Here’s another failed e-mail
from mail.log
Jun 6 15:16:19 HERMES postfix/smtpd[2164]: initializing the server-side TLS engine
Jun 6 15:16:23 HERMES postfix/smtpd[2164]: connect from o1131.abmail.my.zip.co[167.89.95.108]
Jun 6 15:16:24 HERMES postfix/smtpd[2164]: setting up TLS connection from o1131.abmail.my.zip.co[167.89.95.108]
Jun 6 15:16:24 HERMES postfix/smtpd[2164]: o1131.abmail.my.zip.co[167.89.95.108]: TLS cipher list "aNULL:-aNULL:HIGH:MEDIUM:+RC4:@STRENGTH"
Jun 6 15:16:24 HERMES postfix/smtpd[2164]: SSL_accept:before SSL initialization
Jun 6 15:16:24 HERMES postfix/smtpd[2164]: SSL_accept:before SSL initialization
Jun 6 15:16:24 HERMES postfix/smtpd[2164]: SSL_accept:SSLv3/TLS read client hello
Jun 6 15:16:24 HERMES postfix/smtpd[2164]: SSL_accept:SSLv3/TLS write server hello
Jun 6 15:16:24 HERMES postfix/smtpd[2164]: SSL_accept:SSLv3/TLS write change cipher spec
Jun 6 15:16:24 HERMES postfix/smtpd[2164]: SSL_accept:TLSv1.3 early data
Jun 6 15:16:25 HERMES postfix/smtpd[2164]: SSL_accept:TLSv1.3 early data
Jun 6 15:16:25 HERMES postfix/smtpd[2164]: SSL_accept:SSLv3/TLS read client hello
Jun 6 15:16:25 HERMES postfix/smtpd[2164]: SSL_accept:SSLv3/TLS write server hello
Jun 6 15:16:25 HERMES postfix/smtpd[2164]: SSL_accept:TLSv1.3 write encrypted extensions
Jun 6 15:16:25 HERMES postfix/smtpd[2164]: SSL_accept:SSLv3/TLS write certificate
Jun 6 15:16:25 HERMES postfix/smtpd[2164]: SSL_accept:TLSv1.3 write server certificate verify
Jun 6 15:16:25 HERMES postfix/smtpd[2164]: SSL_accept:SSLv3/TLS write finished
Jun 6 15:16:25 HERMES postfix/smtpd[2164]: SSL_accept:TLSv1.3 early data
Jun 6 15:16:26 HERMES postfix/smtpd[2164]: SSL_accept:TLSv1.3 early data
Jun 6 15:16:26 HERMES postfix/smtpd[2164]: SSL_accept:SSLv3/TLS read finished
Jun 6 15:16:26 HERMES postfix/smtpd[2164]: o1131.abmail.my.zip.co[167.89.95.108]: Issuing session ticket, key expiration: 1622965585
Jun 6 15:16:26 HERMES postfix/smtpd[2164]: SSL_accept:SSLv3/TLS write session ticket
Jun 6 15:16:26 HERMES postfix/smtpd[2164]: Anonymous TLS connection established from o1131.abmail.my.zip.co[167.89.95.108]: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature RSA-PSS (2048 bits) server-digest SHA256
Jun 6 15:16:32 HERMES policyd-spf[2170]: prepend Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=167.89.95.108; helo=o1131.abmail.my.zip.co; envelope-from=bounces+7397607-124a-paypal=aquinasnet.com@abmail.my.zip.co; receiver=<UNKNOWN>
Jun 6 15:16:32 HERMES postfix/smtpd[2164]: 78CE841618: client=o1131.abmail.my.zip.co[167.89.95.108]
Jun 6 15:16:33 HERMES postfix/cleanup[2172]: 78CE841618: message-id=<[email protected]>
Jun 6 15:21:34 HERMES postfix/smtpd[2164]: timeout after DATA (61398 bytes) from o1131.abmail.my.zip.co[167.89.95.108]
Jun 6 15:21:34 HERMES postfix/smtpd[2164]: disconnect from o1131.abmail.my.zip.co[167.89.95.108] ehlo=2 starttls=1 mail=1 rcpt=1 data=0/1 commands=5/6
Jun 6 15:24:54 HERMES postfix/anvil[2165]: statistics: max connection rate 1/60s for (smtp:167.89.95.108) at Jun 6 15:16:23
Jun 6 15:24:54 HERMES postfix/anvil[2165]: statistics: max connection count 1 for (smtp:167.89.95.108) at Jun 6 15:16:23
Jun 6 15:24:54 HERMES postfix/anvil[2165]: statistics: max cache size 1 at Jun 6 15:16:23
and the corresponding tcpdump
15:16:18.956736 IP (tos 0x0, ttl 51, id 51059, offset 0, flags [none], proto TCP (6), length 60)
167.89.95.108.24079 > 10.1.3.31.25: Flags [S], cksum 0x14e2 (correct), seq 1424647911, win 29200, options [mss 1288,sackOK,TS val 3593911713 ecr 0,nop,wscale 9], length 0
15:16:18.956856 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 56)
10.1.3.31.25 > 167.89.95.108.24079: Flags [S.], cksum 0x1410 (incorrect -> 0x92b3), seq 3543317145, ack 1424647912, win 64440, options [mss 1444,nop,nop,TS val 943868123 ecr 3593911713], length 0
15:16:19.332871 IP (tos 0x0, ttl 51, id 12478, offset 0, flags [none], proto TCP (6), length 52)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x32a0 (correct), ack 1, win 29200, options [nop,nop,TS val 3593912074 ecr 943868123], length 0
15:16:23.295120 IP (tos 0x0, ttl 64, id 65121, offset 0, flags [DF], proto TCP (6), length 91)
