From 058675a148cee9d4934b68bd31bd6a8ec3850ba0 Mon Sep 17 00:00:00 2001 From: Julian Kiedaisch Date: Thu, 1 Oct 2026 19:38:44 +0000 Subject: [PATCH] feat(core): the e-mail program after Java, measured against Java The program sends to its account's SMTP server, one connection for each recipient, and fetches its mails by POP3; the server now sends mails on to other domains by MX and returns notices to their senders. The program's folders are in the snapshot and go back into the project. EmailClientRun plays six stories with two servers; the mail oracles run in the language's locale, so Java's notice dates match the core's. Co-Authored-By: Claude Opus 5.5 --- CHANGES.md | 13 +- packages/core/src/index.ts | 1 + packages/core/src/runtime/apps/emailClient.ts | 344 + packages/core/src/runtime/apps/emailServer.ts | 164 +- packages/core/src/runtime/email.ts | 54 +- packages/core/src/runtime/engine.ts | 39 + packages/core/src/runtime/snapshot.ts | 5 + packages/core/test/email-server.de.java.json | 2 +- packages/core/test/email-server.en.java.json | 2 +- packages/core/test/emailClient.test.ts | 131 + packages/core/test/emailClientJava.test.ts | 259 + packages/core/test/emailServer.test.ts | 42 +- packages/core/test/programLines.ts | 31 +- .../email-client-java-byName.java.json | 30114 ++++++++++++++++ .../email-client-java-fetch.java.json | 6621 ++++ .../email-client-java-noServer.java.json | 457 + .../email-client-java-send.java.json | 14940 ++++++++ .../email-client-java-unknownHost.java.json | 633 + .../email-client-java-wrongPass.java.json | 2631 ++ .../test/scenarios/email-java-pop3.java.json | 1106 +- .../scenarios/email-java-pop3Errors.java.json | 698 +- .../test/scenarios/email-java-smtp.java.json | 542 +- .../scenarios/email-java-smtpErrors.java.json | 922 +- .../test/scenarios/mail-lan.scenario.json | 12 +- packages/fls/src/projectSnapshot.ts | 21 +- packages/fls/test/importProject.test.ts | 21 + scripts/code_language_allow.txt | 3 +- tools/java-oracle/README.md | 39 + tools/java-oracle/run.sh | 25 +- tools/java-oracle/src/EmailClientRun.java | 171 + 30 files changed, 58319 insertions(+), 1724 deletions(-) create mode 100644 packages/core/src/runtime/apps/emailClient.ts create mode 100644 packages/core/test/emailClient.test.ts create mode 100644 packages/core/test/emailClientJava.test.ts create mode 100644 packages/core/test/scenarios/email-client-java-byName.java.json create mode 100644 packages/core/test/scenarios/email-client-java-fetch.java.json create mode 100644 packages/core/test/scenarios/email-client-java-noServer.java.json create mode 100644 packages/core/test/scenarios/email-client-java-send.java.json create mode 100644 packages/core/test/scenarios/email-client-java-unknownHost.java.json create mode 100644 packages/core/test/scenarios/email-client-java-wrongPass.java.json create mode 100644 tools/java-oracle/src/EmailClientRun.java diff --git a/CHANGES.md b/CHANGES.md index 227446b..26d5c82 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -13,7 +13,7 @@ Swift-Pfade relativ zu `filius-ipad/ios/FiliusPad/TopologyEditor/` (Stand | `src/model/link.ts`, `src/model/graph.ts` | `Model/TopologyLink.swift`, `Model/TopologyGraph.swift` | übertragen, bisher nur die Daten (Abfragen folgen mit dem Editor) | | `src/model/documentation.ts` | `Model/TopologyDocumentation.swift` | übertragen; FNV-Kennung mit BigInt, gegen die IDs aus dem Swift-Import geprüft | | `src/runtime/config.ts` | `State/TopologyEditorState.swift` (Laufzeit-Konfigurationen, WLAN eines Rechners, DHCP, Portweiterleitung, Remote Link ohne LAN-Transport, Programme und ihre Konfiguration, Firewall, DNS-Einträge aus `State/TopologyDNSResolver.swift`, E-Mail-Konten und -Nachrichten aus `State/TopologyEmail.swift`); dazu Echo-Server- und Client-Konfiguration, die Swift nicht speichert | übertragen; Java-Beschriftungen der Oberfläche weggelassen | -| `src/runtime/engine.ts` | `State/TopologyNetworkRuntimeEngine.swift` Z. ~313–3585, ~4472–5187 (UDP), ~4753–4850 | übertragen: Warteschlange, Uhr, Ethernet, Switch, ARP, IPv4, ICMP, Routing, Firewall, UDP-Sockets (binden, freie Ports nach Javas Zufall, senden samt Broadcast, zustellen, empfangen mit Wartezeit, schließen), TCP (Z. ~5187–5913: Server- und Client-Sockets, Handschlag mit Ergebnis, Segmente zu 1460 Byte bis zum PSH, höchstens drei Versuche, Abbau über alle Java-Zustände samt `TIME_WAIT`; seit F2.3c nach Javas `TCPSocket` an Java-Filius gemessen: je Versuch und für `TIME_WAIT` 3 RTT nach der Geschwindigkeit (8250 ms bei 90 %, Swift fest 7500 bzw. 2500 ms), der Zeitablauf zählt ab der Übergabe des Segments, vor ARP; ein Segment beendet `TIME_WAIT`; die Gegenseite schließt beim FIN von selbst; nicht bestätigte Daten schließen mit FIN statt sofort; der angenommene Socket hat die Startnummer des Listeners, der Listener eine neue. seit F2.3e wie Java: SYN+ACK und FIN gehen nie ein zweites Mal hinaus; der Server gibt einen Handschlag nach 3 RTT auf und schließt mit FIN; nach dem FIN wartet ein Socket höchstens fünfmal 3 RTT, jedes Segment beendet eine Wartezeit, dann CLOSED (Java lässt den Zustand stehen). Abweichend von Java: drei SYN statt einem, weil Javas Wiederholungsschleife nach dem ersten Zeitablauf abbricht, und ein wiederholtes SYN in `SYN_RCVD` bekommt das SYN+ACK noch einmal, statt den Socket zu schließen), DHCP (Z. ~5913–6694: Server mit festen Zuordnungen, Adressbereich, Angeboten, Leases und Sperrliste; Client seit F2.3b nach Javas `DHCPClient` neu gebaut und an Java-Filius gemessen: je Versuch eine Nachricht, eine Antwort, die nicht passt, wird gelesen und verworfen; die ARP-Prüfung wartet eine RTT, eine Antwort für die Adresse beendet sie sofort, dann DECLINE; nach einem Zeitablauf wiederholt der Zustand seine Nachricht, nach dem fünften nimmt der Client eine Link-Local-Adresse `169.254.1.x/16` (ARP-Probe, ARP-Reply an alle) und gibt keine alte Adresse zurück; Swift sendete doppelt, wartete nicht auf ARP und kehrte nach zehn Versuchen zur alten