From: Mark Martinec (Mark.Martinec+)
Date: Fri Mar 07 2008 - 08:38:04 EST
> finally I have tcpdump for the problem I described some time ago.
A binary capture is easier to analyze (tcpdump -s 0 -w d.dump ...).
> You have written that it looks like MUA sends <CR><LF>.<CR><LF>. But I
> can not find such byte sequence (0D 0A 2E 0D 0A) in TCP dump.
You haven't looked closely enough. The CRLF is at the end of a packet,
and the remaining .CRLF is at the beginning of the next one.
This is a perfectly valid SMTP end of data indicator.