Ethereal-users: [Ethereal-users] analyze trace
Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.
From: christy <bootylicious_23f@xxxxxxxxx>
Date: Sun, 27 Apr 2003 22:25:13 -0700 (PDT)
I was wondering if there was anyone out there that could help me with a trace of 33 frames. The trace is from two computers exchanging a short email message using SMTP. I am looking for a short description for every frame in the trace. An explaination of how the connection is established and terminated, TCP flags used, and the application level protocol broken into frames. And if there is anything in the trace that should not be there? I have attached the trace as an text file. Thanks Rachel ===== __________________________________ Do you Yahoo!? The New Yahoo! Search - Faster. Easier. Bingo. http://search.yahoo.com
Frame 1 (74 bytes on wire, 74 bytes captured) Arrival Time: Apr 25, 2003 13:33:27.970995000 Time delta from previous packet: 0.000000000 seconds Time relative to first packet: 0.000000000 seconds Frame Number: 1 Packet Length: 74 bytes Capture Length: 74 bytes Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3 Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x4995 Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0xdee5 (correct) Source: 132.177.4.191 (132.177.4.191) Destination: 132.177.4.32 (132.177.4.32) Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964495581, Ack: 0, Len: 0 Source port: 32785 (32785) Destination port: smtp (25) Sequence number: 2964495581 Header length: 40 bytes Flags: 0x0002 (SYN) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...0 .... = Acknowledgment: Not set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 5840 Checksum: 0x7bf2 (correct) Options: (20 bytes) Maximum segment size: 1460 bytes SACK permitted Time stamp: tsval 54600, tsecr 0 NOP Window scale: 0 (multiply by 1) Frame 2 (78 bytes on wire, 78 bytes captured) Arrival Time: Apr 25, 2003 13:33:27.972973000 Time delta from previous packet: 0.001978000 seconds Time relative to first packet: 0.001978000 seconds Frame Number: 2 Packet Length: 78 bytes Capture Length: 78 bytes Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31 Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 64 Identification: 0xebd4 Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x3ca2 (correct) Source: 132.177.4.32 (132.177.4.32) Destination: 132.177.4.191 (132.177.4.191) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137347, Ack: 2964495582, Len: 0 Source port: smtp (25) Destination port: 32785 (32785) Sequence number: 1000137347 Acknowledgement number: 2964495582 Header length: 44 bytes Flags: 0x0012 (SYN, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 49232 Checksum: 0xdfdc (correct) Options: (24 bytes) NOP NOP Time stamp: tsval 129743522, tsecr 54600 Maximum segment size: 1460 bytes NOP Window scale: 0 (multiply by 1) NOP NOP SACK permitted Frame 3 (66 bytes on wire, 66 bytes captured) Arrival Time: Apr 25, 2003 13:33:27.973029000 Time delta from previous packet: 0.000056000 seconds Time relative to first packet: 0.002034000 seconds Frame Number: 3 Packet Length: 66 bytes Capture Length: 66 bytes Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3 Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 52 Identification: 0x4996 Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0xdeec (correct) Source: 132.177.4.191 (132.177.4.191) Destination: 132.177.4.32 (132.177.4.32) Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964495582, Ack: 1000137348, Len: 0 Source port: 32785 (32785) Destination port: smtp (25) Sequence number: 2964495582 Acknowledgement number: 1000137348 Header length: 32 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 5840 Checksum: 0xca28 (correct) Options: (12 bytes) NOP NOP Time stamp: tsval 54600, tsecr 129743522 Frame 4 (62 bytes on wire, 62 bytes captured) Arrival Time: Apr 25, 2003 13:33:28.000327000 Time delta from previous packet: 0.027298000 seconds Time relative to first packet: 0.029332000 seconds Frame Number: 4 Packet Length: 62 bytes Capture Length: 62 bytes Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31 Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 48 Identification: 0xebd5 Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x3cb1 (correct) Source: 132.177.4.32 (132.177.4.32) Destination: 132.177.4.191 (132.177.4.191) Transmission Control Protocol, Src Port: 61292 (61292), Dst Port: auth (113), Seq: 1000237644, Ack: 0, Len: 0 Source port: 61292 (61292) Destination port: auth (113) Sequence number: 1000237644 Header length: 28 bytes Flags: 0x0002 (SYN) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...0 .... = Acknowledgment: Not set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 49640 Checksum: 0x192d (correct) Options: (8 bytes) Maximum segment size: 1460 bytes NOP NOP SACK permitted Frame 5 (62 bytes on wire, 62 bytes captured) Arrival Time: Apr 25, 2003 13:33:28.000393000 Time delta from previous packet: 0.000066000 seconds Time relative to first packet: 0.029398000 seconds Frame Number: 5 Packet Length: 62 bytes Capture Length: 62 bytes Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3 Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 48 Identification: 0x0000 Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x2887 (correct) Source: 132.177.4.191 (132.177.4.191) Destination: 132.177.4.32 (132.177.4.32) Transmission Control Protocol, Src Port: auth (113), Dst Port: 61292 (61292), Seq: 2971081277, Ack: 1000237645, Len: 0 Source port: auth (113) Destination port: 61292 (61292) Sequence number: 2971081277 Acknowledgement number: 1000237645 Header length: 28 bytes Flags: 0x0012 (SYN, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 5840 Checksum: 0xf8df (correct) Options: (8 bytes) Maximum segment size: 1460 bytes NOP NOP SACK permitted Frame 6 (60 bytes on wire, 60 bytes captured) Arrival Time: Apr 25, 2003 13:33:28.002220000 Time delta from previous packet: 0.001827000 seconds Time relative to first packet: 0.031225000 seconds Frame Number: 6 Packet Length: 60 bytes Capture Length: 60 bytes Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31 Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Type: IP (0x0800) Trailer: 555555555555 Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0xebd6 Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x3cb8 (correct) Source: 132.177.4.32 (132.177.4.32) Destination: 132.177.4.191 (132.177.4.191) Transmission Control Protocol, Src Port: 61292 (61292), Dst Port: auth (113), Seq: 1000237645, Ack: 2971081278, Len: 0 Source port: 61292 (61292) Destination port: auth (113) Sequence number: 1000237645 Acknowledgement number: 2971081278 Header length: 20 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 49640 Checksum: 0x7a8b (correct) Frame 7 (64 bytes on wire, 64 bytes captured) Arrival Time: Apr 25, 2003 13:33:28.002868000 Time delta from previous packet: 0.000648000 seconds Time relative to first packet: 0.031873000 seconds Frame Number: 7 Packet Length: 64 bytes Capture Length: 64 bytes Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31 Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 50 Identification: 0xebd7 Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x3cad (correct) Source: 132.177.4.32 (132.177.4.32) Destination: 132.177.4.191 (132.177.4.191) Transmission Control Protocol, Src Port: 61292 (61292), Dst Port: auth (113), Seq: 1000237645, Ack: 2971081278, Len: 10 Source port: 61292 (61292) Destination port: auth (113) Sequence number: 1000237645 Next sequence number: 1000237655 Acknowledgement number: 2971081278 Header length: 20 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 49640 Checksum: 0x9ba3 (correct) Data (10 bytes) 0000 33 32 37 38 35 2c 32 35 0d 0a 32785,25.. Frame 8 (54 bytes on wire, 54 bytes captured) Arrival Time: Apr 25, 2003 13:33:28.002904000 Time delta from previous packet: 0.000036000 seconds Time relative to first packet: 0.031909000 seconds Frame Number: 8 Packet Length: 54 bytes Capture Length: 54 bytes Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3 Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0xcf75 Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x5919 (correct) Source: 132.177.4.191 (132.177.4.191) Destination: 132.177.4.32 (132.177.4.32) Transmission Control Protocol, Src Port: auth (113), Dst Port: 61292 (61292), Seq: 2971081278, Ack: 1000237655, Len: 0 Source port: auth (113) Destination port: 61292 (61292) Sequence number: 2971081278 Acknowledgement number: 1000237655 Header length: 20 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 5840 Checksum: 0x259a (correct) Frame 9 (118 bytes on wire, 118 bytes captured) Arrival Time: Apr 25, 2003 13:33:28.128213000 Time delta from previous packet: 0.125309000 seconds Time relative to