I'm currently running a firewall on 2.6.18 vanilla + OpenSwan KLIPS and
NATT with iptables 1.3.6. I'm having an issue where we're attempting to
pass outbound SMTP traffic to what appears to be a highly congested
hosting / filtering server (*cough* Frontbridge *cough*) . They're
sending back duplicate TCP ACKs in what I'm guessing is some sort of RFC
2581 attempt at tcp congestion control. In any case, the duplicates are
not being passed back through the firewall.
Anyone have any insight as to whether this is intentional behavior, a
bug, or me just doing something boneheaded?
Thanks,
Erik Carlseen
Guide to the sample data:
I put double asterisks (**) in front of the first four duplicate ACK
packets lost on the internal interface. There are more in there.
[ PUBLIC IP ] - The public IP address of our SMTP server (eth0:1 on our
firewall)
[SMTP SERVER] - The private IP address of our SMTP server (eth1 on our
firewall)
Everything else should be somewhat self-explanatory, please e-mail me if
it's not.
Sample data from external interface:
0.000000 [ PUBLIC IP] -> 65.55.251.22 TCP 2175 > smtp [SYN] Seq=0
Ack=0 Win=5840 Len=0 MSS=1460 TSV=152016779 TSER=0 WS=0
0.016439 [ PUBLIC IP] -> 65.55.251.22 TCP 2180 > smtp [SYN] Seq=0
Ack=0 Win=5840 Len=0 MSS=1460 TSV=152016792 TSER=0 WS=0
0.080374 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2175 [SYN, ACK]
Seq=0 Ack=1 Win=5792 Len=0 MSS=1380 TSV=1644357257 TSER=152016779 WS=2
0.097613 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2180 [SYN, ACK]
Seq=0 Ack=1 Win=5792 Len=0 MSS=1380 TSV=530066764 TSER=152016792 WS=2
0.101388 [ PUBLIC IP] -> 65.55.251.22 TCP 2175 > smtp [ACK] Seq=1
Ack=1 Win=5840 Len=0 TSV=152016873 TSER=1644357257
0.103843 [ PUBLIC IP] -> 65.55.251.22 TCP 2180 > smtp [ACK] Seq=1
Ack=1 Win=5840 Len=0 TSV=152016890 TSER=530066764
0.240331 65.55.251.22 -> [ PUBLIC IP] SMTP Response: 220
mail90-blu.bigfish.com ESMTP Postfix EGGS and Butter
0.240449 65.55.251.22 -> [ PUBLIC IP] SMTP Response: 220
mail127-blu.bigfish.com ESMTP Postfix EGGS and Butter
0.246722 [ PUBLIC IP] -> 65.55.251.22 TCP 2175 > smtp [ACK] Seq=1
Ack=59 Win=5840 Len=0 TSV=152017033 TSER=1644357416
0.247192 [ PUBLIC IP] -> 65.55.251.22 SMTP Command: EHLO [SMTP SERVER
DNS NAME].[MY DOMAIN]
0.247485 [ PUBLIC IP] -> 65.55.251.22 TCP 2180 > smtp [ACK] Seq=1
Ack=60 Win=5840 Len=0 TSV=152017034 TSER=530066907
0.247967 [ PUBLIC IP] -> 65.55.251.22 SMTP Command: EHLO [SMTP SERVER
DNS NAME].[MY DOMAIN]
0.327343 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2175 [ACK] Seq=59
Ack=31 Win=5792 Len=0 TSV=1644357504 TSER=152017033
0.327527 65.55.251.22 -> [ PUBLIC IP] SMTP Response:
250-mail90-blu.bigfish.com
0.328126 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2180 [ACK] Seq=60
Ack=31 Win=5792 Len=0 TSV=530066995 TSER=152017034
0.328224 65.55.251.22 -> [ PUBLIC IP] SMTP Response:
250-mail127-blu.bigfish.com
0.335677 [ PUBLIC IP] -> 65.55.251.22 SMTP Command: MAIL
FROM:<[USER-1]@[MY DOMAIN]> SIZE=6216
0.337644 [ PUBLIC IP] -> 65.55.251.22 SMTP Command: MAIL
FROM:<[USER-2]@[MY DOMAIN]> SIZE=25700
0.455839 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2175 [ACK] Seq=161
Ack=119 Win=5792 Len=0 TSV=1644357632 TSER=152017122
0.458608 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2180 [ACK] Seq=163
Ack=164 Win=6864 Len=0 TSV=530067125 TSER=152017123
0.479810 65.55.251.22 -> [ PUBLIC IP] SMTP Response: 250 Ok
0.497334 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
0.504411 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
0.511845 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
0.579104 65.55.251.22 -> [ PUBLIC IP] SMTP Response: 250 Ok
**0.585111 65.55.251.22 -> [ PUBLIC IP] TCP [TCP Dup ACK 19#1] smtp >
2175 [ACK] Seq=214 Ack=119 Win=5792 Len=0 TSV=1644357762 TSER=152017122
SLE=346398658 SRE=346399946
**0.592578 65.55.251.22 -> [ PUBLIC IP] TCP [TCP Dup ACK 19#2] smtp >
2175 [ACK] Seq=214 Ack=119 Win=5792 Len=0 TSV=1644357769 TSER=152017122
SLE=346398658 SRE=346401304
0.610284 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
0.617312 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
0.640510 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
**0.698192 65.55.251.22 -> [ PUBLIC IP] TCP [TCP Dup ACK 20#1] smtp >
2180 [ACK] Seq=224 Ack=164 Win=6864 Len=0 TSV=530067365 TSER=152017123
SLE=885562936 SRE=885564224
**0.721296 65.55.251.22 -> [ PUBLIC IP] TCP [TCP Dup ACK 20#2] smtp >
2180 [ACK] Seq=224 Ack=164 Win=6864 Len=0 TSV=530067388 TSER=152017123
SLE=885562936 SRE=885565582
0.792760 [ PUBLIC IP] -> 65.55.251.22 TCP 2188 > smtp [SYN] Seq=0
Ack=0 Win=5840 Len=0 MSS=1460 TSV=152017570 TSER=0 WS=0
0.793129 [ PUBLIC IP] -> 65.55.251.22 TCP 2187 > smtp [SYN] Seq=0
Ack=0 Win=5840 Len=0 MSS=1460 TSV=152017570 TSER=0 WS=0
0.793813 [ PUBLIC IP] -> 65.55.251.22 TCP 2186 > smtp [SYN] Seq=0
Ack=0 Win=5840 Len=0 MSS=1460 TSV=152017569 TSER=0 WS=0
0.794555 [ PUBLIC IP] -> 65.55.251.22 TCP 2185 > smtp [SYN] Seq=0
