[root@mx exim]# tcpdump -npi eth0 | grep *IP.133.164
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
10:19:02.398763 IP 62.149.2.52.domain > *M.Y.I.P*.58266: 29096 1/3/4 A *IP.133.164.36 (172)
10:19:02.403391 IP 62.149.2.52.domain > *M.Y.I.P*.56497: 50166 1/3/4 A *IP.133.164.24 (173)
10:19:02.406850 IP *M.Y.I.P*.35415 > *IP.133.164.36.smtp: Flags [S], seq 3041682849, win 14600, options [mss 1460,sackOK,TS val 2322027733 ecr 0,nop,wscale 7], length 0
10:19:02.407655 IP *IP.133.164.36.smtp > *M.Y.I.P*.35415: Flags [S.], seq 2238115177, ack 3041682850, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 3812794933 ecr 2322027733], length 0
10:19:02.407727 IP *M.Y.I.P*.35415 > *IP.133.164.36.smtp: Flags [.], ack 1, win 115, options [nop,nop,TS val 2322027733 ecr 3812794933], length 0
10:19:02.408953 IP *IP.133.164.36.52467 > *M.Y.I.P*.auth: Flags [S], seq 894679888, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 2662561801 ecr 0], length 0
10:19:05.408183 IP *IP.133.164.36.52467 > *M.Y.I.P*.auth: Flags [S], seq 894679888, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 2662564801 ecr 0], length 0
10:19:07.524629 IP *IP.133.164.36.smtp > *M.Y.I.P*.35415: Flags [P.], seq 1:75, ack 1, win 1040, options [nop,nop,TS val 3812800049 ecr 2322027733], length 74
10:19:07.524702 IP *M.Y.I.P*.35415 > *IP.133.164.36.smtp: Flags [.], ack 75, win 115, options [nop,nop,TS val 2322032851 ecr 3812800049], length 0
10:19:07.524902 IP *M.Y.I.P*.35415 > *IP.133.164.36.smtp: Flags [P.], seq 1:21, ack 75, win 115, options [nop,nop,TS val 2322032851 ecr 3812800049], length 20
10:19:07.527600 IP *IP.133.164.36.smtp > *M.Y.I.P*.35415: Flags [P.], seq 75:208, ack 21, win 1040, options [nop,nop,TS val 3812800051 ecr 2322032851], length 133
10:19:07.527746 IP *M.Y.I.P*.35415 > *IP.133.164.36.smtp: Flags [P.], seq 21:31, ack 208, win 123, options [nop,nop,TS val 2322032854 ecr 3812800051], length 10
10:19:07.592592 IP *IP.133.164.36.smtp > *M.Y.I.P*.35415: Flags [P.], seq 208:226, ack 31, win 1040, options [nop,nop,TS val 3812800118 ecr 2322032854], length 18
10:19:07.600511 IP *M.Y.I.P*.35415 > *IP.133.164.36.smtp: Flags [P.], seq 31:280, ack 226, win 123, options [nop,nop,TS val 2322032926 ecr 3812800118], length 249
10:19:07.604623 IP *IP.133.164.36.smtp > *M.Y.I.P*.35415: Flags [.], seq 226:3122, ack 280, win 1040, options [nop,nop,TS val 3812800127 ecr 2322032926], length 2896
10:19:07.604705 IP *M.Y.I.P*.35415 > *IP.133.164.36.smtp: Flags [.], ack 3122, win 146, options [nop,nop,TS val 2322032931 ecr 3812800127], length 0
10:19:07.606934 IP *IP.133.164.36.smtp > *M.Y.I.P*.35415: Flags [P.], seq 3122:4322, ack 280, win 1040, options [nop,nop,TS val 3812800127 ecr 2322032926], length 1200
10:19:07.626104 IP *IP.133.164.36.smtp > *M.Y.I.P*.35415: Flags [P.], seq 4322:6347, ack 280, win 1040, options [nop,nop,TS val 3812800148 ecr 2322032931], length 2025
