Ethereal-users: [Ethereal-users] analyze trace
Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.
From: christy <bootylicious_23f@xxxxxxxxx>
Date: Sun, 27 Apr 2003 22:25:13 -0700 (PDT)
I was wondering if there was anyone out there that could help me with a trace of 33 frames. The trace is from two computers exchanging a short email message using SMTP. I am looking for a short description for every frame in the trace. An explaination of how the connection is established and terminated, TCP flags used, and the application level protocol broken into frames. And if there is anything in the trace that should not be there? I have attached the trace as an text file. Thanks Rachel ===== __________________________________ Do you Yahoo!? The New Yahoo! Search - Faster. Easier. Bingo. http://search.yahoo.com
Frame 1 (74 bytes on wire, 74 bytes captured)
Arrival Time: Apr 25, 2003 13:33:27.970995000
Time delta from previous packet: 0.000000000 seconds
Time relative to first packet: 0.000000000 seconds
Frame Number: 1
Packet Length: 74 bytes
Capture Length: 74 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 60
Identification: 0x4995
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xdee5 (correct)
Source: 132.177.4.191 (132.177.4.191)
Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964495581, Ack: 0, Len: 0
Source port: 32785 (32785)
Destination port: smtp (25)
Sequence number: 2964495581
Header length: 40 bytes
Flags: 0x0002 (SYN)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 5840
Checksum: 0x7bf2 (correct)
Options: (20 bytes)
Maximum segment size: 1460 bytes
SACK permitted
Time stamp: tsval 54600, tsecr 0
NOP
Window scale: 0 (multiply by 1)
Frame 2 (78 bytes on wire, 78 bytes captured)
Arrival Time: Apr 25, 2003 13:33:27.972973000
Time delta from previous packet: 0.001978000 seconds
Time relative to first packet: 0.001978000 seconds
Frame Number: 2
Packet Length: 78 bytes
Capture Length: 78 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 64
Identification: 0xebd4
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x3ca2 (correct)
Source: 132.177.4.32 (132.177.4.32)
Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137347, Ack: 2964495582, Len: 0
Source port: smtp (25)
Destination port: 32785 (32785)
Sequence number: 1000137347
Acknowledgement number: 2964495582
Header length: 44 bytes
Flags: 0x0012 (SYN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 49232
Checksum: 0xdfdc (correct)
Options: (24 bytes)
NOP
NOP
Time stamp: tsval 129743522, tsecr 54600
Maximum segment size: 1460 bytes
NOP
Window scale: 0 (multiply by 1)
NOP
NOP
SACK permitted
Frame 3 (66 bytes on wire, 66 bytes captured)
Arrival Time: Apr 25, 2003 13:33:27.973029000
Time delta from previous packet: 0.000056000 seconds
Time relative to first packet: 0.002034000 seconds
Frame Number: 3
Packet Length: 66 bytes
Capture Length: 66 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0x4996
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xdeec (correct)
Source: 132.177.4.191 (132.177.4.191)
Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964495582, Ack: 1000137348, Len: 0
Source port: 32785 (32785)
Destination port: smtp (25)
Sequence number: 2964495582
Acknowledgement number: 1000137348
Header length: 32 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5840
Checksum: 0xca28 (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 54600, tsecr 129743522
Frame 4 (62 bytes on wire, 62 bytes captured)
Arrival Time: Apr 25, 2003 13:33:28.000327000
Time delta from previous packet: 0.027298000 seconds
Time relative to first packet: 0.029332000 seconds
Frame Number: 4
Packet Length: 62 bytes
Capture Length: 62 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 48
Identification: 0xebd5
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x3cb1 (correct)
Source: 132.177.4.32 (132.177.4.32)
Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: 61292 (61292), Dst Port: auth (113), Seq: 1000237644, Ack: 0, Len: 0
Source port: 61292 (61292)
Destination port: auth (113)
Sequence number: 1000237644
Header length: 28 bytes
Flags: 0x0002 (SYN)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 49640
Checksum: 0x192d (correct)
Options: (8 bytes)
Maximum segment size: 1460 bytes
NOP
NOP
SACK permitted
Frame 5 (62 bytes on wire, 62 bytes captured)
Arrival Time: Apr 25, 2003 13:33:28.000393000