Ack=0 Win=5840 Len=0 MSS=1460 TSV=152017569 TSER=0 WS=0
0.827386 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
0.873390 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2188 [SYN, ACK]
Seq=0 Ack=1 Win=5792 Len=0 MSS=1380 TSV=1636655822 TSER=152017570 WS=2
0.873651 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2187 [SYN, ACK]
Seq=0 Ack=1 Win=5792 Len=0 MSS=1380 TSV=1636655822 TSER=152017570 WS=2
0.874383 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2186 [SYN, ACK]
Seq=0 Ack=1 Win=5792 Len=0 MSS=1380 TSV=1636655823 TSER=152017569 WS=2
0.874897 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2185 [SYN, ACK]
Seq=0 Ack=1 Win=5792 Len=0 MSS=1380 TSV=1636655823 TSER=152017569 WS=2
0.893250 [ PUBLIC IP] -> 65.55.251.22 TCP 2185 > smtp [ACK] Seq=1
Ack=1 Win=5840 Len=0 TSV=152017668 TSER=1636655823
0.893549 [ PUBLIC IP] -> 65.55.251.22 TCP 2186 > smtp [ACK] Seq=1
Ack=1 Win=5840 Len=0 TSV=152017667 TSER=1636655823
0.893863 [ PUBLIC IP] -> 65.55.251.22 TCP 2187 > smtp [ACK] Seq=1
Ack=1 Win=5840 Len=0 TSV=152017667 TSER=1636655822
0.894177 [ PUBLIC IP] -> 65.55.251.22 TCP 2188 > smtp [ACK] Seq=1
Ack=1 Win=5840 Len=0 TSV=152017666 TSER=1636655822
0.902194 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
0.908530 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2175 [ACK] Seq=214
Ack=1487 Win=8528 Len=0 TSV=1644358085 TSER=152017573 SLE=346398658
SRE=346401304
0.982945 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2180 [ACK] Seq=224
Ack=1532 Win=9600 Len=0 TSV=530067650 TSER=152017677 SLE=885562936
SRE=885565582
1.042017 65.55.251.22 -> [ PUBLIC IP] SMTP Response: 220
mail121-blu.bigfish.com ESMTP Postfix EGGS and Butter
1.061498 [ PUBLIC IP] -> 65.55.251.22 TCP 2186 > smtp [ACK] Seq=1
Ack=60 Win=5840 Len=0 TSV=152017835 TSER=1636655991
1.063161 [ PUBLIC IP] -> 65.55.251.22 SMTP Command: EHLO [SMTP SERVER
DNS NAME].[MY DOMAIN]
1.143569 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2186 [ACK] Seq=60
Ack=31 Win=5792 Len=0 TSV=1636656092 TSER=152017835
1.143969 65.55.251.22 -> [ PUBLIC IP] SMTP Response:
250-mail121-blu.bigfish.com
1.165695 [ PUBLIC IP] -> 65.55.251.22 SMTP Command: MAIL
FROM:<[USER-3]@[MY DOMAIN]> SIZE=40438
1.186214 65.55.251.22 -> [ PUBLIC IP] SMTP Response: 220
mail121-blu.bigfish.com ESMTP Postfix EGGS and Butter
1.204950 [ PUBLIC IP] -> 65.55.251.22 TCP 2188 > smtp [ACK] Seq=1
Ack=60 Win=5840 Len=0 TSV=152017979 TSER=1636656135
1.205428 [ PUBLIC IP] -> 65.55.251.22 SMTP Command: EHLO [SMTP SERVER
DNS NAME].[MY DOMAIN]
1.207140 65.55.251.22 -> [ PUBLIC IP] SMTP Response: 220
mail121-blu.bigfish.com ESMTP Postfix EGGS and Butter
1.224581 [ PUBLIC IP] -> 65.55.251.22 TCP 2187 > smtp [ACK] Seq=1
Ack=60 Win=5840 Len=0 TSV=152018000 TSER=1636656156
1.225069 [ PUBLIC IP] -> 65.55.251.22 SMTP Command: EHLO [SMTP SERVER
DNS NAME].[MY DOMAIN]
1.257415 65.55.251.22 -> [ PUBLIC IP] SMTP Response: 250 Ok
1.285594 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2188 [ACK] Seq=60
Ack=31 Win=5792 Len=0 TSV=1636656234 TSER=152017979
1.285678 65.55.251.22 -> [ PUBLIC IP] SMTP Response:
250-mail121-blu.bigfish.com
1.302534 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
1.303134 [ PUBLIC IP] -> 65.55.251.22 SMTP Command: MAIL
FROM:<[USER-3]@[MY DOMAIN]> SIZE=2940
1.305362 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2187 [ACK] Seq=60
Ack=31 Win=5792 Len=0 TSV=1636656254 TSER=152018000
1.308250 65.55.251.22 -> [ PUBLIC IP] SMTP Response:
250-mail121-blu.bigfish.com
1.310419 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
1.317870 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
1.318304 [ PUBLIC IP] -> 65.55.251.22 SMTP Command: MAIL
FROM:<[USER-1]@[MY DOMAIN]> SIZE=105756
1.387860 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
1.391129 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2186 [ACK] Seq=216
Ack=132 Win=5792 Len=0 TSV=1636656340 TSER=152017948 SLE=827438646
SRE=827439934
1.398874 65.55.251.22 -> [ PUBLIC IP] TCP [TCP Dup ACK 72#1] smtp >
2186 [ACK] Seq=216 Ack=132 Win=5792 Len=0 TSV=1636656347 TSER=152017948
SLE=827438646 SRE=827441292
1.400790 65.55.251.22 -> [ PUBLIC IP] SMTP Response: 250 Ok
1.417529 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
1.419303 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
1.438390 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2187 [ACK] Seq=163
Ack=108 Win=5792 Len=0 TSV=1636656387 TSER=152018103
1.468382 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2175 [PSH, ACK]
Seq=214 Ack=1487 Win=8528 Len=0
1.482073 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
1.489467 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
1.497841 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
1.499613 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2188 [ACK] Seq=216
Ack=131 Win=5792 Len=0 TSV=1636656448 TSER=152018080 SLE=1878098565
SRE=1878098881
1.529157 65.55.251.22 -> [ PUBLIC IP] SMTP Response: 250 Ok
1.546176 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
