No. Time Source Destination Protocol Info 1 0.000000 65.54.246.177 192.168.1.58 TCP 65376 > smtp [SYN] Seq=0 Len=0 MSS=1460 Frame 1 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Cisco-Li_1f:82:64 (00:13:10:1f:82:64), Dst: 3com_ba:a6:09 (00:60:97:ba:a6:09) Internet Protocol, Src: 65.54.246.177 (65.54.246.177), Dst: 192.168.1.58 (192.168.1.58) Transmission Control Protocol, Src Port: 65376 (65376), Dst Port: smtp (25), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 2 0.000156 192.168.1.58 65.54.246.177 TCP smtp > 65376 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 Frame 2 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: 3com_ba:a6:09 (00:60:97:ba:a6:09), Dst: Cisco-Li_1f:82:64 (00:13:10:1f:82:64) Internet Protocol, Src: 192.168.1.58 (192.168.1.58), Dst: 65.54.246.177 (65.54.246.177) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 65376 (65376), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 3 0.233043 65.54.246.177 192.168.1.58 TCP 65376 > smtp [ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 3 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco-Li_1f:82:64 (00:13:10:1f:82:64), Dst: 3com_ba:a6:09 (00:60:97:ba:a6:09) Internet Protocol, Src: 65.54.246.177 (65.54.246.177), Dst: 192.168.1.58 (192.168.1.58) Transmission Control Protocol, Src Port: 65376 (65376), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 4 0.234777 192.168.1.58 65.54.246.177 SMTP Response: 220 nowhere (IMail 8.22 4-1) NT-ESMTP Server X1 Frame 4 (103 bytes on wire, 103 bytes captured) Ethernet II, Src: 3com_ba:a6:09 (00:60:97:ba:a6:09), Dst: Cisco-Li_1f:82:64 (00:13:10:1f:82:64) Internet Protocol, Src: 192.168.1.58 (192.168.1.58), Dst: 65.54.246.177 (65.54.246.177) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 65376 (65376), Seq: 1, Ack: 1, Len: 49 Simple Mail Transfer Protocol Response: 220 nowhere (IMail 8.22 4-1) NT-ESMTP Server X1\r\n No. Time Source Destination Protocol Info 5 0.464132 65.54.246.177 192.168.1.58 SMTP Command: EHLO bay0-omc2-s41.bay0.hotmail.com Frame 5 (91 bytes on wire, 91 bytes captured) Ethernet II, Src: Cisco-Li_1f:82:64 (00:13:10:1f:82:64), Dst: 3com_ba:a6:09 (00:60:97:ba:a6:09) Internet Protocol, Src: 65.54.246.177 (65.54.246.177), Dst: 192.168.1.58 (192.168.1.58) Transmission Control Protocol, Src Port: 65376 (65376), Dst Port: smtp (25), Seq: 1, Ack: 50, Len: 37 Simple Mail Transfer Protocol Command: EHLO bay0-omc2-s41.bay0.hotmail.com\r\n No. Time Source Destination Protocol Info 6 0.464507 192.168.1.58 65.54.246.177 SMTP Response: 250-nowhere says hello Frame 6 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: 3com_ba:a6:09 (00:60:97:ba:a6:09), Dst: Cisco-Li_1f:82:64 (00:13:10:1f:82:64) Internet Protocol, Src: 192.168.1.58 (192.168.1.58), Dst: 65.54.246.177 (65.54.246.177) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 65376 (65376), Seq: 50, Ack: 38, Len: 150 Simple Mail Transfer Protocol Response: 250-nowhere says hello\r\n Response: 250-SIZE 0\r\n Response: 250-8BITMIME\r\n Response: 250-DSN\r\n