Ethereal-users: [Ethereal-users] analyze trace

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date: Sun, 27 Apr 2003 22:25:13 -0700 (PDT)
I was wondering if there was anyone out there that
could help me with a trace of 33 frames. The trace is
from two computers exchanging a short email message
using SMTP. I am looking for a short description for
every frame in the trace. An explaination of how the
connection is established and terminated, TCP flags
used, and the application level protocol broken into
frames. And if there is anything in the trace that
should not be there? 

I have attached the trace as an text file.

Thanks Rachel

=====


__________________________________
Do you Yahoo!?
The New Yahoo! Search - Faster. Easier. Bingo.
http://search.yahoo.com
Frame 1 (74 bytes on wire, 74 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:27.970995000
    Time delta from previous packet: 0.000000000 seconds
    Time relative to first packet: 0.000000000 seconds
    Frame Number: 1
    Packet Length: 74 bytes
    Capture Length: 74 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
    Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x4995
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xdee5 (correct)
    Source: 132.177.4.191 (132.177.4.191)
    Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964495581, Ack: 0, Len: 0
    Source port: 32785 (32785)
    Destination port: smtp (25)
    Sequence number: 2964495581
    Header length: 40 bytes
    Flags: 0x0002 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgment: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x7bf2 (correct)
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Time stamp: tsval 54600, tsecr 0
        NOP
        Window scale: 0 (multiply by 1)

Frame 2 (78 bytes on wire, 78 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:27.972973000
    Time delta from previous packet: 0.001978000 seconds
    Time relative to first packet: 0.001978000 seconds
    Frame Number: 2
    Packet Length: 78 bytes
    Capture Length: 78 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
    Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 64
    Identification: 0xebd4
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x3ca2 (correct)
    Source: 132.177.4.32 (132.177.4.32)
    Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137347, Ack: 2964495582, Len: 0
    Source port: smtp (25)
    Destination port: 32785 (32785)
    Sequence number: 1000137347
    Acknowledgement number: 2964495582
    Header length: 44 bytes
    Flags: 0x0012 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
        .... ...0 = Fin: Not set
    Window size: 49232
    Checksum: 0xdfdc (correct)
    Options: (24 bytes)
        NOP
        NOP
        Time stamp: tsval 129743522, tsecr 54600
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 0 (multiply by 1)
        NOP
        NOP
        SACK permitted

Frame 3 (66 bytes on wire, 66 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:27.973029000
    Time delta from previous packet: 0.000056000 seconds
    Time relative to first packet: 0.002034000 seconds
    Frame Number: 3
    Packet Length: 66 bytes
    Capture Length: 66 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
    Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x4996
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xdeec (correct)
    Source: 132.177.4.191 (132.177.4.191)
    Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964495582, Ack: 1000137348, Len: 0
    Source port: 32785 (32785)
    Destination port: smtp (25)
    Sequence number: 2964495582
    Acknowledgement number: 1000137348
    Header length: 32 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0xca28 (correct)
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 54600, tsecr 129743522

Frame 4 (62 bytes on wire, 62 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:28.000327000
    Time delta from previous packet: 0.027298000 seconds
    Time relative to first packet: 0.029332000 seconds
    Frame Number: 4
    Packet Length: 62 bytes
    Capture Length: 62 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
    Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 48
    Identification: 0xebd5
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x3cb1 (correct)
    Source: 132.177.4.32 (132.177.4.32)
    Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: 61292 (61292), Dst Port: auth (113), Seq: 1000237644, Ack: 0, Len: 0
    Source port: 61292 (61292)
    Destination port: auth (113)
    Sequence number: 1000237644
    Header length: 28 bytes
    Flags: 0x0002 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgment: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
        .... ...0 = Fin: Not set
    Window size: 49640
    Checksum: 0x192d (correct)
    Options: (8 bytes)
        Maximum segment size: 1460 bytes
        NOP
        NOP
        SACK permitted