10.1.3.31.25 > 167.89.95.108.24079: Flags [P.], cksum 0x1433 (incorrect -> 0xb1b6), seq 1:40, ack 1, win 64440, options [nop,nop,TS val 943872462 ecr 3593912074], length 39: SMTP, length: 39
220 mail.aquinasnet.com ESMTP Postfix
15:16:23.696576 IP (tos 0x0, ttl 51, id 13421, offset 0, flags [none], proto TCP (6), length 52)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x106b (correct), ack 40, win 29200, options [nop,nop,TS val 3593916453 ecr 943872462], length 0
15:16:23.715310 IP (tos 0x0, ttl 51, id 24514, offset 0, flags [none], proto TCP (6), length 81)
167.89.95.108.24079 > 10.1.3.31.25: Flags [P.], cksum 0xee8f (correct), seq 1:30, ack 40, win 29200, options [nop,nop,TS val 3593916471 ecr 943872462], length 29: SMTP, length: 29
EHLO o1131.abmail.my.zip.co
15:16:23.724739 IP (tos 0x0, ttl 64, id 65122, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x8503), ack 30, win 64411, options [nop,nop,TS val 943872891 ecr 3593916471], length 0
15:16:23.725479 IP (tos 0x0, ttl 64, id 65123, offset 0, flags [DF], proto TCP (6), length 198)
10.1.3.31.25 > 167.89.95.108.24079: Flags [P.], cksum 0x149e (incorrect -> 0x9885), seq 40:186, ack 30, win 64411, options [nop,nop,TS val 943872892 ecr 3593916471], length 146: SMTP, length: 146
250-mail.aquinasnet.com
250-PIPELINING
250-SIZE 10240000
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-DSN
250 CHUNKING
15:16:24.313579 IP (tos 0x0, ttl 51, id 59011, offset 0, flags [none], proto TCP (6), length 62)
167.89.95.108.24079 > 10.1.3.31.25: Flags [P.], cksum 0xc60a (correct), seq 30:40, ack 186, win 30016, options [nop,nop,TS val 3593917070 ecr 943872892], length 10: SMTP, length: 10
STARTTLS
15:16:24.313646 IP (tos 0x0, ttl 64, id 65124, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x7fcd), ack 40, win 64401, options [nop,nop,TS val 943873480 ecr 3593917070], length 0
15:16:24.313913 IP (tos 0x0, ttl 64, id 65125, offset 0, flags [DF], proto TCP (6), length 82)
10.1.3.31.25 > 167.89.95.108.24079: Flags [P.], cksum 0x142a (incorrect -> 0x6883), seq 186:216, ack 40, win 64401, options [nop,nop,TS val 943873481 ecr 3593917070], length 30: SMTP, length: 30
220 2.0.0 Ready to start TLS
15:16:24.704713 IP (tos 0x0, ttl 51, id 39327, offset 0, flags [none], proto TCP (6), length 323)
167.89.95.108.24079 > 10.1.3.31.25: Flags [P.], cksum 0x0ac1 (correct), seq 40:311, ack 216, win 30016, options [nop,nop,TS val 3593917460 ecr 943873481], length 271: SMTP, length: 271
15:16:24.704832 IP (tos 0x0, ttl 64, id 65126, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x7ca2), ack 311, win 64130, options [nop,nop,TS val 943873871 ecr 3593917460], length 0
15:16:24.705311 IP (tos 0x0, ttl 64, id 65127, offset 0, flags [DF], proto TCP (6), length 151)
10.1.3.31.25 > 167.89.95.108.24079: Flags [P.], cksum 0x146f (incorrect -> 0xe5a5), seq 216:315, ack 311, win 64130, options [nop,nop,TS val 943873872 ecr 3593917460], length 99: SMTP, length: 99
15:16:25.098485 IP (tos 0x0, ttl 51, id 63988, offset 0, flags [none], proto TCP (6), length 58)
167.89.95.108.24079 > 10.1.3.31.25: Flags [P.], cksum 0xe7e2 (correct), seq 311:317, ack 315, win 30016, options [nop,nop,TS val 3593917856 ecr 943873872], length 6: SMTP, length: 6
15:16:25.112468 IP (tos 0x0, ttl 51, id 7183, offset 0, flags [none], proto TCP (6), length 388)
167.89.95.108.24079 > 10.1.3.31.25: Flags [P.], cksum 0x3386 (correct), seq 317:653, ack 315, win 30016, options [nop,nop,TS val 3593917869 ecr 943873872], length 336: SMTP, length: 336
15:16:25.112851 IP (tos 0x0, ttl 64, id 65128, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x791b), ack 653, win 63788, options [nop,nop,TS val 943874279 ecr 3593917856], length 0
15:16:25.122102 IP (tos 0x0, ttl 64, id 65129, offset 0, flags [DF], proto TCP (6), length 2604)
10.1.3.31.25 > 167.89.95.108.24079: Flags [P.], cksum 0x1e04 (incorrect -> 0xc778), seq 315:2867, ack 653, win 63788, options [nop,nop,TS val 943874289 ecr 3593917856], length 2552: SMTP, length: 2552
15:16:25.122139 IP (tos 0x0, ttl 64, id 65131, offset 0, flags [DF], proto TCP (6), length 1596)
10.1.3.31.25 > 167.89.95.108.24079: Flags [P.], cksum 0x1a14 (incorrect -> 0xea03), seq 2867:4411, ack 653, win 63788, options [nop,nop,TS val 943874289 ecr 3593917856], length 1544: SMTP, length: 1544
