In this recipe, we will discuss the use of Wireshark to perform some basic analysis of malicious and spam emails, and use this to filter spam emails on the server itself.
Malicious and spam email analysis
Getting ready
In most cases, spam emails will be sent from outside the domain and targeted at clients within the enterprise. So, it is best to perform packet capture on the server side for analysis.
How to do it...
- The first step is to identify the data portion of the mail messages. We can use the filter to display the data portion of the mails. The use of email protocol...