first packet: 0.157218000 seconds Frame Number: 9 Packet Length: 118 bytes Capture Length: 118 bytes Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3 Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0xcf76 Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x58d8 (correct) Source: 132.177.4.191 (132.177.4.191) Destination: 132.177.4.32 (132.177.4.32) Transmission Control Protocol, Src Port: auth (113), Dst Port: 61292 (61292), Seq: 2971081278, Ack: 1000237655, Len: 64 Source port: auth (113) Destination port: 61292 (61292) Sequence number: 2971081278 Next sequence number: 2971081342 Acknowledgement number: 1000237655 Header length: 20 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 5840 Checksum: 0x07a4 (correct) Data (64 bytes) 0000 33 32 37 38 35 2c 20 32 35 20 3a 20 55 53 45 52 32785, 25 : USER 0010 49 44 20 3a 20 4f 54 48 45 52 20 3a 5b 6f 4f 45 ID : OTHER :[oOE 0020 6f 33 62 51 73 35 71 38 6f 6c 2b 36 44 58 78 62 o3bQs5q8ol+6DXxb 0030 51 55 45 5a 53 4f 56 36 64 4a 33 71 73 5d 0d 0a QUEZSOV6dJ3qs].. Frame 10 (60 bytes on wire, 60 bytes captured) Arrival Time: Apr 25, 2003 13:33:28.130161000 Time delta from previous packet: 0.001948000 seconds Time relative to first packet: 0.159166000 seconds Frame Number: 10 Packet Length: 60 bytes Capture Length: 60 bytes Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31 Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Type: IP (0x0800) Trailer: 555555555555 Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0xebd8 Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x3cb6 (correct) Source: 132.177.4.32 (132.177.4.32) Destination: 132.177.4.191 (132.177.4.191) Transmission Control Protocol, Src Port: 61292 (61292), Dst Port: auth (113), Seq: 1000237655, Ack: 2971081342, Len: 0 Source port: 61292 (61292) Destination port: auth (113) Sequence number: 1000237655 Acknowledgement number: 2971081342 Header length: 20 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 49576 Checksum: 0x7a81 (correct) Frame 11 (60 bytes on wire, 60 bytes captured) Arrival Time: Apr 25, 2003 13:33:28.131022000 Time delta from previous packet: 0.000861000 seconds Time relative to first packet: 0.160027000 seconds Frame Number: 11 Packet Length: 60 bytes Capture Length: 60 bytes Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31 Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Type: IP (0x0800) Trailer: 555555555555 Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0xebd9 Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x3cb5 (correct) Source: 132.177.4.32 (132.177.4.32) Destination: 132.177.4.191 (132.177.4.191) Transmission Control Protocol, Src Port: 61292 (61292), Dst Port: auth (113), Seq: 1000237655, Ack: 2971081342, Len: 0 Source port: 61292 (61292) Destination port: auth (113) Sequence number: 1000237655 Acknowledgement number: 2971081342 Header length: 20 bytes Flags: 0x0011 (FIN, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...1 = Fin: Set Window size: 49576 Checksum: 0x7a80 (correct) Frame 12 (54 bytes on wire, 54 bytes captured) Arrival Time: Apr 25, 2003 13:33:28.131207000 Time delta from previous packet: 0.000185000 seconds Time relative to first packet: 0.160212000 seconds Frame Number: 12 Packet Length: 54 bytes Capture Length: 54 bytes Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3 Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0xcf77 Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x5917 (correct) Source: 132.177.4.191 (132.177.4.191) Destination: 132.177.4.32 (132.177.4.32) Transmission Control Protocol, Src Port: auth (113), Dst Port: 61292 (61292), Seq: 2971081342, Ack: 1000237656, Len: 0 Source port: auth (113) Destination port: 61292 (61292) Sequence number: 2971081342 Acknowledgement number: 1000237656 Header length: 20 bytes Flags: 0x0011 (FIN, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...1 = Fin: Set Window size: 5840 Checksum: 0x2558 (correct) Frame 13 (60 bytes on wire, 60 bytes captured) Arrival Time: Apr 25, 2003 13:33:28.132978000 Time delta from previous packet: 0.001771000 seconds Time relative to first packet: 0.161983000 seconds Frame Number: 13 Packet Length: 60 bytes Capture Length: 60 bytes Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31 Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Type: IP (0x0800) Trailer: 555555555555 Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0xebda Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x3cb4 (correct) Source: 132.177.4.32 (132.177.4.32) Destination: 132.177.4.191 (132.177.4.191) Transmission Control Protocol, Src Port: 61292 (61292), Dst Port: auth (113), Seq: 1000237656, Ack: 2971081343, Len: 0 Source port: 61292 (61292) Destination port: auth (113) Sequence number: 1000237656 Acknowledgement number: 2971081343 Header length: 20 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 49576 Checksum: 0x7a7f (correct) Frame 14 (150 bytes on wire, 150 bytes captured) Arrival Time: Apr 25, 2003 13:33:28.133779000 Time delta from previous packet: 0.000801000 seconds Time relative to first packet: 0.162784000 seconds Frame Number: 14 Packet Length: 150 bytes Capture Length: 150 bytes Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31 Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0xebdb Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x3c53 (correct) Source: 132.177.4.32 (132.177.4.32) Destination: 132.177.4.191 (132.177.4.191) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137348, Ack: 2964495582, Len: 84 Source port: smtp (25) Destination port: 32785 (32785) Sequence number: 1000137348 Next sequence number: 1000137432 Acknowledgement number: 2964495582 Header length: 32 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 49232 Checksum: 0x3276 (correct) Options: (12 bytes) NOP NOP Time stamp: tsval 129743538, tsecr 54600 Simple Mail Transfer Protocol Response code: 220 Response parameter: cs.unh.edu ESMTP Sendmail 8.12.8/8.12.2; Fri, 25 Apr 2003 13:32:54 -0400 (EDT) Frame 15 (66 bytes on wire, 66 bytes captured) Arrival Time: Apr 25, 2003 13:33:28.133810000 Time delta from previous packet: 0.000031000 seconds Time relative to first packet: 0.162815000 seconds Frame Number: 15 Packet Length: 66 bytes Capture Length: 66 bytes Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3 Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 52 Identification: 0x4997 Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0xdeeb (correct) Source: 132.177.4.191 (132.177.4.191) Destination: 132.177.4.32 (132.177.4.32) Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964495582, Ack: 1000137432, Len: 0 Source port: 32785 (32785) Destination port: smtp (25) Sequence number: 2964495582 Acknowledgement number: 1000137432 Header length: 32 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 5840 Checksum: 0xc9b4 (correct) Options: (12 bytes) NOP NOP Time stamp: tsval 54616, tsecr 129743538 Frame 16 (83 bytes on wire, 83 bytes captured) Arrival Time: Apr 25, 2003 13:33:28.164872000 Time delta from previous packet: 0.031062000 seconds Time relative to first packet: 0.193877000 seconds Frame Number: 16 Packet Length: 83 bytes Capture Length: 83 bytes Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3 Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 69 Identification: 0x4998 Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0xded9 (correct) Source: 132.177.4.191 (132.177.4.191) Destination: 132.177.4.32 (132.177.4.32) Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964495582, Ack: 1000137432, Len: 17 Source port: 32785 (32785) Destination port: smtp (25) Sequence number: 2964495582 Next sequence number: 2964495599 Acknowledgement number: 1000137432 Header length: 32 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 5840 Checksum: 0xe260 (correct) Options: (12 bytes) NOP NOP Time stamp: tsval 54619, tsecr 129743538 Simple Mail Transfer Protocol Command: EHLO Request parameter: cs.unh.edu Frame 17 (66 bytes on wire, 66 bytes captured) Arrival Time: Apr 25, 2003 13:33:28.166710000 Time delta from previous packet: 0.001838000 seconds Time relative to first packet: 0.195715000 seconds Frame Number: 17 Packet Length: 66 bytes Capture Length: 66 bytes Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31 Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 52 Identification: 0xebdc Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x3ca6 (correct) Source: 132.177.4.32 (132.177.4.32) Destination: 132.177.4.191 (132.177.4.191) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137432, Ack: 2964495599, Len: 0 Source port: smtp (25) Destination port: 32785 (32785) Sequence number: 1000137432 Acknowledgement number: 2964495599 Header length: 32 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 49232 Checksum: 0x201d (correct) Options: (12 