15:16:25.677054 IP (tos 0x0, ttl 51, id 21100, offset 0, flags [none], proto TCP (6), length 52)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0xda74 (correct), ack 2867, win 35728, options [nop,nop,TS val 3593918433 ecr 943874289], length 0
15:16:25.684569 IP (tos 0x0, ttl 51, id 24010, offset 0, flags [none], proto TCP (6), length 52)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0xc076 (correct), ack 4411, win 40832, options [nop,nop,TS val 3593918439 ecr 943874289], length 0
15:16:25.684616 IP (tos 0x0, ttl 64, id 65133, offset 0, flags [DF], proto TCP (6), length 697)
10.1.3.31.25 > 167.89.95.108.24079: Flags [P.], cksum 0x1691 (incorrect -> 0x86dc), seq 4411:5056, ack 653, win 63788, options [nop,nop,TS val 943874851 ecr 3593918439], length 645: SMTP, length: 645
15:16:26.080165 IP (tos 0x0, ttl 51, id 5917, offset 0, flags [none], proto TCP (6), length 177)
167.89.95.108.24079 > 10.1.3.31.25: Flags [P.], cksum 0xbb51 (correct), seq 653:778, ack 5056, win 43384, options [nop,nop,TS val 3593918837 ecr 943874851], length 125: SMTP, length: 125
15:16:26.081422 IP (tos 0x0, ttl 64, id 65134, offset 0, flags [DF], proto TCP (6), length 307)
10.1.3.31.25 > 167.89.95.108.24079: Flags [P.], cksum 0x150b (incorrect -> 0xbeb5), seq 5056:5311, ack 778, win 63788, options [nop,nop,TS val 943875248 ecr 3593918837], length 255: SMTP, length: 255
15:16:26.491914 IP (tos 0x0, ttl 51, id 17696, offset 0, flags [none], proto TCP (6), length 52)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0xa19c (correct), ack 5311, win 45936, options [nop,nop,TS val 3593919249 ecr 943875248], length 0
15:16:26.491972 IP (tos 0x0, ttl 64, id 65135, offset 0, flags [DF], proto TCP (6), length 206)
10.1.3.31.25 > 167.89.95.108.24079: Flags [P.], cksum 0x14a6 (incorrect -> 0xbc6d), seq 5311:5465, ack 778, win 63788, options [nop,nop,TS val 943875659 ecr 3593919249], length 154: SMTP, length: 154
15:16:26.862012 IP (tos 0x0, ttl 51, id 65232, offset 0, flags [none], proto TCP (6), length 52)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x93fe (correct), ack 5465, win 48488, options [nop,nop,TS val 3593919618 ecr 943875659], length 0
15:16:26.891719 IP (tos 0x0, ttl 51, id 37543, offset 0, flags [none], proto TCP (6), length 161)
167.89.95.108.24079 > 10.1.3.31.25: Flags [P.], cksum 0x55f1 (correct), seq 778:887, ack 5465, win 48488, options [nop,nop,TS val 3593919647 ecr 943875659], length 109: SMTP, length: 109
15:16:26.909824 IP (tos 0x0, ttl 64, id 65136, offset 0, flags [DF], proto TCP (6), length 88)
10.1.3.31.25 > 167.89.95.108.24079: Flags [P.], cksum 0x1430 (incorrect -> 0x5a38), seq 5465:5501, ack 887, win 63788, options [nop,nop,TS val 943876076 ecr 3593919647], length 36: SMTP, length: 36
15:16:27.403809 IP (tos 0x0, ttl 51, id 31545, offset 0, flags [none], proto TCP (6), length 107)
167.89.95.108.24079 > 10.1.3.31.25: Flags [P.], cksum 0xd6ff (correct), seq 887:942, ack 5501, win 48488, options [nop,nop,TS val 3593920161 ecr 943876076], length 55: SMTP, length: 55
15:16:27.447104 IP (tos 0x0, ttl 64, id 65137, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x5198), ack 942, win 63788, options [nop,nop,TS val 943876614 ecr 3593920161], length 0
15:16:32.502943 IP (tos 0x0, ttl 64, id 65138, offset 0, flags [DF], proto TCP (6), length 88)
10.1.3.31.25 > 167.89.95.108.24079: Flags [P.], cksum 0x1430 (incorrect -> 0x48a6), seq 5501:5537, ack 942, win 63788, options [nop,nop,TS val 943881670 ecr 3593920161], length 36: SMTP, length: 36
15:16:32.903579 IP (tos 0x0, ttl 51, id 40909, offset 0, flags [none], proto TCP (6), length 80)
167.89.95.108.24079 > 10.1.3.31.25: Flags [P.], cksum 0x9d5a (correct), seq 942:970, ack 5537, win 48488, options [nop,nop,TS val 3593925661 ecr 943881670], length 28: SMTP, length: 28
15:16:32.903645 IP (tos 0x0, ttl 64, id 65139, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x268c), ack 970, win 63788, options [nop,nop,TS val 943882070 ecr 3593925661], length 0
15:16:32.904965 IP (tos 0x0, ttl 64, id 65140, offset 0, flags [DF], proto TCP (6), length 111)
10.1.3.31.25 > 167.89.95.108.24079: Flags [P.], cksum 0x1447 (incorrect -> 0xb999), seq 5537:5596, ack 970, win 63788, options [nop,nop,TS val 943882072 ecr 3593925661], length 59: SMTP, length: 59
