Side by side comparison of SMTP mail server logs

This web page shows two portions of the log from one of Hypertouch's SMTP servers.
Annotated versions of the sample SMTP session from the mail server's log and from the sender's point of view may be found here:

Original session from spammer

Sample session

The left column shows the log of the receipt an unsolicited commercial email (UCE) coming in to Hypertouch from the spammer's machine (ip address = 209.162.104.65). (the raw text of the Apr 28, 1999 spammers's emails may be found here) The right column shows the log of a sample email that was sent to demonstrate that Notice of Hypertouch's email policy and warnings about Calf Bus Sect 17538 are sent during every session. That line of the log is highlighted on this page in bold font. The sample email was sent to Hypertouch manually from another machine (ip address = 36.37.0.13).

21:30:41 5 SMTP-509() Stream Created
21:30:41 5 SMTP(509) Resolver Created
21:30:41 4 SMTP Line 509 created for answering
21:30:41 4 SMTP-509() Got connection from [209.162.104.65:1957]
21:30:41 4 SMTP(tcp) Connection accepted from [209.162.104.65:1957], seq=359, 6/7
21:30:41 4 SMTP-509([209.162.104.65]) Sending 220-Stalker Internet Mail Server V.1.8b3 is ready.\r\n
220 ESMTP is spoken here. You are welcome No uns

21:30:41 5 SMTP-509([209.162.104.65]) OT 153 of 153 bytes sent, Flags=0
21:30:41 5 SMTP-509([209.162.104.65]) *Status=22
21:30:43 5 SMTP-509([209.162.104.65]) Received 13 bytes
21:30:43 4 SMTP-509([209.162.104.65]) Input Line: HELO desk98\r
21:30:43 5 SMTP-509([209.162.104.65]) *Status=21
21:30:43 4 SMTP-509(desk98) Looking for desk98
21:30:43 3 SMTP-509(desk98) Failed to verify. Real address is [209.162.104.65:1957]
21:30:43 4 SMTP-509(desk98) Sending 250 209.31.44.214 cannot verify desk98\r\n
21:30:43 5 SMTP-509(desk98) OT 40 of 40 bytes sent, Flags=0
21:30:43 5 SMTP-509([209.162.104.65]) *Status=22
21:30:45 5 SMTP-509([209.162.104.65]) Received 36 bytes
21:30:45 4 SMTP-509([209.162.104.65]) Input Line: MAIL FROM:<emailplus@321media.com>\r
21:30:45 5 SMTP-509([209.162.104.65]) *Status=25
21:30:45 5 SMTP-509([209.162.104.65]) *Status=26
21:30:45 4 SMTP-509([209.162.104.65]) Sending 250 <emailplus@321media.com> sender accepted\r\n
21:30:45 5 SMTP-509([209.162.104.65]) OT 46 of 46 bytes sent, Flags=0