10:19:07.626180 IP *M.Y.I.P*.35415 > *IP.133.164.36.smtp: Flags [.], ack 6347, win 191, options [nop,nop,TS val 2322032952 ecr 3812800127], length 0
10:19:07.721042 IP *M.Y.I.P*.35415 > *IP.133.164.36.smtp: Flags [P.], seq 280:606, ack 6347, win 191, options [nop,nop,TS val 2322033047 ecr 3812800127], length 326
10:19:07.786765 IP *IP.133.164.36.smtp > *M.Y.I.P*.35415: Flags [P.], seq 6347:6581, ack 606, win 1040, options [nop,nop,TS val 3812800310 ecr 2322033047], length 234
10:19:07.787363 IP *M.Y.I.P*.35415 > *IP.133.164.36.smtp: Flags [P.], seq 606:659, ack 6581, win *IP, options [nop,nop,TS val 2322033113 ecr 3812800310], length 53
10:19:07.790069 IP *IP.133.164.36.smtp > *M.Y.I.P*.35415: Flags [P.], seq 6581:6799, ack 659, win 1040, options [nop,nop,TS val 3812800314 ecr 2322033113], length 218
10:19:07.790427 IP *M.Y.I.P*.35415 > *IP.133.164.36.smtp: Flags [P.], seq 659:776, ack 6799, win 236, options [nop,nop,TS val 2322033116 ecr 3812800314], length 117
10:19:07.793045 IP *IP.133.164.36.smtp > *M.Y.I.P*.35415: Flags [P.], seq 6799:6873, ack 776, win 1040, options [nop,nop,TS val 3812800317 ecr 2322033116], length 74
10:19:07.832567 IP *M.Y.I.P*.35415 > *IP.133.164.36.smtp: Flags [.], ack 6873, win 236, options [nop,nop,TS val 2322033159 ecr 3812800317], length 0
10:19:08.075792 IP *IP.133.164.36.47361 > *M.Y.I.P*.smtp: Flags [S], seq 941388136, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 2662567468 ecr 0], length 0
10:19:08.075861 IP *M.Y.I.P*.smtp > *IP.133.164.36.47361: Flags [S.], seq 4249510718, ack 941388137, win 14480, options [mss 1460,sackOK,TS val 2322033402 ecr 2662567468,nop,wscale 7], length 0
10:19:08.076516 IP *IP.133.164.36.47361 > *M.Y.I.P*.smtp: Flags [.], ack 1, win 1040, options [nop,nop,TS val 2662567469 ecr 2322033402], length 0
10:19:08.077999 IP *M.Y.I.P*.55536 > *IP.133.164.36.auth: Flags [S], seq 3490880559, win 14600, options [mss 1460,sackOK,TS val 2322033403 ecr 0,nop,wscale 7], length 0
10:19:08.078915 IP *IP.133.164.36.auth > *M.Y.I.P*.55536: Flags [S.], seq 1707566698, ack 3490880560, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 2555041711 ecr 2322033403], length 0
10:19:08.078973 IP *M.Y.I.P*.55536 > *IP.133.164.36.auth: Flags [.], ack 1, win 115, options [nop,nop,TS val 2322033405 ecr 2555041711], length 0
10:19:08.079092 IP *M.Y.I.P*.55536 > *IP.133.164.36.auth: Flags [P.], seq 1:13, ack 1, win 115, options [nop,nop,TS val 2322033405 ecr 2555041711], length 12
10:19:08.080975 IP *IP.133.164.36.auth > *M.Y.I.P*.55536: Flags [FP.], seq 1:43, ack 13, win 1040, options [nop,nop,TS val 2555041713 ecr 2322033405], length 42
10:19:08.081170 IP *M.Y.I.P*.55536 > *IP.133.164.36.auth: Flags [F.], seq 13, ack 44, win 115, options [nop,nop,TS val 2322033407 ecr 2555041713], length 0