15:16:33.295179 IP (tos 0x0, ttl 51, id 18043, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x1cd1 (correct), seq 970:2246, ack 5596, win 48488, options [nop,nop,TS val 3593926050 ecr 943882072], length 1276: SMTP, length: 1276
15:16:33.295180 IP (tos 0x0, ttl 51, id 10416, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0xbfd3 (correct), seq 2246:3522, ack 5596, win 48488, options [nop,nop,TS val 3593926050 ecr 943882072], length 1276: SMTP, length: 1276
15:16:33.295303 IP (tos 0x0, ttl 64, id 65141, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x1e48), ack 2246, win 63788, options [nop,nop,TS val 943882462 ecr 3593926050], length 0
15:16:33.295360 IP (tos 0x0, ttl 64, id 65142, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x1e3c), ack 3522, win 62524, options [nop,nop,TS val 943882462 ecr 3593926050], length 0
15:16:33.295411 IP (tos 0x0, ttl 51, id 14412, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0xba39 (correct), seq 3522:4798, ack 5596, win 48488, options [nop,nop,TS val 3593926050 ecr 943882072], length 1276: SMTP, length: 1276
15:16:33.295433 IP (tos 0x0, ttl 64, id 65143, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x1e3c), ack 4798, win 61248, options [nop,nop,TS val 943882462 ecr 3593926050], length 0
15:16:33.296904 IP (tos 0x0, ttl 51, id 35623, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x283a (correct), seq 4798:6074, ack 5596, win 48488, options [nop,nop,TS val 3593926050 ecr 943882072], length 1276: SMTP, length: 1276
15:16:33.296961 IP (tos 0x0, ttl 64, id 65144, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x0f46), ack 6074, win 63800, options [nop,nop,TS val 943882464 ecr 3593926050], length 0
15:16:33.297021 IP (tos 0x0, ttl 51, id 30916, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0xa71c (correct), seq 6074:7350, ack 5596, win 48488, options [nop,nop,TS val 3593926050 ecr 943882072], length 1276: SMTP, length: 1276
15:16:33.297032 IP (tos 0x0, ttl 64, id 65145, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x0f46), ack 7350, win 62524, options [nop,nop,TS val 943882464 ecr 3593926050], length 0
15:16:33.297195 IP (tos 0x0, ttl 51, id 18343, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0xac8f (correct), seq 7350:8626, ack 5596, win 48488, options [nop,nop,TS val 3593926050 ecr 943882072], length 1276: SMTP, length: 1276
15:16:33.297220 IP (tos 0x0, ttl 64, id 65146, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x054e), ack 8626, win 63800, options [nop,nop,TS val 943882464 ecr 3593926050], length 0
15:16:33.297409 IP (tos 0x0, ttl 51, id 41091, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0xcb4a (correct), seq 8626:9902, ack 5596, win 48488, options [nop,nop,TS val 3593926051 ecr 943882072], length 1276: SMTP, length: 1276
15:16:33.297421 IP (tos 0x0, ttl 64, id 65147, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x0051), ack 9902, win 63800, options [nop,nop,TS val 943882464 ecr 3593926051], length 0
15:16:33.297565 IP (tos 0x0, ttl 51, id 45828, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x505b (correct), seq 9902:11178, ack 5596, win 48488, options [nop,nop,TS val 3593926051 ecr 943882072], length 1276: SMTP, length: 1276
15:16:33.297579 IP (tos 0x0, ttl 64, id 65148, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x0051), ack 11178, win 62524, options [nop,nop,TS val 943882464 ecr 3593926051], length 0
15:16:33.297757 IP (tos 0x0, ttl 51, id 9750, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0xc618 (correct), seq 11178:12454, ack 5596, win 48488, options [nop,nop,TS val 3593926051 ecr 943882072], length 1276: SMTP, length: 1276
15:16:33.297757 IP (tos 0x0, ttl 51, id 4897, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x8255 (correct), seq 12454:13730, ack 5596, win 48488, options [nop,nop,TS val 3593926051 ecr 943882072], length 1276: SMTP, length: 1276
15:16:33.297789 IP (tos 0x0, ttl 64, id 65149, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x0051), ack 12454, win 61248, options [nop,nop,TS val 943882464 ecr 3593926051], length 0
15:16:33.297816 IP (tos 0x0, ttl 64, id 65150, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x0051), ack 13730, win 59972, options [nop,nop,TS val 943882464 ecr 3593926051], length 0
