No.     Time           Source                Destination           Protocol Length Info
    311 25.402773000   213.186.33.20         192.168.0.11          SMTP     81     S: 235 ok, go ahead (#2.0.0)

Frame 311: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Jul 21, 2014 13:36:50.632821000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1405942610.632821000 seconds
    [Time delta from previous captured frame: 0.013830000 seconds]
    [Time delta from previous displayed frame: 0.017149000 seconds]
    [Time since reference or first frame: 25.402773000 seconds]
    Frame Number: 311
    Frame Length: 81 bytes (648 bits)
    Capture Length: 81 bytes (648 bits)
    [Frame is marked: True]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:smtp]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
    Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 67
    Identification: 0xdd30 (56624)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (6)
    Header checksum: 0xb002 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 213.186.33.20 (213.186.33.20)
    Destination: 192.168.0.11 (192.168.0.11)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 231, Ack: 71, Len: 27
    Source port: submission (587)
    Destination port: 41975 (41975)
    [Stream index: 9]
    Sequence number: 231    (relative sequence number)
    [Next sequence number: 258    (relative sequence number)]
    Acknowledgment number: 71    (relative ack number)
    Header length: 20 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 5840
    [Calculated window size: 5840]
    [Window size scaling factor: -2 (no window scaling used)]
    Checksum: 0x6bcc [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    [SEQ/ACK analysis]
        [Bytes in flight: 27]
Simple Mail Transfer Protocol
    Response: 235 ok, go ahead (#2.0.0)\r\n
        Response code: Authentication successful (235)
        Response parameter: ok, go ahead (#2.0.0)

0000  74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00   t.5......B<...E.
0010  00 43 dd 30 40 00 36 06 b0 02 d5 ba 21 14 c0 a8   .C.0@.6.....!...
0020  00 0b 02 4b a3 f7 d7 23 b7 ad a5 b1 73 8c 50 18   ...K...#....s.P.
0030  16 d0 6b cc 00 00 32 33 35 20 6f 6b 2c 20 67 6f   ..k...235 ok, go
0040  20 61 68 65 61 64 20 28 23 32 2e 30 2e 30 29 0d    ahead (#2.0.0).
0050  0a                                                .

No.     Time           Source                Destination           Protocol Length Info
    312 25.405401000   192.168.0.11          213.186.33.20         SMTP     93     C: mail FROM:<contact@1avis.fr> size=259

Frame 312: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Jul 21, 2014 13:36:50.635449000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1405942610.635449000 seconds
    [Time delta from previous captured frame: 0.002628000 seconds]
    [Time delta from previous displayed frame: 0.002628000 seconds]
    [Time since reference or first frame: 25.405401000 seconds]
    Frame Number: 312
    Frame Length: 93 bytes (744 bits)
    Capture Length: 93 bytes (744 bits)
    [Frame is marked: True]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:smtp]
    [Number of per-protocol-data: 1]
    [Simple Mail Transfer Protocol, key 0]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
    Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 79
    Identification: 0x84ef (34031)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0xfe37 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 192.168.0.11 (192.168.0.11)
    Destination: 213.186.33.20 (213.186.33.20)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 41975 (41975), Dst Port: submission (587), Seq: 71, Ack: 258, Len: 39
    Source port: 41975 (41975)
    Destination port: submission (587)
    [Stream index: 9]
    Sequence number: 71    (relative sequence number)
    [Next sequence number: 110    (relative sequence number)]
    Acknowledgment number: 258    (relative ack number)
    Header length: 20 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 30016
    [Calculated window size: 30016]
    [Window size scaling factor: -2 (no window scaling used)]
    Checksum: 0x0a04 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 311]
        [The RTT to ACK the segment was: 0.002628000 seconds]
        [Bytes in flight: 39]
Simple Mail Transfer Protocol
    Command Line: mail FROM:<contact@1avis.fr> size=259\r\n
        Command: mail
        Request parameter: FROM:<contact@1avis.fr> size=259

0000  00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00   ...B<.t.5.....E.
0010  00 4f 84 ef 40 00 40 06 fe 37 c0 a8 00 0b d5 ba   .O..@.@..7......
0020  21 14 a3 f7 02 4b a5 b1 73 8c d7 23 b7 c8 50 18   !....K..s..#..P.
0030  75 40 0a 04 00 00 6d 61 69 6c 20 46 52 4f 4d 3a   u@....mail FROM:
0040  3c 63 6f 6e 74 61 63 74 40 31 61 76 69 73 2e 66   <contact@1avis.f
0050  72 3e 20 73 69 7a 65 3d 32 35 39 0d 0a            r> size=259..