10:19:08.081886 IP *IP.133.164.36.auth > *M.Y.I.P*.55536: Flags [.], ack 14, win 1040, options [nop,nop,TS val 2555041714 ecr 2322033407], length 0
10:19:08.090263 IP 62.149.2.52.domain > *M.Y.I.P*.60229: 9485 1/3/4 A *IP.133.164.36 (184)
10:19:08.091560 IP *M.Y.I.P*.smtp > *IP.133.164.36.47361: Flags [P.], seq 1:68, ack 1, win 114, options [nop,nop,TS val 2322033417 ecr 2662567469], length 67
10:19:08.092447 IP *IP.133.164.36.47361 > *M.Y.I.P*.smtp: Flags [P.], seq 1:26, ack 68, win 1040, options [nop,nop,TS val 2662567485 ecr 2322033417], length 25
10:19:08.092515 IP *M.Y.I.P*.smtp > *IP.133.164.36.47361: Flags [.], ack 26, win 114, options [nop,nop,TS val 2322033418 ecr 2662567485], length 0
10:19:08.092681 IP *M.Y.I.P*.smtp > *IP.133.164.36.47361: Flags [P.], seq 68:141, ack 26, win 114, options [nop,nop,TS val 2322033418 ecr 2662567485], length 73
10:19:08.093512 IP *IP.133.164.36.47361 > *M.Y.I.P*.smtp: Flags [P.], seq 26:40, ack 141, win 1040, options [nop,nop,TS val 2662567486 ecr 2322033418], length 14
10:19:08.093832 IP *M.Y.I.P*.smtp > *IP.133.164.36.47361: Flags [P.], seq 141:149, ack 40, win 114, options [nop,nop,TS val 2322033420 ecr 2662567486], length 8
10:19:08.096210 IP *IP.133.164.36.47361 > *M.Y.I.P*.smtp: Flags [P.], seq 40:100, ack 149, win 1040, options [nop,nop,TS val 2662567487 ecr 2322033420], length 60
10:19:08.135561 IP *M.Y.I.P*.smtp > *IP.133.164.36.47361: Flags [.], ack 100, win 114, options [nop,nop,TS val 2322033462 ecr 2662567487], length 0
10:19:28.094914 IP *IP.133.164.36.47361 > *M.Y.I.P*.smtp: Flags [F.], seq 100, ack 149, win 1040, options [nop,nop,TS val 2662587488 ecr 2322033462], length 0
10:19:28.096946 IP *IP.133.164.36.smtp > *M.Y.I.P*.35415: Flags [P.], seq 6873:6995, ack 776, win 1040, options [nop,nop,TS val 3812820621 ecr 2322033159], length 122
10:19:28.096994 IP *M.Y.I.P*.35415 > *IP.133.164.36.smtp: Flags [.], ack 6995, win 236, options [nop,nop,TS val 2322053423 ecr 3812820621], length 0
10:19:28.097008 IP *IP.133.164.36.smtp > *M.Y.I.P*.35415: Flags [P.], seq 6995:7117, ack 776, win 1040, options [nop,nop,TS val 3812820621 ecr 2322033159], length 122
10:19:28.097031 IP *M.Y.I.P*.35415 > *IP.133.164.36.smtp: Flags [.], ack 7117, win 236, options [nop,nop,TS val 2322053423 ecr 3812820621], length 0
10:19:28.097048 IP *IP.133.164.36.smtp > *M.Y.I.P*.35415: Flags [P.], seq 7117:7239, ack 776, win 1040, options [nop,nop,TS val 3812820621 ecr 2322033159], length 122
10:19:28.097070 IP *M.Y.I.P*.35415 > *IP.133.164.36.smtp: Flags [.], ack 7239, win 236, options [nop,nop,TS val 2322053423 ecr 3812820621], length 0
10:19:28.097081 IP *IP.133.164.36.smtp > *M.Y.I.P*.35415: Flags [P.], seq 7239:7345, ack 776, win 1040, options [nop,nop,TS val 3812820621 ecr 2322033159], length 106
10:19:28.097102 IP *M.Y.I.P*.35415 > *IP.133.164.36.smtp: Flags [.], ack 7345, win 236, options [nop,nop,TS val 2322053423 ecr 3812820621], length 0
