Frame 1 (74 on wire, 74 captured) Ethernet II Internet Protocol Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) Total Length: 60 Identification: 0x0000 Flags: 0x04 Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x391d (correct) Source: electra.igd.fhg.de (146.140.8.121) Destination: mail.zf2.de (146.140.212.13) Transmission Control Protocol, Src Port: 50534 (50534), Dst Port: smtp (25), Seq: 1593106039, Ack: 0 Source port: 50534 (50534) Destination port: smtp (25) Sequence number: 1593106039 Header length: 40 bytes Flags: 0x0002 (SYN) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...0 .... = Acknowledgment: Not set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 5840 Checksum: 0xcf35 Options: (20 bytes) Maximum segment size: 1460 bytes SACK permitted Time stamp: tsval 1244468041, tsecr 0 NOP Window scale: 0 bytes 0 0000 0c07 ac0c 0048 5412 f5be 0800 4500 .......HT.....E. 10 003c 0000 4000 4006 391d 928c 0879 928c .<..@.@.9....y.. 20 d40d c566 0019 5ef4 de77 0000 0000 a002 ...f..^..w...... 30 16d0 cf35 0000 0204 05b4 0402 080a 4a2d ...5..........J- 40 1349 0000 0000 0103 0300 .I........ Frame 2 (74 on wire, 74 captured) Ethernet II Internet Protocol Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) Total Length: 60 Identification: 0xc961 Flags: 0x04 Fragment offset: 0 Time to live: 62 Protocol: TCP (0x06) Header checksum: 0x71bb (correct) Source: mail.zf2.de (146.140.212.13) Destination: electra.igd.fhg.de (146.140.8.121) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 50534 (50534), Seq: 1592849787, Ack: 1593106040 Source port: smtp (25) Destination port: 50534 (50534) Sequence number: 1592849787 Acknowledgement number: 1593106040 Header length: 40 bytes Flags: 0x0012 (SYN, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 31740 Checksum: 0x21c6 Options: (20 bytes) Maximum segment size: 1380 bytes SACK permitted Time stamp: tsval 113438035, tsecr 1244468041 NOP Window scale: 0 bytes 0 0048 5412 f5be 0004 27a7 d4c2 0800 4500 .HT.....'.....E. 10 003c c961 4000 3e06 71bb 928c d40d 928c .<.a@.>.q....... 20 0879 0019 c566 5ef0 f57b 5ef4 de78 a012 .y...f^..{^..x.. 30 7bfc 21c6 0000 0204 0564 0402 080a 06c2 {.!......d...... 40 ed53 4a2d 1349 0103 0300 .SJ-.I.... Frame 3 (66 on wire, 66 captured) Ethernet II Internet Protocol Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) Total Length: 52 Identification: 0x0000 Flags: 0x04 Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x3925 (correct) Source: electra.igd.fhg.de (146.140.8.121) Destination: mail.zf2.de (146.140.212.13) Transmission Control Protocol, Src Port: 50534 (50534), Dst Port: smtp (25), Seq: 1593106040, Ack: 1592849788 Source port: 50534 (50534) Destination port: smtp (25) Sequence number: 1593106040 Acknowledgement number: 1592849788 Header length: 32 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 5840 Checksum: 0xb567 Options: (12 bytes) NOP NOP Time stamp: tsval 1244468041, tsecr 113438035 0 0000 0c07 ac0c 0048 5412 f5be 0800 4500 .......HT.....E. 10 0034 0000 4000 4006 3925 928c 0879 928c .4..@.@.9%...y.. 20 d40d c566 0019 5ef4 de78 5ef0 f57c 8010 ...f..^..x^..|.. 30 16d0 b567 0000 0101 080a 4a2d 1349 06c2 ...g......J-.I.. 40 ed53 .S Frame 4 (89 on wire, 89 captured) Ethernet II Internet Protocol Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) Total Length: 75 Identification: 0xc966 Flags: 0x04 Fragment offset: 0 Time to live: 62 Protocol: TCP (0x06) Header checksum: 0x71a7 (correct) Source: mail.zf2.de (146.140.212.13) Destination: electra.igd.fhg.de (146.140.8.121) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 50534 (50534), Seq: 1592849788, Ack: 1593106040 Source port: smtp (25) Destination port: 50534 (50534) Sequence number: 1592849788 Next sequence number: 1592849811 Acknowledgement number: 1593106040 Header length: 32 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 31740 Checksum: 0x0216 Options: (12 bytes) NOP NOP Time stamp: tsval 113438035, tsecr 1244468041 Simple Mail Transfer Protocol Response: 220 Parameter: mail.zf2.de ESMTP\r\n 0 0048 5412 f5be 0004 27a7 d4c2 0800 4500 .HT.....'