1.550029 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
1.558184 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
1.562857 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2175 [ACK] Seq=214
Ack=4213 Win=11264 Len=0 TSV=1644358739 TSER=152018261 SLE=346398658
SRE=346399946
1.565114 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
1.569983 65.55.251.22 -> [ PUBLIC IP] TCP [TCP Dup ACK 87#1] smtp >
2175 [PSH, ACK] Seq=214 Ack=4213 Win=11264 Len=0
1.578354 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2180 [PSH, ACK]
Seq=224 Ack=1532 Win=9600 Len=0
1.580514 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
1.591865 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
1.599328 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
1.606776 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
1.630451 65.55.251.22 -> [ PUBLIC IP] TCP [TCP Dup ACK 77#1] smtp >
2187 [ACK] Seq=216 Ack=108 Win=5792 Len=0 TSV=1636656579 TSER=152018103
SLE=674957882 SRE=674958581
1.645862 65.55.251.22 -> [ PUBLIC IP] TCP [TCP Dup ACK 77#2] smtp >
2187 [ACK] Seq=216 Ack=108 Win=5792 Len=0 TSV=1636656595 TSER=152018103
SLE=674960029 SRE=674961317 SLE=674957882 SRE=674958581
1.661192 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2175 [ACK] Seq=214
Ack=5008 Win=14000 Len=0 TSV=1644358838 TSER=152018363
1.672610 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2180 [ACK] Seq=224
Ack=4258 Win=12336 Len=0 TSV=530068339 TSER=152018371 SLE=885562936
SRE=885564224
1.680150 65.55.251.22 -> [ PUBLIC IP] TCP [TCP Dup ACK 98#1] smtp >
2180 [PSH, ACK] Seq=224 Ack=4258 Win=12336 Len=0
1.687582 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2186 [ACK] Seq=216
Ack=1500 Win=8528 Len=0 TSV=1636656636 TSER=152018374 SLE=827438646
SRE=827441292
1.694502 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
1.701513 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
1.709418 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
1.716461 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
1.723911 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
1.731775 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
1.738823 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
1.782412 65.55.251.22 -> [ PUBLIC IP] TCP [TCP Dup ACK 98#2] smtp >
2180 [ACK] Seq=224 Ack=4258 Win=12336 Len=0 TSV=530068449 TSER=152018371
SLE=885567030 SRE=885568318
1.797198 65.55.251.22 -> [ PUBLIC IP] TCP [TCP Dup ACK 98#3] smtp >
2180 [ACK] Seq=224 Ack=4258 Win=12336 Len=0 TSV=530068464 TSER=152018371
SLE=885569766 SRE=885571054 SLE=885567030 SRE=885568318
1.804631 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2188 [ACK] Seq=216
Ack=1499 Win=8528 Len=0 TSV=1636656754 TSER=152018494 SLE=1878098565
SRE=1878098881
1.820206 65.55.251.22 -> [ PUBLIC IP] TCP [TCP Dup ACK 98#4] smtp >
2180 [ACK] Seq=224 Ack=4258 Win=12336 Len=0 TSV=530068487 TSER=152018371
SLE=885572502 SRE=885573790 SLE=885569766 SRE=885571054 SLE=885567030
SRE=885568318
1.857353 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
1.938151 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2187 [ACK] Seq=216
Ack=1476 Win=8528 Len=0 TSV=1636656888 TSER=152018626 SLE=674960029
SRE=674961317 SLE=674957882 SRE=674958581
2.130050 65.55.251.22 -> [ PUBLIC IP] SMTP Response: 250 Ok: queued
as 1C80F1660052
2.149190 [ PUBLIC IP] -> 65.55.251.22 SMTP Command: MAIL
FROM:<[USER-1]@[MY DOMAIN]> SIZE=17060
2.192940 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
2.229893 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2175 [ACK] Seq=246
Ack=5094 Win=14000 Len=0 TSV=1644359406 TSER=152018924
2.273479 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2186 [PSH, ACK]
Seq=216 Ack=1500 Win=8528 Len=0
2.287108 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
2.294577 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
2.310803 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
2.368231 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2186 [ACK] Seq=216
Ack=4226 Win=11264 Len=0 TSV=1636657318 TSER=152019067 SLE=827438646
SRE=827439934
2.375174 65.55.251.22 -> [ PUBLIC IP] TCP [TCP Dup ACK 122#1] smtp >
2186 [PSH, ACK] Seq=216 Ack=4226 Win=11264 Len=0
2.389230 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
2.391417 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2188 [PSH, ACK]
Seq=216 Ack=1499 Win=8528 Len=0
2.396215 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
2.404058 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
2.411065 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
2.421191 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
2.429267 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
2.430760 65.55.251.22 -> [ PUBLIC IP] SMTP Response: 250 Ok
2.444162 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
2.459574 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
2.467408 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