bytes) NOP NOP Time stamp: tsval 129743541, tsecr 54619 Frame 18 (312 bytes on wire, 312 bytes captured) Arrival Time: Apr 25, 2003 13:33:28.167809000 Time delta from previous packet: 0.001099000 seconds Time relative to first packet: 0.196814000 seconds Frame Number: 18 Packet Length: 312 bytes Capture Length: 312 bytes Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31 Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 298 Identification: 0xebdd Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x3baf (correct) Source: 132.177.4.32 (132.177.4.32) Destination: 132.177.4.191 (132.177.4.191) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137432, Ack: 2964495599, Len: 246 Source port: smtp (25) Destination port: 32785 (32785) Sequence number: 1000137432 Next sequence number: 1000137678 Acknowledgement number: 2964495599 Header length: 32 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 49232 Checksum: 0xe86e (correct) Options: (12 bytes) NOP NOP Time stamp: tsval 129743541, tsecr 54619 Simple Mail Transfer Protocol Response code: 250 Response parameter: cs.unh.edu Hello IDENT:oOEo3bQs5q8ol+6DXxbQUEZSOV6dJ3qs@xxxxxxxxxxxxxxxxxx [132.177.4.191], pleased to meet you Response code: 250 Response parameter: ENHANCEDSTATUSCODES Response code: 250 Response parameter: PIPELINING Response code: 250 Response parameter: EXPN Response code: 250 Response parameter: VERB Response code: 250 Response parameter: 8BITMIME Response code: 250 Response parameter: SIZE Response code: 250 Response parameter: DSN Response code: 250 Response parameter: ETRN Response code: 250 Response parameter: DELIVERBY Response code: 250 Response parameter: HELP Frame 19 (98 bytes on wire, 98 bytes captured) Arrival Time: Apr 25, 2003 13:33:28.170008000 Time delta from previous packet: 0.002199000 seconds Time relative to first packet: 0.199013000 seconds Frame Number: 19 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3 Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 84 Identification: 0x4999 Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0xdec9 (correct) Source: 132.177.4.191 (132.177.4.191) Destination: 132.177.4.32 (132.177.4.32) Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964495599, Ack: 1000137678, Len: 32 Source port: 32785 (32785) Destination port: smtp (25) Sequence number: 2964495599 Next sequence number: 2964495631 Acknowledgement number: 1000137678 Header length: 32 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 6432 Checksum: 0x763b (correct) Options: (12 bytes) NOP NOP Time stamp: tsval 54619, tsecr 129743541 Simple Mail Transfer Protocol Command: MAIL Request parameter: FROM:<rbartos@xxxxxxxxxx> Frame 20 (66 bytes on wire, 66 bytes captured) Arrival Time: Apr 25, 2003 13:33:28.171837000 Time delta from previous packet: 0.001829000 seconds Time relative to first packet: 0.200842000 seconds Frame Number: 20 Packet Length: 66 bytes Capture Length: 66 bytes Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31 Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 52 Identification: 0xebde Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x3ca4 (correct) Source: 132.177.4.32 (132.177.4.32) Destination: 132.177.4.191 (132.177.4.191) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137678, Ack: 2964495631, Len: 0 Source port: smtp (25) Destination port: 32785 (32785) Sequence number: 1000137678 Acknowledgement number: 2964495631 Header length: 32 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 49232 Checksum: 0x1f06 (correct) Options: (12 bytes) NOP NOP Time stamp: tsval 129743542, tsecr 54619 Frame 21 (111 bytes on wire, 111 bytes captured) Arrival Time: Apr 25, 2003 13:33:28.181419000 Time delta from previous packet: 0.009582000 seconds Time relative to first packet: 0.210424000 seconds Frame Number: 21 Packet Length: 111 bytes Capture Length: 111 bytes Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31 Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 97 Identification: 0xebdf Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x3c76 (correct) Source: 132.177.4.32 (132.177.4.32) Destination: 132.177.4.191 (132.177.4.191) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137678, Ack: 2964495631, Len: 45 Source port: smtp (25) Destination port: 32785 (32785) Sequence number: 1000137678 Next sequence number: 1000137723 Acknowledgement number: 2964495631 Header length: 32 