Response: 250-ETRN\r\n Response: 250-AUTH LOGIN CRAM-MD5\r\n Response: 250-AUTH LOGIN\r\n Response: 250-AUTH=LOGIN\r\n Response: 250-EXPN\r\n Response: 250 STARTTLS\r\n No. Time Source Destination Protocol Info 7 0.699278 65.54.246.177 192.168.1.58 SMTP Command: MAIL FROM: Frame 7 (85 bytes on wire, 85 bytes captured) Ethernet II, Src: Cisco-Li_1f:82:64 (00:13:10:1f:82:64), Dst: 3com_ba:a6:09 (00:60:97:ba:a6:09) Internet Protocol, Src: 65.54.246.177 (65.54.246.177), Dst: 192.168.1.58 (192.168.1.58) Transmission Control Protocol, Src Port: 65376 (65376), Dst Port: smtp (25), Seq: 38, Ack: 200, Len: 31 Simple Mail Transfer Protocol Command: MAIL FROM:\r\n No. Time Source Destination Protocol Info 8 0.700954 192.168.1.58 65.54.246.177 SMTP Response: 250 ok Frame 8 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: 3com_ba:a6:09 (00:60:97:ba:a6:09), Dst: Cisco-Li_1f:82:64 (00:13:10:1f:82:64) Internet Protocol, Src: 192.168.1.58 (192.168.1.58), Dst: 65.54.246.177 (65.54.246.177) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 65376 (65376), Seq: 200, Ack: 69, Len: 8 Simple Mail Transfer Protocol Response: 250 ok\r\n No. Time Source Destination Protocol Info 9 0.931326 65.54.246.177 192.168.1.58 SMTP Command: RCPT TO: Frame 9 (86 bytes on wire, 86 bytes captured) Ethernet II, Src: Cisco-Li_1f:82:64 (00:13:10:1f:82:64), Dst: 3com_ba:a6:09 (00:60:97:ba:a6:09) Internet Protocol, Src: 65.54.246.177 (65.54.246.177), Dst: 192.168.1.58 (192.168.1.58) Transmission Control Protocol, Src Port: 65376 (65376), Dst Port: smtp (25), Seq: 69, Ack: 208, Len: 32 Simple Mail Transfer Protocol Command: RCPT TO:\r\n No. Time Source Destination Protocol Info 10 0.960806 192.168.1.58 65.54.246.177 SMTP Response: 250 ok its for Frame 10 (93 bytes on wire, 93 bytes captured) Ethernet II, Src: 3com_ba:a6:09 (00:60:97:ba:a6:09), Dst: Cisco-Li_1f:82:64 (00:13:10:1f:82:64) Internet Protocol, Src: 192.168.1.58 (192.168.1.58), Dst: 65.54.246.177 (65.54.246.177) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 65376 (65376), Seq: 208, Ack: 101, Len: 39 Simple Mail Transfer Protocol Response: 250 ok its for \r\n No. Time Source Destination Protocol Info 11 1.192827 65.54.246.177 192.168.1.58 SMTP Command: DATA Frame 11 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco-Li_1f:82:64 (00:13:10:1f:82:64), Dst: 3com_ba:a6:09 (00:60:97:ba:a6:09) Internet Protocol, Src: 65.54.246.177 (65.54.246.177), Dst: 192.168.1.58 (192.168.1.58) Transmission Control Protocol, Src Port: 65376 (65376), Dst Port: smtp (25), Seq: 101, Ack: 247, Len: 6 Simple Mail Transfer Protocol Command: DATA\r\n No. Time Source Destination Protocol Info 12 1.193179 192.168.1.58 65.54.246.177 SMTP Response: 354 ok, send it; end with . Frame 12 (95 bytes on wire, 95 bytes captured) Ethernet II, Src: 3com_ba:a6:09 (00:60:97:ba:a6:09), Dst: Cisco-Li_1f:82:64 (00:13:10:1f:82:64) Internet Protocol, Src: 192.168.1.58 (192.168.1.58), Dst: 65.54.246.177 (65.54.246.177) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 65376 (65376), Seq: 247, Ack: 107, Len: 41 Simple Mail Transfer Protocol Response: 354 ok, send it; end with .