SMTP Fields
| Protocol Field | pcre Writing Method | Field Type | Field Description | | :--------------------------- | :----------- | :------- | ------------------------------------------------------------ | | smtp_greeting | GREET | Character string | First response of the server, including the server software and version information | smtp_sendfrom | SENDFROM | Character string | Send From command parameter content | | smtp_sendfrom_len | / | Length | Send From command parameter content length | | smtp_helo | HELO | Character string | Helo content | | smtp_helo_len | / | Length | Helo content length | | smtp_mailfrom | MAILFROM | Character string | Mail From content | | smtp_mailfrom_len | / | Length | Mail From content length | | smtp_rcptto | RCPTTO | Character string | RCPT To content | | smtp_rcptto_len | / | Length | RCPT To content length | | smtp_rcptto_para | RCPTTO_PARA | Character string | RCPT To parameter value | | smtp_rcptto_forward_path | RCPTTO_PATH | Character string | RCPT To **forwardpath** value | | smtp_rcptto_forward_path_len | / | Length | RCPT To **forwardpath** value length | | smtp_cd_filename | CD_FNAME | Character string | Attachment name identified by **content-disposition filename** in the email message header and MIME entity header | | smtp_cd_filename_len | / | Length | Length of the attachment name identified by **content-disposition filename** in the email message header and MIME entity header | | smtp_head_content_type | HEAD_CT | Character string | **content-type** value in the email message header and MIME entity header | | smtp_head_content_type_len | / | Length | Length of the **content-type** value in the email message header and MIME entity header | | smtp_head_filename | HEAD_FNAME | Character string | Attachment name identified by **content-type name** in the email message header and MIME entity header | | smtp_head_filename_len | / | Length | Length of the attachment name identified by **content-type name** in the email message header and MIME entity header | | smtp_head_subject | HEAD_SUBJECT | Character string | Value of **subject** in the email message header | | smtp_head_subject_len | / | Length | Length of the **subject** value in the email message header | | smtp_head_from | HEAD_FROM | Character string | Value of **from** in the email message header | | smtp_head_from_len | / | Length | Length of the **from** value in the email message header | | smtp_head_to | HEAD_TO | Character string | Value of **to** in the email message header | | smtp_head_to_len | / | Length | Length of the **to** value in the email message header |