15:16:33.672867 IP (tos 0x0, ttl 51, id 54936, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0xb1c0 (correct), seq 13730:15006, ack 5596, win 48488, options [nop,nop,TS val 3593926428 ecr 943882462], length 1276: SMTP, length: 1276
15:16:33.672938 IP (tos 0x0, ttl 64, id 65151, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0xe96f), ack 15006, win 63800, options [nop,nop,TS val 943882840 ecr 3593926428], length 0
15:16:33.672993 IP (tos 0x0, ttl 51, id 45826, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x241c (correct), seq 15006:16282, ack 5596, win 48488, options [nop,nop,TS val 3593926428 ecr 943882462], length 1276: SMTP, length: 1276
15:16:33.672993 IP (tos 0x0, ttl 51, id 58624, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x04dd (correct), seq 16282:17558, ack 5596, win 48488, options [nop,nop,TS val 3593926428 ecr 943882462], length 1276: SMTP, length: 1276
15:16:33.673006 IP (tos 0x0, ttl 64, id 65152, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0xe96f), ack 16282, win 62524, options [nop,nop,TS val 943882840 ecr 3593926428], length 0
15:16:33.673077 IP (tos 0x0, ttl 64, id 65153, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0xe96f), ack 17558, win 61248, options [nop,nop,TS val 943882840 ecr 3593926428], length 0
15:16:33.673218 IP (tos 0x0, ttl 51, id 39399, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x67c3 (correct), seq 17558:18834, ack 5596, win 48488, options [nop,nop,TS val 3593926428 ecr 943882462], length 1276: SMTP, length: 1276
15:16:33.673228 IP (tos 0x0, ttl 64, id 65154, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0xda7b), ack 18834, win 63800, options [nop,nop,TS val 943882840 ecr 3593926428], length 0
15:16:33.673345 IP (tos 0x0, ttl 51, id 59095, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x6a63 (correct), seq 18834:20110, ack 5596, win 48488, options [nop,nop,TS val 3593926429 ecr 943882462], length 1276: SMTP, length: 1276
15:16:33.673345 IP (tos 0x0, ttl 51, id 5781, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x3056 (correct), seq 20110:21386, ack 5596, win 48488, options [nop,nop,TS val 3593926429 ecr 943882462], length 1276: SMTP, length: 1276
15:16:33.673536 IP (tos 0x0, ttl 51, id 5292, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0xd5ac (correct), seq 21386:22662, ack 5596, win 48488, options [nop,nop,TS val 3593926429 ecr 943882464], length 1276: SMTP, length: 1276
15:16:33.673537 IP (tos 0x0, ttl 51, id 11596, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0xfa9e (correct), seq 22662:23938, ack 5596, win 48488, options [nop,nop,TS val 3593926429 ecr 943882464], length 1276: SMTP, length: 1276
15:16:33.673545 IP (tos 0x0, ttl 64, id 65155, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0xd082), ack 21386, win 63800, options [nop,nop,TS val 943882840 ecr 3593926429], length 0
15:16:33.673597 IP (tos 0x0, ttl 64, id 65156, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0xcb86), ack 23938, win 62524, options [nop,nop,TS val 943882840 ecr 3593926429], length 0
15:16:33.676623 IP (tos 0x0, ttl 51, id 39487, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0xf2af (correct), seq 23938:25214, ack 5596, win 48488, options [nop,nop,TS val 3593926433 ecr 943882464], length 1276: SMTP, length: 1276
15:16:33.676707 IP (tos 0x0, ttl 51, id 54158, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0xb5af (correct), seq 25214:26490, ack 5596, win 48488, options [nop,nop,TS val 3593926433 ecr 943882464], length 1276: SMTP, length: 1276
15:16:33.676723 IP (tos 0x0, ttl 64, id 65157, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0xc187), ack 26490, win 62524, options [nop,nop,TS val 943882843 ecr 3593926433], length 0
15:16:33.677729 IP (tos 0x0, ttl 51, id 37736, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x41c9 (correct), seq 26490:27766, ack 5596, win 48488, options [nop,nop,TS val 3593926433 ecr 943882464], length 1276: SMTP, length: 1276
15:16:33.677914 IP (tos 0x0, ttl 51, id 30936, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x0050 (correct), seq 27766:29042, ack 5596, win 48488, options [nop,nop,TS val 3593926433 ecr 943882464], length 1276: SMTP, length: 1276