Time delta from previous packet: 0.000066000 seconds
Time relative to first packet: 0.029398000 seconds
Frame Number: 5
Packet Length: 62 bytes
Capture Length: 62 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 48
Identification: 0x0000
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2887 (correct)
Source: 132.177.4.191 (132.177.4.191)
Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: auth (113), Dst Port: 61292 (61292), Seq: 2971081277, Ack: 1000237645, Len: 0
Source port: auth (113)
Destination port: 61292 (61292)
Sequence number: 2971081277
Acknowledgement number: 1000237645
Header length: 28 bytes
Flags: 0x0012 (SYN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 5840
Checksum: 0xf8df (correct)
Options: (8 bytes)
Maximum segment size: 1460 bytes
NOP
NOP
SACK permitted
Frame 6 (60 bytes on wire, 60 bytes captured)
Arrival Time: Apr 25, 2003 13:33:28.002220000
Time delta from previous packet: 0.001827000 seconds
Time relative to first packet: 0.031225000 seconds
Frame Number: 6
Packet Length: 60 bytes
Capture Length: 60 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Type: IP (0x0800)
Trailer: 555555555555
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0xebd6
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x3cb8 (correct)
Source: 132.177.4.32 (132.177.4.32)
Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: 61292 (61292), Dst Port: auth (113), Seq: 1000237645, Ack: 2971081278, Len: 0
Source port: 61292 (61292)
Destination port: auth (113)
Sequence number: 1000237645
Acknowledgement number: 2971081278
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 49640
Checksum: 0x7a8b (correct)
Frame 7 (64 bytes on wire, 64 bytes captured)
Arrival Time: Apr 25, 2003 13:33:28.002868000
Time delta from previous packet: 0.000648000 seconds
Time relative to first packet: 0.031873000 seconds
Frame Number: 7
Packet Length: 64 bytes
Capture Length: 64 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 50
Identification: 0xebd7
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x3cad (correct)
Source: 132.177.4.32 (132.177.4.32)
Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: 61292 (61292), Dst Port: auth (113), Seq: 1000237645, Ack: 2971081278, Len: 10
Source port: 61292 (61292)
Destination port: auth (113)
Sequence number: 1000237645
Next sequence number: 1000237655
Acknowledgement number: 2971081278
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 49640
Checksum: 0x9ba3 (correct)
Data (10 bytes)
0000 33 32 37 38 35 2c 32 35 0d 0a 32785,25..
Frame 8 (54 bytes on wire, 54 bytes captured)
Arrival Time: Apr 25, 2003 13:33:28.002904000
Time delta from previous packet: 0.000036000 seconds
Time relative to first packet: 0.031909000 seconds
Frame Number: 8
Packet Length: 54 bytes
Capture Length: 54 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0xcf75
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x5919 (correct)
Source: 132.177.4.191 (132.177.4.191)
Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: auth (113), Dst Port: 61292 (61292), Seq: 2971081278, Ack: 1000237655, Len: 0
Source port: auth (113)
Destination port: 61292 (61292)
Sequence number: 2971081278
Acknowledgement number: 1000237655
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5840
Checksum: 0x259a (correct)
Frame 9 (118 bytes on wire, 118 bytes captured)
Arrival Time: Apr 25, 2003 13:33:28.128213000
Time delta from previous packet: 0.125309000 seconds
Time relative to first packet: 0.157218000 seconds
Frame Number: 9
Packet Length: 118 bytes
Capture Length: 118 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 104
Identification: 0xcf76
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x58d8 (correct)
Source: 132.177.4.191 (132.177.4.191)
Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: auth (113), Dst Port: 61292 (61292), Seq: 2971081278, Ack: 1000237655, Len: 64
Source port: auth (113)
Destination port: 61292 (61292)
Sequence number: 2971081278
Next sequence number: 2971081342
Acknowledgement number: 1000237655
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5840
Checksum: 0x07a4 (correct)
Data (64 bytes)
0000 33 32 37 38 35 2c 20 32 35 20 3a 20 55 53 45 52 32785, 25 : USER
0010 49 44 20 3a 20 4f 54 48 45 52 20 3a 5b 6f 4f 45 ID : OTHER :[oOE
0020 6f 33 62 51 73 35 71 38 6f 6c 2b 36 44 58 78 62 o3bQs5q8ol+6DXxb
0030 51 55 45 5a 53 4f 56 36 64 4a 33 71 73 5d 0d 0a QUEZSOV6dJ3qs]..