.....E. 10 004b c966 4000 3e06 71a7 928c d40d 928c .K.f@.>.q....... 20 0879 0019 c566 5ef0 f57c 5ef4 de78 8018 .y...f^..|^..x.. 30 7bfc 0216 0000 0101 080a 06c2 ed53 4a2d {............SJ- 40 1349 3232 3020 6d61 696c 2e7a 6632 2e64 .I220 mail.zf2.d 50 6520 4553 4d54 500d 0a e ESMTP.. Frame 5 (66 on wire, 66 captured) Ethernet II Internet Protocol Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) Total Length: 52 Identification: 0x0000 Flags: 0x04 Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x3925 (correct) Source: electra.igd.fhg.de (146.140.8.121) Destination: mail.zf2.de (146.140.212.13) Transmission Control Protocol, Src Port: 50534 (50534), Dst Port: smtp (25), Seq: 1593106040, Ack: 1592849811 Source port: 50534 (50534) Destination port: smtp (25) Sequence number: 1593106040 Acknowledgement number: 1592849811 Header length: 32 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 5840 Checksum: 0xb550 Options: (12 bytes) NOP NOP Time stamp: tsval 1244468041, tsecr 113438035 0 0000 0c07 ac0c 0048 5412 f5be 0800 4500 .......HT.....E. 10 0034 0000 4000 4006 3925 928c 0879 928c .4..@.@.9%...y.. 20 d40d c566 0019 5ef4 de78 5ef0 f593 8010 ...f..^..x^..... 30 16d0 b550 0000 0101 080a 4a2d 1349 06c2 ...P......J-.I.. 40 ed53 .S Frame 6 (78 on wire, 78 captured) Ethernet II Internet Protocol Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) Total Length: 64 Identification: 0x0000 Flags: 0x04 Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x3919 (correct) Source: electra.igd.fhg.de (146.140.8.121) Destination: mail.zf2.de (146.140.212.13) Transmission Control Protocol, Src Port: 50534 (50534), Dst Port: smtp (25), Seq: 1593106040, Ack: 1592849811 Source port: 50534 (50534) Destination port: smtp (25) Sequence number: 1593106040 Next sequence number: 1593106052 Acknowledgement number: 1592849811 Header length: 32 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 5840 Checksum: 0xd295 Options: (12 bytes) NOP NOP Time stamp: tsval 1244469187, tsecr 113438035 Simple Mail Transfer Protocol Command: helo Parameter: world\r\n 0 0000 0c07 ac0c 0048 5412 f5be 0800 4500 .......HT.....E. 10 0040 0000 4000 4006 3919 928c 0879 928c .@..@.@.9....y.. 20 d40d c566 0019 5ef4 de78 5ef0 f593 8018 ...f..^..x^..... 30 16d0 d295 0000 0101 080a 4a2d 17c3 06c2 ..........J-.... 40 ed53 6865 6c6f 2077 6f72 6c64 0d0a .Shelo world.. Frame 7 (66 on wire, 66 captured) Ethernet II Internet Protocol Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) Total Length: 52 Identification: 0xc9d7 Flags: 0x04 Fragment offset: 0 Time to live: 62 Protocol: TCP (0x06) Header checksum: 0x714d (correct) Source: mail.zf2.de (146.140.212.13) Destination: electra.igd.fhg.de (146.140.8.121) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 50534 (50534), Seq: 1592849811, Ack: 1593106052 Source port: smtp (25) Destination port: 50534 (50534) Sequence number: 1592849811 Acknowledgement number: 1593106052 Header length: 32 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 31740 Checksum: 0x4724 Options: (12 bytes) NOP NOP Time stamp: tsval 113439181, tsecr 1244469187 0 0048 5412 f5be 0004 27a7 d4c2 0800 4500 .HT.....'.....E. 10 0034 c9d7 4000 3e06 714d 928c d40d 928c .4..@.>.qM...... 20 0879 0019 c566 5ef0 f593 5ef4 de84 8010 .y...f^...^..... 30 7bfc 4724 0000 0101 080a 06c2 f1cd 4a2d {.G$..........J- 40 17c3 .. Frame 8 (83 on wire, 83 captured) Ethernet II Internet Protocol Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) Total Length: 69 Identification: 0xc9d8 Flags: 0x04 Fragment offset: 0 Time to live: 62 Protocol: TCP (0x06) Header checksum: 0x713b (correct) Source: mail.zf2.de (146.140.212.13) Destination: electra.igd.fhg.de (146.140.8.121) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 50534 (50534), Seq: 1592849811, Ack: 1593106052 Source port: smtp (25) Destination port: 50534 (50534) Sequence number: 1592849811 Next sequence number: 1592849828 Acknowledgement number: 1593106052 Header length: 32 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 31740 Checksum: 0xdbc9 Options: (12 bytes) NOP NOP Time stamp: tsval 113439181, tsecr 1244469187 Simple Mail Transfer Protocol Response: 250 Parameter: mail.zf2.de\r\n 0 0048 5412 f5be 0004 27a7 d4c2 0800 4500 .HT.....'