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 49232 Checksum: 0x236b (correct) Options: (12 bytes) NOP NOP Time stamp: tsval 129743542, tsecr 54619 Simple Mail Transfer Protocol Response code: 250 Response parameter: 2.1.0 <rbartos@xxxxxxxxxx>... Sender ok Frame 22 (101 bytes on wire, 101 bytes captured) Arrival Time: Apr 25, 2003 13:33:28.182091000 Time delta from previous packet: 0.000672000 seconds Time relative to first packet: 0.211096000 seconds Frame Number: 22 Packet Length: 101 bytes Capture Length: 101 bytes Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3 Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 87 Identification: 0x499a Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0xdec5 (correct) Source: 132.177.4.191 (132.177.4.191) Destination: 132.177.4.32 (132.177.4.32) Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964495631, Ack: 1000137723, Len: 35 Source port: 32785 (32785) Destination port: smtp (25) Sequence number: 2964495631 Next sequence number: 2964495666 Acknowledgement number: 1000137723 Header length: 32 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 6432 Checksum: 0x3278 (correct) Options: (12 bytes) NOP NOP Time stamp: tsval 54621, tsecr 129743542 Simple Mail Transfer Protocol Command: RCPT Request parameter: TO:<rbartos@xxxxxxxxxxxxxxx> Frame 23 (119 bytes on wire, 119 bytes captured) Arrival Time: Apr 25, 2003 13:33:28.197753000 Time delta from previous packet: 0.015662000 seconds Time relative to first packet: 0.226758000 seconds Frame Number: 23 Packet Length: 119 bytes Capture Length: 119 bytes Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31 Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 105 Identification: 0xebe0 Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x3c6d (correct) Source: 132.177.4.32 (132.177.4.32) Destination: 132.177.4.191 (132.177.4.191) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137723, Ack: 2964495666, Len: 53 Source port: smtp (25) Destination port: 32785 (32785) Sequence number: 1000137723 Next sequence number: 1000137776 Acknowledgement number: 2964495666 Header length: 32 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 49232 Checksum: 0x2199 (correct) Options: (12 bytes) NOP NOP Time stamp: tsval 129743544, tsecr 54621 Simple Mail Transfer Protocol Response code: 250 Response parameter: 2.1.5 <rbartos@xxxxxxxxxxxxxxx>... Recipient ok Frame 24 (72 bytes on wire, 72 bytes captured) Arrival Time: Apr 25, 2003 13:33:28.198441000 Time delta from previous packet: 0.000688000 seconds Time relative to first packet: 0.227446000 seconds Frame Number: 24 Packet Length: 72 bytes Capture Length: 72 bytes Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3 Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 58 Identification: 0x499b Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0xdee1 (correct) Source: 132.177.4.191 (132.177.4.191) Destination: 132.177.4.32 (132.177.4.32) Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964495666, Ack: 1000137776, Len: 6 Source port: 32785 (32785) Destination port: smtp (25) Sequence number: 2964495666 Next sequence number: 2964495672 Acknowledgement number: 1000137776 Header length: 32 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 6432 Checksum: 0x2012 (correct) Options: (12 bytes) NOP NOP Time stamp: tsval 54622, tsecr 129743544 Simple Mail Transfer Protocol Command: DATA Frame 25 (116 bytes on wire, 116 bytes captured) Arrival Time: Apr 25, 2003 13:33:28.200705000 Time delta from previous packet: 0.002264000 seconds Time relative to first packet: 0.229710000 seconds Frame Number: 25 Packet Length: 116 bytes Capture Length: 116 bytes Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31 Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 102 Identification: 0xebe1 Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x3c6f (correct) Source: 132.177.4.32 (132.177.4.32) Destination: 132.177.4.191 (132.177.4.191) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137776, Ack: 2964495672, Len: 50 Source port: smtp (25) Destination port: 32785 (32785) Sequence number: 1000137776 Next sequence number: 1000137826 Acknowledgement number: 2964495672 Header length: 32 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 49232 Checksum: 0xca13 (correct) Options: (12 bytes) NOP NOP Time stamp: tsval 129743544, tsecr 54622 Simple Mail Transfer Protocol Response code: 354 Response