2.475309 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
2.477776 65.55.251.22 -> [ PUBLIC IP] TCP [TCP Dup ACK 122#2] smtp >
2186 [ACK] Seq=216 Ack=4226 Win=11264 Len=0 TSV=1636657427
TSER=152019067 SLE=827442740 SRE=827444028
2.491983 65.55.251.22 -> [ PUBLIC IP] TCP [TCP Dup ACK 122#3] smtp >
2186 [ACK] Seq=216 Ack=4226 Win=11264 Len=0 TSV=1636657442
TSER=152019067 SLE=827445476 SRE=827446764 SLE=827442740 SRE=827444028
2.501447 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
2.501498 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2188 [ACK] Seq=216
Ack=1895 Win=11264 Len=0 TSV=1636657451 TSER=152019185 SLE=1878098565
SRE=1878098881
2.524951 65.55.251.22 -> [ PUBLIC IP] TCP [TCP Dup ACK 122#4] smtp >
2186 [ACK] Seq=216 Ack=4226 Win=11264 Len=0 TSV=1636657475
TSER=152019067 SLE=827448212 SRE=827449500 SLE=827445476 SRE=827446764
SLE=827442740 SRE=827444028
2.532280 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
2.540164 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2187 [PSH, ACK]
Seq=216 Ack=1476 Win=8528 Len=0
2.548122 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
2.579202 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
2.582210 65.55.251.22 -> [ PUBLIC IP] TCP [TCP Dup ACK 117#1] smtp >
2175 [ACK] Seq=299 Ack=5094 Win=14000 Len=0 TSV=1644359759
TSER=152018924 SLE=346405081 SRE=346406279
2.583492 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
2.606463 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
2.613045 65.55.251.22 -> [ PUBLIC IP] SMTP Response: 250 Ok: queued
as 0CFF6910078
2.613929 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
2.627495 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
2.636334 [ PUBLIC IP] -> 65.55.251.22 SMTP Command: MAIL
FROM:<[USER-4]@[MY DOMAIN]> SIZE=9290
2.663998 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2187 [ACK] Seq=216
Ack=2255 Win=11264 Len=0 TSV=1636657614 TSER=152019333 SLE=674957882
SRE=674958581 SLE=674960029 SRE=674961317
2.694741 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2187 [ACK] Seq=216
Ack=3623 Win=14000 Len=0 TSV=1636657645 TSER=152019333 SLE=674960029
SRE=674961317
2.708126 65.55.251.22 -> [ PUBLIC IP] TCP [TCP Dup ACK 117#2] smtp >
2175 [ACK] Seq=299 Ack=5094 Win=14000 Len=0 TSV=1644359885
TSER=152018924 SLE=346412071 SRE=346413119 SLE=346405081 SRE=346406279
2.716568 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2188 [ACK] Seq=247
Ack=2030 Win=14000 Len=0 TSV=1636657667 TSER=152019409
2.761503 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
2.818198 65.55.251.22 -> [ PUBLIC IP] SMTP Response: 250 Ok
2.835639 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
2.843563 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
2.848903 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2175 [ACK] Seq=299
Ack=6462 Win=16736 Len=0 TSV=1644360024 TSER=152019524 SLE=346412071
SRE=346413119 SLE=346405081 SRE=346406279
2.850032 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
2.893806 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
2.931010 65.55.251.22 -> [ PUBLIC IP] TCP [TCP Dup ACK 155#1] smtp >
2188 [ACK] Seq=308 Ack=2030 Win=14000 Len=0 TSV=1636657881
TSER=152019409 SLE=1878101912 SRE=1878103110
2.974671 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2180 [ACK] Seq=224
Ack=5626 Win=15072 Len=0 TSV=530069642 TSER=152019673 SLE=885572502
SRE=885573790 SLE=885569766 SRE=885571054 SLE=885567030 SRE=885568318
3.162750 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
3.243541 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2188 [ACK] Seq=308
Ack=3398 Win=16736 Len=0 TSV=1636658194 TSER=152019942 SLE=1878101912
SRE=1878103110
3.337757 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
3.350839 65.55.251.22 -> [ PUBLIC IP] SMTP Response: 220
mail121-blu.bigfish.com ESMTP Postfix EGGS and Butter
3.367629 [ PUBLIC IP] -> 65.55.251.22 TCP 2185 > smtp [ACK] Seq=1
Ack=60 Win=5840 Len=0 TSV=152020145 TSER=1636658301
3.368122 [ PUBLIC IP] -> 65.55.251.22 SMTP Command: EHLO [SMTP SERVER
DNS NAME].[MY DOMAIN]
3.418373 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2175 [PSH, ACK]
Seq=299 Ack=6462 Win=16736 Len=0
3.432027 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
3.439368 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
3.448343 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2185 [ACK] Seq=60
Ack=31 Win=5792 Len=0 TSV=1636658399 TSER=152020145
3.448482 65.55.251.22 -> [ PUBLIC IP] SMTP Response:
250-mail121-blu.bigfish.com
3.457096 [ PUBLIC IP] -> 65.55.251.22 SMTP Command: MAIL
FROM:<JManning@[MY DOMAIN]> SIZE=32228
3.512960 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2175 [ACK] Seq=299
Ack=7830 Win=19472 Len=0 TSV=1644360690 TSER=152020212 SLE=346412071
SRE=346413119 SLE=346405081 SRE=346406279
3.521183 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2175 [ACK] Seq=299
Ack=9188 Win=22208 Len=0 TSV=1644360698 TSER=152020212 SLE=346405081
SRE=346406279 SLE=346412071 SRE=346413119