10:19:28.098298 IP *M.Y.I.P*.35415 > *IP.133.164.36.smtp: Flags [P.], seq 776:813, ack 7345, win 236, options [nop,nop,TS val 2322053424 ecr 3812820621], length 37
10:19:28.098401 IP *M.Y.I.P*.35415 > *IP.133.164.36.smtp: Flags [P.], seq 813:850, ack 7345, win 236, options [nop,nop,TS val 2322053424 ecr 3812820621], length 37
10:19:28.098756 IP *M.Y.I.P*.35415 > *IP.133.164.36.smtp: Flags [F.], seq 850, ack 7345, win 236, options [nop,nop,TS val 2322053425 ecr 3812820621], length 0
10:19:28.099292 IP *IP.133.164.36.smtp > *M.Y.I.P*.35415: Flags [P.], seq 7345:7451, ack 813, win 1040, options [nop,nop,TS val 3812820625 ecr 2322053424], length 106
10:19:28.099362 IP *M.Y.I.P*.35415 > *IP.133.164.36.smtp: Flags [R], seq 3041683662, win 0, length 0
10:19:28.099376 IP *IP.133.164.36.smtp > *M.Y.I.P*.35415: Flags [P.], seq 7451:7488, ack 813, win 1040, options [nop,nop,TS val 3812820625 ecr 2322053424], length 37
10:19:28.099397 IP *M.Y.I.P*.35415 > *IP.133.164.36.smtp: Flags [R], seq 3041683662, win 0, length 0
10:19:28.099407 IP *IP.133.164.36.smtp > *M.Y.I.P*.35415: Flags [F.], seq 7488, ack 850, win 1040, options [nop,nop,TS val 3812820625 ecr 2322053424], length 0
10:19:28.099426 IP *M.Y.I.P*.35415 > *IP.133.164.36.smtp: Flags [R], seq 3041683699, win 0, length 0
10:19:28.099507 IP *IP.133.164.36.smtp > *M.Y.I.P*.35415: Flags [F.], seq 7488, ack 851, win 1040, options [nop,nop,TS val 3812820625 ecr 2322053425], length 0
10:19:28.099577 IP *M.Y.I.P*.35415 > *IP.133.164.36.smtp: Flags [R], seq 3041683700, win 0, length 0
10:19:28.100164 IP *M.Y.I.P*.47049 > *IP.133.164.24.smtp: Flags [S], seq 3881795676, win 14600, options [mss 1460,sackOK,TS val 2322053426 ecr 0,nop,wscale 7], length 0
10:19:28.100941 IP *IP.133.164.24.smtp > *M.Y.I.P*.47049: Flags [S.], seq 2845972199, ack 3881795677, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 3721100344 ecr 2322053426], length 0
10:19:28.101001 IP *M.Y.I.P*.47049 > *IP.133.164.24.smtp: Flags [.], ack 1, win 115, options [nop,nop,TS val 2322053427 ecr 3721100344], length 0
10:19:28.10*IP8 IP *IP.133.164.24.53395 > *M.Y.I.P*.auth: Flags [S], seq 3638924649, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 3115527927 ecr 0], length 0
10:19:28.134560 IP *M.Y.I.P*.smtp > *IP.133.164.36.47361: Flags [.], ack 101, win 114, options [nop,nop,TS val 2322053461 ecr 2662587488], length 0
10:19:28.283281 IP *M.Y.I.P*.smtp > *IP.133.164.36.47361: Flags [P.], seq 149:174, ack 101, win 114, options [nop,nop,TS val 2322053609 ecr 2662587488], length 25
10:19:28.283378 IP *M.Y.I.P*.smtp > *IP.133.164.36.47361: Flags [P.], seq 174:215, ack 101, win 114, options [nop,nop,TS val 2322053609 ecr 2662587488], length 41
10:19:28.284028 IP *IP.133.164.36.47361 > *M.Y.I.P*.smtp: Flags [R], seq 941388237, win 0, length 0