Frame 5 (62 bytes on wire, 62 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:28.000393000
    Time delta from previous packet: 0.000066000 seconds
    Time relative to first packet: 0.029398000 seconds
    Frame Number: 5
    Packet Length: 62 bytes
    Capture Length: 62 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
    Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 48
    Identification: 0x0000
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x2887 (correct)
    Source: 132.177.4.191 (132.177.4.191)
    Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: auth (113), Dst Port: 61292 (61292), Seq: 2971081277, Ack: 1000237645, Len: 0
    Source port: auth (113)
    Destination port: 61292 (61292)
    Sequence number: 2971081277
    Acknowledgement number: 1000237645
    Header length: 28 bytes
    Flags: 0x0012 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0xf8df (correct)
    Options: (8 bytes)
        Maximum segment size: 1460 bytes
        NOP
        NOP
        SACK permitted

Frame 6 (60 bytes on wire, 60 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:28.002220000
    Time delta from previous packet: 0.001827000 seconds
    Time relative to first packet: 0.031225000 seconds
    Frame Number: 6
    Packet Length: 60 bytes
    Capture Length: 60 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
    Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Type: IP (0x0800)
    Trailer: 555555555555
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 40
    Identification: 0xebd6
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x3cb8 (correct)
    Source: 132.177.4.32 (132.177.4.32)
    Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: 61292 (61292), Dst Port: auth (113), Seq: 1000237645, Ack: 2971081278, Len: 0
    Source port: 61292 (61292)
    Destination port: auth (113)
    Sequence number: 1000237645
    Acknowledgement number: 2971081278
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 49640
    Checksum: 0x7a8b (correct)

Frame 7 (64 bytes on wire, 64 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:28.002868000
    Time delta from previous packet: 0.000648000 seconds
    Time relative to first packet: 0.031873000 seconds
    Frame Number: 7
    Packet Length: 64 bytes
    Capture Length: 64 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
    Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 50
    Identification: 0xebd7
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x3cad (correct)
    Source: 132.177.4.32 (132.177.4.32)
    Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: 61292 (61292), Dst Port: auth (113), Seq: 1000237645, Ack: 2971081278, Len: 10
    Source port: 61292 (61292)
    Destination port: auth (113)
    Sequence number: 1000237645
    Next sequence number: 1000237655
    Acknowledgement number: 2971081278
    Header length: 20 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 49640
    Checksum: 0x9ba3 (correct)
Data (10 bytes)

0000  33 32 37 38 35 2c 32 35 0d 0a                     32785,25..

Frame 8 (54 bytes on wire, 54 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:28.002904000
    Time delta from previous packet: 0.000036000 seconds
    Time relative to first packet: 0.031909000 seconds
    Frame Number: 8
    Packet Length: 54 bytes
    Capture Length: 54 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
    Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 40
    Identification: 0xcf75
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x5919 (correct)
    Source: 132.177.4.191 (132.177.4.191)
    Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: auth (113), Dst Port: 61292 (61292), Seq: 2971081278, Ack: 1000237655, Len: 0
    Source port: auth (113)
    Destination port: 61292 (61292)
    Sequence number: 2971081278
    Acknowledgement number: 1000237655
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x259a (correct)

Frame 9 (118 bytes on wire, 118 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:28.128213000
    Time delta from previous packet: 0.125309000 seconds
    Time relative to first packet: 0.157218000 seconds
    Frame Number: 9
    Packet Length: 118 bytes
    Capture Length: 118 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
    Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0xcf76
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x58d8 (correct)
    Source: 132.177.4.191 (132.177.4.191)
    Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: auth (113), Dst Port: 61292 (61292), Seq: 2971081278, Ack: 1000237655, Len: 64
    Source port: auth (113)
    Destination port: 61292 (61292)
    Sequence number: 2971081278
    Next sequence number: 2971081342
    Acknowledgement number: 1000237655
    Header length: 20 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x07a4 (correct)
Data (64 bytes)

0000  33 32 37 38 35 2c 20 32 35 20 3a 20 55 53 45 52   32785, 25 : USER
0010  49 44 20 3a 20 4f 54 48 45 52 20 3a 5b 6f 4f 45   ID : OTHER :[oOE
0020  6f 33 62 51 73 35 71 38 6f 6c 2b 36 44 58 78 62   o3bQs5q8ol+6DXxb
0030  51 55 45 5a 53 4f 56 36 64 4a 33 71 73 5d 0d 0a   QUEZSOV6dJ3qs]..

