# /usr/sbin/tcpdump -i ppp0 -vv
tcpdump: listening on ppp0, link-type LINUX_SLL (Linux cooked), capture size 96 bytes
23:47:36.194859 IP (tos 0x0, ttl  64, id 30725, offset 0, flags [DF], proto 6, length: 52) c1.kckk.ru.33501 > kckk.ru.smtp: S [tcp sum ok] 3595833830:3595833830(0) win 5840 <mss 1460,nop,nop,sackOK,nop,wscale 0>
23:47:36.251162 IP (tos 0x0, ttl  64, id 27113, offset 0, flags [DF], proto 17, length: 71) c1.kckk.ru.32786 > kckk.ru.domain: [udp sum ok]  55120+ PTR? 65.151.9.217.in-addr.arpa. (43)
23:47:36.305188 IP (tos 0x0, ttl  64, id 42784, offset 0, flags [DF], proto 6, length: 52) kckk.ru.smtp > c1.kckk.ru.33501: S [tcp sum ok] 638969576:638969576(0) ack 3595833831 win 5840 <mss 1460,nop,nop,sackOK,nop,wscale 0>
23:47:36.305287 IP (tos 0x0, ttl  64, id 30726, offset 0, flags [DF], proto 6, length: 40) c1.kckk.ru.33501 > kckk.ru.smtp: . [tcp sum ok] 1:1(0) ack 1 win 5840
23:47:36.415219 IP (tos 0x0, ttl  64, id 42789, offset 0, flags [DF], proto 17, length: 168) kckk.ru.domain > c1.kckk.ru.32786:  55120* q: PTR? 65.151.9.217.in-addr.arpa. 1/3/1 65.151.9.217.in-addr.arpa.[|domain]
23:47:36.415867 IP (tos 0x0, ttl  64, id 27130, offset 0, flags [DF], proto 17, length: 71) c1.kckk.ru.32786 > kckk.ru.domain: [udp sum ok]  43706+ PTR? 98.151.9.217.in-addr.arpa. (43)
23:47:36.445187 IP (tos 0x0, ttl  64, id 42794, offset 0, flags [DF], proto 6, length: 60) kckk.ru.35191 > c1.kckk.ru.auth: S [tcp sum ok] 645130117:645130117(0) win 5840 <mss 1460,sackOK,timestamp 296927068 0,nop,wscale 0>
23:47:36.445242 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 6, length: 40) c1.kckk.ru.auth > kckk.ru.35191: R [tcp sum ok] 0:0(0) ack 645130118 win 0
23:47:36.535183 IP (tos 0x0, ttl  64, id 42796, offset 0, flags [DF], proto 17, length: 171) kckk.ru.domain > c1.kckk.ru.32786:  43706* q: PTR? 98.151.9.217.in-addr.arpa. 1/3/1 98.151.9.217.in-addr.arpa.[|domain]
23:47:36.645186 IP (tos 0x0, ttl  64, id 42813, offset 0, flags [DF], proto 6, length: 115) kckk.ru.smtp > c1.kckk.ru.33501: P 1:76(75) ack 1 win 5840
23:47:36.645256 IP (tos 0x0, ttl  64, id 30727, offset 0, flags [DF], proto 6, length: 40) c1.kckk.ru.33501 > kckk.ru.smtp: . [tcp sum ok] 1:1(0) ack 76 win 5840
23:47:36.647957 IP (tos 0x0, ttl  64, id 30728, offset 0, flags [DF], proto 6, length: 61) c1.kckk.ru.33501 > kckk.ru.smtp: P [tcp sum ok] 1:22(21) ack 76 win 5840
23:47:36.745150 IP (tos 0x0, ttl  64, id 42816, offset 0, flags [DF], proto 6, length: 40) kckk.ru.smtp > c1.kckk.ru.33501: . [tcp sum ok] 76:76(0) ack 22 win 5840
23:47:36.825195 IP (tos 0x0, ttl  64, id 42823, offset 0, flags [DF], proto 6, length: 215) kckk.ru.smtp > c1.kckk.ru.33501: P 76:251(175) ack 22 win 5840
23:47:36.827303 IP (tos 0x0, ttl  64, id 30729, offset 0, flags [DF], proto 6, length: 78) c1.kckk.ru.33501 > kckk.ru.smtp: P [tcp sum ok] 22:60(38) ack 251 win 6432
23:47:36.935148 IP (tos 0x0, ttl  64, id 42824, offset 0, flags [DF], proto 6, length: 40) kckk.ru.smtp > c1.kckk.ru.33501: . [tcp sum ok] 251:251(0) ack 60 win 5840
23:47:36.985186 IP (tos 0x0, ttl  64, id 42831, offset 0, flags [DF], proto 6, length: 78) kckk.ru.smtp > c1.kckk.ru.33501: P [tcp sum ok] 251:289(38) ack 60 win 5840
23:47:36.986903 IP (tos 0x0, ttl  64, id 30730, offset 0, flags [DF], proto 6, length: 63) c1.kckk.ru.33501 > kckk.ru.smtp: P [tcp sum ok] 60:83(23) ack 289 win 6432
23:47:37.085149 IP (tos 0x0, ttl  64, id 42834, offset 0, flags [DF], proto 6, length: 40) kckk.ru.smtp > c1.kckk.ru.33501: . [tcp sum ok] 289:289(0) ack 83 win 5840
23:47:37.135178 IP (tos 0x0, ttl  64, id 42841, offset 0, flags [DF], proto 6, length: 81) kckk.ru.smtp > c1.kckk.ru.33501: P 289:330(41) ack 83 win 5840