10:19:28.284122 IP *IP.133.164.36.47361 > *M.Y.I.P*.smtp: Flags [R], seq 941388237, win 0, length 0
10:19:31.101341 IP *IP.133.164.24.53395 > *M.Y.I.P*.auth: Flags [S], seq 3638924649, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 3115530927 ecr 0], length 0
10:19:33.105244 IP *IP.133.164.24.smtp > *M.Y.I.P*.47049: Flags [P.], seq 1:74, ack 1, win 1040, options [nop,nop,TS val 3721105347 ecr 2322053427], length 73
10:19:33.105319 IP *M.Y.I.P*.47049 > *IP.133.164.24.smtp: Flags [.], ack 74, win 115, options [nop,nop,TS val 2322058431 ecr 3721105347], length 0
10:19:33.105409 IP *M.Y.I.P*.47049 > *IP.133.164.24.smtp: Flags [P.], seq 1:21, ack 74, win 115, options [nop,nop,TS val 2322058431 ecr 3721105347], length 20
10:19:33.107881 IP *IP.133.164.24.smtp > *M.Y.I.P*.47049: Flags [P.], seq 74:208, ack 21, win 1040, options [nop,nop,TS val 3721105349 ecr 2322058431], length 134
10:19:33.108019 IP *M.Y.I.P*.47049 > *IP.133.164.24.smtp: Flags [P.], seq 21:31, ack 208, win 123, options [nop,nop,TS val 2322058434 ecr 3721105349], length 10
10:19:33.171616 IP *IP.133.164.24.smtp > *M.Y.I.P*.47049: Flags [P.], seq 208:226, ack 31, win 1040, options [nop,nop,TS val 3721105415 ecr 2322058434], length 18
10:19:33.172220 IP *M.Y.I.P*.47049 > *IP.133.164.24.smtp: Flags [P.], seq 31:280, ack 226, win 123, options [nop,nop,TS val 2322058498 ecr 3721105415], length 249
10:19:33.180318 IP *IP.133.164.24.smtp > *M.Y.I.P*.47049: Flags [P.], seq 226:*IP7, ack 280, win 1040, options [nop,nop,TS val 3721105421 ecr 2322058498], length 1911
10:19:33.180398 IP *M.Y.I.P*.47049 > *IP.133.164.24.smtp: Flags [.], ack *IP7, win 146, options [nop,nop,TS val 2322058506 ecr 3721105421], length 0
10:19:33.273621 IP *M.Y.I.P*.47049 > *IP.133.164.24.smtp: Flags [P.], seq 280:606, ack *IP7, win 146, options [nop,nop,TS val 2322058599 ecr 3721105421], length 326
10:19:33.339720 IP *IP.133.164.24.smtp > *M.Y.I.P*.47049: Flags [P.], seq *IP7:2371, ack 606, win 1040, options [nop,nop,TS val 3721105581 ecr 2322058599], length 234
10:19:33.340187 IP *M.Y.I.P*.47049 > *IP.133.164.24.smtp: Flags [P.], seq 606:659, ack 2371, win 168, options [nop,nop,TS val 2322058666 ecr 3721105581], length 53
10:19:33.343036 IP *IP.133.164.24.smtp > *M.Y.I.P*.47049: Flags [P.], seq 2371:2557, ack 659, win 1040, options [nop,nop,TS val 3721105585 ecr 2322058666], length 186
10:19:33.343310 IP *M.Y.I.P*.47049 > *IP.133.164.24.smtp: Flags [P.], seq 659:776, ack 2557, win 191, options [nop,nop,TS val 2322058669 ecr 3721105585], length 117
10:19:33.345969 IP *IP.133.164.24.smtp > *M.Y.I.P*.47049: Flags [P.], seq 2557:2631, ack 776, win 1040, options [nop,nop,TS val 3721105588 ecr 2322058669], length 74
10:19:33.346011 IP *IP.133.164.24.31325 > *M.Y.I.P*.smtp: Flags [S], seq 227391174, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 3115533171 ecr 0], length 0