Frame 10 (60 bytes on wire, 60 bytes captured)
Arrival Time: Apr 25, 2003 13:33:28.130161000
Time delta from previous packet: 0.001948000 seconds
Time relative to first packet: 0.159166000 seconds
Frame Number: 10
Packet Length: 60 bytes
Capture Length: 60 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Type: IP (0x0800)
Trailer: 555555555555
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0xebd8
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x3cb6 (correct)
Source: 132.177.4.32 (132.177.4.32)
Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: 61292 (61292), Dst Port: auth (113), Seq: 1000237655, Ack: 2971081342, Len: 0
Source port: 61292 (61292)
Destination port: auth (113)
Sequence number: 1000237655
Acknowledgement number: 2971081342
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 49576
Checksum: 0x7a81 (correct)
Frame 11 (60 bytes on wire, 60 bytes captured)
Arrival Time: Apr 25, 2003 13:33:28.131022000
Time delta from previous packet: 0.000861000 seconds
Time relative to first packet: 0.160027000 seconds
Frame Number: 11
Packet Length: 60 bytes
Capture Length: 60 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Type: IP (0x0800)
Trailer: 555555555555
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0xebd9
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x3cb5 (correct)
Source: 132.177.4.32 (132.177.4.32)
Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: 61292 (61292), Dst Port: auth (113), Seq: 1000237655, Ack: 2971081342, Len: 0
Source port: 61292 (61292)
Destination port: auth (113)
Sequence number: 1000237655
Acknowledgement number: 2971081342
Header length: 20 bytes
Flags: 0x0011 (FIN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...1 = Fin: Set
Window size: 49576
Checksum: 0x7a80 (correct)
Frame 12 (54 bytes on wire, 54 bytes captured)
Arrival Time: Apr 25, 2003 13:33:28.131207000
Time delta from previous packet: 0.000185000 seconds
Time relative to first packet: 0.160212000 seconds
Frame Number: 12
Packet Length: 54 bytes
Capture Length: 54 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0xcf77
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x5917 (correct)
Source: 132.177.4.191 (132.177.4.191)
Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: auth (113), Dst Port: 61292 (61292), Seq: 2971081342, Ack: 1000237656, Len: 0
Source port: auth (113)
Destination port: 61292 (61292)
Sequence number: 2971081342
Acknowledgement number: 1000237656
Header length: 20 bytes
Flags: 0x0011 (FIN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...1 = Fin: Set
Window size: 5840
Checksum: 0x2558 (correct)
Frame 13 (60 bytes on wire, 60 bytes captured)
Arrival Time: Apr 25, 2003 13:33:28.132978000
Time delta from previous packet: 0.001771000 seconds
Time relative to first packet: 0.161983000 seconds
Frame Number: 13
Packet Length: 60 bytes
Capture Length: 60 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Type: IP (0x0800)
Trailer: 555555555555
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0xebda
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x3cb4 (correct)
Source: 132.177.4.32 (132.177.4.32)
Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: 61292 (61292), Dst Port: auth (113), Seq: 1000237656, Ack: 2971081343, Len: 0
Source port: 61292 (61292)
Destination port: auth (113)
Sequence number: 1000237656
Acknowledgement number: 2971081343
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 49576
Checksum: 0x7a7f (correct)
Frame 14 (150 bytes on wire, 150 bytes captured)
Arrival Time: Apr 25, 2003 13:33:28.133779000
Time delta from previous packet: 0.000801000 seconds
Time relative to first packet: 0.162784000 seconds
Frame Number: 14
Packet Length: 150 bytes
Capture Length: 150 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 136
Identification: 0xebdb
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x3c53 (correct)
Source: 132.177.4.32 (132.177.4.32)
Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137348, Ack: 2964495582, Len: 84
Source port: smtp (25)
Destination port: 32785 (32785)
Sequence number: 1000137348
Next sequence number: 1000137432
Acknowledgement number: 2964495582
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 49232
Checksum: 0x3276 (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 129743538, tsecr 54600
Simple Mail Transfer Protocol
Response code: 220
Response parameter: cs.unh.edu ESMTP Sendmail 8.12.8/8.12.2; Fri, 25 Apr 2003 13:32:54 -0400 (EDT)
Frame 15 (66 bytes on wire, 66 bytes captured)
Arrival Time: Apr 25, 2003 13:33:28.133810000
Time delta from previous packet: 0.000031000 seconds
Time relative to first packet: 0.162815000 seconds