No.     Time           Source                Destination           Protocol Length Info
    313 25.437986000   213.186.33.20         192.168.0.11          TCP      62     submission > 41975 [ACK] Seq=258 Ack=110 Win=5840 Len=0

Frame 313: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Jul 21, 2014 13:36:50.668034000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1405942610.668034000 seconds
    [Time delta from previous captured frame: 0.032585000 seconds]
    [Time delta from previous displayed frame: 0.032585000 seconds]
    [Time since reference or first frame: 25.437986000 seconds]
    Frame Number: 313
    Frame Length: 62 bytes (496 bits)
    Capture Length: 62 bytes (496 bits)
    [Frame is marked: True]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:vssmonitoring]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
    Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
    Padding: 000000000000
Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 40
    Identification: 0xdd31 (56625)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (6)
    Header checksum: 0xb01c [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 213.186.33.20 (213.186.33.20)
    Destination: 192.168.0.11 (192.168.0.11)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 258, Ack: 110, Len: 0
    Source port: submission (587)
    Destination port: 41975 (41975)
    [Stream index: 9]
    Sequence number: 258    (relative sequence number)
    Acknowledgment number: 110    (relative ack number)
    Header length: 20 bytes
    Flags: 0x010 (ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 0... = Push: Not set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 5840
    [Calculated window size: 5840]
    [Window size scaling factor: -2 (no window scaling used)]
    Checksum: 0x92ee [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 312]
        [The RTT to ACK the segment was: 0.032585000 seconds]
VSS-Monitoring ethernet trailer, Source Port: 0
    Src Port: 0

0000  74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00   t.5......B<...E.
0010  00 28 dd 31 40 00 36 06 b0 1c d5 ba 21 14 c0 a8   .(.1@.6.....!...
0020  00 0b 02 4b a3 f7 d7 23 b7 c8 a5 b1 73 b3 50 10   ...K...#....s.P.
0030  16 d0 92 ee 00 00 00 00 00 00 00 00 00 00         ..............

No.     Time           Source                Destination           Protocol Length Info
    314 25.439404000   213.186.33.20         192.168.0.11          SMTP     62     S: 250 ok

Frame 314: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Jul 21, 2014 13:36:50.669452000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1405942610.669452000 seconds
    [Time delta from previous captured frame: 0.001418000 seconds]
    [Time delta from previous displayed frame: 0.001418000 seconds]
    [Time since reference or first frame: 25.439404000 seconds]
    Frame Number: 314
    Frame Length: 62 bytes (496 bits)
    Capture Length: 62 bytes (496 bits)
    [Frame is marked: True]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:smtp]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
    Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 48
    Identification: 0xdd32 (56626)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (6)
    Header checksum: 0xb013 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 213.186.33.20 (213.186.33.20)
    Destination: 192.168.0.11 (192.168.0.11)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 258, Ack: 110, Len: 8
    Source port: submission (587)
    Destination port: 41975 (41975)
    [Stream index: 9]
    Sequence number: 258    (relative sequence number)
    [Next sequence number: 266    (relative sequence number)]
    Acknowledgment number: 110    (relative ack number)
    Header length: 20 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 5840
    [Calculated window size: 5840]
    [Window size scaling factor: -2 (no window scaling used)]
    Checksum: 0xb413 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    [SEQ/ACK analysis]
        [Bytes in flight: 8]
Simple Mail Transfer Protocol
    Response: 250 ok\r\n
        Response code: Requested mail action okay, completed (250)
        Response parameter: ok

0000  74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00   t.5......B<...E.
0010  00 30 dd 32 40 00 36 06 b0 13 d5 ba 21 14 c0 a8   .0.2@.6.....!...
0020  00 0b 02 4b a3 f7 d7 23 b7 c8 a5 b1 73 b3 50 18   ...K...#....s.P.
0030  16 d0 b4 13 00 00 32 35 30 20 6f 6b 0d 0a         ......250 ok..