Frame 10 (60 bytes on wire, 60 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:28.130161000
    Time delta from previous packet: 0.001948000 seconds
    Time relative to first packet: 0.159166000 seconds
    Frame Number: 10
    Packet Length: 60 bytes
    Capture Length: 60 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
    Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Type: IP (0x0800)
    Trailer: 555555555555
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 40
    Identification: 0xebd8
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x3cb6 (correct)
    Source: 132.177.4.32 (132.177.4.32)
    Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: 61292 (61292), Dst Port: auth (113), Seq: 1000237655, Ack: 2971081342, Len: 0
    Source port: 61292 (61292)
    Destination port: auth (113)
    Sequence number: 1000237655
    Acknowledgement number: 2971081342
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 49576
    Checksum: 0x7a81 (correct)

Frame 11 (60 bytes on wire, 60 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:28.131022000
    Time delta from previous packet: 0.000861000 seconds
    Time relative to first packet: 0.160027000 seconds
    Frame Number: 11
    Packet Length: 60 bytes
    Capture Length: 60 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
    Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Type: IP (0x0800)
    Trailer: 555555555555
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 40
    Identification: 0xebd9
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x3cb5 (correct)
    Source: 132.177.4.32 (132.177.4.32)
    Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: 61292 (61292), Dst Port: auth (113), Seq: 1000237655, Ack: 2971081342, Len: 0
    Source port: 61292 (61292)
    Destination port: auth (113)
    Sequence number: 1000237655
    Acknowledgement number: 2971081342
    Header length: 20 bytes
    Flags: 0x0011 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
    Window size: 49576
    Checksum: 0x7a80 (correct)

Frame 12 (54 bytes on wire, 54 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:28.131207000
    Time delta from previous packet: 0.000185000 seconds
    Time relative to first packet: 0.160212000 seconds
    Frame Number: 12
    Packet Length: 54 bytes
    Capture Length: 54 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
    Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 40
    Identification: 0xcf77
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x5917 (correct)
    Source: 132.177.4.191 (132.177.4.191)
    Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: auth (113), Dst Port: 61292 (61292), Seq: 2971081342, Ack: 1000237656, Len: 0
    Source port: auth (113)
    Destination port: 61292 (61292)
    Sequence number: 2971081342
    Acknowledgement number: 1000237656
    Header length: 20 bytes
    Flags: 0x0011 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
    Window size: 5840
    Checksum: 0x2558 (correct)

Frame 13 (60 bytes on wire, 60 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:28.132978000
    Time delta from previous packet: 0.001771000 seconds
    Time relative to first packet: 0.161983000 seconds
    Frame Number: 13
    Packet Length: 60 bytes
    Capture Length: 60 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
    Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Type: IP (0x0800)
    Trailer: 555555555555
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 40
    Identification: 0xebda
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x3cb4 (correct)
    Source: 132.177.4.32 (132.177.4.32)
    Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: 61292 (61292), Dst Port: auth (113), Seq: 1000237656, Ack: 2971081343, Len: 0
    Source port: 61292 (61292)
    Destination port: auth (113)
    Sequence number: 1000237656
    Acknowledgement number: 2971081343
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 49576
    Checksum: 0x7a7f (correct)

Frame 14 (150 bytes on wire, 150 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:28.133779000
    Time delta from previous packet: 0.000801000 seconds
    Time relative to first packet: 0.162784000 seconds
    Frame Number: 14
    Packet Length: 150 bytes
    Capture Length: 150 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
    Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 136
    Identification: 0xebdb
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x3c53 (correct)
    Source: 132.177.4.32 (132.177.4.32)
    Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137348, Ack: 2964495582, Len: 84
    Source port: smtp (25)
    Destination port: 32785 (32785)
    Sequence number: 1000137348
    Next sequence number: 1000137432
    Acknowledgement number: 2964495582
    Header length: 32 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 49232
    Checksum: 0x3276 (correct)
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 129743538, tsecr 54600
Simple Mail Transfer Protocol
    Response code: 220
    Response parameter: cs.unh.edu ESMTP Sendmail 8.12.8/8.12.2; Fri, 25 Apr 2003 13:32:54 -0400 (EDT)