3.573250 65.55.251.22 -> [ PUBLIC IP] SMTP Response: 250 Ok
3.583798 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
3.592343 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
3.599371 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
3.606773 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
3.664615 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2186 [ACK] Seq=216
Ack=5594 Win=14000 Len=0 TSV=1636658615 TSER=152020364 SLE=827448212
SRE=827449500 SLE=827445476 SRE=827446764 SLE=827442740 SRE=827444028
3.680441 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2185 [ACK] Seq=216
Ack=125 Win=5792 Len=0 TSV=1636658630 TSER=152020244 SLE=67027561
SRE=67028849
3.687562 65.55.251.22 -> [ PUBLIC IP] TCP [TCP Dup ACK 185#1] smtp >
2185 [ACK] Seq=216 Ack=125 Win=5792 Len=0 TSV=1636658638 TSER=152020244
SLE=67027561 SRE=67030207
3.753424 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
3.815724 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
3.833820 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2187 [PSH, ACK]
Seq=216 Ack=3623 Win=14000 Len=0
3.847451 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Command: mera flashes; the moment is saved for eternity.... <br>
3.855329 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
3.862343 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
3.892765 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
3.896266 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2188 [PSH, ACK]
Seq=308 Ack=3398 Win=16736 Len=0
3.909893 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
3.928369 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2187 [ACK] Seq=216
Ack=4991 Win=16736 Len=0 TSV=1636658879 TSER=152020627 SLE=674960029
SRE=674961317
3.945463 65.55.251.22 -> [ PUBLIC IP] TCP [TCP Dup ACK 196#1] smtp >
2187 [ACK] Seq=216 Ack=4991 Win=16736 Len=0 TSV=1636658895
TSER=152020627 SLE=674962765 SRE=674964053
3.973605 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2185 [ACK] Seq=216
Ack=1493 Win=8528 Len=0 TSV=1636658924 TSER=152020673 SLE=67027561
SRE=67030207
3.991351 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2188 [ACK] Seq=308
Ack=4766 Win=19472 Len=0 TSV=1636658941 TSER=152020690 SLE=1878101912
SRE=1878103110
4.505822 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
4.586329 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2185 [PSH, ACK]
Seq=216 Ack=1493 Win=8528 Len=0
4.599930 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
4.607339 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
4.619700 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
4.680732 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2185 [ACK] Seq=216
Ack=4219 Win=11264 Len=0 TSV=1636659631 TSER=152021380 SLE=67027561
SRE=67028849
4.687847 65.55.251.22 -> [ PUBLIC IP] TCP [TCP Dup ACK 205#1] smtp >
2185 [PSH, ACK] Seq=216 Ack=4219 Win=11264 Len=0
4.700282 65.55.251.22 -> [ PUBLIC IP] TCP [TCP Dup ACK 178#1] smtp >
2175 [PSH, ACK] Seq=299 Ack=9188 Win=22208 Len=0
4.711855 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
4.718847 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
4.742118 [ PUBLIC IP] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
4.749947 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
4.764930 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
4.772777 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
4.788505 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
4.796424 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
4.799697 65.55.251.22 -> [ PUBLIC IP] TCP [TCP Dup ACK 205#2] smtp >
2185 [ACK] Seq=216 Ack=4219 Win=11264 Len=0 TSV=1636659750
TSER=152021380 SLE=67031655 SRE=67032943
4.811289 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
4.819224 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
4.821790 [ PUBLIC IP] -> 65.55.251.22 SMTP Message Body
4.822934 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2175 [ACK] Seq=299
Ack=10556 Win=24944 Len=0 TSV=1644362000 TSER=152021494 SLE=346412071
SRE=346413119
4.845862 65.55.251.22 -> [ PUBLIC IP] TCP [TCP Dup ACK 205#3] smtp >
2185 [ACK] Seq=216 Ack=4219 Win=11264 Len=0 TSV=1636659796
TSER=152021380 SLE=67034391 SRE=67035679 SLE=67031655 SRE=67032943
4.892062 65.55.251.22 -> [ PUBLIC IP] TCP [TCP Dup ACK 205#4] smtp >
2185 [ACK] Seq=216 Ack=4219 Win=11264 Len=0 TSV=1636659843
TSER=152021380 SLE=67037127 SRE=67038415 SLE=67034391 SRE=67035679
SLE=67031655 SRE=67032943
4.902445 65.55.251.22 -> [ PUBLIC IP] TCP smtp > 2175 [ACK] Seq=299
Ack=10556 Win=24944 Len=0 TSV=1644362080 TSER=152021494 SLE=346417463
SRE=346417932 SLE=346412071 SRE=346413119
*********************************************************************
*********************************************************************
Sample data from internal interface:
0.000000 [SMTP SERVER] -> 65.55.251.22 TCP 2175 > smtp [SYN] Seq=0
Ack=0 Win=5840 Len=0 MSS=1460 TSV=152016779 TSER=0 WS=0
0.014271 [SMTP SERVER] -> 65.55.251.22 TCP 2180 > smtp [SYN] Seq=0