No.     Time           Source                Destination           Protocol Length Info
    315 25.439709000   192.168.0.11          213.186.33.20         SMTP     91     C: rcpt TO:<grignon.florian@gmail.com>

Frame 315: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Jul 21, 2014 13:36:50.669757000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1405942610.669757000 seconds
    [Time delta from previous captured frame: 0.000305000 seconds]
    [Time delta from previous displayed frame: 0.000305000 seconds]
    [Time since reference or first frame: 25.439709000 seconds]
    Frame Number: 315
    Frame Length: 91 bytes (728 bits)
    Capture Length: 91 bytes (728 bits)
    [Frame is marked: True]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:smtp]
    [Number of per-protocol-data: 1]
    [Simple Mail Transfer Protocol, key 0]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
    Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 77
    Identification: 0x84f0 (34032)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0xfe38 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 192.168.0.11 (192.168.0.11)
    Destination: 213.186.33.20 (213.186.33.20)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 41975 (41975), Dst Port: submission (587), Seq: 110, Ack: 266, Len: 37
    Source port: 41975 (41975)
    Destination port: submission (587)
    [Stream index: 9]
    Sequence number: 110    (relative sequence number)
    [Next sequence number: 147    (relative sequence number)]
    Acknowledgment number: 266    (relative ack number)
    Header length: 20 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 30016
    [Calculated window size: 30016]
    [Window size scaling factor: -2 (no window scaling used)]
    Checksum: 0xf074 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 314]
        [The RTT to ACK the segment was: 0.000305000 seconds]
        [Bytes in flight: 37]
Simple Mail Transfer Protocol
    Command Line: rcpt TO:<grignon.florian@gmail.com>\r\n
        Command: rcpt
        Request parameter: TO:<grignon.florian@gmail.com>

0000  00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00   ...B<.t.5.....E.
0010  00 4d 84 f0 40 00 40 06 fe 38 c0 a8 00 0b d5 ba   .M..@.@..8......
0020  21 14 a3 f7 02 4b a5 b1 73 b3 d7 23 b7 d0 50 18   !....K..s..#..P.
0030  75 40 f0 74 00 00 72 63 70 74 20 54 4f 3a 3c 67   u@.t..rcpt TO:<g
0040  72 69 67 6e 6f 6e 2e 66 6c 6f 72 69 61 6e 40 67   rignon.florian@g
0050  6d 61 69 6c 2e 63 6f 6d 3e 0d 0a                  mail.com>..

No.     Time           Source                Destination           Protocol Length Info
    316 25.471723000   213.186.33.20         192.168.0.11          SMTP     62     S: 250 ok

Frame 316: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Jul 21, 2014 13:36:50.701771000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1405942610.701771000 seconds
    [Time delta from previous captured frame: 0.032014000 seconds]
    [Time delta from previous displayed frame: 0.032014000 seconds]
    [Time since reference or first frame: 25.471723000 seconds]
    Frame Number: 316
    Frame Length: 62 bytes (496 bits)
    Capture Length: 62 bytes (496 bits)
    [Frame is marked: True]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:smtp]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
    Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 48
    Identification: 0xdd33 (56627)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (6)
    Header checksum: 0xb012 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 213.186.33.20 (213.186.33.20)
    Destination: 192.168.0.11 (192.168.0.11)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 266, Ack: 147, Len: 8
    Source port: submission (587)
    Destination port: 41975 (41975)
    [Stream index: 9]
    Sequence number: 266    (relative sequence number)
    [Next sequence number: 274    (relative sequence number)]
    Acknowledgment number: 147    (relative ack number)
    Header length: 20 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 5840
    [Calculated window size: 5840]
    [Window size scaling factor: -2 (no window scaling used)]
    Checksum: 0xb3e6 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 315]
        [The RTT to ACK the segment was: 0.032014000 seconds]
        [Bytes in flight: 8]
Simple Mail Transfer Protocol
    Response: 250 ok\r\n
        Response code: Requested mail action okay, completed (250)
        Response parameter: ok

0000  74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00   t.5......B<...E.
0010  00 30 dd 33 40 00 36 06 b0 12 d5 ba 21 14 c0 a8   .0.3@.6.....!...
0020  00 0b 02 4b a3 f7 d7 23 b7 d0 a5 b1 73 d8 50 18   ...K...#....s.P.
0030  16 d0 b3 e6 00 00 32 35 30 20 6f 6b 0d 0a         ......250 ok..

