# ssh 192.168.0.231
Chain OUTPUT (policy ACCEPT 25911 packets, 2907K bytes)
 pkts bytes target     prot opt in     out     source               destination         
25911 2907K tcout      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain tcout (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   17   944 MARK       tcp  --  *      *       172.20.8.3           192.168.0.231        tcp dpt:143 /* mark imap packet */ MARK xset 0x2f00/0xff00
   17   944 CONNMARK   tcp  --  *      *       172.20.8.3           192.168.0.231        tcp dpt:143 /* mark imap connection */ CONNMARK xset 0x2f00/0xff00
   17   944 MARK       tcp  --  *      *       172.20.8.3           192.168.0.231        tcp dpt:143 mark match 0x2f00/0xff00 /* count imap packet with mark */ MARK or 0x400000
   17   944 MARK       tcp  --  *      *       172.20.8.3           192.168.0.231        tcp dpt:143 connmark match  0x2f00/0xff00 /* count imap packet with conn mark */ MARK or 0x400000
   17  1848 MARK       esp  --  *      *       0.0.0.0/0            0.0.0.0/0            /* count any esp outflow */ MARK or 0x400000
   17  1848 MARK       esp  --  *      *       0.0.0.0/0            pub.lic.ip.A         /* count esp outflow to partner */ MARK or 0x400000