Frame Number: 15
Packet Length: 66 bytes
Capture Length: 66 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0x4997
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xdeeb (correct)
Source: 132.177.4.191 (132.177.4.191)
Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964495582, Ack: 1000137432, Len: 0
Source port: 32785 (32785)
Destination port: smtp (25)
Sequence number: 2964495582
Acknowledgement number: 1000137432
Header length: 32 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5840
Checksum: 0xc9b4 (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 54616, tsecr 129743538
Frame 16 (83 bytes on wire, 83 bytes captured)
Arrival Time: Apr 25, 2003 13:33:28.164872000
Time delta from previous packet: 0.031062000 seconds
Time relative to first packet: 0.193877000 seconds
Frame Number: 16
Packet Length: 83 bytes
Capture Length: 83 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 69
Identification: 0x4998
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xded9 (correct)
Source: 132.177.4.191 (132.177.4.191)
Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964495582, Ack: 1000137432, Len: 17
Source port: 32785 (32785)
Destination port: smtp (25)
Sequence number: 2964495582
Next sequence number: 2964495599
Acknowledgement number: 1000137432
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5840
Checksum: 0xe260 (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 54619, tsecr 129743538
Simple Mail Transfer Protocol
Command: EHLO
Request parameter: cs.unh.edu
Frame 17 (66 bytes on wire, 66 bytes captured)
Arrival Time: Apr 25, 2003 13:33:28.166710000
Time delta from previous packet: 0.001838000 seconds
Time relative to first packet: 0.195715000 seconds
Frame Number: 17
Packet Length: 66 bytes
Capture Length: 66 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xebdc
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x3ca6 (correct)
Source: 132.177.4.32 (132.177.4.32)
Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137432, Ack: 2964495599, Len: 0
Source port: smtp (25)
Destination port: 32785 (32785)
Sequence number: 1000137432
Acknowledgement number: 2964495599
Header length: 32 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 49232
Checksum: 0x201d (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 129743541, tsecr 54619
Frame 18 (312 bytes on wire, 312 bytes captured)
Arrival Time: Apr 25, 2003 13:33:28.167809000
Time delta from previous packet: 0.001099000 seconds
Time relative to first packet: 0.196814000 seconds
Frame Number: 18
Packet Length: 312 bytes
Capture Length: 312 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 298
Identification: 0xebdd
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x3baf (correct)
Source: 132.177.4.32 (132.177.4.32)
Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137432, Ack: 2964495599, Len: 246
Source port: smtp (25)
Destination port: 32785 (32785)
Sequence number: 1000137432
Next sequence number: 1000137678
Acknowledgement number: 2964495599
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 49232
Checksum: 0xe86e (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 129743541, tsecr 54619
Simple Mail Transfer Protocol
Response code: 250
Response parameter: cs.unh.edu Hello IDENT:oOEo3bQs5q8ol+6DXxbQUEZSOV6dJ3qs@xxxxxxxxxxxxxxxxxx [132.177.4.191], pleased to meet you
Response code: 250
Response parameter: ENHANCEDSTATUSCODES
Response code: 250
Response parameter: PIPELINING
Response code: 250
Response parameter: EXPN
Response code: 250
Response parameter: VERB
Response code: 250
Response parameter: 8BITMIME
Response code: 250
Response parameter: SIZE
Response code: 250
Response parameter: DSN
Response code: 250
Response parameter: ETRN
Response code: 250
Response parameter: DELIVERBY
Response code: 250
Response parameter: HELP
Frame 19 (98 bytes on wire, 98 bytes captured)
Arrival Time: Apr 25, 2003 13:33:28.170008000
Time delta from previous packet: 0.002199000 seconds
Time relative to first packet: 0.199013000 seconds
Frame Number: 19
Packet Length: 98 bytes
Capture Length: 98 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 84
Identification: 0x4999
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xdec9 (correct)
Source: 132.177.4.191 (132.177.4.191)
Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964495599, Ack: 1000137678, Len: 32
Source port: 32785 (32785)
Destination port: smtp (25)
Sequence number: 2964495599
Next sequence number: 2964495631
Acknowledgement number: 1000137678
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0x763b (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 54619, tsecr 129743541