23:47:37.136948 IP (tos 0x0, ttl  64, id 30731, offset 0, flags [DF], proto 6, length: 46) c1.kckk.ru.33501 > kckk.ru.smtp: P [tcp sum ok] 83:89(6) ack 330 win 6432
23:47:37.235159 IP (tos 0x0, ttl  64, id 42842, offset 0, flags [DF], proto 6, length: 40) kckk.ru.smtp > c1.kckk.ru.33501: . [tcp sum ok] 330:330(0) ack 89 win 5840
23:47:37.255216 IP (tos 0x0, ttl  64, id 42843, offset 0, flags [DF], proto 6, length: 90) kckk.ru.smtp > c1.kckk.ru.33501: P 330:380(50) ack 89 win 5840
23:47:37.295175 IP (tos 0x0, ttl  64, id 30732, offset 0, flags [DF], proto 6, length: 40) c1.kckk.ru.33501 > kckk.ru.smtp: . [tcp sum ok] 89:89(0) ack 380 win 6432
23:47:37.342694 IP (tos 0x0, ttl  64, id 30733, offset 0, flags [DF], proto 6, length: 1500) c1.kckk.ru.33501 > kckk.ru.smtp: . 89:1549(1460) ack 380 win 6432
23:47:37.343499 IP (tos 0x0, ttl  64, id 30734, offset 0, flags [DF], proto 6, length: 1500) c1.kckk.ru.33501 > kckk.ru.smtp: . 1549:3009(1460) ack 380 win 6432
23:47:37.635177 IP (tos 0x0, ttl  64, id 30735, offset 0, flags [DF], proto 6, length: 1500) c1.kckk.ru.33501 > kckk.ru.smtp: . 89:1549(1460) ack 380 win 6432
23:47:37.765151 IP (tos 0x0, ttl  64, id 42848, offset 0, flags [DF], proto 6, length: 40) kckk.ru.smtp > c1.kckk.ru.33501: . [tcp sum ok] 380:380(0) ack 1549 win 8760
23:47:37.765225 IP (tos 0x0, ttl  64, id 30736, offset 0, flags [DF], proto 6, length: 1500) c1.kckk.ru.33501 > kckk.ru.smtp: . 1549:3009(1460) ack 380 win 6432
23:47:37.765532 IP (tos 0x0, ttl  64, id 30737, offset 0, flags [DF], proto 6, length: 1500) c1.kckk.ru.33501 > kckk.ru.smtp: . 3009:4469(1460) ack 380 win 6432
23:47:38.365166 IP (tos 0x0, ttl  64, id 30738, offset 0, flags [DF], proto 6, length: 1500) c1.kckk.ru.33501 > kckk.ru.smtp: . 1549:3009(1460) ack 380 win 6432
23:47:39.565169 IP (tos 0x0, ttl  64, id 30739, offset 0, flags [DF], proto 6, length: 1500) c1.kckk.ru.33501 > kckk.ru.smtp: . 1549:3009(1460) ack 380 win 6432
23:47:41.965167 IP (tos 0x0, ttl  64, id 30740, offset 0, flags [DF], proto 6, length: 1500) c1.kckk.ru.33501 > kckk.ru.smtp: . 1549:3009(1460) ack 380 win 6432
23:47:46.765167 IP (tos 0x0, ttl  64, id 30741, offset 0, flags [DF], proto 6, length: 1500) c1.kckk.ru.33501 > kckk.ru.smtp: . 1549:3009(1460) ack 380 win 6432
23:47:56.365185 IP (tos 0x0, ttl  64, id 30742, offset 0, flags [DF], proto 6, length: 1500) c1.kckk.ru.33501 > kckk.ru.smtp: . 1549:3009(1460) ack 380 win 6432
23:48:15.565171 IP (tos 0x0, ttl  64, id 30743, offset 0, flags [DF], proto 6, length: 1500) c1.kckk.ru.33501 > kckk.ru.smtp: . 1549:3009(1460) ack 380 win 6432
23:48:53.965167 IP (tos 0x0, ttl  64, id 30744, offset 0, flags [DF], proto 6, length: 1500) c1.kckk.ru.33501 > kckk.ru.smtp: . 1549:3009(1460) ack 380 win 6432
23:48:54.435150 IP (tos 0x0, ttl  64, id 43845, offset 0, flags [DF], proto 6, length: 40) kckk.ru.smtp > c1.kckk.ru.33501: . [tcp sum ok] 380:380(0) ack 3009 win 11680
23:48:54.435226 IP (tos 0x0, ttl  64, id 30745, offset 0, flags [DF], proto 6, length: 1500) c1.kckk.ru.33501 > kckk.ru.smtp: . 3009:4469(1460) ack 380 win 6432
23:48:54.435889 IP (tos 0x0, ttl  64, id 30746, offset 0, flags [DF], proto 6, length: 1500) c1.kckk.ru.33501 > kckk.ru.smtp: . 4469:5929(1460) ack 380 win 6432
23:48:54.935148 IP (tos 0x0, ttl  64, id 43847, offset 0, flags [DF], proto 6, length: 40) kckk.ru.smtp > c1.kckk.ru.33501: . [tcp sum ok] 380:380(0) ack 4469 win 14600
23:48:54.935231 IP (tos 0x0, ttl  64, id 30747, offset 0, flags [DF], proto 6, length: 1500) c1.kckk.ru.33501 > kckk.ru.smtp: P 5929:7389(1460) ack 380 win 6432
23:48:54.935975 IP (tos 0x0, ttl  64, id 30748, offset 0, flags [DF], proto 6, length: 1500) c1.kckk.ru.33501 > kckk.ru.smtp: . 7389:8849(1460) ack 380 win 6432