mailsnarf.patch: --- dsniff-2.4/mailsnarf.c 2009-11-22 00:12:52.000000000 -0500 +++ dsniff-2.4-mine/mailsnarf.c 2009-10-19 19:59:38.000000000 -0400 @@ -290,7 +290,7 @@ sniff_smtp_client(struct tcp_stream *ts, struct smtp_info *smtp; int i; - if (ts->addr.dest != 25) + if (ts->addr.dest != 25 && ts->addr.dest != 587) return; switch (ts->nids_state) {