Sorry, just found the details. Here we go:
INITIATING CONNECTION Nov 05 17:36:48.922 host:domain1.net -- port:587 -- socket:0x0 -- thread:0x61000086c3c0
INITIATING CONNECTION Nov 05 17:36:48.922 host:domain2.com -- port:587 -- socket:0x0 -- thread:0x61000027a000
INITIATING CONNECTION Nov 05 17:36:48.922 host:internalserver.local -- port:993 -- socket:0x0 -- thread:0x610000665180
INITIATING CONNECTION Nov 05 17:36:48.922 host:domain2.com -- port:993 -- socket:0x0 -- thread:0x608000862e40
INITIATING CONNECTION Nov 05 17:36:48.923 host:domain1.net -- port:993 -- socket:0x0 -- thread:0x610000665f00
INITIATING CONNECTION Nov 05 17:36:48.923 host:domain1.net -- port:993 -- socket:0x0 -- thread:0x608000863f40
INITIATING CONNECTION Nov 05 17:36:48.923 host:domain1.net -- port:993 -- socket:0x0 -- thread:0x61000086bcc0
INITIATING CONNECTION Nov 05 17:36:48.924 host:domain1.net -- port:587 -- socket:0x0 -- thread:0x61000026d240
INITIATING CONNECTION Nov 05 17:36:48.940 host:p09-imap.mail.me.com -- port:993 -- socket:0x0 -- thread:0x600000266300
CONNECTED Nov 05 17:36:48.950 [kCFStreamSocketSecurityLevelNone] -- host:domain2.com -- port:587 -- socket:0x6000002b85a0 -- thread:0x61000027a000
CONNECTED Nov 05 17:36:48.956 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:internalserver.local -- port:993 -- socket:0x6180002b77c0 -- thread:0x610000665180
READ Nov 05 17:36:48.956 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:internalserver.local -- port:993 -- socket:0x6180002b77c0 -- thread:0x610000665180
* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=CRAM-MD5 AUTH=DIGEST-MD5 AUTH=PLAIN AUTH=LOGIN] Dovecot ready.
WROTE Nov 05 17:36:48.957 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:internalserver.local -- port:993 -- socket:0x6180002b77c0 -- thread:0x610000665f00
1.88 ID ("name" "Mac OS X Mail" "version" "8.0 (1990.1)" "os" "Mac OS X" "os-version" "10.10 (14A389)" "vendor" "Apple Inc.")
READ Nov 05 17:36:48.958 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:internalserver.local -- port:993 -- socket:0x6180002b77c0 -- thread:0x610000665f00
* ID ("name" "Dovecot" "version" "2.2.5")
1.88 OK ID completed.
WROTE Nov 05 17:36:48.960 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:internalserver.local -- port:993 -- socket:0x6180002b77c0 -- thread:0x608000863f40
2.88 AUTHENTICATE PLAIN (*** 68 bytes hidden ***)
READ Nov 05 17:36:48.984 [kCFStreamSocketSecurityLevelNone] -- host:domain2.com -- port:587 -- socket:0x6000002b85a0 -- thread:0x61000027a000
220 exthost.han-solo.net ESMTP
WROTE Nov 05 17:36:48.993 [kCFStreamSocketSecurityLevelNone] -- host:domain2.com -- port:587 -- socket:0x6000002b85a0 -- thread:0x61000027a000
EHLO [192.168.1.11]
READ Nov 05 17:36:49.016 [kCFStreamSocketSecurityLevelNone] -- host:domain2.com -- port:587 -- socket:0x6000002b85a0 -- thread:0x61000027a000
250-exthost.han-solo.net Hello 151.2.150.83.ftth.as8758.net [83.150.2.151], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE 50000000
250-DSN
250-AUTH LOGIN PLAIN
250-STARTTLS
250-DELIVERBY
250 HELP
WROTE Nov 05 17:36:49.016 [kCFStreamSocketSecurityLevelNone] -- host:domain2.com -- port:587 -- socket:0x6000002b85a0 -- thread:0x61000027a000
STARTTLS
READ Nov 05 17:36:49.039 [kCFStreamSocketSecurityLevelNone] -- host:domain2.com -- port:587 -- socket:0x6000002b85a0 -- thread:0x61000027a000
220 2.0.0 Ready to start TLS
CONNECTED Nov 05 17:36:49.104 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:domain2.com -- port:993 -- socket:0x6100004a4e60 -- thread:0x608000862e40
READ Nov 05 17:36:49.126 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:domain2.com -- port:993 -- socket:0x6100004a4e60 -- thread:0x608000862e40
* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE AUTH=PLAIN AUTH=LOGIN] com server ready.
WROTE Nov 05 17:36:49.127 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:domain2.com -- port:993 -- socket:0x6100004a4e60 -- thread:0x61000026d240
1.89 ID ("name" "Mac OS X Mail" "version" "8.0 (1990.1)" "os" "Mac OS X" "os-version" "10.10 (14A389)" "vendor" "Apple Inc.")