Ack=0 Win=5840 Len=0 MSS=1460 TSV=152016792 TSER=0 WS=0
0.078278 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2175 [SYN, ACK]
Seq=0 Ack=1 Win=5792 Len=0 MSS=1380 TSV=1644357257 TSER=152016779 WS=2
0.095511 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2180 [SYN, ACK]
Seq=0 Ack=1 Win=5792 Len=0 MSS=1380 TSV=530066764 TSER=152016792 WS=2
0.099245 [SMTP SERVER] -> 65.55.251.22 TCP 2175 > smtp [ACK] Seq=1
Ack=1 Win=5840 Len=0 TSV=152016873 TSER=1644357257
0.101669 [SMTP SERVER] -> 65.55.251.22 TCP 2180 > smtp [ACK] Seq=1
Ack=1 Win=5840 Len=0 TSV=152016890 TSER=530066764
0.238227 65.55.251.22 -> [SMTP SERVER] SMTP Response: 220
mail90-blu.bigfish.com ESMTP Postfix EGGS and Butter
0.238349 65.55.251.22 -> [SMTP SERVER] SMTP Response: 220
mail127-blu.bigfish.com ESMTP Postfix EGGS and Butter
0.244574 [SMTP SERVER] -> 65.55.251.22 TCP 2175 > smtp [ACK] Seq=1
Ack=59 Win=5840 Len=0 TSV=152017033 TSER=1644357416
0.245038 [SMTP SERVER] -> 65.55.251.22 SMTP Command: EHLO [SMTP
SERVER DNS NAME].[MY DOMAIN]
0.245341 [SMTP SERVER] -> 65.55.251.22 TCP 2180 > smtp [ACK] Seq=1
Ack=60 Win=5840 Len=0 TSV=152017034 TSER=530066907
0.245809 [SMTP SERVER] -> 65.55.251.22 SMTP Command: EHLO [SMTP
SERVER DNS NAME].[MY DOMAIN]
0.325239 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2175 [ACK] Seq=59
Ack=31 Win=5792 Len=0 TSV=1644357504 TSER=152017033
0.325421 65.55.251.22 -> [SMTP SERVER] SMTP Response:
250-mail90-blu.bigfish.com
0.326039 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2180 [ACK] Seq=60
Ack=31 Win=5792 Len=0 TSV=530066995 TSER=152017034
0.326115 65.55.251.22 -> [SMTP SERVER] SMTP Response:
250-mail127-blu.bigfish.com
0.333538 [SMTP SERVER] -> 65.55.251.22 SMTP Command: MAIL
FROM:<[USER-1]@[MY DOMAIN]> SIZE=6216
0.335483 [SMTP SERVER] -> 65.55.251.22 SMTP Command: MAIL
FROM:<[USER-2]@[MY DOMAIN]> SIZE=25700
0.453736 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2175 [ACK] Seq=161
Ack=119 Win=5792 Len=0 TSV=1644357632 TSER=152017122
0.456518 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2180 [ACK] Seq=163
Ack=164 Win=6864 Len=0 TSV=530067125 TSER=152017123
0.477707 65.55.251.22 -> [SMTP SERVER] SMTP Response: 250 Ok
0.495190 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
0.502224 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
0.509699 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
0.577000 65.55.251.22 -> [SMTP SERVER] SMTP Response: 250 Ok
0.608140 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
0.615161 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
0.638366 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
0.790598 [SMTP SERVER] -> 65.55.251.22 TCP 2188 > smtp [SYN] Seq=0
Ack=0 Win=5840 Len=0 MSS=1460 TSV=152017570 TSER=0 WS=0
0.790949 [SMTP SERVER] -> 65.55.251.22 TCP 2187 > smtp [SYN] Seq=0
Ack=0 Win=5840 Len=0 MSS=1460 TSV=152017570 TSER=0 WS=0
0.791653 [SMTP SERVER] -> 65.55.251.22 TCP 2186 > smtp [SYN] Seq=0
Ack=0 Win=5840 Len=0 MSS=1460 TSV=152017569 TSER=0 WS=0
0.792361 [SMTP SERVER] -> 65.55.251.22 TCP 2185 > smtp [SYN] Seq=0
Ack=0 Win=5840 Len=0 MSS=1460 TSV=152017569 TSER=0 WS=0
0.825241 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
0.871285 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2188 [SYN, ACK]
Seq=0 Ack=1 Win=5792 Len=0 MSS=1380 TSV=1636655822 TSER=152017570 WS=2
0.871556 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2187 [SYN, ACK]
Seq=0 Ack=1 Win=5792 Len=0 MSS=1380 TSV=1636655822 TSER=152017570 WS=2
0.872277 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2186 [SYN, ACK]
Seq=0 Ack=1 Win=5792 Len=0 MSS=1380 TSV=1636655823 TSER=152017569 WS=2
0.872805 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2185 [SYN, ACK]
Seq=0 Ack=1 Win=5792 Len=0 MSS=1380 TSV=1636655823 TSER=152017569 WS=2
0.891107 [SMTP SERVER] -> 65.55.251.22 TCP 2185 > smtp [ACK] Seq=1
Ack=1 Win=5840 Len=0 TSV=152017668 TSER=1636655823
0.891402 [SMTP SERVER] -> 65.55.251.22 TCP 2186 > smtp [ACK] Seq=1
Ack=1 Win=5840 Len=0 TSV=152017667 TSER=1636655823
0.891716 [SMTP SERVER] -> 65.55.251.22 TCP 2187 > smtp [ACK] Seq=1
Ack=1 Win=5840 Len=0 TSV=152017667 TSER=1636655822
0.892028 [SMTP SERVER] -> 65.55.251.22 TCP 2188 > smtp [ACK] Seq=1
Ack=1 Win=5840 Len=0 TSV=152017666 TSER=1636655822
0.900049 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
1.039914 65.55.251.22 -> [SMTP SERVER] SMTP Response: 220
mail121-blu.bigfish.com ESMTP Postfix EGGS and Butter
1.059360 [SMTP SERVER] -> 65.55.251.22 TCP 2186 > smtp [ACK] Seq=1
Ack=60 Win=5840 Len=0 TSV=152017835 TSER=1636655991
1.060986 [SMTP SERVER] -> 65.55.251.22 SMTP Command: EHLO [SMTP
SERVER DNS NAME].[MY DOMAIN]
1.141464 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2186 [ACK] Seq=60
Ack=31 Win=5792 Len=0 TSV=1636656092 TSER=152017835
1.141875 65.55.251.22 -> [SMTP SERVER] SMTP Response:
250-mail121-blu.bigfish.com
1.163556 [SMTP SERVER] -> 65.55.251.22 SMTP Command: MAIL
FROM:<[USER-3]@[MY DOMAIN]> SIZE=40438