Frame 15 (66 bytes on wire, 66 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:28.133810000
    Time delta from previous packet: 0.000031000 seconds
    Time relative to first packet: 0.162815000 seconds
    Frame Number: 15
    Packet Length: 66 bytes
    Capture Length: 66 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
    Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x4997
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xdeeb (correct)
    Source: 132.177.4.191 (132.177.4.191)
    Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964495582, Ack: 1000137432, Len: 0
    Source port: 32785 (32785)
    Destination port: smtp (25)
    Sequence number: 2964495582
    Acknowledgement number: 1000137432
    Header length: 32 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0xc9b4 (correct)
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 54616, tsecr 129743538

Frame 16 (83 bytes on wire, 83 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:28.164872000
    Time delta from previous packet: 0.031062000 seconds
    Time relative to first packet: 0.193877000 seconds
    Frame Number: 16
    Packet Length: 83 bytes
    Capture Length: 83 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
    Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 69
    Identification: 0x4998
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xded9 (correct)
    Source: 132.177.4.191 (132.177.4.191)
    Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964495582, Ack: 1000137432, Len: 17
    Source port: 32785 (32785)
    Destination port: smtp (25)
    Sequence number: 2964495582
    Next sequence number: 2964495599
    Acknowledgement number: 1000137432
    Header length: 32 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0xe260 (correct)
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 54619, tsecr 129743538
Simple Mail Transfer Protocol
    Command: EHLO
    Request parameter: cs.unh.edu

Frame 17 (66 bytes on wire, 66 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:28.166710000
    Time delta from previous packet: 0.001838000 seconds
    Time relative to first packet: 0.195715000 seconds
    Frame Number: 17
    Packet Length: 66 bytes
    Capture Length: 66 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
    Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xebdc
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x3ca6 (correct)
    Source: 132.177.4.32 (132.177.4.32)
    Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137432, Ack: 2964495599, Len: 0
    Source port: smtp (25)
    Destination port: 32785 (32785)
    Sequence number: 1000137432
    Acknowledgement number: 2964495599
    Header length: 32 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 49232
    Checksum: 0x201d (correct)
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 129743541, tsecr 54619

Frame 18 (312 bytes on wire, 312 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:28.167809000
    Time delta from previous packet: 0.001099000 seconds
    Time relative to first packet: 0.196814000 seconds
    Frame Number: 18
    Packet Length: 312 bytes
    Capture Length: 312 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
    Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 298
    Identification: 0xebdd
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x3baf (correct)
    Source: 132.177.4.32 (132.177.4.32)
    Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137432, Ack: 2964495599, Len: 246
    Source port: smtp (25)
    Destination port: 32785 (32785)
    Sequence number: 1000137432
    Next sequence number: 1000137678
    Acknowledgement number: 2964495599
    Header length: 32 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 49232
    Checksum: 0xe86e (correct)
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 129743541, tsecr 54619
Simple Mail Transfer Protocol
    Response code: 250
    Response parameter: cs.unh.edu Hello IDENT:oOEo3bQs5q8ol+6DXxbQUEZSOV6dJ3qs@xxxxxxxxxxxxxxxxxx [132.177.4.191], pleased to meet you
    Response code: 250
    Response parameter: ENHANCEDSTATUSCODES
    Response code: 250
    Response parameter: PIPELINING
    Response code: 250
    Response parameter: EXPN
    Response code: 250
    Response parameter: VERB
    Response code: 250
    Response parameter: 8BITMIME
    Response code: 250
    Response parameter: SIZE
    Response code: 250
    Response parameter: DSN
    Response code: 250
    Response parameter: ETRN
    Response code: 250
    Response parameter: DELIVERBY
    Response code: 250
    Response parameter: HELP