21:30:45 5 SMTP-509([209.162.104.65]) *Status=23
21:30:46 5 SMTP-509([209.162.104.65]) Received 34 bytes
21:30:46 4 SMTP-509([209.162.104.65]) Input Line: RCPT TO:<recipes@hypertouch.com>\r
21:30:46 5 SMTP-509([209.162.104.65]) *Status=33
21:30:46 4 SMTP-509([209.162.104.65]) Sending 250 <recipes@hypertouch.com> recipient accepted\r\n
21:30:46 5 SMTP-509([209.162.104.65]) OT 49 of 49 bytes sent, Flags=0
21:30:46 5 SMTP-509([209.162.104.65]) *Status=23
21:30:48 5 SMTP-509([209.162.104.65]) Received 6 bytes
21:30:48 4 SMTP-509([209.162.104.65]) Input Line: DATA\r
21:30:48 4 SMTP-509([209.162.104.65]) Sending 354 Enter mail, end with "." on a line by itself\r\n
21:30:48 5 SMTP-509([209.162.104.65]) OT 50 of 50 bytes sent, Flags=0
21:30:48 5 SMTP-509([209.162.104.65]) *Status=27
21:30:49 5 SMTP-509([209.162.104.65]) Received 936 bytes
21:30:49 5 SMTP-509([209.162.104.65]) Received 5 bytes
21:30:49 5 SMTP-509([209.162.104.65]) Writing 1199 byte at 0
21:30:49 5 SMTP-509([209.162.104.65]) *Status=28
21:30:49 2 SMTP-509([209.162.104.65]) {S.0000014724} received, 1199 bytes
21:30:49 4 SMTP-509([209.162.104.65]) Sending 250 S.0000014724 message accepted for delivery\r\n
21:30:49 5 SMTP-509([209.162.104.65]) OT 48 of 48 bytes sent, Flags=0
21:30:49 5 SMTP-509([209.162.104.65]) *Status=22
21:30:49 2 SYSTEM [S.0000014724] <419.436278.39703056emailplus@321media.com>
0+1 From:emailplus@321media.com
21:30:49 2 SYSTEM(POP) [S.0000014724] delivered to (joepublic)
21:30:49 2 SYSTEM [S.0000014724] deleted
21:30:50 5 SMTP-509([209.162.104.65]) Received 6 bytes
21:30:50 4 SMTP-509([209.162.104.65]) Input Line: QUIT\r
21:30:50 5 SMTP-509([209.162.104.65]) *Status=29
21:30:50 4 SMTP-509([209.162.104.65]) Sending 221 209.31.44.214 closing connection\r\n
21:30:50 5 SMTP-509([209.162.104.65]) OT 38 of 38 bytes sent, Flags=0
21:30:50 5 SMTP-509([209.162.104.65]) *Status=1
21:30:50 4 SMTP-509([209.162.104.65]) Closing
21:30:51 5 SMTP-509([209.162.104.65]) Disconnect Received
21:30:51 5 SMTP-509([209.162.104.65]) Disconnect Confirmed
21:30:51 4 SMTP-509([209.162.104.65]) Input Stream ended
21:30:51 5 SMTP-509([209.162.104.65]) *Status=2
21:30:51 4 SMTP disposing line 509
21:30:51 5 SMTP(509) Resolver Disposed
21:30:51 5 SMTP-509([209.162.104.65]) Stream Disposed
02:35:56 5 SMTP-750() Stream Created