1.184110 65.55.251.22 -> [SMTP SERVER] SMTP Response: 220
mail121-blu.bigfish.com ESMTP Postfix EGGS and Butter
1.202811 [SMTP SERVER] -> 65.55.251.22 TCP 2188 > smtp [ACK] Seq=1
Ack=60 Win=5840 Len=0 TSV=152017979 TSER=1636656135
1.203273 [SMTP SERVER] -> 65.55.251.22 SMTP Command: EHLO [SMTP
SERVER DNS NAME].[MY DOMAIN]
1.205072 65.55.251.22 -> [SMTP SERVER] SMTP Response: 220
mail121-blu.bigfish.com ESMTP Postfix EGGS and Butter
1.222441 [SMTP SERVER] -> 65.55.251.22 TCP 2187 > smtp [ACK] Seq=1
Ack=60 Win=5840 Len=0 TSV=152018000 TSER=1636656156
1.222916 [SMTP SERVER] -> 65.55.251.22 SMTP Command: EHLO [SMTP
SERVER DNS NAME].[MY DOMAIN]
1.255310 65.55.251.22 -> [SMTP SERVER] SMTP Response: 250 Ok
1.283492 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2188 [ACK] Seq=60
Ack=31 Win=5792 Len=0 TSV=1636656234 TSER=152017979
1.283570 65.55.251.22 -> [SMTP SERVER] SMTP Response:
250-mail121-blu.bigfish.com
1.300390 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
1.300970 [SMTP SERVER] -> 65.55.251.22 SMTP Command: MAIL
FROM:<[USER-3]@[MY DOMAIN]> SIZE=2940
1.303298 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2187 [ACK] Seq=60
Ack=31 Win=5792 Len=0 TSV=1636656254 TSER=152018000
1.306154 65.55.251.22 -> [SMTP SERVER] SMTP Response:
250-mail121-blu.bigfish.com
1.308236 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
1.315693 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
1.316149 [SMTP SERVER] -> 65.55.251.22 SMTP Command: MAIL
FROM:<[USER-1]@[MY DOMAIN]> SIZE=105756
1.385716 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
1.398708 65.55.251.22 -> [SMTP SERVER] SMTP Response: 250 Ok
1.415386 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
1.417130 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
1.436284 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2187 [ACK] Seq=163
Ack=108 Win=5792 Len=0 TSV=1636656387 TSER=152018103
1.466278 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2175 [PSH, ACK]
Seq=214 Ack=1487 Win=8528 Len=0
1.479929 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
1.487284 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
1.495656 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
1.527054 65.55.251.22 -> [SMTP SERVER] SMTP Response: 250 Ok
1.544031 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
1.547853 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
1.556030 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
1.562941 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
1.567880 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2175 [PSH, ACK]
Seq=214 Ack=4213 Win=11264 Len=0
1.576250 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2180 [PSH, ACK]
Seq=224 Ack=1532 Win=9600 Len=0
1.578335 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
1.589720 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
1.597182 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
1.604594 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
1.659092 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2175 [ACK] Seq=214
Ack=5008 Win=14000 Len=0 TSV=1644358838 TSER=152018363
1.678044 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2180 [PSH, ACK]
Seq=224 Ack=4258 Win=12336 Len=0
1.692332 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
1.699367 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
1.707243 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
1.714289 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
1.721761 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
1.729626 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
1.736645 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
1.855210 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
2.127945 65.55.251.22 -> [SMTP SERVER] SMTP Response: 250 Ok: queued
as 1C80F1660052
2.147051 [SMTP SERVER] -> 65.55.251.22 SMTP Command: MAIL
FROM:<[USER-1]@[MY DOMAIN]> SIZE=17060
2.190795 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
2.227788 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2175 [ACK] Seq=246
Ack=5094 Win=14000 Len=0 TSV=1644359406 TSER=152018924
2.271374 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2186 [PSH, ACK]
Seq=216 Ack=1500 Win=8528 Len=0
2.284960 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
2.292388 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
2.308658 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
2.373068 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2186 [PSH, ACK]
Seq=216 Ack=4226 Win=11264 Len=0
2.387048 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
2.389320 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2188 [PSH, ACK]
Seq=216 Ack=1499 Win=8528 Len=0
2.394063 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
2.401910 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
2.408922 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
2.419049 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