Adresse zurück. Abweichend von Java: Nach fünf belegten Link-Local-Adressen gibt der Client auf (Java sucht endlos), und ein ARP-Paket für eine andere Adresse beendet die Prüfung nicht. Seit F2.3d befördert ein Kabel einen Frame nach dem anderen wie Javas `SimplexVerbindung` (ein Frame wartet im Ausgangspuffer, bis der vorige angekommen ist, und erscheint im Protokoll, wenn er losgeht); Swift schickt alle zugleich, die Option `swiftCables` behält das für den Swift-Vergleich. Die RTT der DHCP-Zeiten (Warten, Angebote, Sperrliste) folgt wie in Java der Geschwindigkeit (50 Kabel, 2750 ms bei 90 %); Swift rechnet fest mit 2500 ms. ARP seit F2.4b nach Javas `holeARPTabellenEintrag`, an Java-Filius gemessen: eine Auflösung fragt, wartet eine RTT, fragt ein zweites Mal und gibt nach einer weiteren RTT auf; dann „Host unreachable" beim Absender selbst oder vom Router zurück (bei ICMP nur für Echo-Anfragen); ein wartender Absender wacht nach den übrigen Ereignissen desselben Zeitpunkts auf; der Ping wartet danach eine RTT auf die Antwort. Swift schickt in der Ereignisverarbeitung beide Anfragen zugleich und lässt das Paket ohne Ende warten, wenn die Adresse irgendwo im Netz vorkommt (Wissen, das kein Knoten hat), und blockiert direkte Aufrufe ohne Wartezeit; die Option `swiftArp` behält das für den Swift-Vergleich. Seit F2.4b-2 kehrt ein Senden wie in Java sofort zurück, die Frames reisen, während die Uhr läuft (Swift: der Aufruf kehrt erst zurück, wenn alle Frames angekommen sind; die Option `swiftSends` behält das für den Swift-Vergleich), und UDP und TCP senden über Javas Transport-Thread je Knoten und Protokoll: ein Segment nach dem anderen; solange IP auf ARP wartet, blockiert das nächste `senden`. Wartende Absender kommen in der Reihenfolge an die Reihe, in der sie kamen (Javas Sperre überlässt das dem Zufall). Seit F2.4b-3 geht jedes ankommende Paket wie in Java durch den IP-Thread (UDP, TCP) oder den ICMP-Thread (ICMP) seines Knotens: zustellen, Echo-Reply, weiterleiten, eins nach dem anderen; solange ARP wartet, warten die folgenden. Abweichend von Java weckt eine ARP-Antwort alle, die auf die Adresse warten (Javas `notify` weckt einen beliebigen). DNS seit F2.4a nach Javas `DNSServer`/`Resolver`, an Java-Filius gemessen: Server auf Port 53 mit Einträgen aus dem Modell (die Antwort wiederholt die Frage nicht, RCODE immer 0, ein Verweis mit NS und A im Antwortteil), iterativer Resolver mit 5 RTT je Anfrage, der nur die Server behält, an die er verwiesen wurde; seit F2.4c auf den Ereignissen statt blockierend und mit rekursivem Server nach `DNSServer.answerWithRemoteData` (Nameserver der Zone, dann der eigene DNS-Server, sonst Verweis), abweichend von Java fragt er sich nie selbst (Java endlos). Gateway-NAT seit F2.6 (Z. ~3585–3900) nach Javas `filius.software.nat`, an Java-Filius gemessen: die Übersetzung vor dem IP-Thread (wie Javas NAT-Threads zwischen Karte und Ethernet), ausgehend WAN-Adresse und der Port des Eintrags (ICMP behält die Kennung), eingehend nach Gegenstelle, Port und Protokoll, sonst nach der Portweiterleitung (legt einen dynamischen Eintrag an), ein Ping an die WAN-Adresse beantwortet der Heimrouter, Pakete von außen an das LAN verschwinden, beide Seiten durch die Firewall des Heimrouters, ausgehend TTL 1 bekommt „Zeit überschritten“; dynamische Einträge verfallen nach 300 s mal Javas Verzögerungsfaktor (Swift fest 300 s), aufgefrischt nur eingehend, seit 01.10.2026 genau in diesem Alter (Java findet sie erst bei seiner sekündlichen Prüfung, bis zu 1 s später; so auch der Switch: Javas `checkSAT` prüft jede Sekunde, der Kern verfällt genau zur Lernzeit); der Heimrouter leitet weiter wie ein Router. Abweichend von Java: ein LAN-Endpunkt bekommt für jede neue Gegenstelle einen Eintrag auf demselben WAN-Port (Java behält nur den für die erste, die Antworten weiterer bleiben am Heimrouter hängen). RIP seit F2.5a (Z. ~4700–5090) nach Javas `filius.software.rip`, seit F2.5b an Java-Filius gemessen (die Pause in Javas `float`-Rechnung): eine Route mit 0 Hops je eigenem Netz, die nie verfällt; der erste Beacon nach einer Sekunde, dann alle 25,2–35,2 s aus einem Zufall je Router (Java: ein ungesetzter `Random` je Router; der Kern setzt ihn aus Szenario und Router-ID, `ripSeed`; Swift: ein Zufall für alle); eine Nachricht je Schnittstelle ohne die Routen über sie (Split Horizon); eine neue Route oder mehr Hops vom selben Router senden sofort; eine gelernte Route wird genau nach ihren 75 s auf 16 gesetzt und sofort gemeldet (Java erst beim nächsten eigenen Beacon, bis zu gut 30 s später; Swift bei jedem Ereignis; seit 01.10.2026, vorher wie Java); Nachrichten von jedem Quellport (Swift: nur 521); ein RIP-Router leitet nur nach seiner Tabelle weiter, wenige Hops vor langer Maske. `receiveUdp` kehrt wie Javas `empfangen` zurück, sobald ein Datagramm da ist. Seit der Abnahme F2 nach Javas `ARPThread`: ein Eintrag entsteht nur aus einer Anfrage nach der eigenen Adresse oder aus einer Antwort (Swift: aus jedem Paket; `swiftArp` behält das), ein Paket von der Netzadresse wird verworfen; ein Rechner leitet weiter, wenn seine IP-Weiterleitung an ist (`ipForwardingByNodeId`). Seit F2.8b nach Javas Tabellen gemessen: eine ARP-Anfrage trägt als Ziel-MAC die Broadcast-Adresse (Swift: Nullen; `swiftArp` behält sie), eine ICMP-Fehlermeldung Identifier und Sequenznummer 0 (RFC 792, Java; Swift kopiert die des Echos, ein Ping erkennt die Meldung am eingebetteten Echo), und „Host nicht erreichbar“ vom Router trägt das Paket, wie er es weitergeleitet hat (TTL gesenkt). Die Broadcast-Adresse schreibt sie immer groß (Java in der Antwort an 0.0.0.0 klein). Den Mitschnitt je Karte (`capture.ts`) schreibt sie seit F2.8a dort, wo Java ihn schreibt: beim Abgang auf das Kabel und bei der Ankunft an der Karte. Seit F3.3a läuft der E-Mail-Server mit (`emailServer`); was er annimmt oder löscht, steht im Schnappschuss (`emailServersByNodeId`), aus dem es zurück ins Projekt geht; die Uhrzeit für seine