No.     Time           Source                Destination           Protocol Length Info
    317 25.471846000   192.168.0.11          213.186.33.20         SMTP     60     C: data

Frame 317: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Jul 21, 2014 13:36:50.701894000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1405942610.701894000 seconds
    [Time delta from previous captured frame: 0.000123000 seconds]
    [Time delta from previous displayed frame: 0.000123000 seconds]
    [Time since reference or first frame: 25.471846000 seconds]
    Frame Number: 317
    Frame Length: 60 bytes (480 bits)
    Capture Length: 60 bytes (480 bits)
    [Frame is marked: True]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:smtp]
    [Number of per-protocol-data: 1]
    [Simple Mail Transfer Protocol, key 0]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
    Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 46
    Identification: 0x84f1 (34033)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0xfe56 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 192.168.0.11 (192.168.0.11)
    Destination: 213.186.33.20 (213.186.33.20)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 41975 (41975), Dst Port: submission (587), Seq: 147, Ack: 274, Len: 6
    Source port: 41975 (41975)
    Destination port: submission (587)
    [Stream index: 9]
    Sequence number: 147    (relative sequence number)
    [Next sequence number: 153    (relative sequence number)]
    Acknowledgment number: 274    (relative ack number)
    Header length: 20 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 30016
    [Calculated window size: 30016]
    [Window size scaling factor: -2 (no window scaling used)]
    Checksum: 0x4e6e [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 316]
        [The RTT to ACK the segment was: 0.000123000 seconds]
        [Bytes in flight: 6]
Simple Mail Transfer Protocol
    Command Line: data\r\n
        Command: data

0000  00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00   ...B<.t.5.....E.
0010  00 2e 84 f1 40 00 40 06 fe 56 c0 a8 00 0b d5 ba   ....@.@..V......
0020  21 14 a3 f7 02 4b a5 b1 73 d8 d7 23 b7 d8 50 18   !....K..s..#..P.
0030  75 40 4e 6e 00 00 64 61 74 61 0d 0a               u@Nn..data..

No.     Time           Source                Destination           Protocol Length Info
    318 25.503549000   213.186.33.20         192.168.0.11          SMTP     68     S: 354 go ahead

Frame 318: 68 bytes on wire (544 bits), 68 bytes captured (544 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Jul 21, 2014 13:36:50.733597000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1405942610.733597000 seconds
    [Time delta from previous captured frame: 0.031703000 seconds]
    [Time delta from previous displayed frame: 0.031703000 seconds]
    [Time since reference or first frame: 25.503549000 seconds]
    Frame Number: 318
    Frame Length: 68 bytes (544 bits)
    Capture Length: 68 bytes (544 bits)
    [Frame is marked: True]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:smtp]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
    Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 54
    Identification: 0xdd34 (56628)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (6)
    Header checksum: 0xb00b [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 213.186.33.20 (213.186.33.20)
    Destination: 192.168.0.11 (192.168.0.11)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 274, Ack: 153, Len: 14
    Source port: submission (587)
    Destination port: 41975 (41975)
    [Stream index: 9]
    Sequence number: 274    (relative sequence number)
    [Next sequence number: 288    (relative sequence number)]
    Acknowledgment number: 153    (relative ack number)
    Header length: 20 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 5840
    [Calculated window size: 5840]
    [Window size scaling factor: -2 (no window scaling used)]
    Checksum: 0xcca3 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 317]
        [The RTT to ACK the segment was: 0.031703000 seconds]
        [Bytes in flight: 14]
Simple Mail Transfer Protocol
    Response: 354 go ahead\r\n
        Response code: Start mail input; end with <CRLF>.<CRLF> (354)
        Response parameter: go ahead

0000  74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00   t.5......B<...E.
0010  00 36 dd 34 40 00 36 06 b0 0b d5 ba 21 14 c0 a8   .6.4@.6.....!...
0020  00 0b 02 4b a3 f7 d7 23 b7 d8 a5 b1 73 de 50 18   ...K...#....s.P.
0030  16 d0 cc a3 00 00 33 35 34 20 67 6f 20 61 68 65   ......354 go ahe
0040  61 64 0d 0a                                       ad..