parameter: Enter mail, end with "." on a line by itself Frame 26 (502 bytes on wire, 502 bytes captured) Arrival Time: Apr 25, 2003 13:33:28.206019000 Time delta from previous packet: 0.005314000 seconds Time relative to first packet: 0.235024000 seconds Frame Number: 26 Packet Length: 502 bytes Capture Length: 502 bytes Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3 Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 488 Identification: 0x499c Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0xdd32 (correct) Source: 132.177.4.191 (132.177.4.191) Destination: 132.177.4.32 (132.177.4.32) Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964495672, Ack: 1000137826, Len: 436 Source port: 32785 (32785) Destination port: smtp (25) Sequence number: 2964495672 Next sequence number: 2964496108 Acknowledgement number: 1000137826 Header length: 32 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 6432 Checksum: 0x8eb3 (correct) Options: (12 bytes) NOP NOP Time stamp: tsval 54623, tsecr 129743544 Simple Mail Transfer Protocol Message: Message-ID: <3EA97167.9030507@xxxxxxxxxx>\r\n Message: Date: Fri, 25 Apr 2003 13:33:27 -0400\r\n Message: From: Radim Bartos <rbartos@xxxxxxxxxx>\r\n Message: User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.0.1) Gecko/20020823 Netscape/7.0\r\n Message: X-Accept-Language: en-us, en\r\n Message: MIME-Version: 1.0\r\n Message: To: rbartos@xxxxxxxxxxxxxxx\r\n Message: Subject: Test message\r\n Message: Content-Type: text/plain; charset=us-ascii; format=flowed\r\n Message: Content-Transfer-Encoding: 7bit\r\n Message: \r\n Message: Body of the message\r\n Message: \r\n Message: .\r\n Frame 27 (66 bytes on wire, 66 bytes captured) Arrival Time: Apr 25, 2003 13:33:28.251713000 Time delta from previous packet: 0.045694000 seconds Time relative to first packet: 0.280718000 seconds Frame Number: 27 Packet Length: 66 bytes Capture Length: 66 bytes Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31 Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 52 Identification: 0xebe2 Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x3ca0 (correct) Source: 132.177.4.32 (132.177.4.32) Destination: 132.177.4.191 (132.177.4.191) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137826, Ack: 2964496108, Len: 0 Source port: smtp (25) Destination port: 32785 (32785) Sequence number: 1000137826 Acknowledgement number: 2964496108 Header length: 32 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 48796 Checksum: 0x1e3d (correct) Options: (12 bytes) NOP NOP Time stamp: tsval 129743550, tsecr 54623 Frame 28 (122 bytes on wire, 122 bytes captured) Arrival Time: Apr 25, 2003 13:33:28.402808000 Time delta from previous packet: 0.151095000 seconds Time relative to first packet: 0.431813000 seconds Frame Number: 28 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31 Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0xebe3 Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x3c67 (correct) Source: 132.177.4.32 (132.177.4.32) Destination: 132.177.4.191 (132.177.4.191) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137826, Ack: 2964496108, Len: 56 Source port: smtp (25) Destination port: 32785 (32785) Sequence number: 1000137826 Next sequence number: 1000137882 Acknowledgement number: 2964496108 Header length: 32 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 48796 Checksum: 0x61cc (correct) Options: (12 bytes) NOP NOP Time stamp: tsval 129743565, tsecr 54623 Simple Mail Transfer Protocol Response code: 250 Response parameter: 2.0.0 h3PHWsWA005590 Message accepted for delivery Frame 29 (66 bytes on wire, 66 bytes captured) Arrival Time: Apr 25, 2003 13:33:28.440312000 Time delta from previous packet: 0.037504000 seconds Time relative to first packet: 0.469317000 seconds Frame Number: 29 Packet Length: 66 bytes Capture Length: 66 bytes Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3 Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 52 Identification: 0x499d Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0xdee5 (correct) Source: 132.177.4.191 (132.177.4.191) Destination: 132.177.4.32 (132.177.4.32) Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964496108, Ack: 1000137882, Len: 0 Source port: 32785 (32785) Destination port: smtp (25) Sequence number: 2964496108 Acknowledgement number: 1000137882 Header length: 32 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 