Benachrichtigungen kommt aus der Option `wallClock`. Seit F3.2c ändert die Seite `konfig` der Router und Heimrouter die Firewall zur Laufzeit; die Änderung steht im Schnappschuss (`firewallConfiguration`), aus dem sie zurück ins Projekt geht. Seit F3.2b starten Router und Heimrouter ihren Webserver auf Port 80 mit Javas Seiten (Javas Server lauscht wegen eines Wettlaufs in `setAktiv` manchmal nie, der Kern immer; `swiftRouters` lässt ihn für den Swift-Vergleich weg), die Firewall führt ein Protokoll je Knoten (Regeltreffer bei TCP und UDP, verworfenes ICMP), das wie Javas Protokollseite einen Neustart überlebt, eine RIP-Route kennt die öffentliche Adresse des meldenden Routers (`hopPublicIp`), und TCP zählt Sequenznummern und Segmentgröße wie Java in Zeichen (UTF-16-Einheiten) statt in Bytes, ohne ein Zeichenpaar zu zerreißen; Bytes, die kein Text sind, zählen als Bytes. Seit F3.2a schließt ein Programm wie Javas `schliessen()` nur auf Bitte (`requestTcpClose`): Das FIN geht zur selben Zeit, nach dem, was der Programm-Thread noch tut. Seit F3.1 laufen Verbinden, Senden, Empfangen und Annehmen auch als Schritte eines Programm-Threads (`connectTcpSteps`, `sendTcpSteps`, `receiveTcpSteps`, `acceptTcpSteps`, `resolveHostSteps`); die blockierenden Aufrufe sind nur noch eine Hülle darum. Abweichend von Java: Ein Verbindungsaufbau ohne Route scheitert sofort (Javas Socket-Thread stirbt an der `RouteNotFoundException`, `verbinden` wartet ewig), eine Nachricht, die vor dem Schließen ankam, wird noch ausgegeben (Java verwirft sie), und Senden unterscheidet wie Java „nicht verbunden", „unterbrochen" und „Zeitüberschreitung". WLAN seit F2.7 an Java-Filius gemessen: zur Laufzeit ist ein Funkkabel ein Kabel wie jedes andere, und eine SSID verbindet nichts (nach ihr legt nur Javas Editor das Funkkabel, `JHostKonfiguration.updateWifiConnection`); Swifts Verbindung über die SSID zur Laufzeit, auch ohne Kabel (`wirelessAssociations`), nicht übernommen. Klasse statt Werttyp. Noch nicht übertragen (wirft `NotPortedError`): Remote Link | +| `src/runtime/engine.ts` | `State/TopologyNetworkRuntimeEngine.swift` Z. ~313–3585, ~4472–5187 (UDP), ~4753–4850 | übertragen: Warteschlange, Uhr, Ethernet, Switch, ARP, IPv4, ICMP, Routing, Firewall, UDP-Sockets (binden, freie Ports nach Javas Zufall, senden samt Broadcast, zustellen, empfangen mit Wartezeit, schließen), TCP (Z. ~5187–5913: Server- und Client-Sockets, Handschlag mit Ergebnis, Segmente zu 1460 Byte bis zum PSH, höchstens drei Versuche, Abbau über alle Java-Zustände samt `TIME_WAIT`; seit F2.3c nach Javas `TCPSocket` an Java-Filius gemessen: je Versuch und für `TIME_WAIT` 3 RTT nach der Geschwindigkeit (8250 ms bei 90 %, Swift fest 7500 bzw. 2500 ms), der Zeitablauf zählt ab der Übergabe des Segments, vor ARP; ein Segment beendet `TIME_WAIT`; die Gegenseite schließt beim FIN von selbst; nicht bestätigte Daten schließen mit FIN statt sofort; der angenommene Socket hat die Startnummer des Listeners, der Listener eine neue. seit F2.3e wie Java: SYN+ACK und FIN gehen nie ein zweites Mal hinaus; der Server gibt einen Handschlag nach 3 RTT auf und schließt mit FIN; nach dem FIN wartet ein Socket höchstens fünfmal 3 RTT, jedes Segment beendet eine Wartezeit, dann CLOSED (Java lässt den Zustand stehen). Abweichend von Java: drei SYN statt einem, weil Javas Wiederholungsschleife nach dem ersten Zeitablauf abbricht, und ein wiederholtes SYN in `SYN_RCVD` bekommt das SYN+ACK noch einmal, statt den Socket zu schließen), DHCP (Z. ~5913–6694: Server mit festen Zuordnungen, Adressbereich, Angeboten, Leases und Sperrliste; Client seit F2.3b nach Javas `DHCPClient` neu gebaut und an Java-Filius gemessen: je Versuch eine Nachricht, eine Antwort, die nicht passt, wird gelesen und verworfen; die ARP-Prüfung wartet eine RTT, eine Antwort für die Adresse beendet sie sofort, dann DECLINE; nach einem Zeitablauf wiederholt der Zustand seine Nachricht, nach dem fünften nimmt der Client eine Link-Local-Adresse `169.254.1.x/16` (ARP-Probe, ARP-Reply an alle) und gibt keine alte Adresse zurück; Swift sendete doppelt, wartete nicht auf ARP und kehrte nach zehn Versuchen zur alten Adresse zurück. Abweichend von Java: Nach fünf belegten Link-Local-Adressen gibt der Client auf (Java sucht endlos), und ein ARP-Paket für eine andere Adresse beendet die Prüfung nicht. Seit F2.3d befördert ein Kabel einen Frame nach dem anderen wie Javas `SimplexVerbindung` (ein Frame wartet im Ausgangspuffer, bis der vorige angekommen ist, und erscheint im Protokoll, wenn er losgeht); Swift schickt alle zugleich, die Option `swiftCables` behält das für den Swift-Vergleich. Die RTT der DHCP-Zeiten (Warten, Angebote, Sperrliste) folgt wie in Java der Geschwindigkeit (50 Kabel, 2750 ms bei 90 %); Swift rechnet fest mit 2500 ms. ARP seit F2.4b nach Javas `holeARPTabellenEintrag`, an Java-Filius gemessen: eine Auflösung fragt, wartet eine RTT, fragt ein zweites Mal und gibt nach einer weiteren RTT auf; dann „Host unreachable" beim Absender selbst oder vom Router zurück (bei ICMP nur für Echo-Anfragen); ein wartender Absender wacht nach den übrigen Ereignissen desselben Zeitpunkts auf; der Ping wartet danach eine RTT auf die Antwort. Swift schickt in der Ereignisverarbeitung beide Anfragen zugleich und lässt das Paket ohne Ende warten, wenn die Adresse irgendwo im Netz vorkommt (Wissen, das kein Knoten hat), und blockiert direkte Aufrufe ohne Wartezeit; die Option `swiftArp` behält das für den Swift-Vergleich. Seit F2.4b-2 kehrt ein Senden wie in Java sofort zurück, die Frames reisen, während die Uhr läuft (Swift: der Aufruf kehrt erst zurück, wenn alle Frames angekommen sind; die Option `swiftSends` behält das für den Swift-Vergleich), und UDP und TCP senden über Javas Transport-Thread je Knoten und Protokoll: ein Segment nach dem anderen; solange IP auf ARP wartet, blockiert das nächste `senden`. Wartende Absender kommen in der Reihenfolge an die Reihe, in der sie kamen (Javas Sperre überlässt das dem