Simple Mail Transfer Protocol
Command: MAIL
Request parameter: FROM:<rbartos@xxxxxxxxxx>
Frame 20 (66 bytes on wire, 66 bytes captured)
Arrival Time: Apr 25, 2003 13:33:28.171837000
Time delta from previous packet: 0.001829000 seconds
Time relative to first packet: 0.200842000 seconds
Frame Number: 20
Packet Length: 66 bytes
Capture Length: 66 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xebde
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x3ca4 (correct)
Source: 132.177.4.32 (132.177.4.32)
Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137678, Ack: 2964495631, Len: 0
Source port: smtp (25)
Destination port: 32785 (32785)
Sequence number: 1000137678
Acknowledgement number: 2964495631
Header length: 32 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 49232
Checksum: 0x1f06 (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 129743542, tsecr 54619
Frame 21 (111 bytes on wire, 111 bytes captured)
Arrival Time: Apr 25, 2003 13:33:28.181419000
Time delta from previous packet: 0.009582000 seconds
Time relative to first packet: 0.210424000 seconds
Frame Number: 21
Packet Length: 111 bytes
Capture Length: 111 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 97
Identification: 0xebdf
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x3c76 (correct)
Source: 132.177.4.32 (132.177.4.32)
Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137678, Ack: 2964495631, Len: 45
Source port: smtp (25)
Destination port: 32785 (32785)
Sequence number: 1000137678
Next sequence number: 1000137723
Acknowledgement number: 2964495631
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 49232
Checksum: 0x236b (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 129743542, tsecr 54619
Simple Mail Transfer Protocol
Response code: 250
Response parameter: 2.1.0 <rbartos@xxxxxxxxxx>... Sender ok
Frame 22 (101 bytes on wire, 101 bytes captured)
Arrival Time: Apr 25, 2003 13:33:28.182091000
Time delta from previous packet: 0.000672000 seconds
Time relative to first packet: 0.211096000 seconds
Frame Number: 22
Packet Length: 101 bytes
Capture Length: 101 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 87
Identification: 0x499a
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xdec5 (correct)
Source: 132.177.4.191 (132.177.4.191)
Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964495631, Ack: 1000137723, Len: 35
Source port: 32785 (32785)
Destination port: smtp (25)
Sequence number: 2964495631
Next sequence number: 2964495666
Acknowledgement number: 1000137723
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0x3278 (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 54621, tsecr 129743542
Simple Mail Transfer Protocol
Command: RCPT
Request parameter: TO:<rbartos@xxxxxxxxxxxxxxx>
Frame 23 (119 bytes on wire, 119 bytes captured)
Arrival Time: Apr 25, 2003 13:33:28.197753000
Time delta from previous packet: 0.015662000 seconds
Time relative to first packet: 0.226758000 seconds
Frame Number: 23
Packet Length: 119 bytes
Capture Length: 119 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 105
Identification: 0xebe0
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x3c6d (correct)
Source: 132.177.4.32 (132.177.4.32)
Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137723, Ack: 2964495666, Len: 53
Source port: smtp (25)
Destination port: 32785 (32785)
Sequence number: 1000137723
Next sequence number: 1000137776
Acknowledgement number: 2964495666
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 49232
Checksum: 0x2199 (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 129743544, tsecr 54621
Simple Mail Transfer Protocol
Response code: 250
Response parameter: 2.1.5 <rbartos@xxxxxxxxxxxxxxx>... Recipient ok
Frame 24 (72 bytes on wire, 72 bytes captured)
Arrival Time: Apr 25, 2003 13:33:28.198441000
Time delta from previous packet: 0.000688000 seconds
Time relative to first packet: 0.227446000 seconds
Frame Number: 24
Packet Length: 72 bytes
Capture Length: 72 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 58
Identification: 0x499b
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xdee1 (correct)
Source: 132.177.4.191 (132.177.4.191)
Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964495666, Ack: 1000137776, Len: 6
Source port: 32785 (32785)
Destination port: smtp (25)
Sequence number: 2964495666
Next sequence number: 2964495672
Acknowledgement number: 1000137776
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0x2012 (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 54622, tsecr 129743544
Simple Mail Transfer Protocol
Command: DATA
Frame 25 (116 bytes on wire, 116 bytes captured)