2.427112 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
2.428689 65.55.251.22 -> [SMTP SERVER] SMTP Response: 250 Ok
2.442007 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
2.457426 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
2.465262 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
2.473146 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
2.499304 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
2.530134 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
2.538059 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2187 [PSH, ACK]
Seq=216 Ack=1476 Win=8528 Len=0
2.545919 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
2.577057 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
2.581318 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
2.604319 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
2.610972 65.55.251.22 -> [SMTP SERVER] SMTP Response: 250 Ok: queued
as 0CFF6910078
2.611751 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
2.625351 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
2.634161 [SMTP SERVER] -> 65.55.251.22 SMTP Command: MAIL
FROM:<[USER-4]@[MY DOMAIN]> SIZE=9290
2.714482 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2188 [ACK] Seq=247
Ack=2030 Win=14000 Len=0 TSV=1636657667 TSER=152019409
2.759358 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
2.816116 65.55.251.22 -> [SMTP SERVER] SMTP Response: 250 Ok
2.833492 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
2.841383 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
2.847861 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
2.891652 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
3.160605 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
3.335612 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
3.348737 65.55.251.22 -> [SMTP SERVER] SMTP Response: 220
mail121-blu.bigfish.com ESMTP Postfix EGGS and Butter
3.365491 [SMTP SERVER] -> 65.55.251.22 TCP 2185 > smtp [ACK] Seq=1
Ack=60 Win=5840 Len=0 TSV=152020145 TSER=1636658301
3.365962 [SMTP SERVER] -> 65.55.251.22 SMTP Command: EHLO [SMTP
SERVER DNS NAME].[MY DOMAIN]
3.416270 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2175 [PSH, ACK]
Seq=299 Ack=6462 Win=16736 Len=0
3.429845 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
3.437215 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
3.446277 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2185 [ACK] Seq=60
Ack=31 Win=5792 Len=0 TSV=1636658399 TSER=152020145
3.446376 65.55.251.22 -> [SMTP SERVER] SMTP Response:
250-mail121-blu.bigfish.com
3.454918 [SMTP SERVER] -> 65.55.251.22 SMTP Command: MAIL
FROM:<JManning@[MY DOMAIN]> SIZE=32228
3.571163 65.55.251.22 -> [SMTP SERVER] SMTP Response: 250 Ok
3.581613 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
3.590181 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
3.597194 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
3.604599 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
3.751282 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
3.813573 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
3.831758 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2187 [PSH, ACK]
Seq=216 Ack=3623 Win=14000 Len=0
3.845298 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Command: mera flashes; the moment is saved for eternity.... <br>
3.853172 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
3.860167 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
3.890585 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
3.894202 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2188 [PSH, ACK]
Seq=308 Ack=3398 Win=16736 Len=0
3.907748 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
4.503676 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
4.584268 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2185 [PSH, ACK]
Seq=216 Ack=1493 Win=8528 Len=0
4.597748 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
4.605156 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
4.617518 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
4.685766 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2185 [PSH, ACK]
Seq=216 Ack=4219 Win=11264 Len=0
4.698177 65.55.251.22 -> [SMTP SERVER] TCP smtp > 2175 [PSH, ACK]
Seq=299 Ack=9188 Win=22208 Len=0
4.709652 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
4.716648 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
4.739941 [SMTP SERVER] -> 65.55.251.22 SMTP [TCP Retransmission]
Message Body
4.747800 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
4.762751 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
4.770602 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
4.786360 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
4.794246 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
4.809117 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
4.817044 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
4.819621 [SMTP SERVER] -> 65.55.251.22 SMTP Message Body