Zufall). Seit F2.4b-3 geht jedes ankommende Paket wie in Java durch den IP-Thread (UDP, TCP) oder den ICMP-Thread (ICMP) seines Knotens: zustellen, Echo-Reply, weiterleiten, eins nach dem anderen; solange ARP wartet, warten die folgenden. Abweichend von Java weckt eine ARP-Antwort alle, die auf die Adresse warten (Javas `notify` weckt einen beliebigen). DNS seit F2.4a nach Javas `DNSServer`/`Resolver`, an Java-Filius gemessen: Server auf Port 53 mit Einträgen aus dem Modell (die Antwort wiederholt die Frage nicht, RCODE immer 0, ein Verweis mit NS und A im Antwortteil), iterativer Resolver mit 5 RTT je Anfrage, der nur die Server behält, an die er verwiesen wurde; seit F2.4c auf den Ereignissen statt blockierend und mit rekursivem Server nach `DNSServer.answerWithRemoteData` (Nameserver der Zone, dann der eigene DNS-Server, sonst Verweis), abweichend von Java fragt er sich nie selbst (Java endlos). Gateway-NAT seit F2.6 (Z. ~3585–3900) nach Javas `filius.software.nat`, an Java-Filius gemessen: die Übersetzung vor dem IP-Thread (wie Javas NAT-Threads zwischen Karte und Ethernet), ausgehend WAN-Adresse und der Port des Eintrags (ICMP behält die Kennung), eingehend nach Gegenstelle, Port und Protokoll, sonst nach der Portweiterleitung (legt einen dynamischen Eintrag an), ein Ping an die WAN-Adresse beantwortet der Heimrouter, Pakete von außen an das LAN verschwinden, beide Seiten durch die Firewall des Heimrouters, ausgehend TTL 1 bekommt „Zeit überschritten“; dynamische Einträge verfallen nach 300 s mal Javas Verzögerungsfaktor (Swift fest 300 s), aufgefrischt nur eingehend, seit 01.10.2026 genau in diesem Alter (Java findet sie erst bei seiner sekündlichen Prüfung, bis zu 1 s später; so auch der Switch: Javas `checkSAT` prüft jede Sekunde, der Kern verfällt genau zur Lernzeit); der Heimrouter leitet weiter wie ein Router. Abweichend von Java: ein LAN-Endpunkt bekommt für jede neue Gegenstelle einen Eintrag auf demselben WAN-Port (Java behält nur den für die erste, die Antworten weiterer bleiben am Heimrouter hängen). RIP seit F2.5a (Z. ~4700–5090) nach Javas `filius.software.rip`, seit F2.5b an Java-Filius gemessen (die Pause in Javas `float`-Rechnung): eine Route mit 0 Hops je eigenem Netz, die nie verfällt; der erste Beacon nach einer Sekunde, dann alle 25,2–35,2 s aus einem Zufall je Router (Java: ein ungesetzter `Random` je Router; der Kern setzt ihn aus Szenario und Router-ID, `ripSeed`; Swift: ein Zufall für alle); eine Nachricht je Schnittstelle ohne die Routen über sie (Split Horizon); eine neue Route oder mehr Hops vom selben Router senden sofort; eine gelernte Route wird genau nach ihren 75 s auf 16 gesetzt und sofort gemeldet (Java erst beim nächsten eigenen Beacon, bis zu gut 30 s später; Swift bei jedem Ereignis; seit 01.10.2026, vorher wie Java); Nachrichten von jedem Quellport (Swift: nur 521); ein RIP-Router leitet nur nach seiner Tabelle weiter, wenige Hops vor langer Maske. `receiveUdp` kehrt wie Javas `empfangen` zurück, sobald ein Datagramm da ist. Seit der Abnahme F2 nach Javas `ARPThread`: ein Eintrag entsteht nur aus einer Anfrage nach der eigenen Adresse oder aus einer Antwort (Swift: aus jedem Paket; `swiftArp` behält das), ein Paket von der Netzadresse wird verworfen; ein Rechner leitet weiter, wenn seine IP-Weiterleitung an ist (`ipForwardingByNodeId`). Seit F2.8b nach Javas Tabellen gemessen: eine ARP-Anfrage trägt als Ziel-MAC die Broadcast-Adresse (Swift: Nullen; `swiftArp` behält sie), eine ICMP-Fehlermeldung Identifier und Sequenznummer 0 (RFC 792, Java; Swift kopiert die des Echos, ein Ping erkennt die Meldung am eingebetteten Echo), und „Host nicht erreichbar“ vom Router trägt das Paket, wie er es weitergeleitet hat (TTL gesenkt). Die Broadcast-Adresse schreibt sie immer groß (Java in der Antwort an 0.0.0.0 klein). Den Mitschnitt je Karte (`capture.ts`) schreibt sie seit F2.8a dort, wo Java ihn schreibt: beim Abgang auf das Kabel und bei der Ankunft an der Karte. Seit F3.3b läuft das E-Mail-Programm mit (`emailClient`), seine gesendeten und abgeholten Mails stehen im Schnappschuss (`emailClientsByNodeId`); ein Programm-Thread kann MX nachschlagen (`resolveDnsMailServerSteps`). Seit F3.3a läuft der E-Mail-Server mit (`emailServer`); was er annimmt oder löscht, steht im Schnappschuss (`emailServersByNodeId`), aus dem es zurück ins Projekt geht; die Uhrzeit für seine Benachrichtigungen kommt aus der Option `wallClock`. Seit F3.2c ändert die Seite `konfig` der Router und Heimrouter die Firewall zur Laufzeit; die Änderung steht im Schnappschuss (`firewallConfiguration`), aus dem sie zurück ins Projekt geht. Seit F3.2b starten Router und Heimrouter ihren Webserver auf Port 80 mit Javas Seiten (Javas Server lauscht wegen eines Wettlaufs in `setAktiv` manchmal nie, der Kern immer; `swiftRouters` lässt ihn für den Swift-Vergleich weg), die Firewall führt ein Protokoll je Knoten (Regeltreffer bei TCP und UDP, verworfenes ICMP), das wie Javas Protokollseite einen Neustart überlebt, eine RIP-Route kennt die öffentliche Adresse des meldenden Routers (`hopPublicIp`), und TCP zählt Sequenznummern und Segmentgröße wie Java in Zeichen (UTF-16-Einheiten) statt in Bytes, ohne ein Zeichenpaar zu zerreißen; Bytes, die kein Text sind, zählen als Bytes. Seit F3.2a schließt ein Programm wie Javas `schliessen()` nur auf Bitte (`requestTcpClose`): Das FIN geht zur selben Zeit, nach dem, was der Programm-Thread noch tut. Seit F3.1 laufen Verbinden, Senden, Empfangen und Annehmen auch als Schritte eines Programm-Threads (`connectTcpSteps`, `sendTcpSteps`, `receiveTcpSteps`, `acceptTcpSteps`, `resolveHostSteps`); die blockierenden Aufrufe sind nur noch eine Hülle darum. Abweichend von Java: Ein Verbindungsaufbau ohne Route scheitert sofort (Javas Socket-Thread stirbt an der `RouteNotFoundException`, `verbinden` wartet ewig), eine Nachricht, die vor dem Schließen ankam, wird noch ausgegeben (Java verwirft sie), und Senden unterscheidet wie Java „nicht verbunden", „unterbrochen" und „Zeitüberschreitung". WLAN seit F2.7 an Java-Filius gemessen: zur Laufzeit ist ein Funkkabel ein Kabel wie jedes andere, und eine SSID verbindet nichts (nach ihr legt nur Javas Editor das Funkkabel, `JHostKonfiguration.updateWifiConnection`); Swifts Verbindung über die SSID zur Laufzeit, auch ohne Kabel (`wirelessAssociations`), nicht übernommen. Klasse statt Werttyp. Noch nicht übertragen (wirft `NotPortedError`): Remote Link | | `src/runtime/threads.ts` | Javas Threads der Programme (`Anwendung extends Thread`, `ServerMitarbeiter`) | neu (F3.1): ein Programm-Thread als Generator, der liefert, worauf er wartet (Bedingung, Zeit oder beides); die Engine setzt nach jedem Ereignis fort, wessen Warten vorbei ist, in der Reihenfolge, in der die Threads begannen; nichts blockiert die Engine. Abweichend von Java: ein Thread wacht sofort, wenn seine Bedingung gilt (Java sieht oft nur alle 100 ms nach) | | `src/runtime/apps/program.ts` | Java `filius.software.Anwendung` | neu (F3.1): die Zeilen im Fenster eines Programms (strukturiert, damit der Editor sie übersetzt) und der Befehls-Thread (`ausfuehren`) | | `src/runtime/apps/server.ts` | Java `ServerAnwendung`, `ServerMitarbeiter` | neu (F3.2a, aus `echo.ts` herausgelöst): was jeder Server teilt — ein Thread nimmt Verbindungen an, solange er eingeschaltet ist, je Verbindung einer beantwortet jede Nachricht; ausgeschaltet schließt er Socket und Verbindungen; Port belegt → er schaltet sich aus; seit F3.3a kann ein Server das Gespräch einer Verbindung selbst führen (`converse`: Begrüßung, keine oder mehrere Antworten, Schließen) | @@ -23,14 +23,15 @@ Swift-Pfade relativ zu `filius-ipad/ios/FiliusPad/TopologyEditor/` (Stand | `src/runtime/http.ts` | Java `HTTPNachricht`, Spring `UriUtils.encodePath`/`decode`, `java.net.URLDecoder` | neu nach Java (F3.2a): Anfragen und Antworten in Javas Textform, Javas Statustexte, Pfade kodiert wie `UriUtils`; seit F3.2c `javaUrlDecode` für Formulardaten wie `URLDecoder.decode` (UTF-8, `+` als Leerzeichen, scheitert, wo Java wirft) | | `src/util/javaBase64.ts` | Java `filius.rahmenprogramm.Base64` (iHarder) | aus `packages/fls` (`exportProject.ts`) in den Kern gezogen (F3.2a), dazu der Leser, der Leerraum überspringt | | `src/runtime/email.ts` | Java `filius.software.email.Email`, `AddressEntry`, `EmailUtils` | neu nach Java (F3.3a): Mails in Javas Textform (From, To, Cc, Subject, Date Received, Leerzeile, Text; kein Bcc), Adressen „Name “, Javas Größe einer Mail für POP3. Abweichend von Java: der Kopf endet an seiner Leerzeile, ein unbekanntes Feld wird übergangen (Java beendet dort den Kopf und liest die folgenden Felder als Text), eine Zeile ohne Feld beginnt den Text (Java verwirft sie) | -| `src/runtime/apps/emailServer.ts` | Java `EmailServer`, `SMTPServer`, `SMTPMitarbeiter`, `POP3Server`, `POP3Mitarbeiter`, `EmailKonto` | neu nach Java (F3.3a): Konten einer Domain, SMTP auf Port 25 speichert Mails an eigene Konten (wie Java neu gelesen) und schickt bei unbekannten Empfängern eine Benachrichtigung an einen Absender der Domain, POP3 auf Port 110 gibt Mails ab 0 nummeriert aus; beide zusammen ein- und ausgeschaltet, POP3 zuerst; SMTP-Antworten in der Sprache des Projekts; Fensterzeilen wie Java. An Java-Filius gemessen (`EmailRun`, `MailCases`). Abweichend von Java: nach einer Mail ist der Umschlag neu (Java antwortet dem nächsten Befehl 503 und behält Absender, Empfänger und Text); ein Befehl, den der Zustand nicht nimmt, bekommt 503 (Java schweigt), HELO beginnt neu; in DATA ist alles Text, auch `quit`; die Domain gilt in jeder Schreibweise; ein Empfänger ohne `@` ist unbekannt, ein leerer Absender bekommt keine Benachrichtigung (Java wirft), eine Benachrichtigung an eine Mail ohne From geht an den Absender des Umschlags (Java: `To: null`); POP3: eine Mail lässt sich mehrmals abrufen, eine fehlende Mail, `LIST` ohne Mails und falsche Argumente geben `-ERR` (Java: leere Mail, leere Antwort, Abbruch), `LIST n` listet die eine Mail, Nummern bleiben nach `DELE` (Javas `LIST` zählt neu), vor der Anmeldung `-ERR unknown command`, `QUIT` immer `+OK`. Noch nicht: Weiterleitung an fremde Domains (F3.3b), die Kontodatei `/mailserver/konten.txt` zur Laufzeit | +| `src/runtime/apps/emailServer.ts` | Java `EmailServer`, `SMTPServer`, `SMTPMitarbeiter`, `POP3Server`, `POP3Mitarbeiter`, `EmailKonto` | neu nach Java (F3.3a): Konten einer Domain, SMTP auf Port 25 speichert Mails an eigene Konten (wie Java neu gelesen) und schickt bei unbekannten Empfängern eine Benachrichtigung an einen Absender der Domain, POP3 auf Port 110 gibt Mails ab 0 nummeriert aus; beide zusammen ein- und ausgeschaltet, POP3 zuerst; SMTP-Antworten in der Sprache des Projekts; Fensterzeilen wie Java. An Java-Filius gemessen (`EmailRun`, `MailCases`). Abweichend von Java: nach einer Mail ist der Umschlag neu (Java antwortet dem nächsten Befehl 503 und behält Absender, Empfänger und Text); ein Befehl, den der Zustand nicht nimmt, bekommt 503 (Java schweigt), HELO beginnt neu; in DATA ist alles Text, auch `quit`; die Domain gilt in jeder Schreibweise; ein Empfänger ohne `@` ist unbekannt, ein leerer Absender bekommt keine Benachrichtigung (Java wirft), eine Benachrichtigung an eine Mail ohne From geht an den Absender des Umschlags (Java: `To: null`); POP3: eine Mail lässt sich mehrmals abrufen, eine fehlende Mail, `LIST` ohne Mails und falsche Argumente geben `-ERR` (Java: leere Mail, leere Antwort, Abbruch), `LIST n` listet die eine Mail, Nummern bleiben nach `DELE` (Javas `LIST` zählt neu), vor der Anmeldung `-ERR unknown command`, `QUIT` immer `+OK`. Seit F3.3b leitet der Server Mails an fremde Domains per MX weiter (in seinem eigenen Thread, je Weiterleitung ein neuer SMTP-Client) und schickt eine Benachrichtigung an einen fremden Absender mit leerem Absender an dessen Domain. Noch nicht: die Kontodatei `/mailserver/konten.txt` zur Laufzeit | +| `src/runtime/apps/emailClient.ts` | Java `EmailAnwendung`, `SMTPClient`, `POP3Client`, das