15:16:33.677925 IP (tos 0x0, ttl 64, id 65158, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0xb78d), ack 29042, win 62524, options [nop,nop,TS val 943882845 ecr 3593926433], length 0
15:16:33.678086 IP (tos 0x0, ttl 51, id 42649, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x0066 (correct), seq 29042:30318, ack 5596, win 48488, options [nop,nop,TS val 3593926434 ecr 943882464], length 1276: SMTP, length: 1276
15:16:33.678263 IP (tos 0x0, ttl 51, id 22345, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x5282 (correct), seq 30318:31594, ack 5596, win 48488, options [nop,nop,TS val 3593926434 ecr 943882464], length 1276: SMTP, length: 1276
15:16:33.678274 IP (tos 0x0, ttl 64, id 65159, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0xa898), ack 31594, win 63800, options [nop,nop,TS val 943882845 ecr 3593926434], length 0
15:16:33.678548 IP (tos 0x0, ttl 51, id 47490, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x0cc9 (correct), seq 31594:32870, ack 5596, win 48488, options [nop,nop,TS val 3593926434 ecr 943882464], length 1276: SMTP, length: 1276
15:16:33.678740 IP (tos 0x0, ttl 51, id 14613, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x960b (correct), seq 32870:34146, ack 5596, win 48488, options [nop,nop,TS val 3593926434 ecr 943882464], length 1276: SMTP, length: 1276
15:16:33.678768 IP (tos 0x0, ttl 64, id 65160, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x9ea0), ack 34146, win 63800, options [nop,nop,TS val 943882845 ecr 3593926434], length 0
15:16:33.678903 IP (tos 0x0, ttl 51, id 1453, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x2c49 (correct), seq 34146:35422, ack 5596, win 48488, options [nop,nop,TS val 3593926434 ecr 943882464], length 1276: SMTP, length: 1276
15:16:33.679088 IP (tos 0x0, ttl 51, id 30885, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x564d (correct), seq 35422:36698, ack 5596, win 48488, options [nop,nop,TS val 3593926434 ecr 943882464], length 1276: SMTP, length: 1276
15:16:33.679088 IP (tos 0x0, ttl 51, id 46125, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x7162 (correct), seq 36698:37974, ack 5596, win 48488, options [nop,nop,TS val 3593926434 ecr 943882464], length 1276: SMTP, length: 1276
15:16:33.679101 IP (tos 0x0, ttl 64, id 65161, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x94a7), ack 36698, win 63800, options [nop,nop,TS val 943882846 ecr 3593926434], length 0
15:16:33.679242 IP (tos 0x0, ttl 51, id 65172, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x75c1 (correct), seq 37974:39250, ack 5596, win 48488, options [nop,nop,TS val 3593926434 ecr 943882464], length 1276: SMTP, length: 1276
15:16:33.679263 IP (tos 0x0, ttl 64, id 65162, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x8aaf), ack 39250, win 63800, options [nop,nop,TS val 943882846 ecr 3593926434], length 0
15:16:34.123014 IP (tos 0x0, ttl 51, id 58471, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x34b3 (correct), seq 39250:40526, ack 5596, win 48488, options [nop,nop,TS val 3593926878 ecr 943882840], length 1276: SMTP, length: 1276
15:16:34.123084 IP (tos 0x0, ttl 51, id 58107, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x38bf (correct), seq 40526:41802, ack 5596, win 48488, options [nop,nop,TS val 3593926878 ecr 943882840], length 1276: SMTP, length: 1276
15:16:34.123242 IP (tos 0x0, ttl 51, id 8045, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0xe40b (correct), seq 41802:43078, ack 5596, win 48488, options [nop,nop,TS val 3593926878 ecr 943882840], length 1276: SMTP, length: 1276
15:16:34.123247 IP (tos 0x0, ttl 64, id 65163, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x7d3f), ack 41802, win 63800, options [nop,nop,TS val 943883290 ecr 3593926878], length 0
15:16:34.123278 IP (tos 0x0, ttl 64, id 65164, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x717c), ack 43078, win 65535, options [nop,nop,TS val 943883290 ecr 3593926878], length 0
15:16:34.123511 IP (tos 0x0, ttl 51, id 8006, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x5aa2 (correct), seq 43078:44354, ack 5596, win 48488, options [nop,nop,TS val 3593926878 ecr 943882840], length 1276: SMTP, length: 1276
15:16:34.123511 IP (tos 0x0, ttl 51, id 52047, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x0aea (correct), seq 44354:45630, ack 5596, win 48488, options [nop,nop,TS val 3593926878 ecr 943882840], length 1276: SMTP, length: 1276