10:19:33.346065 IP *M.Y.I.P*.smtp > *IP.133.164.24.31325: Flags [S.], seq 2488825471, ack 227391175, win 14480, options [mss 1460,sackOK,TS val 2322058672 ecr 3115533171,nop,wscale 7], length 0
10:19:33.346830 IP *IP.133.164.24.31325 > *M.Y.I.P*.smtp: Flags [.], ack 1, win 1040, options [nop,nop,TS val 3115533173 ecr 2322058672], length 0
10:19:33.348296 IP *M.Y.I.P*.47537 > *IP.133.164.24.auth: Flags [S], seq 77390670, win 14600, options [mss 1460,sackOK,TS val 2322058674 ecr 0,nop,wscale 7], length 0
10:19:33.349116 IP *IP.133.164.24 > *M.Y.I.P*: ICMP *IP.133.164.24 tcp port auth unreachable, length 68
10:19:33.357915 IP 62.149.2.52.domain > *M.Y.I.P*.33356: 56008 1/3/4 A *IP.133.164.24 (173)
10:19:33.359261 IP *M.Y.I.P*.smtp > *IP.133.164.24.31325: Flags [P.], seq 1:68, ack 1, win 114, options [nop,nop,TS val 2322058685 ecr 3115533173], length 67
10:19:33.360113 IP *IP.133.164.24.31325 > *M.Y.I.P*.smtp: Flags [P.], seq 1:27, ack 68, win 1040, options [nop,nop,TS val 3115533185 ecr 2322058685], length 26
10:19:33.360182 IP *M.Y.I.P*.smtp > *IP.133.164.24.31325: Flags [.], ack 27, win 114, options [nop,nop,TS val 2322058686 ecr 3115533185], length 0
10:19:33.360349 IP *M.Y.I.P*.smtp > *IP.133.164.24.31325: Flags [P.], seq 68:214, ack 27, win 114, options [nop,nop,TS val 2322058686 ecr 3115533185], length 146
10:19:33.361241 IP *IP.133.164.24.31325 > *M.Y.I.P*.smtp: Flags [P.], seq 27:41, ack 214, win 1040, options [nop,nop,TS val 3115533186 ecr 2322058686], length 14
10:19:33.361537 IP *M.Y.I.P*.smtp > *IP.133.164.24.31325: Flags [P.], seq 214:222, ack 41, win 114, options [nop,nop,TS val 2322058687 ecr 3115533186], length 8
10:19:33.365594 IP *IP.133.164.24.31325 > *M.Y.I.P*.smtp: Flags [P.], seq 41:102, ack 222, win 1040, options [nop,nop,TS val 3115533190 ecr 2322058687], length 61
10:19:33.385560 IP *M.Y.I.P*.47049 > *IP.133.164.24.smtp: Flags [.], ack 2631, win 191, options [nop,nop,TS val 2322058712 ecr 3721105588], length 0
10:19:33.405563 IP *M.Y.I.P*.smtp > *IP.133.164.24.31325: Flags [.], ack 102, win 114, options [nop,nop,TS val 2322058732 ecr 3115533190], length 0
10:19:53.365087 IP *IP.133.164.24.31325 > *M.Y.I.P*.smtp: Flags [F.], seq 102, ack 222, win 1040, options [nop,nop,TS val 3115553191 ecr 2322058732], length 0
10:19:53.366848 IP *IP.133.164.24.smtp > *M.Y.I.P*.47049: Flags [P.], seq 2631:2753, ack 776, win 1040, options [nop,nop,TS val 3721125609 ecr 2322058712], length 122
10:19:53.366897 IP *M.Y.I.P*.47049 > *IP.133.164.24.smtp: Flags [.], ack 2753, win 191, options [nop,nop,TS val 2322078693 ecr 3721125609], length 0
10:19:53.366913 IP *IP.133.164.24.smtp > *M.Y.I.P*.47049: Flags [P.], seq 2753:2875, ack 776, win 1040, options [nop,nop,TS val 3721125609 ecr 2322058712], length 122
10:19:53.366936 IP *M.Y.I.P*.47049 > *IP.133.164.24.smtp: Flags [.], ack 2875, win 191, options [nop,nop,TS val 2322078693 ecr 3721125609], length 0