No.     Time           Source                Destination           Protocol Length Info
    319 25.503854000   192.168.0.11          213.186.33.20         IMF      318    [Malformed Packet]

Frame 319: 318 bytes on wire (2544 bits), 318 bytes captured (2544 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Jul 21, 2014 13:36:50.733902000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1405942610.733902000 seconds
    [Time delta from previous captured frame: 0.000305000 seconds]
    [Time delta from previous displayed frame: 0.000305000 seconds]
    [Time since reference or first frame: 25.503854000 seconds]
    Frame Number: 319
    Frame Length: 318 bytes (2544 bits)
    Capture Length: 318 bytes (2544 bits)
    [Frame is marked: True]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:smtp:imf]
    [Number of per-protocol-data: 1]
    [Simple Mail Transfer Protocol, key 0]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
    Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 304
    Identification: 0x84f2 (34034)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0xfd53 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 192.168.0.11 (192.168.0.11)
    Destination: 213.186.33.20 (213.186.33.20)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 41975 (41975), Dst Port: submission (587), Seq: 153, Ack: 288, Len: 264
    Source port: 41975 (41975)
    Destination port: submission (587)
    [Stream index: 9]
    Sequence number: 153    (relative sequence number)
    [Next sequence number: 417    (relative sequence number)]
    Acknowledgment number: 288    (relative ack number)
    Header length: 20 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 30016
    [Calculated window size: 30016]
    [Window size scaling factor: -2 (no window scaling used)]
    Checksum: 0xc8d4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 318]
        [The RTT to ACK the segment was: 0.000305000 seconds]
        [Bytes in flight: 264]
Simple Mail Transfer Protocol
    C: .
    [1 DATA fragment (261 bytes): #319(261)]
        [Frame: 319, payload: 0-260 (261 bytes)]
        [DATA fragment count: 1]
        [Reassembled DATA length: 261]
Internet Message Format
[Malformed Packet: IMF]
    [Expert Info (Error/Malformed): Malformed Packet (Exception occurred)]
        [Message: Malformed Packet (Exception occurred)]
        [Severity level: Error]
        [Group: Malformed]

Frame (318 bytes):
0000  00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00   ...B<.t.5.....E.
0010  01 30 84 f2 40 00 40 06 fd 53 c0 a8 00 0b d5 ba   .0..@.@..S......
0020  21 14 a3 f7 02 4b a5 b1 73 de d7 23 b7 e6 50 18   !....K..s..#..P.
0030  75 40 c8 d4 00 00 4d 49 4d 45 2d 56 65 72 73 69   u@....MIME-Versi
0040  6f 6e 3a 20 31 2e 30 0a 43 6f 6e 74 65 6e 74 2d   on: 1.0.Content-
0050  54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e   Type: text/plain
0060  3b 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38   ; charset="utf-8
0070  22 0a 43 6f 6e 74 65 6e 74 2d 54 72 61 6e 73 66   ".Content-Transf
0080  65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 37 62 69   er-Encoding: 7bi
0090  74 0a 53 75 62 6a 65 63 74 3a 20 73 75 73 75 0a   t.Subject: susu.
00a0  46 72 6f 6d 3a 20 63 6f 6e 74 61 63 74 40 31 61   From: contact@1a
00b0  76 69 73 2e 66 72 0a 54 6f 3a 20 67 72 69 67 6e   vis.fr.To: grign
00c0  6f 6e 2e 66 6c 6f 72 69 61 6e 40 67 6d 61 69 6c   on.florian@gmail
00d0  2e 63 6f 6d 0a 44 61 74 65 3a 20 4d 6f 6e 2c 20   .com.Date: Mon, 
00e0  32 31 20 4a 75 6c 20 32 30 31 34 20 31 31 3a 33   21 Jul 2014 11:3
00f0  36 3a 35 30 20 2d 30 30 30 30 0a 4d 65 73 73 61   6:50 -0000.Messa
0100  67 65 2d 49 44 3a 20 3c 32 30 31 34 30 37 32 31   ge-ID: <20140721
0110  31 31 33 36 35 30 2e 33 31 30 33 39 2e 34 30 35   113650.31039.405
0120  35 36 40 61 72 6b 61 64 65 2e 63 6f 6d 3e 0a 0a   56@arkade.com>..
0130  62 6f 64 79 20 62 6f 64 79 0d 0a 2e 0d 0a         body body.....
Reassembled SMTP (261 bytes):
0000  4d 49 4d 45 2d 56 65 72 73 69 6f 6e 3a 20 31 2e   MIME-Version: 1.
0010  30 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20   0.Content-Type: 
0020  74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72   text/plain; char
0030  73 65 74 3d 22 75 74 66 2d 38 22 0a 43 6f 6e 74   set="utf-8".Cont
0040  65 6e 74 2d 54 72 61 6e 73 66 65 72 2d 45 6e 63   ent-Transfer-Enc
0050  6f 64 69 6e 67 3a 20 37 62 69 74 0a 53 75 62 6a   oding: 7bit.Subj
0060  65 63 74 3a 20 73 75 73 75 0a 46 72 6f 6d 3a 20   ect: susu.From: 
0070  63 6f 6e 74 61 63 74 40 31 61 76 69 73 2e 66 72   contact@1avis.fr
0080  0a 54 6f 3a 20 67 72 69 67 6e 6f 6e 2e 66 6c 6f   .To: grignon.flo
0090  72 69 61 6e 40 67 6d 61 69 6c 2e 63 6f 6d 0a 44   rian@gmail.com.D
00a0  61 74 65 3a 20 4d 6f 6e 2c 20 32 31 20 4a 75 6c   ate: Mon, 21 Jul
00b0  20 32 30 31 34 20 31 31 3a 33 36 3a 35 30 20 2d    2014 11:36:50 -
00c0  30 30 30 30 0a 4d 65 73 73 61 67 65 2d 49 44 3a   0000.Message-ID:
00d0  20 3c 32 30 31 34 30 37 32 31 31 31 33 36 35 30    <20140721113650
00e0  2e 33 31 30 33 39 2e 34 30 35 35 36 40 61 72 6b   .31039.40556@ark
00f0  61 64 65 2e 63 6f 6d 3e 0a 0a 62 6f 64 79 20 62   ade.com>..body b
0100  6f 64 79 0d 0a                                    ody..