Senden aus `GUIApplicationEmailAnwendungWindow` | neu nach Java (F3.3b): das E-Mail-Programm sendet eine Mail an den SMTP-Server seines Kontos, eine Verbindung je Empfänger (An, Cc, Bcc), und holt die Mails seines Kontos vom POP3-Server (jede abgerufen, dann gelöscht); die Prüfungen des Fensters (kein Konto, Adresse, die Javas Muster nicht nimmt, kein Empfänger); Meldungen wie Javas Beobachter (Verbindung, versendet, getrennt, Ausnahmen); der SMTP-Client dient auch dem Server zum Weiterleiten. An Java-Filius gemessen (`EmailClientRun`). Abweichend von Java: der SMTP-Port des Kontos gilt (Java verbindet immer zu 25); drei SYN statt einem | | `src/runtime/apps/echo.ts` | Java `filius.software.clientserver` (`ServerBaustein`, `ServerBausteinMitarbeiter`, `ClientAnwendung`, `ClientBaustein`) | neu nach Java statt nach Swift (F3.1): Echo-Server (auf `server.ts`, sendet jede Nachricht zurück) und einfacher Client (verbinden über Adresse oder Namen, senden, empfangen, trennen), mit Javas Fensterzeilen. An Java-Filius gemessen. Abweichend von Java: Der Server merkt das Ausschalten, der Client die Verbindung sofort (Java alle 100 ms); ohne Route scheitert der Client sofort (Java wartet ewig ohne Meldung); ausgeschaltet bestätigt der Server noch das FIN seiner Verbindungen (Java gibt den Port frei, das FIN bleibt unbeantwortet) | | `src/runtime/dns.ts` | Java `filius.software.dns.DNSNachricht`, `Query`, `ResourceRecord` | neu nach Java statt nach Swift (Swift ersetzt Javas Textnachrichten durch `FILIUS-DNS-TYPED/1`): Kopfzeile `ID=… QR=… RCODE=… QDCOUNT=… …`, Frage- und Eintragszeilen, Suche nach Namen ohne Rücksicht auf Groß- und Kleinschreibung, NS der längsten Zone, sonst der Wurzel | | `src/runtime/ipv4.ts` | Engine `parseIPv4`/`sameSubnet` | übertragen | | `src/runtime/packets.ts` | Engine, Paketmodelle | übertragen; `Data` → `Uint8Array` | | `src/runtime/random.ts` | Engine, `TopologyJavaCompatibleRandom` | übertragen; BigInt für die 48-Bit-Arithmetik; dazu `nextDouble` (Javas `Math.random`, an OpenJDK 21 gemessen) | | `src/runtime/routeTable.ts` | `State/TopologyJavaRouteTable.swift` | übertragen ohne Tabellengeometrie (gehört in den Editor) | -| `src/runtime/snapshot.ts` | Engine, `TopologyNetworkRuntimeTopologySnapshot` | übertragen, bisher mit den Feldern der übertragenen Schichten, seit der Abnahme F2 mit der IP-Weiterleitung, wo sie vom Standard der Art abweicht, seit F2.3 mit den DHCP-Einstellungen von Clients und Servern, seit F2.4a mit den eingeschalteten DNS-Servern, seit F3.1 mit den installierten Echo-Servern (Port, ein oder aus) und einfachen Clients, seit F3.2a mit den Webservern, Browsern und den Dateisystemen der Knoten, seit F3.2b mit der Sprache der Seiten, die Geräte selbst schreiben, seit F3.3a mit den E-Mail-Servern (Domain, Konten mit Postfächern, ein oder aus); ohne Swifts WLAN-Einstellungen der Rechner (`hostWirelessConfigurationsByNodeID`), die zur Laufzeit nichts bewirken (F2.7) | +| `src/runtime/snapshot.ts` | Engine, `TopologyNetworkRuntimeTopologySnapshot` | übertragen, bisher mit den Feldern der übertragenen Schichten, seit der Abnahme F2 mit der IP-Weiterleitung, wo sie vom Standard der Art abweicht, seit F2.3 mit den DHCP-Einstellungen von Clients und Servern, seit F2.4a mit den eingeschalteten DNS-Servern, seit F3.1 mit den installierten Echo-Servern (Port, ein oder aus) und einfachen Clients, seit F3.2a mit den Webservern, Browsern und den Dateisystemen der Knoten, seit F3.2b mit der Sprache der Seiten, die Geräte selbst schreiben, seit F3.3a mit den E-Mail-Servern (Domain, Konten mit Postfächern, ein oder aus), seit F3.3b mit den E-Mail-Programmen (Konto, Ordner); ohne Swifts WLAN-Einstellungen der Rechner (`hostWirelessConfigurationsByNodeID`), die zur Laufzeit nichts bewirken (F2.7) | | `src/runtime/speed.ts` | Engine, `TopologyNetworkRuntimeSpeed` | übertragen; dazu Javas RTT (`Verbindung.holeRTT`: 50 Kabel), die Swift nicht kennt | | `src/runtime/trace.ts` | Engine, Paketspur-Modell | übertragen | | `src/runtime/captureRows.ts` | Java `Lauscher.datenVorbereiten`, `classifyApplicationLayerProtocol`, die `toString` von `ArpPaket`, `IpPaket`, `IcmpPaket` | neu nach Java (F2.8b): die Tabelle des Mitschnitts, je Frame eine Zeile je Schicht (Ethernet; ARP, ICMP oder IP; TCP oder UDP; die Daten, wenn Javas `trim` etwas übrig lässt), in beiden Ansichten Javas (Ende als Adresse:Port samt Datenzeile, oder nur Ports und die Datenzeile ohne Enden); die Bemerkung bleibt strukturiert, `captureCommentText` sagt sie mit gegebenen Wörtern und Zahlenformat wie Java. An Javas eigenen Tabellen gemessen. Abweichend von Java: „ICMP Time Exceeded“ (Java: „Exeeded“) | @@ -54,6 +55,8 @@ Swift-Pfade relativ zu `filius-ipad/ios/FiliusPad/TopologyEditor/` (Stand | `test/web.test.ts` | — | neu (F3.2a): HTTP-Form, Pfadkodierung, Base64, Adresszeile, Bildersuche; am Server 400/501 (seit F3.2c auch für `get` und `Post`), Durchgriff, Ordner, Inhaltsarten, Binärdateien, virtuelle Hosts (fünf Zeilen, Schalter ohne Datei); am Browser Seite und Bilder, Link ohne Host, nur HTML sucht Bilder, keine Adresse, keine Antwort | | `test/emailServer.test.ts`, `test/email-server.cases.txt`, `test/email-server.