10:19:53.366947 IP *IP.133.164.24.smtp > *M.Y.I.P*.47049: Flags [P.], seq 2875:2997, ack 776, win 1040, options [nop,nop,TS val 3721125609 ecr 2322058712], length 122
10:19:53.366968 IP *M.Y.I.P*.47049 > *IP.133.164.24.smtp: Flags [.], ack 2997, win 191, options [nop,nop,TS val 2322078693 ecr 3721125609], length 0
10:19:53.366979 IP *IP.133.164.24.smtp > *M.Y.I.P*.47049: Flags [P.], seq 2997:3103, ack 776, win 1040, options [nop,nop,TS val 3721125609 ecr 2322058712], length 106
10:19:53.366999 IP *M.Y.I.P*.47049 > *IP.133.164.24.smtp: Flags [.], ack 3103, win 191, options [nop,nop,TS val 2322078693 ecr 3721125609], length 0
10:19:53.367554 IP *M.Y.I.P*.47049 > *IP.133.164.24.smtp: Flags [P.], seq 776:813, ack 3103, win 191, options [nop,nop,TS val 2322078693 ecr 3721125609], length 37
10:19:53.367601 IP *M.Y.I.P*.47049 > *IP.133.164.24.smtp: Flags [P.], seq 813:850, ack 3103, win 191, options [nop,nop,TS val 2322078693 ecr 3721125609], length 37
10:19:53.367661 IP *M.Y.I.P*.47049 > *IP.133.164.24.smtp: Flags [F.], seq 850, ack 3103, win 191, options [nop,nop,TS val 2322078693 ecr 3721125609], length 0
10:19:53.368504 IP *IP.133.164.24.smtp > *M.Y.I.P*.47049: Flags [P.], seq 3103:3225, ack 813, win 1040, options [nop,nop,TS val 3721125612 ecr 2322078693], length 122
10:19:53.368572 IP *M.Y.I.P*.47049 > *IP.133.164.24.smtp: Flags [R], seq 3881796489, win 0, length 0
10:19:53.368586 IP *IP.133.164.24.smtp > *M.Y.I.P*.47049: Flags [P.], seq 3225:3262, ack 813, win 1040, options [nop,nop,TS val 3721125612 ecr 2322078693], length 37
10:19:53.368606 IP *M.Y.I.P*.47049 > *IP.133.164.24.smtp: Flags [R], seq 3881796489, win 0, length 0
10:19:53.368617 IP *IP.133.164.24.smtp > *M.Y.I.P*.47049: Flags [.], ack 851, win 1040, options [nop,nop,TS val 3721125612 ecr 2322078693], length 0
10:19:53.368635 IP *M.Y.I.P*.47049 > *IP.133.164.24.smtp: Flags [R], seq 3881796527, win 0, length 0
10:19:53.368646 IP *IP.133.164.24.smtp > *M.Y.I.P*.47049: Flags [F.], seq 3262, ack 851, win 1040, options [nop,nop,TS val 3721125612 ecr 2322078693], length 0
10:19:53.368664 IP *M.Y.I.P*.47049 > *IP.133.164.24.smtp: Flags [R], seq 3881796527, win 0, length 0
10:19:53.404815 IP *M.Y.I.P*.smtp > *IP.133.164.24.31325: Flags [.], ack 103, win 114, options [nop,nop,TS val 2322078731 ecr 3115553191], length 0
10:19:53.700013 IP *M.Y.I.P*.smtp > *IP.133.164.24.31325: Flags [P.], seq 222:247, ack 103, win 114, options [nop,nop,TS val 2322079026 ecr 3115553191], length 25
10:19:53.700113 IP *M.Y.I.P*.smtp > *IP.133.164.24.31325: Flags [P.], seq 247:288, ack 103, win 114, options [nop,nop,TS val 2322079026 ecr 3115553191], length 41
10:19:53.700801 IP *IP.133.164.24.31325 > *M.Y.I.P*.smtp: Flags [R], seq 227391277, win 0, length 0
10:19:53.700856 IP *IP.133.164.24.31325 > *M.Y.I.P*.smtp: Flags [R], seq 227391277, win 0, length 0