No.     Time           Source                Destination           Protocol Length Info
    320 25.541763000   213.186.33.20         192.168.0.11          SMTP     109    S: 554 mail server permanently rejected message (#5.3.0)

Frame 320: 109 bytes on wire (872 bits), 109 bytes captured (872 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Jul 21, 2014 13:36:50.771811000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1405942610.771811000 seconds
    [Time delta from previous captured frame: 0.037909000 seconds]
    [Time delta from previous displayed frame: 0.037909000 seconds]
    [Time since reference or first frame: 25.541763000 seconds]
    Frame Number: 320
    Frame Length: 109 bytes (872 bits)
    Capture Length: 109 bytes (872 bits)
    [Frame is marked: True]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:smtp]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
    Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 95
    Identification: 0xdd35 (56629)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (6)
    Header checksum: 0xafe1 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 213.186.33.20 (213.186.33.20)
    Destination: 192.168.0.11 (192.168.0.11)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 288, Ack: 417, Len: 55
    Source port: submission (587)
    Destination port: 41975 (41975)
    [Stream index: 9]
    Sequence number: 288    (relative sequence number)
    [Next sequence number: 343    (relative sequence number)]
    Acknowledgment number: 417    (relative ack number)
    Header length: 20 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 6432
    [Calculated window size: 6432]
    [Window size scaling factor: -2 (no window scaling used)]
    Checksum: 0x702a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 319]
        [The RTT to ACK the segment was: 0.037909000 seconds]
        [Bytes in flight: 55]
Simple Mail Transfer Protocol
    Response: 554 mail server permanently rejected message (#5.3.0)\r\n
        Response code: Transaction failed (554)
        Response parameter: mail server permanently rejected message (#5.3.0)

0000  74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00   t.5......B<...E.
0010  00 5f dd 35 40 00 36 06 af e1 d5 ba 21 14 c0 a8   ._.5@.6.....!...
0020  00 0b 02 4b a3 f7 d7 23 b7 e6 a5 b1 74 e6 50 18   ...K...#....t.P.
0030  19 20 70 2a 00 00 35 35 34 20 6d 61 69 6c 20 73   . p*..554 mail s
0040  65 72 76 65 72 20 70 65 72 6d 61 6e 65 6e 74 6c   erver permanentl
0050  79 20 72 65 6a 65 63 74 65 64 20 6d 65 73 73 61   y rejected messa
0060  67 65 20 28 23 35 2e 33 2e 30 29 0d 0a            ge (#5.3.0)..