{de,en}.java.json`, `test/mailAccounts.ts` | — | neu (F3.3a): 26 Fälle der SMTP- und POP3-Gespräche gegen Java-Filius (`MailCases`), je Nachricht Antworten, Fensterzeilen, Schließen und Konten, Deutsch und Englisch; 18 Fälle mit benannten Java-Fehlern (`JAVA_BUGS`); dazu Adressen, Mailtext und Größe, und im Kern: Ein- und Ausschalten, Postfächer im Schnappschuss und über einen Neustart, Datum der Benachrichtigung je Sprache | | `test/emailJava.test.ts`, `test/scenarios/mail-lan.scenario.json`, `test/scenarios/email-java-*.java.json` | — | neu (F3.3a): vier Abläufe mit dem E-Mail-Server gegen Java-Filius (`EmailRun`): SMTP, SMTP mit Fehlern und Benachrichtigung, POP3 zweimal angemeldet, POP3-Anmeldefehler; je Karte Frames, Zeiten, Tabellen, die Fensterzeilen von Server und Client und die Konten am Ende (das Datum der Benachrichtigung als Platzhalter) | +| `test/emailClientJava.test.ts`, `test/scenarios/email-client-java-*.java.json` | — | neu (F3.3b): sechs Abläufe mit dem E-Mail-Programm und zwei Servern gegen Java-Filius (`EmailClientRun`): senden mit Weiterleitung, abholen, Server per Name und Benachrichtigungen von beiden Servern, falsches Passwort, kein Server, unbekannter Servername; je Karte Frames, Zeiten, Tabellen, die Meldungen von Programm und Servern, Posteingang, Gesendete und Konten am Ende; Javas 100-ms-Blick kostet je Verbindung (und je DNS-Antwort, auf die es so wartet) eine Periode Toleranz; ein benannter Java-Fehler (nur ein SYN); bei `byName` die Startnummern ohne die Million (Thread-Wettlauf in Java) | +| `test/emailClient.test.ts` | — | neu (F3.3b): was das Fenster ablehnt, Bcc, der SMTP-Port des Kontos, eine ungültige Kontoadresse, eine Verbindung, die beim Warten endet, eine Mail ohne Absender aus dem Modell, die Ordner im Schnappschuss | | `test/apps.test.ts` | — | neu (F3.1): wie Threads aufwachen (nach dem Ereignis, nach einer Pause hinter den anderen, ein Weckruf nur für sein Warten, Reihenfolge des Beginns, kein Warten auf schon Geltendes), und was die Java-Abläufe nicht zeigen: belegter Port, Name über DNS und ohne DNS, keine Route, unbestätigtes Senden, Neustart, eine Nachricht vor dem Schließen | | `test/captureRows.test.ts` | — | neu (F2.8b): die Regeln der Tabelle, die kein Java-Lauf zeigt (GNT, POP3, SMTP, HTTP, Javas `trim`, ICMP-Fehler mit eingebettetem ICMP, Ansicht ohne Enden) | | `test/wlanJava.test.ts`, `test/scenarios/wlan-lan.scenario.json`, `test/scenarios/wlan-java-*.java.json` | — | neu: vier Pings gegen Java-Filius (`WlanRun`): über Funkkabel, über ein Kabel und an ein Notebook mit der SSID des Switches, aber ohne Kabel (ARP scheitert in Java wie im Kern); Frames, Abstände, Ergebnis und Dauer | @@ -70,7 +73,7 @@ Swift-Pfade relativ zu `filius-ipad/ios/FiliusPad/TopologyEditor/` (Stand | `src/archive.ts` | ebenda, Archiv-Teil von Import und Export | übertragen, ohne die XML-Ebene | | `src/javabeans.ts`, `src/javaDefaults.json` | — | neu: XMLEncoder-Leser nach den Regeln von `java.beans.XMLDecoder` (Swift liest elementweise und verliert geteilte Werte); Getter-Standardwerte und statische Konstanten mit `tools/java-oracle` gemessen; merkt sich den Java-Typ jedes Primitivs an Settern, Konstruktor- und Aufrufargumenten und welche Eigenschaften ein eigener Getter angelegt hat (für `beanCapture.ts`) | | `src/importProject.ts` | `Persistence/TopologyProjectStore.swift` (Knoten, Ports, Kabel, IP-Konfiguration, Switch/WLAN, Routen, RIP, Firewall, DHCP, Portweiterleitung, Modem, Dateisysteme, Programme, Doku-Elemente des Imports) | übertragen, Eingabe ist Javas Sicht: Name und Port-Anzahl wie Java, abgelehnte Adresse → Swift-Standard, Router-Standardgateway wie Java (Swift verliert es), jede Router-Firewall eingetragen, Konfigurationstexte wie in Swift getrimmt (`swiftTrim`), Rechner ohne Dateisystem leer wie in Java (Swift: Demo-Dateien), alle Programme bleiben (Swift verwirft sechs), Webserver-Dateien bleiben in `/webserver` (Swift: `/www`), keine versteckten Zustandsdateien im Dateisystem, DNS-Einträge so, wie Javas Server sie aus `/dns/hosts` beantwortet, WLAN eines Rechners eingeschaltet nach Javas Funk-Merkmal der Karte (auch ohne SSID; Swift: jede SSID); der Webserver behält Javas Schalter für virtuelle Hosts (Swift: aus); gegen Swifts importiertes Modell auf 13 Dateien geprüft; seit der Abnahme F2 die IP-Weiterleitung eines Knotens, wo sie vom Standard seiner Art abweicht (`ipForwardingByNodeId`; Java `ipForwardingEnabled`, übersehen bis das Firewall-Beispiel lief) | -| `test/importProject.test.ts` | — | neu: Swifts importiertes Modell (13 Dateien, begründete Abweichungen; im Dateisystem ausgenommen nur Swifts versteckte Zustandsdateien), Vollständigkeit aller 23, Pings im Kern (über einen Router; über drei Router mit manuellen Routen und Router-Gateways; seit F2.7 über Funkkabel); seit der Abnahme F2 IP-Weiterleitung und eingeschaltete DNS-Server im Schnappschuss; seit F3.2c eine Firewall, über `konfig` im Lauf geändert, gespeichert und wieder geöffnet (`internetwork_komplett.fls`); seit F3.3a eine Mail, im Lauf per SMTP angenommen, gespeichert und wieder geöffnet (`email_komplett.fls`) | +| `test/importProject.test.ts` | — | neu: Swifts importiertes Modell (13 Dateien, begründete Abweichungen; im Dateisystem ausgenommen nur Swifts versteckte Zustandsdateien), Vollständigkeit aller 23, Pings im Kern (über einen Router; über drei Router mit manuellen Routen und Router-Gateways; seit F2.7 über Funkkabel); seit der Abnahme F2 IP-Weiterleitung und eingeschaltete DNS-Server im Schnappschuss; seit F3.2c eine Firewall, über `konfig` im Lauf geändert, gespeichert und wieder geöffnet (`internetwork_komplett.fls`); seit F3.3a eine Mail, im Lauf per SMTP angenommen, gespeichert und wieder geöffnet (`email_komplett.fls`); seit F3.3b eine Mail vom Programm über den MX an die andere Domain, abgeholt, gespeichert und wieder geöffnet | | `src/systemSoftware.ts` | Java `SwitchFirmware`, `Betriebssystem`, `VermittlungsrechnerBetriebssystem`, `GatewayFirmware`, `Weiterleitungstabelle`, `Firewall`, `FirewallRule`, `DHCPServer`, `ModemFirmware`, `Dateisystem`, `Datei` | neu nach Java: SSID, Lernzeit, RIP, manuelle Routen, Router-Firewall (an allen Stellen, an denen die Datei sie erreicht), DHCP (ein kaputter statischer Eintrag fällt allein weg, Java verliert alle folgenden), statische NAT, Modem, Dateisystem (bei Router und Heimrouter das, was die Datei zu den Vorlagen des Konstruktors hinzufügt, oder eine eigene Wurzel, die sie ersetzt), installierte Programme von Rechner und Notebook (eigene Anwendungen eines Projekts als erfasste Bean, `beanCapture.ts`); `Character.isWhitespace` am JDK gemessen; gegen Java geprüft; seit der Abnahme F2 `ipForwardingEnabled` jedes Knotens mit IP-Stapel, mit Javas Standard der Klasse (Router und