question re proto field

[Rodney McKee]

Hello, 

Just wondering how to read these sets of info in the proto field, I don't see anything regarding M in the man page, these are all different connections between the same mail servers. 

20:47:05.667747 M s tcp aaa.aaa.aaa.aaa.44821 -> bb.bb.bb.bbb.25 140 114509 sSEfR 
21:02:20.528479 M tcp aaa.aaa.aaa.aaa.59185 -> bb.bb.bb.bbb.25 47 32185 sSEfR 
21:47:04.173484 M V tcp aaa.aaa.aaa.aaa.45523 -> bb.bb.bb.bbb.25 32 15688 sSEfR 
22:12:03.167259 e s tcp aaa.aaa.aaa.aaa.51619 -> bb.bb.bb.bbb.25 88 64563 sSEfF 
22:12:03.167338 e tcp aaa.aaa.aaa.aaa.51621 -> bb.bb.bb.bbb.25 78 62288 sSEfR 
00:13:20.505744 M * tcp aaa.aaa.aaa.aaa.42067 -> bb.bb.bb.bbb.25 92 69954 sSEfR 
00:17:01.273999 e * tcp aaa.aaa.aaa.aaa.43610 -> bb.bb.bb.bbb.25 42 21250 sSEfF 

Regards 
Rodney 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20090522/f79606b8/attachment.html>