\r\n No. Time Source Destination Protocol Info 13 1.429343 65.54.246.177 192.168.1.58 SMTP Message Body Frame 13 (1514 bytes on wire, 1514 bytes captured) Ethernet II, Src: Cisco-Li_1f:82:64 (00:13:10:1f:82:64), Dst: 3com_ba:a6:09 (00:60:97:ba:a6:09) Internet Protocol, Src: 65.54.246.177 (65.54.246.177), Dst: 192.168.1.58 (192.168.1.58) Transmission Control Protocol, Src Port: 65376 (65376), Dst Port: smtp (25), Seq: 107, Ack: 288, Len: 1460 Simple Mail Transfer Protocol Message: Received: from BAY112-W8 ([64.4.26.108]) by bay0-omc2-s41.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);\r\n Message: \t Mon, 17 Dec 2007 10:05:25 -0800\r\n Message: Message-ID: \r\n Message: Return-Path: hkvip@hotmail.com\r\n Message: Content-Type: multipart/alternative;\r\n Message: \tboundary="_1db74f2a-c8e0-4d64-9f4d-5afe12f42bb4_"\r\n Message: X-Originating-IP: [121.31.77.33]\r\n Message: From: Janvier Pang \r\n Message: To: \r\n Message: Subject: test (HOTMAIL)\r\n Message: Date: Mon, 17 Dec 2007 18:05:25 +0000\r\n Message: Importance: Normal\r\n Message: MIME-Version: 1.0\r\n Message: X-OriginalArrivalTime: 17 Dec 2007 18:05:26.0217 (UTC) FILETIME=[66849390:01C840D7]\r\n Message: \r\n Message: --_1db74f2a-c8e0-4d64-9f4d-5afe12f42bb4_\r\n Message: Content-Type: text/plain; charset="big5"\r\n Message: Content-Transfer-Encoding: 8bit\r\n Message: \r\n Message: first\r\n Message: second\r\n Message: third\r\n Message: --\r\n Message: HAPPY GOOGLE HACKING\r\n Message: \r\n Message: _________________________________________________________________\r\n Message: Express yourself instantly with MSN Messenger! Download today it's FREE!\r\n Message: http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/\r\n Message: --_1db74f2a-c8e0-4d64-9f4d-5afe12f42bb4_\r\n Message: Content-Type: text/html; charset="big5"\r\n Message: Content-Transfer-Encoding: 8bit\r\n Message: \r\n Message: \r\n Message: \r\n Message: \r\n Message: \r\n Message:
first
second
third
--
HAPPY GOOGLE HACKING

Express yourself instantly with MSN Messenger! MSN Messenger\r\n Message: \r\n Message: --_1db74f2a-c8e0-4d64-9f4d-5afe12f42bb4_--\r\n Message: .\r\n No. Time Source Destination Protocol Info 15 1.429540 192.168.1.58 65.54.246.177 TCP smtp > 65376 [ACK] Seq=288 Ack=1711 Win=65535 Len=0 Frame 15 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: 3com_ba:a6:09 (00:60:97:ba:a6:09), Dst: Cisco-Li_1f:82:64 (00:13:10:1f:82:64) Internet Protocol, Src: 192.168.1.58 (192.168.1.58), Dst: 65.54.246.177 (65.54.246.177) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 65376 (65376), Seq: 288, Ack: 1711, Len: 0 No. Time Source Destination Protocol Info 16 1.465632 192.168.1.58 65.54.246.177 SMTP Response: 250 Message queued Frame 16 (74 bytes on wire, 74 bytes captured) Ethernet II, Src: 3com_ba:a6:09 (00:60:97:ba:a6:09), Dst: Cisco-Li_1f:82:64 (00:13:10:1f:82:64) Internet Protocol, Src: 192.168.1.58 (192.168.1.58), Dst: 