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0xfaf3 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 192.168.0.11 (192.168.0.11)
    Destination: 213.186.33.20 (213.186.33.20)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 41028 (41028), Dst Port: submission (587), Seq: 426, Ack: 315, Len: 6
    Source port: 41028 (41028)
    Destination port: submission (587)
    [Stream index: 10]
    Sequence number: 426    (relative sequence number)
    [Next sequence number: 432    (relative sequence number)]
    Acknowledgment number: 315    (relative ack number)
    Header length: 20 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 30016
    [Calculated window size: 30016]
    [Window size scaling factor: -2 (no window scaling used)]
    Checksum: 0xb756 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 1420]
        [The RTT to ACK the segment was: 0.000101000 seconds]
        [Bytes in flight: 6]
Simple Mail Transfer Protocol
    Command Line: quit\r\n
        Command: quit

0000  00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00   ...B<.t.5.....E.
0010  00 2e 88 54 40 00 40 06 fa f3 c0 a8 00 0b d5 ba   ...T@.@.........
0020  21 14 a0 44 02 4b dd 3c cc f4 5f bf 37 39 50 18   !..D.K.<.._.79P.
0030  75 40 b7 56 00 00 71 75 69 74 0d 0a               u@.V..quit..

No.     Time           Source                Destination           Protocol Length Info
   1423 117.065033000  213.186.33.20         192.168.0.11          SMTP     119    S: 221 ns0.ovh.net ssl0.ovh.net. You connect to mail407.ha.ovh.net

Frame 1423: 119 bytes on wire (952 bits), 119 bytes captured (952 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Jul 21, 2014 13:33:45.789082000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1405942425.789082000 seconds
    [Time delta from previous captured frame: 0.013086000 seconds]
    [Time delta from previous displayed frame: 0.030496000 seconds]
    [Time since reference or first frame: 117.065033000 seconds]
    Frame Number: 1423
    Frame Length: 119 bytes (952 bits)
    Capture Length: 119 bytes (952 bits)
    [Frame is marked: True]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:smtp]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
    Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 105
    Identification: 0x4e41 (20033)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (6)
    Header checksum: 0x3ecc [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 213.186.33.20 (213.186.33.20)
    Destination: 192.168.0.11 (192.168.0.11)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: submission (587), Dst Port: 41028 (41028), Seq: 315, Ack: 432, Len: 65
    Source port: submission (587)
    Destination port: 41028 (41028)
    [Stream index: 10]
    Sequence number: 315    (relative sequence number)
    [Next sequence number: 380    (relative sequence number)]
    Acknowledgment number: 432    (relative ack number)
    Header length: 20 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 6432
    [Calculated window size: 6432]
    [Window size scaling factor: -2 (no window scaling used)]
    Checksum: 0x983b [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 1421]
        [The RTT to ACK the segment was: 0.030496000 seconds]
        [Bytes in flight: 65]
Simple Mail Transfer Protocol
    Response: 221 ns0.ovh.net ssl0.ovh.net. You connect to mail407.ha.ovh.net\r\n
        Response code: <domain> Service closing transmission channel (221)
        Response parameter: ns0.ovh.net ssl0.ovh.net. You connect to mail407.ha.ovh.net

0000  74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00   t.5......B<...E.
0010  00 69 4e 41 40 00 36 06 3e cc d5 ba 21 14 c0 a8   .iNA@.6.>...!...
0020  00 0b 02 4b a0 44 5f bf 37 39 dd 3c cc fa 50 18   ...K.D_.79.<..P.
0030  19 20 98 3b 00 00 32 32 31 20 6e 73 30 2e 6f 76   . .;..221 ns0.ov
0040  68 2e 6e 65 74 20 73 73 6c 30 2e 6f 76 68 2e 6e   h.net ssl0.ovh.n
0050  65 74 2e 20 59 6f 75 20 63 6f 6e 6e 65 63 74 20   et. You connect 
0060  74 6f 20 6d 61 69 6c 34 30 37 2e 68 61 2e 6f 76   to mail407.ha.ov
0070  68 2e 6e 65 74 0d 0a                              h.net..
