1.1.3.2.2. Does pcap file indicate it is leveraging email as