15:16:34.123540 IP (tos 0x0, ttl 64, id 65165, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x6c80), ack 44354, win 65535, options [nop,nop,TS val 943883290 ecr 3593926878], length 0
15:16:34.123591 IP (tos 0x0, ttl 64, id 65166, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x6784), ack 45630, win 65535, options [nop,nop,TS val 943883290 ecr 3593926878], length 0
15:16:34.123818 IP (tos 0x0, ttl 51, id 8463, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0xe777 (correct), seq 45630:46906, ack 5596, win 48488, options [nop,nop,TS val 3593926878 ecr 943882840], length 1276: SMTP, length: 1276
15:16:34.123818 IP (tos 0x0, ttl 51, id 30847, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x93ea (correct), seq 46906:48182, ack 5596, win 48488, options [nop,nop,TS val 3593926878 ecr 943882840], length 1276: SMTP, length: 1276
15:16:34.123818 IP (tos 0x0, ttl 51, id 21268, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x28c7 (correct), seq 48182:49458, ack 5596, win 48488, options [nop,nop,TS val 3593926879 ecr 943882840], length 1276: SMTP, length: 1276
15:16:34.123852 IP (tos 0x0, ttl 64, id 65167, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x6288), ack 46906, win 65535, options [nop,nop,TS val 943883290 ecr 3593926878], length 0
15:16:34.123882 IP (tos 0x0, ttl 64, id 65168, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x5d8c), ack 48182, win 65535, options [nop,nop,TS val 943883290 ecr 3593926878], length 0
15:16:34.123907 IP (tos 0x0, ttl 64, id 65169, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x588e), ack 49458, win 65535, options [nop,nop,TS val 943883291 ecr 3593926879], length 0
15:16:34.124385 IP (tos 0x0, ttl 51, id 8616, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x9039 (correct), seq 49458:50734, ack 5596, win 48488, options [nop,nop,TS val 3593926879 ecr 943882840], length 1276: SMTP, length: 1276
15:16:34.124415 IP (tos 0x0, ttl 64, id 65170, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x5392), ack 50734, win 65535, options [nop,nop,TS val 943883291 ecr 3593926879], length 0
15:16:34.124907 IP (tos 0x0, ttl 51, id 6589, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x5254 (correct), seq 50734:52010, ack 5596, win 48488, options [nop,nop,TS val 3593926879 ecr 943882840], length 1276: SMTP, length: 1276
15:16:34.124939 IP (tos 0x0, ttl 64, id 65171, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x4e95), ack 52010, win 65535, options [nop,nop,TS val 943883292 ecr 3593926879], length 0
15:16:34.125073 IP (tos 0x0, ttl 51, id 57326, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x7bc9 (correct), seq 52010:53286, ack 5596, win 48488, options [nop,nop,TS val 3593926879 ecr 943882840], length 1276: SMTP, length: 1276
15:16:34.125073 IP (tos 0x0, ttl 51, id 47867, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x9db6 (correct), seq 53286:54562, ack 5596, win 48488, options [nop,nop,TS val 3593926879 ecr 943882840], length 1276: SMTP, length: 1276
15:16:34.125073 IP (tos 0x0, ttl 51, id 20667, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x29c1 (correct), seq 54562:55838, ack 5596, win 48488, options [nop,nop,TS val 3593926879 ecr 943882840], length 1276: SMTP, length: 1276
15:16:34.125104 IP (tos 0x0, ttl 64, id 65172, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x4999), ack 53286, win 65535, options [nop,nop,TS val 943883292 ecr 3593926879], length 0
15:16:34.125131 IP (tos 0x0, ttl 64, id 65173, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x449d), ack 54562, win 65535, options [nop,nop,TS val 943883292 ecr 3593926879], length 0
15:16:34.125161 IP (tos 0x0, ttl 64, id 65174, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x3fa1), ack 55838, win 65535, options [nop,nop,TS val 943883292 ecr 3593926879], length 0
15:16:34.125259 IP (tos 0x0, ttl 51, id 13663, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0xa72c (correct), seq 55838:57114, ack 5596, win 48488, options [nop,nop,TS val 3593926879 ecr 943882843], length 1276: SMTP, length: 1276
15:16:34.125259 IP (tos 0x0, ttl 51, id 56416, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x4a79 (correct), seq 57114:58390, ack 5596, win 48488, options [nop,nop,TS val 3593926879 ecr 943882843], length 1276: SMTP, length: 1276