02:35:56 5 SMTP(750) Resolver Created
02:35:56 4 SMTP Line 750 created for answering
02:35:56 4 SMTP-750() Got connection from [36.37.0.13:39891]
02:35:56 4 SMTP(tcp) Connection accepted from [36.37.0.13:39891], seq=554, 9/10
02:35:56 4 SMTP-750([36.37.0.13]) Sending 220-Stalker Internet Mail Server V.1.8b3 is ready.\r\n
220 ESMTP is spoken here. You are welcome No unsolic

02:35:56 5 SMTP-750([36.37.0.13]) OT 153 of 153 bytes sent, Flags=0
02:35:56 5 SMTP-750([36.37.0.13]) *Status=22
02:36:51 5 SMTP-750([36.37.0.13]) Received 26 bytes
02:36:51 4 SMTP-750([36.37.0.13]) Input Line: HELO Made-Up-Name-desk98\r
02:36:51 5 SMTP-750([36.37.0.13]) *Status=21
02:36:51 4 SMTP-750(Made-Up-Name-desk98) Looking for Made-Up-Name-desk98
02:36:52 3 SMTP-750(Made-Up-Name-desk98) Failed to verify. Real address is [36.37.0.13:39891]
02:36:52 4 SMTP-750(Made-Up-Name-desk98) Sending 250 209.31.44.214 cannot verify Made-Up-Name-desk98\r\n
02:36:52 5 SMTP-750(Made-Up-Name-desk98) OT 53 of 53 bytes sent, Flags=0
02:36:52 5 SMTP-750([36.37.0.13]) *Status=22
02:37:45 5 SMTP-750([36.37.0.13]) Received 50 bytes
02:37:45 4 SMTP-750([36.37.0.13]) Input Line: MAIL FROM:<Made-Up-Name-emailplus@321media.com> \r
02:37:45 5 SMTP-750([36.37.0.13]) *Status=25
02:37:45 5 SMTP-750([36.37.0.13]) *Status=26
02:37:45 4 SMTP-750([36.37.0.13]) Sending 250 <Made-Up-Name-emailplus@321media.com>  sender accepted\r\n
02:37:45 5 SMTP-750([36.37.0.13]) OT 60 of 60 bytes sent, Flags=0
02:37:45 5 SMTP-750([36.37.0.13]) *Status=23
02:37:56 5 SMTP-750([36.37.0.13]) Received 36 bytes
02:37:56 4 SMTP-750([36.37.0.13]) Input Line: RCPT TO: <recipes@hypertouch.com> \r
02:37:56 5 SMTP-750([36.37.0.13]) *Status=33
02:37:56 4 SMTP-750([36.37.0.13]) Sending 250 <recipes@hypertouch.com>  recipient accepted\r\n
02:37:56 5 SMTP-750([36.37.0.13]) OT 50 of 50 bytes sent, Flags=0
02:37:56 5 SMTP-750([36.37.0.13]) *Status=23
02:38:07 5 SMTP-750([36.37.0.13]) Received 6 bytes
02:38:07 4 SMTP-750([36.37.0.13]) Input Line: DATA\r
02:38:07 4 SMTP-750([36.37.0.13]) Sending 354 Enter mail, end with "." on a line by itself\r\n
02:38:07 5 SMTP-750([36.37.0.13]) OT 50 of 50 bytes sent, Flags=0
02:38:07 5 SMTP-750([36.37.0.13]) *Status=27
02:38:24 5 SMTP-750([36.37.0.13]) Received 53 bytes
02:38:24 5 SMTP-750([36.37.0.13]) Received 914 bytes
02:38:26 5 SMTP-750([36.37.0.13]) Received 35 bytes
02:38:28 5 SMTP-750([36.37.0.13]) Received 3 bytes
02:38:28 5 SMTP-750([36.37.0.13]) Writing 1285 byte at 0
02:38:28 5 SMTP-750([36.37.0.13]) *Status=28
02:38:28 2 SMTP-750([36.37.0.13]) {S.0000014938} received, 1285 bytes
02:38:28 4 SMTP-750([36.37.0.13]) Sending 250 S.0000014938 message accepted for delivery\r\n
02:38:28 5 SMTP-750([36.37.0.13]) OT 48 of 48 bytes sent, Flags=0
02:38:28 5 SMTP-750([36.37.0.13]) *Status=22
02:38:28 2 SYSTEM [S.0000014938] <419.436278.39703056-Made-Up-Number-emailplus@321media.com> 
0+1 From:Made-Up-Name-emailplus@321media.com
02:38:28 2 SYSTEM(POP) [S.0000014938] delivered to (joepublic)
02:38:28 2 SYSTEM [S.0000014938] deleted
02:38:38 5 SMTP-750([36.37.0.13]) Received 6 bytes
02:38:38 4 SMTP-750([36.37.0.13]) Input Line: quit\r
02:38:38 5 SMTP-750([36.37.0.13]) *Status=29
02:38:38 4 SMTP-750([36.37.0.13]) Sending 221 209.31.44.214 closing connection\r\n
02:38:38 5 SMTP-750([36.37.0.13]) OT 38 of 38 bytes sent, Flags=0
02:38:38 5 SMTP-750([36.37.0.13]) *Status=1
02:38:38 4 SMTP-750([36.37.0.13]) Closing
02:38:38 5 SMTP-750([36.37.0.13]) Disconnect Received
02:38:38 5 SMTP-750([36.37.0.13]) Disconnect Confirmed
02:38:38 4 SMTP-750([36.37.0.13]) Input Stream ended
02:38:38 5 SMTP-750([36.37.0.13]) *Status=2
02:38:38 4 SMTP disposing line 750
02:38:38 5 SMTP(750) Resolver Disposed
02:38:38 5 SMTP-750([36.37.0.13]) Stream Disposed