READ Nov 05 17:36:49.150 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:domain2.com -- port:993 -- socket:0x6100004a4e60 -- thread:0x61000026d240
* ID NIL
1.89 OK ID completed.
WROTE Nov 05 17:36:49.151 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:domain2.com -- port:993 -- socket:0x6100004a4e60 -- thread:0x61000086bcc0
2.89 AUTHENTICATE PLAIN (*** 44 bytes hidden ***)
READ Nov 05 17:36:49.162 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:internalserver.local -- port:993 -- socket:0x6180002b77c0 -- thread:0x608000863f40
2.88 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE SEARCH=FUZZY URLAUTH URLAUTH=BINARY COMPRESS=DEFLATE QUOTA ACL RIGHTS=texk] Logged in
WROTE Nov 05 17:36:49.163 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:internalserver.local -- port:993 -- socket:0x6180002b77c0 -- thread:0x61000026d240
3.88 LIST "" ""
READ Nov 05 17:36:49.164 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:internalserver.local -- port:993 -- socket:0x6180002b77c0 -- thread:0x61000026d240
* LIST (\Noselect) "." ""
3.88 OK List completed.
WROTE Nov 05 17:36:49.164 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:internalserver.local -- port:993 -- socket:0x6180002b77c0 -- thread:0x610000665f00
4.88 LOGOUT
READ Nov 05 17:36:49.197 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:domain2.com -- port:993 -- socket:0x6100004a4e60 -- thread:0x61000086bcc0
2.89 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS QUOTA] Logged in
WROTE Nov 05 17:36:49.198 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:domain2.com -- port:993 -- socket:0x6100004a4e60 -- thread:0x61000086bcc0
3.89 LIST "" ""
WROTE Nov 05 17:36:49.204 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:domain2.com -- port:587 -- socket:0x6000002b85a0 -- thread:0x61000027a000
EHLO [192.168.1.11]
READ Nov 05 17:36:49.221 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:domain2.com -- port:993 -- socket:0x6100004a4e60 -- thread:0x61000086bcc0
* LIST (\Noselect) "." ""
3.89 OK List completed.
WROTE Nov 05 17:36:49.221 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:domain2.com -- port:993 -- socket:0x6100004a4e60 -- thread:0x61000086bcc0
4.89 LOGOUT
READ Nov 05 17:36:49.227 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:domain2.com -- port:587 -- socket:0x6000002b85a0 -- thread:0x61000027a000
250-exthost.han-solo.net Hello 151.2.150.83.ftth.as8758.net [83.150.2.151], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE 50000000
250-DSN
250-AUTH LOGIN PLAIN
250-DELIVERBY
250 HELP
WROTE Nov 05 17:36:49.228 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:domain2.com -- port:587 -- socket:0x6000002b85a0 -- thread:0x61000027a000
AUTH PLAIN (*** 44 bytes hidden ***)
READ Nov 05 17:36:49.253 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:domain2.com -- port:587 -- socket:0x6000002b85a0 -- thread:0x61000027a000
235 2.0.0 OK Authenticated
WROTE Nov 05 17:36:49.253 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:domain2.com -- port:587 -- socket:0x6000002b85a0 -- thread:0x61000027a000
QUIT
CONNECTED Nov 05 17:36:49.542 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:p09-imap.mail.me.com -- port:993 -- socket:0x6000002ba220 -- thread:0x600000266300
READ Nov 05 17:36:49.651 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:p09-imap.mail.me.com -- port:993 -- socket:0x6000002ba220 -- thread:0x600000266300
* OK [CAPABILITY st11p09mm-iscream007 14G XAPPLEPUSHSERVICE IMAP4 IMAP4rev1 SASL-IR AUTH=ATOKEN AUTH=PLAIN] iSCREAM ready to rumble (14G:30156) st11p09mm-iscream007 [18:7146:16:36:49:09]
WROTE Nov 05 17:36:49.651 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:p09-imap.mail.me.com -- port:993 -- socket:0x6000002ba220 -- thread:0x61000027a000
1.100 AUTHENTICATE ATOKEN (*** 80 bytes hidden ***)
READ Nov 05 17:36:49.777 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:p09-imap.mail.me.com -- port:993 -- socket:0x6000002ba220 -- thread:0x61000027a000
1.100 OK [CAPABILITY XAPPLEPUSHSERVICE IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ NAMESPACE UIDPLUS CHILDREN BINARY UNSELECT SORT CATENATE URLAUTH LANGUAGE ESEARCH ESORT THREAD=ORDEREDSUBJECT THREAD=REFERENCES CONDSTORE ENABLE CONTEXT=SEARCH CONTEXT=SORT WITHIN SASL-IR SEARCHRES XSENDER X-NETSCAPE XSERVERINFO X-SUN-SORT ANNOTATE-EXPERIMENT-1 X-UNAUTHENTICATE X-SUN-IMAP X-ANNOTATEMORE XUM1 ID IDLE] User cabaumle logged in
WROTE Nov 05 17:36:49.778 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:p09-imap.mail.me.com -- port:993 -- socket:0x6000002ba220 -- thread:0x61000027a000
2.100 ID ("name" "Mac OS X Mail" "version" "8.0 (1990.1)" "os" "Mac OS X" "os-version" "10.10 (14A389)" "vendor" "Apple Inc.")
READ Nov 05 17:36:49.889 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:p09-imap.mail.me.com -- port:993 -- socket:0x6000002ba220 -- thread:0x61000027a000
* ID NIL
2.100 OK Completed
WROTE Nov 05 17:36:49.890 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:p09-imap.mail.me.com -- port:993 -- socket:0x6000002ba220 -- thread:0x610000665f00
3.100 LIST "" ""
READ Nov 05 17:36:50.000 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:p09-imap.mail.me.com -- port:993 -- socket:0x6000002ba220 -- thread:0x610000665f00
* LIST (\Noselect) "/" ""
3.100 OK Completed
WROTE Nov 05 17:36:50.001 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:p09-imap.mail.me.com -- port:993 -- socket:0x6000002ba220 -- thread:0x610000665f00
4.100 LOGOUT
READ Nov 05 17:37:07.812 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:internalserver.local -- port:993 -- socket:0x6080002b4ca0 -- thread:0x600000266300
* OK Still here
READ Nov 05 17:37:11.012 [kCFStreamSocketSecurityLevelTLSv1_0] -- host:domain2.com -- port:993 -- socket:0x6100002ae700 -- thread:0x61000026d240
* OK Still here