Frame 19 (98 bytes on wire, 98 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:28.170008000
    Time delta from previous packet: 0.002199000 seconds
    Time relative to first packet: 0.199013000 seconds
    Frame Number: 19
    Packet Length: 98 bytes
    Capture Length: 98 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
    Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 84
    Identification: 0x4999
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xdec9 (correct)
    Source: 132.177.4.191 (132.177.4.191)
    Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964495599, Ack: 1000137678, Len: 32
    Source port: 32785 (32785)
    Destination port: smtp (25)
    Sequence number: 2964495599
    Next sequence number: 2964495631
    Acknowledgement number: 1000137678
    Header length: 32 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 6432
    Checksum: 0x763b (correct)
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 54619, tsecr 129743541
Simple Mail Transfer Protocol
    Command: MAIL
    Request parameter: FROM:<rbartos@xxxxxxxxxx>

Frame 20 (66 bytes on wire, 66 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:28.171837000
    Time delta from previous packet: 0.001829000 seconds
    Time relative to first packet: 0.200842000 seconds
    Frame Number: 20
    Packet Length: 66 bytes
    Capture Length: 66 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
    Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xebde
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x3ca4 (correct)
    Source: 132.177.4.32 (132.177.4.32)
    Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137678, Ack: 2964495631, Len: 0
    Source port: smtp (25)
    Destination port: 32785 (32785)
    Sequence number: 1000137678
    Acknowledgement number: 2964495631
    Header length: 32 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 49232
    Checksum: 0x1f06 (correct)
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 129743542, tsecr 54619

Frame 21 (111 bytes on wire, 111 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:28.181419000
    Time delta from previous packet: 0.009582000 seconds
    Time relative to first packet: 0.210424000 seconds
    Frame Number: 21
    Packet Length: 111 bytes
    Capture Length: 111 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
    Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 97
    Identification: 0xebdf
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x3c76 (correct)
    Source: 132.177.4.32 (132.177.4.32)
    Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137678, Ack: 2964495631, Len: 45
    Source port: smtp (25)
    Destination port: 32785 (32785)
    Sequence number: 1000137678
    Next sequence number: 1000137723
    Acknowledgement number: 2964495631
    Header length: 32 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 49232
    Checksum: 0x236b (correct)
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 129743542, tsecr 54619
Simple Mail Transfer Protocol
    Response code: 250
    Response parameter: 2.1.0 <rbartos@xxxxxxxxxx>... Sender ok

Frame 22 (101 bytes on wire, 101 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:28.182091000
    Time delta from previous packet: 0.000672000 seconds
    Time relative to first packet: 0.211096000 seconds
    Frame Number: 22
    Packet Length: 101 bytes
    Capture Length: 101 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
    Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 87
    Identification: 0x499a
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xdec5 (correct)
    Source: 132.177.4.191 (132.177.4.191)
    Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964495631, Ack: 1000137723, Len: 35
    Source port: 32785 (32785)
    Destination port: smtp (25)
    Sequence number: 2964495631
    Next sequence number: 2964495666
    Acknowledgement number: 1000137723
    Header length: 32 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 6432
    Checksum: 0x3278 (correct)
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 54621, tsecr 129743542
Simple Mail Transfer Protocol
    Command: RCPT
    Request parameter: TO:<rbartos@xxxxxxxxxxxxxxx>

Frame 23 (119 bytes on wire, 119 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:28.197753000
    Time delta from previous packet: 0.015662000 seconds
    Time relative to first packet: 0.226758000 seconds
    Frame Number: 23
    Packet Length: 119 bytes
    Capture Length: 119 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
    Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 105
    Identification: 0xebe0
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x3c6d (correct)
    Source: 132.177.4.32 (132.177.4.32)
    Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137723, Ack: 2964495666, Len: 53
    Source port: smtp (25)
    Destination port: 32785 (32785)
    Sequence number: 1000137723
    Next sequence number: 1000137776
    Acknowledgement number: 2964495666
    Header length: 32 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 49232
    Checksum: 0x2199 (correct)
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 129743544, tsecr 54621
Simple Mail Transfer Protocol
    Response code: 250
    Response parameter: 2.1.5 <rbartos@xxxxxxxxxxxxxxx>... Recipient ok