.....E. 10 0045 c9d8 4000 3e06 713b 928c d40d 928c .E..@.>.q;...... 20 0879 0019 c566 5ef0 f593 5ef4 de84 8018 .y...f^...^..... 30 7bfc dbc9 0000 0101 080a 06c2 f1cd 4a2d {.............J- 40 17c3 3235 3020 6d61 696c 2e7a 6632 2e64 ..250 mail.zf2.d 50 650d 0a e.. Frame 9 (66 on wire, 66 captured) Ethernet II Internet Protocol Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) Total Length: 52 Identification: 0x0000 Flags: 0x04 Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x3925 (correct) Source: electra.igd.fhg.de (146.140.8.121) Destination: mail.zf2.de (146.140.212.13) Transmission Control Protocol, Src Port: 50534 (50534), Dst Port: smtp (25), Seq: 1593106052, Ack: 1592849828 Source port: 50534 (50534) Destination port: smtp (25) Sequence number: 1593106052 Acknowledgement number: 1592849828 Header length: 32 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 5840 Checksum: 0xac3f Options: (12 bytes) NOP NOP Time stamp: tsval 1244469187, tsecr 113439181 0 0000 0c07 ac0c 0048 5412 f5be 0800 4500 .......HT.....E. 10 0034 0000 4000 4006 3925 928c 0879 928c .4..@.@.9%...y.. 20 d40d c566 0019 5ef4 de84 5ef0 f5a4 8010 ...f..^...^..... 30 16d0 ac3f 0000 0101 080a 4a2d 17c3 06c2 ...?......J-.... 40 f1cd .. Frame 10 (72 on wire, 72 captured) Ethernet II Internet Protocol Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) Total Length: 58 Identification: 0x0000 Flags: 0x04 Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x391f (correct) Source: electra.igd.fhg.de (146.140.8.121) Destination: mail.zf2.de (146.140.212.13) Transmission Control Protocol, Src Port: 50534 (50534), Dst Port: smtp (25), Seq: 1593106052, Ack: 1592849828 Source port: 50534 (50534) Destination port: smtp (25) Sequence number: 1593106052 Next sequence number: 1593106058 Acknowledgement number: 1592849828 Header length: 32 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 5840 Checksum: 0xc2f7 Options: (12 bytes) NOP NOP Time stamp: tsval 1244469513, tsecr 113439181 Simple Mail Transfer Protocol Command: quit Parameter: \n 0 0000 0c07 ac0c 0048 5412 f5be 0800 4500 .......HT.....E. 10 003a 0000 4000 4006 391f 928c 0879 928c .:..@.@.9....y.. 20 d40d c566 0019 5ef4 de84 5ef0 f5a4 8018 ...f..^...^..... 30 16d0 c2f7 0000 0101 080a 4a2d 1909 06c2 ..........J-.... 40 f1cd 7175 6974 0d0a ..quit.. Frame 11 (83 on wire, 83 captured) Ethernet II Internet Protocol Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) Total Length: 69 Identification: 0xc9df Flags: 0x04 Fragment offset: 0 Time to live: 62 Protocol: TCP (0x06) Header checksum: 0x7134 (correct) Source: mail.zf2.de (146.140.212.13) Destination: electra.igd.fhg.de (146.140.8.121) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 50534 (50534), Seq: 1592849828, Ack: 1593106058 Source port: smtp (25) Destination port: 50534 (50534) Sequence number: 1592849828 Next sequence number: 1592849845 Acknowledgement number: 1593106058 Header length: 32 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 31740 Checksum: 0xd82a Options: (12 bytes) NOP NOP Time stamp: tsval 113439506, tsecr 1244469513 Simple Mail Transfer Protocol Response: 221 Parameter: mail.zf2.de\r\n 0 0048 5412 f5be 0004 27a7 d4c2 0800 4500 .HT.....'.....E. 10 0045 c9df 4000 3e06 7134 928c d40d 928c .E..@.>.q4...... 20 0879 0019 c566 5ef0 f5a4 5ef4 de8a 8018 .y...f^...^..... 30 7bfc d82a 0000 0101 080a 06c2 f312 4a2d {..