6432 Checksum: 0xc35a (correct) Options: (12 bytes) NOP NOP Time stamp: tsval 54647, tsecr 129743565 Frame 30 (66 bytes on wire, 66 bytes captured) Arrival Time: Apr 25, 2003 13:33:29.036417000 Time delta from previous packet: 0.596105000 seconds Time relative to first packet: 1.065422000 seconds Frame Number: 30 Packet Length: 66 bytes Capture Length: 66 bytes Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3 Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 52 Identification: 0x499e Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0xdee4 (correct) Source: 132.177.4.191 (132.177.4.191) Destination: 132.177.4.32 (132.177.4.32) Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964496108, Ack: 1000137882, Len: 0 Source port: 32785 (32785) Destination port: smtp (25) Sequence number: 2964496108 Acknowledgement number: 1000137882 Header length: 32 bytes Flags: 0x0011 (FIN, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...1 = Fin: Set Window size: 6432 Checksum: 0xc31e (correct) Options: (12 bytes) NOP NOP Time stamp: tsval 54706, tsecr 129743565 Frame 31 (66 bytes on wire, 66 bytes captured) Arrival Time: Apr 25, 2003 13:33:29.038181000 Time delta from previous packet: 0.001764000 seconds Time relative to first packet: 1.067186000 seconds Frame Number: 31 Packet Length: 66 bytes Capture Length: 66 bytes Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31 Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 52 Identification: 0xebe4 Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x3c9e (correct) Source: 132.177.4.32 (132.177.4.32) Destination: 132.177.4.191 (132.177.4.191) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137882, Ack: 2964496109, Len: 0 Source port: smtp (25) Destination port: 32785 (32785) Sequence number: 1000137882 Acknowledgement number: 2964496109 Header length: 32 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 48796 Checksum: 0x1d63 (correct) Options: (12 bytes) NOP NOP Time stamp: tsval 129743628, tsecr 54706 Frame 32 (66 bytes on wire, 66 bytes captured) Arrival Time: Apr 25, 2003 13:33:29.039047000 Time delta from previous packet: 0.000866000 seconds Time relative to first packet: 1.068052000 seconds Frame Number: 32 Packet Length: 66 bytes Capture Length: 66 bytes Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31 Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 52 Identification: 0xebe5 Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x3c9d (correct) Source: 132.177.4.32 (132.177.4.32) Destination: 132.177.4.191 (132.177.4.191) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137882, Ack: 2964496109, Len: 0 Source port: smtp (25) Destination port: 32785 (32785) Sequence number: 1000137882 Acknowledgement number: 2964496109 Header length: 32 bytes Flags: 0x0011 (FIN, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...1 = Fin: Set Window size: 48796 Checksum: 0x1d62 (correct) Options: (12 bytes) NOP NOP Time stamp: tsval 129743628, tsecr 54706 Frame 33 (66 bytes on wire, 66 bytes captured) Arrival Time: Apr 25, 2003 13:33:29.039081000 Time delta from previous packet: 0.000034000 seconds Time relative to first packet: 1.068086000 seconds Frame Number: 33 Packet Length: 66 bytes Capture Length: 66 bytes Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3 Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3) Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31) Type: IP (0x0800) Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 52 Identification: 0x0000 Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: TCP (0x06) Header checksum: 0x6982 (correct) Source: 132.177.4.191 (132.177.4.191) Destination: 132.177.4.32 (132.177.4.32) Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964496109, Ack: 1000137883, Len: 0 Source port: 32785 (32785) Destination port: smtp (25) Sequence number: 2964496109 Acknowledgement number: 1000137883 Header length: 32 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 6432 Checksum: 0xc2de (correct) Options: (12 bytes) NOP NOP Time stamp: tsval 54706, tsecr 129743628
- Follow-Ups:
- Re: [Ethereal-users] analyze trace
- From: MH
- Re: [Ethereal-users] analyze trace
- Prev by Date: RE: [Ethereal-users] HELP w/ RTP packets
- Next by Date: Re: [Ethereal-users] analyze trace
- Previous by thread: RE: [Ethereal-users] HELP w/ RTP packets
- Next by thread: Re: [Ethereal-users] analyze trace
- Index(es):