No.     Time           Source                Destination           Protocol Length Info
    321 25.541931000   192.168.0.11          213.186.33.20         SMTP     60     C: rset

Frame 321: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Jul 21, 2014 13:36:50.771979000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1405942610.771979000 seconds
    [Time delta from previous captured frame: 0.000168000 seconds]
    [Time delta from previous displayed frame: 0.000168000 seconds]
    [Time since reference or first frame: 25.541931000 seconds]
    Frame Number: 321
    Frame Length: 60 bytes (480 bits)
    Capture Length: 60 bytes (480 bits)
    [Frame is marked: True]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:smtp]
    [Number of per-protocol-data: 1]
    [Simple Mail Transfer Protocol, key 0]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a), Dst: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
    Destination: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 192.168.0.11 (192.168.0.11), Dst: 213.186.33.20 (213.186.33.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 46
    Identification: 0x84f3 (34035)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0xfe54 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 192.168.0.11 (192.168.0.11)
    Destination: 213.186.33.20 (213.186.33.20)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 41975 (41975), Dst Port: submission (587), Seq: 417, Ack: 343, Len: 6
    Source port: 41975 (41975)
    Destination port: submission (587)
    [Stream index: 9]
    Sequence number: 417    (relative sequence number)
    [Next sequence number: 423    (relative sequence number)]
    Acknowledgment number: 343    (relative ack number)
    Header length: 20 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 30016
    [Calculated window size: 30016]
    [Window size scaling factor: -2 (no window scaling used)]
    Checksum: 0x4df6 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 320]
        [The RTT to ACK the segment was: 0.000168000 seconds]
        [Bytes in flight: 6]
Simple Mail Transfer Protocol
    Command Line: rset\r\n
        Command: rset

0000  00 07 cb 42 3c dc 74 d4 35 aa bd 1a 08 00 45 00   ...B<.t.5.....E.
0010  00 2e 84 f3 40 00 40 06 fe 54 c0 a8 00 0b d5 ba   ....@.@..T......
0020  21 14 a3 f7 02 4b a5 b1 74 e6 d7 23 b8 1d 50 18   !....K..t..#..P.
0030  75 40 4d f6 00 00 72 73 65 74 0d 0a               u@M...rset..

No.     Time           Source                Destination           Protocol Length Info
    322 25.572810000   213.186.33.20         192.168.0.11          SMTP     67     S: 250 flushed

Frame 322: 67 bytes on wire (536 bits), 67 bytes captured (536 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Jul 21, 2014 13:36:50.802858000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1405942610.802858000 seconds
    [Time delta from previous captured frame: 0.030879000 seconds]
    [Time delta from previous displayed frame: 0.030879000 seconds]
    [Time since reference or first frame: 25.572810000 seconds]
    Frame Number: 322
    Frame Length: 67 bytes (536 bits)
    Capture Length: 67 bytes (536 bits)
    [Frame is marked: True]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:smtp]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc), Dst: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
    Destination: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        Address: Giga-Byt_aa:bd:1a (74:d4:35:aa:bd:1a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        Address: FreeboxS_42:3c:dc (00:07:cb:42:3c:dc)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 213.186.33.20 (213.186.33.20), Dst: 192.168.0.11 (192.168.0.11)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 53
    Identification: 0xdd36 (56630)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (6)
    Header checksum: 0xb00a [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 213.186.33.20 (213.186.33.20)
    Destination: 192.168.0.11 (192.168.0.11)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: submission (587), Dst Port: 41975 (41975), Seq: 343, Ack: 423, Len: 13
    Source port: submission (587)
    Destination port: 41975 (41975)
    [Stream index: 9]
    Sequence number: 343    (relative sequence number)
    [Next sequence number: 356    (relative sequence number)]
    Acknowledgment number: 423    (relative ack number)
    Header length: 20 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 6432
    [Calculated window size: 6432]
    [Window size scaling factor: -2 (no window scaling used)]
    Checksum: 0x7a53 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 321]
        [The RTT to ACK the segment was: 0.030879000 seconds]
        [Bytes in flight: 13]
Simple Mail Transfer Protocol
    Response: 250 flushed\r\n
        Response code: Requested mail action okay, completed (250)
        Response parameter: flushed

0000  74 d4 35 aa bd 1a 00 07 cb 42 3c dc 08 00 45 00   t.5......B<...E.
0010  00 35 dd 36 40 00 36 06 b0 0a d5 ba 21 14 c0 a8   .5.6@.6.....!...
0020  00 0b 02 4b a3 f7 d7 23 b8 1d a5 b1 74 ec 50 18   ...K...#....t.P.
0030  19 20 7a 53 00 00 32 35 30 20 66 6c 75 73 68 65   . zS..250 flushe
0040  64 0d 0a                                          d..