Frame 24 (72 bytes on wire, 72 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:28.198441000
    Time delta from previous packet: 0.000688000 seconds
    Time relative to first packet: 0.227446000 seconds
    Frame Number: 24
    Packet Length: 72 bytes
    Capture Length: 72 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
    Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 58
    Identification: 0x499b
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xdee1 (correct)
    Source: 132.177.4.191 (132.177.4.191)
    Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964495666, Ack: 1000137776, Len: 6
    Source port: 32785 (32785)
    Destination port: smtp (25)
    Sequence number: 2964495666
    Next sequence number: 2964495672
    Acknowledgement number: 1000137776
    Header length: 32 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 6432
    Checksum: 0x2012 (correct)
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 54622, tsecr 129743544
Simple Mail Transfer Protocol
    Command: DATA

Frame 25 (116 bytes on wire, 116 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:28.200705000
    Time delta from previous packet: 0.002264000 seconds
    Time relative to first packet: 0.229710000 seconds
    Frame Number: 25
    Packet Length: 116 bytes
    Capture Length: 116 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
    Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 102
    Identification: 0xebe1
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x3c6f (correct)
    Source: 132.177.4.32 (132.177.4.32)
    Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137776, Ack: 2964495672, Len: 50
    Source port: smtp (25)
    Destination port: 32785 (32785)
    Sequence number: 1000137776
    Next sequence number: 1000137826
    Acknowledgement number: 2964495672
    Header length: 32 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 49232
    Checksum: 0xca13 (correct)
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 129743544, tsecr 54622
Simple Mail Transfer Protocol
    Response code: 354
    Response parameter: Enter mail, end with "." on a line by itself

Frame 26 (502 bytes on wire, 502 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:28.206019000
    Time delta from previous packet: 0.005314000 seconds
    Time relative to first packet: 0.235024000 seconds
    Frame Number: 26
    Packet Length: 502 bytes
    Capture Length: 502 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
    Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 488
    Identification: 0x499c
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xdd32 (correct)
    Source: 132.177.4.191 (132.177.4.191)
    Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964495672, Ack: 1000137826, Len: 436
    Source port: 32785 (32785)
    Destination port: smtp (25)
    Sequence number: 2964495672
    Next sequence number: 2964496108
    Acknowledgement number: 1000137826
    Header length: 32 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 6432
    Checksum: 0x8eb3 (correct)
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 54623, tsecr 129743544
Simple Mail Transfer Protocol
    Message: Message-ID: <3EA97167.9030507@xxxxxxxxxx>\r\n
    Message: Date: Fri, 25 Apr 2003 13:33:27 -0400\r\n
    Message: From: Radim Bartos <rbartos@xxxxxxxxxx>\r\n
    Message: User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.0.1) Gecko/20020823 Netscape/7.0\r\n
    Message: X-Accept-Language: en-us, en\r\n
    Message: MIME-Version: 1.0\r\n
    Message: To:  rbartos@xxxxxxxxxxxxxxx\r\n
    Message: Subject: Test message\r\n
    Message: Content-Type: text/plain; charset=us-ascii; format=flowed\r\n
    Message: Content-Transfer-Encoding: 7bit\r\n
    Message: \r\n
    Message: Body of the message\r\n
    Message: \r\n
    Message: .\r\n

Frame 27 (66 bytes on wire, 66 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:28.251713000
    Time delta from previous packet: 0.045694000 seconds
    Time relative to first packet: 0.280718000 seconds
    Frame Number: 27
    Packet Length: 66 bytes
    Capture Length: 66 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
    Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xebe2
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x3ca0 (correct)
    Source: 132.177.4.32 (132.177.4.32)
    Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137826, Ack: 2964496108, Len: 0
    Source port: smtp (25)
    Destination port: 32785 (32785)
    Sequence number: 1000137826
    Acknowledgement number: 2964496108
    Header length: 32 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 48796
    Checksum: 0x1e3d (correct)
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 129743550, tsecr 54623