*..........J- 40 1909 3232 3120 6d61 696c 2e7a 6632 2e64 ..221 mail.zf2.d 50 650d 0a e.. Frame 12 (66 on wire, 66 captured) Ethernet II Internet Protocol Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) Total Length: 52 Identification: 0x0000 Flags: 0x04 Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x3925 (correct) Source: electra.igd.fhg.de (146.140.8.121) Destination: mail.zf2.de (146.140.212.13) Transmission Control Protocol, Src Port: 50534 (50534), Dst Port: smtp (25), Seq: 1593106058, Ack: 1592849845 Source port: 50534 (50534) Destination port: smtp (25) Sequence number: 1593106058 Acknowledgement number: 1592849845 Header length: 32 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 5840 Checksum: 0xa99d Options: (12 bytes) NOP NOP Time stamp: tsval 1244469513, tsecr 113439506 0 0000 0c07 ac0c 0048 5412 f5be 0800 4500 .......HT.....E. 10 0034 0000 4000 4006 3925 928c 0879 928c .4..@.@.9%...y.. 20 d40d c566 0019 5ef4 de8a 5ef0 f5b5 8010 ...f..^...^..... 30 16d0 a99d 0000 0101 080a 4a2d 1909 06c2 ..........J-.... 40 f312 .. Frame 13 (66 on wire, 66 captured) Ethernet II Internet Protocol Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) Total Length: 52 Identification: 0xc9e0 Flags: 0x04 Fragment offset: 0 Time to live: 62 Protocol: TCP (0x06) Header checksum: 0x7144 (correct) Source: mail.zf2.de (146.140.212.13) Destination: electra.igd.fhg.de (146.140.8.121) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 50534 (50534), Seq: 1592849845, Ack: 1593106058 Source port: smtp (25) Destination port: 50534 (50534) Sequence number: 1592849845 Acknowledgement number: 1593106058 Header length: 32 bytes Flags: 0x0011 (FIN, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...1 = Fin: Set Window size: 31740 Checksum: 0x4470 Options: (12 bytes) NOP NOP Time stamp: tsval 113439506, tsecr 1244469513 0 0048 5412 f5be 0004 27a7 d4c2 0800 4500 .HT.....'.....E. 10 0034 c9e0 4000 3e06 7144 928c d40d 928c .4..@.>.qD...... 20 0879 0019 c566 5ef0 f5b5 5ef4 de8a 8011 .y...f^...^..... 30 7bfc 4470 0000 0101 080a 06c2 f312 4a2d {.Dp..........J- 40 1909 .. Frame 14 (66 on wire, 66 captured) Ethernet II Internet Protocol Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) Total Length: 52 Identification: 0x0000 Flags: 0x04 Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x3925 (correct) Source: electra.igd.fhg.de (146.140.8.121) Destination: mail.zf2.de (146.140.212.13) Transmission Control Protocol, Src Port: 50534 (50534), Dst Port: smtp (25), Seq: 1593106058, Ack: 1592849846 Source port: 50534 (50534) Destination port: smtp (25) Sequence number: 1593106058 Acknowledgement number: 1592849846 Header length: 32 bytes Flags: 0x0011 (FIN, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...1 = Fin: Set Window size: 5840 Checksum: 0xa99b Options: (12 bytes) NOP NOP Time stamp: tsval 1244469513, tsecr 113439506 0 0000 0c07 ac0c 0048 5412 f5be 0800 4500 .......HT.....E. 10 0034 0000 4000 4006 3925 928c 0879 928c .4..@.@.9%...y.. 20 d40d c566 0019 5ef4 de8a 5ef0 f5b6 8011 ...f..^...^..... 30 16d0 a99b 0000 0101 080a 4a2d 1909 06c2 ..........J-.... 40 f312 .. Frame 15 (66 on wire, 66 captured) Ethernet II Internet Protocol Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) Total Length: 52 Identification: 0xc9e1 Flags: 0x04 Fragment offset: 0 Time to live: 62 Protocol: TCP (0x06) Header checksum: 0x7143 (correct) Source: mail.zf2.de (146.140.212.13) Destination: electra.igd.fhg.de (146.140.8.121) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 50534 (50534), Seq: 1592849846, Ack: 1593106059 Source port: smtp (25) Destination port: 50534 (50534) Sequence number: 1592849846 Acknowledgement number: 1593106059 Header length: 32 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 31740 Checksum: 0x446f Options: (12 bytes) NOP NOP Time stamp: tsval 113439506, tsecr 1244469513 0 0048 5412 f5be 0004 27a7 d4c2 0800 4500 .HT.....'.....E. 10 0034 c9e1 4000 3e06 7143 928c d40d 928c .4..@.>.qC...... 20 0879 0019 c566 5ef0 f5b6 5ef4 de8b 8010 .y...f^...^..... 30 7bfc 446f 0000 0101 080a 06c2 f312 4a2d {.Do..........J- 40 1909 ..