Arrival Time: Apr 25, 2003 13:33:28.200705000
Time delta from previous packet: 0.002264000 seconds
Time relative to first packet: 0.229710000 seconds
Frame Number: 25
Packet Length: 116 bytes
Capture Length: 116 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 102
Identification: 0xebe1
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x3c6f (correct)
Source: 132.177.4.32 (132.177.4.32)
Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137776, Ack: 2964495672, Len: 50
Source port: smtp (25)
Destination port: 32785 (32785)
Sequence number: 1000137776
Next sequence number: 1000137826
Acknowledgement number: 2964495672
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 49232
Checksum: 0xca13 (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 129743544, tsecr 54622
Simple Mail Transfer Protocol
Response code: 354
Response parameter: Enter mail, end with "." on a line by itself
Frame 26 (502 bytes on wire, 502 bytes captured)
Arrival Time: Apr 25, 2003 13:33:28.206019000
Time delta from previous packet: 0.005314000 seconds
Time relative to first packet: 0.235024000 seconds
Frame Number: 26
Packet Length: 502 bytes
Capture Length: 502 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 488
Identification: 0x499c
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xdd32 (correct)
Source: 132.177.4.191 (132.177.4.191)
Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964495672, Ack: 1000137826, Len: 436
Source port: 32785 (32785)
Destination port: smtp (25)
Sequence number: 2964495672
Next sequence number: 2964496108
Acknowledgement number: 1000137826
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0x8eb3 (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 54623, tsecr 129743544
Simple Mail Transfer Protocol
Message: Message-ID: <3EA97167.9030507@xxxxxxxxxx>\r\n
Message: Date: Fri, 25 Apr 2003 13:33:27 -0400\r\n
Message: From: Radim Bartos <rbartos@xxxxxxxxxx>\r\n
Message: User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.0.1) Gecko/20020823 Netscape/7.0\r\n
Message: X-Accept-Language: en-us, en\r\n
Message: MIME-Version: 1.0\r\n
Message: To: rbartos@xxxxxxxxxxxxxxx\r\n
Message: Subject: Test message\r\n
Message: Content-Type: text/plain; charset=us-ascii; format=flowed\r\n
Message: Content-Transfer-Encoding: 7bit\r\n
Message: \r\n
Message: Body of the message\r\n
Message: \r\n
Message: .\r\n
Frame 27 (66 bytes on wire, 66 bytes captured)
Arrival Time: Apr 25, 2003 13:33:28.251713000
Time delta from previous packet: 0.045694000 seconds
Time relative to first packet: 0.280718000 seconds
Frame Number: 27
Packet Length: 66 bytes
Capture Length: 66 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xebe2
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x3ca0 (correct)
Source: 132.177.4.32 (132.177.4.32)
Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137826, Ack: 2964496108, Len: 0
Source port: smtp (25)
Destination port: 32785 (32785)
Sequence number: 1000137826
Acknowledgement number: 2964496108
Header length: 32 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 48796
Checksum: 0x1e3d (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 129743550, tsecr 54623
Frame 28 (122 bytes on wire, 122 bytes captured)
Arrival Time: Apr 25, 2003 13:33:28.402808000
Time delta from previous packet: 0.151095000 seconds
Time relative to first packet: 0.431813000 seconds
Frame Number: 28
Packet Length: 122 bytes
Capture Length: 122 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 108
Identification: 0xebe3
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x3c67 (correct)
Source: 132.177.4.32 (132.177.4.32)
Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137826, Ack: 2964496108, Len: 56
Source port: smtp (25)
Destination port: 32785 (32785)
Sequence number: 1000137826
Next sequence number: 1000137882
Acknowledgement number: 2964496108
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 48796
Checksum: 0x61cc (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 129743565, tsecr 54623
Simple Mail Transfer Protocol
Response code: 250
Response parameter: 2.0.0 h3PHWsWA005590 Message accepted for delivery
Frame 29 (66 bytes on wire, 66 bytes captured)
Arrival Time: Apr 25, 2003 13:33:28.440312000
Time delta from previous packet: 0.037504000 seconds
Time relative to first packet: 0.469317000 seconds
Frame Number: 29
Packet Length: 66 bytes
Capture Length: 66 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0x499d
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xdee5 (correct)
Source: 132.177.4.191 (132.177.4.191)
Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964496108, Ack: 1000137882, Len: 0
