Figure 2: Excerpt from SMTP exchange

mymail# snoop -i out.smtp -x 54 host nu698 and port smtp 

[...output deleted...]

 7   0.06134 mymail -> nu698 SMTP R port=4801 250 <snoopy@mymail.m

           0: 3235 3020 3c73 6e6f 6f70 7940 6d79 6d61    250 <snoopy@ichi
          16: 696c 2e6d 7964 6f6d 2e63 6f6d 3e2e 2e2e    ps.mydom.com>...
          32: 2052 6563 6970 6965 6e74 206f 6b0d 0a      Recipient ok..

  8   0.06436 mymail -> nu698 SMTP R port=4801 550 <a@mymail.mydom.

           0: 3535 3020 3c61 406d 7964 6169 6c2e 6d79    550 <a@mymail.my
          16: 646f 6d2e 636f 6d3e 2e2e 2e20 5573 6572    dom.com>... User
          32: 2075 6e6b 6e6f 776e 0d0a                    unknown..

  9   0.05571 mymail -> nu698 SMTP R port=4801 221 mymail-hme01.intel.com

           0: 3232 3120 6d79 6d61 696c 2d68 6d65 3031    221 mymail-hme01
          16: 2e6d 7964 6f6d 2e63 6f6d 2063 6c6f 7369    .mydom.com closi
          32: 6e67 2063 6f6e 6e65 6374 696f 6e0d 0a      ng connection..