65.54.246.177 (65.54.246.177) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 65376 (65376), Seq: 288, Ack: 1711, Len: 20 Simple Mail Transfer Protocol Response: 250 Message queued\r\n No. Time Source Destination Protocol Info 17 1.699302 65.54.246.177 192.168.1.58 SMTP Message Body Frame 17 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco-Li_1f:82:64 (00:13:10:1f:82:64), Dst: 3com_ba:a6:09 (00:60:97:ba:a6:09) Internet Protocol, Src: 65.54.246.177 (65.54.246.177), Dst: 192.168.1.58 (192.168.1.58) Transmission Control Protocol, Src Port: 65376 (65376), Dst Port: smtp (25), Seq: 1711, Ack: 308, Len: 6 Simple Mail Transfer Protocol Message: QUIT\r\n No. Time Source Destination Protocol Info 18 1.699649 192.168.1.58 65.54.246.177 SMTP Response: 221 Goodbye Frame 18 (67 bytes on wire, 67 bytes captured) Ethernet II, Src: 3com_ba:a6:09 (00:60:97:ba:a6:09), Dst: Cisco-Li_1f:82:64 (00:13:10:1f:82:64) Internet Protocol, Src: 192.168.1.58 (192.168.1.58), Dst: 65.54.246.177 (65.54.246.177) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 65376 (65376), Seq: 308, Ack: 1717, Len: 13 Simple Mail Transfer Protocol Response: 221 Goodbye\r\n No. Time Source Destination Protocol Info 19 1.708064 192.168.1.58 65.54.246.177 TCP smtp > 65376 [FIN, ACK] Seq=321 Ack=1717 Win=65529 Len=0 Frame 19 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: 3com_ba:a6:09 (00:60:97:ba:a6:09), Dst: Cisco-Li_1f:82:64 (00:13:10:1f:82:64) Internet Protocol, Src: 192.168.1.58 (192.168.1.58), Dst: 65.54.246.177 (65.54.246.177) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 65376 (65376), Seq: 321, Ack: 1717, Len: 0 No. Time Source Destination Protocol Info 20 1.929857 65.54.246.177 192.168.1.58 TCP 65376 > smtp [FIN, ACK] Seq=1717 Ack=321 Win=65215 Len=0 Frame 20 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco-Li_1f:82:64 (00:13:10:1f:82:64), Dst: 3com_ba:a6:09 (00:60:97:ba:a6:09) Internet Protocol, Src: 65.54.246.177 (65.54.246.177), Dst: 192.168.1.58 (192.168.1.58) Transmission Control Protocol, Src Port: 65376 (65376), Dst Port: smtp (25), Seq: 1717, Ack: 321, Len: 0 No. Time Source Destination Protocol Info 21 1.930024 192.168.1.58 65.54.246.177 TCP smtp > 65376 [ACK] Seq=322 Ack=1718 Win=65529 Len=0 Frame 21 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: 3com_ba:a6:09 (00:60:97:ba:a6:09), Dst: Cisco-Li_1f:82:64 (00:13:10:1f:82:64) Internet Protocol, Src: 192.168.1.58 (192.168.1.58), Dst: 65.54.246.177 (65.54.246.177) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 65376 (65376), Seq: 322, Ack: 1718, Len: 0 No. Time Source Destination Protocol Info 22 1.939786 65.54.246.177 192.168.1.58 TCP 65376 > smtp [ACK] Seq=1718 Ack=322 Win=65215 Len=0 Frame 22 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco-Li_1f:82:64 (00:13:10:1f:82:64), Dst: 3com_ba:a6:09 (00:60:97:ba:a6:09) Internet Protocol, Src: 65.54.246.177 (65.54.246.177), Dst: 192.168.1.58 (192.168.1.58) Transmission Control Protocol, Src Port: 65376 (65376), Dst Port: smtp (25), Seq: 1718, Ack: 322, Len: 0