Cover V08, I09
Article
Figure 1
Figure 2
Figure 3

sep99.tar


Figure 3: Output from POP session

mymail# snoop -x 54 -t a host nw1112 and port pop

[...output deleted...]

           0: 2b4f 4b20 5573 6572 206e 616d 6520 6163    +OK User name accepted
          16: 6365 7074 6564 2c20 7061 7373 776f 7264    password
          32: 2070 6c65 6173 650d 0a                     please..

 19 15:38:25.10736 nw1112 -> mymail TCP D=110 S=3615     Ack=2246089611 Seq=877413628 Len=15 Win=8661

           0: 5041 5353 2058 5858 5858 5858 580d 0a      PASS XXXXXXXX..

 20 15:38:25.15094 mymail -> nw1112 TCP D=3615 S=110     Ack=877413643 Seq=2246089611 Len=0 Win=64240

 21 15:38:48.31777 mymail -> nw1112 TCP D=3615 S=110     Ack=877413643 Seq=2246089611 Len=32 Win=64240

           0: 2b4f 4b20 4d61 696c 626f 7820 6f70 656e    +OK Mailbox open
          16: 2c20 3938 3320 6d65 7373 6167 6573 0d0a    , 983 messages..