in reply to smtp trace

http://www.wireshark.org/