15:16:34.125259 IP (tos 0x0, ttl 51, id 44848, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x5228 (correct), seq 58390:59666, ack 5596, win 48488, options [nop,nop,TS val 3593926879 ecr 943882843], length 1276: SMTP, length: 1276
15:16:34.125283 IP (tos 0x0, ttl 64, id 65175, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x3aa5), ack 57114, win 65535, options [nop,nop,TS val 943883292 ecr 3593926879], length 0
15:16:34.125317 IP (tos 0x0, ttl 64, id 65176, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x35a9), ack 58390, win 65535, options [nop,nop,TS val 943883292 ecr 3593926879], length 0
15:16:34.125332 IP (tos 0x0, ttl 64, id 65177, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x30ad), ack 59666, win 65535, options [nop,nop,TS val 943883292 ecr 3593926879], length 0
15:16:34.126791 IP (tos 0x0, ttl 51, id 20830, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0xb9c8 (correct), seq 59666:60942, ack 5596, win 48488, options [nop,nop,TS val 3593926879 ecr 943882843], length 1276: SMTP, length: 1276
15:16:34.126826 IP (tos 0x0, ttl 64, id 65178, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x2bb0), ack 60942, win 65535, options [nop,nop,TS val 943883293 ecr 3593926879], length 0
15:16:34.127016 IP (tos 0x0, ttl 51, id 6828, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x12ab (correct), seq 60942:62218, ack 5596, win 48488, options [nop,nop,TS val 3593926879 ecr 943882843], length 1276: SMTP, length: 1276
15:16:34.127033 IP (tos 0x0, ttl 64, id 65179, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x26b3), ack 62218, win 65535, options [nop,nop,TS val 943883294 ecr 3593926879], length 0
15:16:34.127183 IP (tos 0x0, ttl 51, id 41736, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x66e0 (correct), seq 62218:63494, ack 5596, win 48488, options [nop,nop,TS val 3593926879 ecr 943882843], length 1276: SMTP, length: 1276
15:16:34.127183 IP (tos 0x0, ttl 51, id 63330, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0x7560 (correct), seq 63494:64770, ack 5596, win 48488, options [nop,nop,TS val 3593926883 ecr 943882845], length 1276: SMTP, length: 1276
15:16:34.127196 IP (tos 0x0, ttl 64, id 65180, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x21b7), ack 63494, win 65535, options [nop,nop,TS val 943883294 ecr 3593926879], length 0
15:16:34.127219 IP (tos 0x0, ttl 64, id 65181, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x1cb7), ack 64770, win 65535, options [nop,nop,TS val 943883294 ecr 3593926883], length 0
15:16:34.127948 IP (tos 0x0, ttl 51, id 52916, offset 0, flags [none], proto TCP (6), length 1328)
167.89.95.108.24079 > 10.1.3.31.25: Flags [.], cksum 0xfe32 (correct), seq 64770:66046, ack 5596, win 48488, options [nop,nop,TS val 3593926883 ecr 943882845], length 1276: SMTP, length: 1276
15:16:34.128010 IP (tos 0x0, ttl 64, id 65182, offset 0, flags [DF], proto TCP (6), length 52)
10.1.3.31.25 > 167.89.95.108.24079: Flags [.], cksum 0x140c (incorrect -> 0x17ba), ack 66046, win 65535, options [nop,nop,TS val 943883295 ecr 3593926883], length 0
15:21:34.211408 IP (tos 0x0, ttl 64, id 65183, offset 0, flags [DF], proto TCP (6), length 129)
10.1.3.31.25 > 167.89.95.108.24079: Flags [P.], cksum 0x1459 (incorrect -> 0x6fe6), seq 5596:5673, ack 66046, win 65535, options [nop,nop,TS val 944183378 ecr 3593926883], length 77: SMTP, length: 77
15:21:34.212405 IP (tos 0x0, ttl 64, id 65184, offset 0, flags [DF], proto TCP (6), length 76)
10.1.3.31.25 > 167.89.95.108.24079: Flags [FP.], cksum 0x1424 (incorrect -> 0x2c96), seq 5673:5697, ack 66046, win 65535, options [nop,nop,TS val 944183379 ecr 3593926883], length 24: SMTP, length: 24
15:21:34.586082 IP (tos 0x0, ttl 51, id 3157, offset 0, flags [none], proto TCP (6), length 40)
167.89.95.108.24079 > 10.1.3.31.25: Flags [R], cksum 0x8002 (correct), seq 1424713957, win 0, length 0
15:21:34.593224 IP (tos 0x0, ttl 51, id 15635, offset 0, flags [none], proto TCP (6), length 40)
167.89.95.108.24079 > 10.1.3.31.25: Flags [R], cksum 0x8002 (correct), seq 1424713957, win 0, length 0
There’s nothing that really stands out to me, but I don’t really know what I’m looking for.