Source port: 32785 (32785)
Destination port: smtp (25)
Sequence number: 2964496108
Acknowledgement number: 1000137882
Header length: 32 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0xc35a (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 54647, tsecr 129743565
Frame 30 (66 bytes on wire, 66 bytes captured)
Arrival Time: Apr 25, 2003 13:33:29.036417000
Time delta from previous packet: 0.596105000 seconds
Time relative to first packet: 1.065422000 seconds
Frame Number: 30
Packet Length: 66 bytes
Capture Length: 66 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0x499e
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xdee4 (correct)
Source: 132.177.4.191 (132.177.4.191)
Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964496108, Ack: 1000137882, Len: 0
Source port: 32785 (32785)
Destination port: smtp (25)
Sequence number: 2964496108
Acknowledgement number: 1000137882
Header length: 32 bytes
Flags: 0x0011 (FIN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...1 = Fin: Set
Window size: 6432
Checksum: 0xc31e (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 54706, tsecr 129743565
Frame 31 (66 bytes on wire, 66 bytes captured)
Arrival Time: Apr 25, 2003 13:33:29.038181000
Time delta from previous packet: 0.001764000 seconds
Time relative to first packet: 1.067186000 seconds
Frame Number: 31
Packet Length: 66 bytes
Capture Length: 66 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xebe4
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x3c9e (correct)
Source: 132.177.4.32 (132.177.4.32)
Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137882, Ack: 2964496109, Len: 0
Source port: smtp (25)
Destination port: 32785 (32785)
Sequence number: 1000137882
Acknowledgement number: 2964496109
Header length: 32 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 48796
Checksum: 0x1d63 (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 129743628, tsecr 54706
Frame 32 (66 bytes on wire, 66 bytes captured)
Arrival Time: Apr 25, 2003 13:33:29.039047000
Time delta from previous packet: 0.000866000 seconds
Time relative to first packet: 1.068052000 seconds
Frame Number: 32
Packet Length: 66 bytes
Capture Length: 66 bytes
Ethernet II, Src: 08:00:20:95:f6:e3, Dst: 00:02:2d:0c:d1:31
Destination: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Source: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.32 (132.177.4.32), Dst Addr: 132.177.4.191 (132.177.4.191)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xebe5
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x3c9d (correct)
Source: 132.177.4.32 (132.177.4.32)
Destination: 132.177.4.191 (132.177.4.191)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 32785 (32785), Seq: 1000137882, Ack: 2964496109, Len: 0
Source port: smtp (25)
Destination port: 32785 (32785)
Sequence number: 1000137882
Acknowledgement number: 2964496109
Header length: 32 bytes
Flags: 0x0011 (FIN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...1 = Fin: Set
Window size: 48796
Checksum: 0x1d62 (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 129743628, tsecr 54706
Frame 33 (66 bytes on wire, 66 bytes captured)
Arrival Time: Apr 25, 2003 13:33:29.039081000
Time delta from previous packet: 0.000034000 seconds
Time relative to first packet: 1.068086000 seconds
Frame Number: 33
Packet Length: 66 bytes
Capture Length: 66 bytes
Ethernet II, Src: 00:02:2d:0c:d1:31, Dst: 08:00:20:95:f6:e3
Destination: 08:00:20:95:f6:e3 (08:00:20:95:f6:e3)
Source: 00:02:2d:0c:d1:31 (00:02:2d:0c:d1:31)
Type: IP (0x0800)
Internet Protocol, Src Addr: 132.177.4.191 (132.177.4.191), Dst Addr: 132.177.4.32 (132.177.4.32)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0x0000
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 255
Protocol: TCP (0x06)
Header checksum: 0x6982 (correct)
Source: 132.177.4.191 (132.177.4.191)
Destination: 132.177.4.32 (132.177.4.32)
Transmission Control Protocol, Src Port: 32785 (32785), Dst Port: smtp (25), Seq: 2964496109, Ack: 1000137883, Len: 0
Source port: 32785 (32785)
Destination port: smtp (25)
Sequence number: 2964496109
Acknowledgement number: 1000137883
Header length: 32 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0xc2de (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 54706, tsecr 129743628
- Follow-Ups:
- Re: [Ethereal-users] analyze trace
- From: MH
- Re: [Ethereal-users] analyze trace
- Prev by Date: RE: [Ethereal-users] HELP w/ RTP packets
- Next by Date: Re: [Ethereal-users] analyze trace
- Previous by thread: RE: [Ethereal-users] HELP w/ RTP packets
- Next by thread: Re: [Ethereal-users] analyze trace
- Index(es):