Frame 28 (122 bytes on wire, 122 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:28.402808000
    Time delta from previous packet: 0.151095000 seconds
    Time relative to first packet: 0.431813000 seconds
    Frame Number: 28
    Packet Length: 122 bytes
    Capture Length: 122 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
    Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 108
    Identification: 0xebe3
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x3c67 (correct)
    Source: 132.177.4.32 (132.177.4.32)
    Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137826, Ack: 2964496108, Len: 56
    Source port: smtp (25)
    Destination port: 32785 (32785)
    Sequence number: 1000137826
    Next sequence number: 1000137882
    Acknowledgement number: 2964496108
    Header length: 32 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 48796
    Checksum: 0x61cc (correct)
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 129743565, tsecr 54623
Simple Mail Transfer Protocol
    Response code: 250
    Response parameter: 2.0.0 h3PHWsWA005590 Message accepted for delivery

Frame 29 (66 bytes on wire, 66 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:28.440312000
    Time delta from previous packet: 0.037504000 seconds
    Time relative to first packet: 0.469317000 seconds
    Frame Number: 29
    Packet Length: 66 bytes
    Capture Length: 66 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
    Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x499d
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xdee5 (correct)
    Source: 132.177.4.191 (132.177.4.191)
    Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964496108, Ack: 1000137882, Len: 0
    Source port: 32785 (32785)
    Destination port: smtp (25)
    Sequence number: 2964496108
    Acknowledgement number: 1000137882
    Header length: 32 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 6432
    Checksum: 0xc35a (correct)
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 54647, tsecr 129743565

Frame 30 (66 bytes on wire, 66 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:29.036417000
    Time delta from previous packet: 0.596105000 seconds
    Time relative to first packet: 1.065422000 seconds
    Frame Number: 30
    Packet Length: 66 bytes
    Capture Length: 66 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
    Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x499e
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xdee4 (correct)
    Source: 132.177.4.191 (132.177.4.191)
    Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964496108, Ack: 1000137882, Len: 0
    Source port: 32785 (32785)
    Destination port: smtp (25)
    Sequence number: 2964496108
    Acknowledgement number: 1000137882
    Header length: 32 bytes
    Flags: 0x0011 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
    Window size: 6432
    Checksum: 0xc31e (correct)
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 54706, tsecr 129743565

Frame 31 (66 bytes on wire, 66 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:29.038181000
    Time delta from previous packet: 0.001764000 seconds
    Time relative to first packet: 1.067186000 seconds
    Frame Number: 31
    Packet Length: 66 bytes
    Capture Length: 66 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
    Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xebe4
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x3c9e (correct)
    Source: 132.177.4.32 (132.177.4.32)
    Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137882, Ack: 2964496109, Len: 0
    Source port: smtp (25)
    Destination port: 32785 (32785)
    Sequence number: 1000137882
    Acknowledgement number: 2964496109
    Header length: 32 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 48796
    Checksum: 0x1d63 (correct)
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 129743628, tsecr 54706

Frame 32 (66 bytes on wire, 66 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:29.039047000
    Time delta from previous packet: 0.000866000 seconds
    Time relative to first packet: 1.068052000 seconds
    Frame Number: 32
    Packet Length: 66 bytes
    Capture Length: 66 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
    Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xebe5
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x3c9d (correct)
    Source: 132.177.4.32 (132.177.4.32)
    Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137882, Ack: 2964496109, Len: 0
    Source port: smtp (25)
    Destination port: 32785 (32785)
    Sequence number: 1000137882
    Acknowledgement number: 2964496109
    Header length: 32 bytes
    Flags: 0x0011 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
    Window size: 48796
    Checksum: 0x1d62 (correct)
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 129743628, tsecr 54706

Frame 33 (66 bytes on wire, 66 bytes captured)
    Arrival Time: Apr 25, 2003 13:33:29.039081000
    Time delta from previous packet: 0.000034000 seconds
    Time relative to first packet: 1.068086000 seconds
    Frame Number: 33
    Packet Length: 66 bytes
    Capture Length: 66 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
    Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
    Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0000
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: TCP (0x06)
    Header checksum: 0x6982 (correct)
    Source: 132.177.4.191 (132.177.4.191)
    Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964496109, Ack: 1000137883, Len: 0
    Source port: 32785 (32785)
    Destination port: smtp (25)
    Sequence number: 2964496109
    Acknowledgement number: 1000137883
    Header length: 32 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 6432
    Checksum: 0xc2de (correct)
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 54706, tsecr 129743628