Heimrouter an) | | `src/javaIp.ts` | Java `IP.inetAton`/`ipCheck` | neu nach Java; an 46 Fällen mit Java gemessen; seit F2.5a in `packages/core/src/util/javaIp.ts` (der Kern liest damit RIP-Nachrichten) | | `src/dnsHosts.ts` | Java `DNSServer.leseRecordListe`, `ResourceRecord`, `Dateisystem.holeDatei`; Swift `State/TopologyDNSResolver.swift` (`TopologyDNSHostsFileCodec`) als Vergleich | neu nach Java: Felder nur an einzelnen Leerzeichen, keine Kommentare, ungültige TTL → 3600, Doppelte bleiben; ins Modell kommt nur, was Java beantwortet (Typ A/MX/NS, Name nicht leer); Javas Fehler nicht übernommen: Label mit Ziffer vorn erlaubt, kein Backslash, letztes Label nicht rein numerisch (RFC 1123/3696), Typ in jeder Schreibung (RFC 4343), negative TTL ungültig (RFC 2181); an 76 Fällen mit Java und Swift gemessen | @@ -82,7 +85,7 @@ Swift-Pfade relativ zu `filius-ipad/ios/FiliusPad/TopologyEditor/` (Stand | `src/beanCapture.ts` | — | neu: eine decodierte Bean zurück in die Form des Schreibers, mit Javas Zahlentypen; der Verweis auf das Betriebssystem des Knotens als Marke; was das Format nicht sagen kann (Unaufgelöstes, `Field`, Fabrikmethode, ein anderswo per Getter erreichtes Objekt), wird abgelehnt, nicht geraten; Rundlauf-Tests in `test/beanCapture.test.ts` | | `src/javaBeansWriter.ts` | — | neu: Schreiber für das `XMLDecoder`-Format, Gegenstück zu `javabeans.ts`; ausdrücklich typisierte Eingabe, geteilte Objekte über `id`/`idref`, was XML nicht fassen kann (und CR) als ``; von Java selbst geprüft (`BeansDump`) | | `test/javaBeansWriter.test.ts`, `test/beans/` | — | neu: 11 Dateien des Schreibers, von Javas `XMLDecoder` gelesen und beschrieben; Erwartungen von Hand | -| `src/projectSnapshot.ts` | Swift `TopologyNetworkRuntimeTopologySnapshot(editorState:)` | neu (Abnahme F2): das importierte Projekt als Schnappschuss des Kerns; nur die Kabel verbinden (Swifts Verbindung über die SSID nicht übernommen), nur eingeschaltete DNS-Server laufen; seit F3.1 jeder installierte Echo-Server (ein oder aus, er lässt sich zur Laufzeit schalten) und einfache Client; seit F3.2a jeder Webserver und Browser und die Dateisysteme; seit F3.2c der Rückweg `projectWithSimulationChanges`: die Firewalls aus dem Schnappschuss des Laufs ins Projekt, wie Java sie beim Speichern hat; seit F3.3a die installierten E-Mail-Server (ein oder aus) und auf dem Rückweg ihre Postfächer | +| `src/projectSnapshot.ts` | Swift `TopologyNetworkRuntimeTopologySnapshot(editorState:)` | neu (Abnahme F2): das importierte Projekt als Schnappschuss des Kerns; nur die Kabel verbinden (Swifts Verbindung über die SSID nicht übernommen), nur eingeschaltete DNS-Server laufen; seit F3.1 jeder installierte Echo-Server (ein oder aus, er lässt sich zur Laufzeit schalten) und einfache Client; seit F3.2a jeder Webserver und Browser und die Dateisysteme; seit F3.2c der Rückweg `projectWithSimulationChanges`: die Firewalls aus dem Schnappschuss des Laufs ins Projekt, wie Java sie beim Speichern hat; seit F3.3a die installierten E-Mail-Server (ein oder aus) und auf dem Rückweg ihre Postfächer; seit F3.3b die installierten E-Mail-Programme und auf dem Rückweg ihre Ordner | | `test/examplesJava.test.ts`, `test/examples/*.java.json` | — | neu (Abnahme F2): fünf Beispiele von Filius (`internetwork_komplett`, `einfaches_rechnernetz_komplett`, `dns_server`, `nat_with_mapped_port`, `Internet_Komplett_…_DE`) mit dem eigenen Leser eingelesen und im Kern gespielt, gegen Java-Filius (`ExampleRun`): je Karte Frames, Zeiten und Tabellenzeilen, die Aufrufe, die Adressen am Ende; gleichzeitig startende DHCP-Clients je Client; zwei benannte Java-Fehler (`JAVA_BUGS`: Ping ohne Gateway wirft eine `NullPointerException`; NAT-Eintrag nur für die erste Gegenstelle) | | `src/topologyWriter.ts` | Java `SzenarioVerwaltung.netzwerkSpeichern`, Konstruktoren von `NetzwerkInterface`, `Port`, `GUIKabelItem` und der Systemsoftware | neu nach Java: `konfiguration.xml` aus Javas Sicht — Geräte, Schnittstellen (vom Konstruktor angelegte über Getter, weitere per `add`), Ports über Getter-Verweise, Kabel samt Zeichen-Enden (`kabelpanel`), Doku-Elemente; Systemsoftware über ihre Setter: SSID, Lernzeit, RIP, manuelle Routen, DHCP-Client und -Server, statische NAT, Modem, Router-Firewall (über das `konfig`-Plug-in des Webservers, wie XMLEncoder sie erreicht); eigene Anwendungen eines Projekts, wie die Datei sie hatte; Dateisysteme (an die Wurzel des Konstruktors angehängt wie bei XMLEncoder, beim Router hinter dessen Vorlagen); installierte Programme nach den Dateien (Webserver, Tauschbörse und E-Mail-Server legen ihre Ordner nur an, wo sie fehlen; der DNS-Server liest `/dns/hosts` beim Installieren), je unter ihrem Schlüssel mit der Systemsoftware wie `installApp`, samt Einstellungen und persönlicher Firewall; E-Mail: Domain und Bean-Konten des Servers samt Postfächern, Ordner und Adressbuch des Clients (sein Konto steht in `/konten.txt`, einer Datei); Javas Fehler nicht übernommen: ein Empfänger, den eine ältere Datei als Zeichenkette hält, wird als der `AddressEntry` geschrieben, den Javas `AddressEntry(String)` daraus macht (Java legt die Zeichenkette ungeprüft in die typisierte Liste, sein E-Mail-Fenster scheitert daran), ein `null`-Empfänger fällt weg; Kopf „Filius version: 2.14.0 (mdg-filius)“; seit der Abnahme F2 `ipForwardingEnabled`, wo es vom Standard der Klasse abweicht | | `test/topologyWriter.test.ts`, `test/written.java.json` | — | neu: alle 23 Korpus-Dateien gelesen und neu geschrieben, von Java geladen — Topologie, Systemsoftware, Dateisysteme und Programme samt E-Mail wie beim Original (bis auf die benannte Abweichung bei Empfängern als Zeichenkette, nur in `man-in-the-middle.fls`) (Java gegen Java); dazu eine künstliche Topologie mit dem, was der Korpus nicht hat (u. a. eingeschaltete Router-Firewall mit Regeln jedes Protokolls, alle Firewall-Schalter abseits der Vorgabe, Modem mit eigenem Port und Ziel, verschachtelter Dateibaum mit umbenannter Wurzel, namenlosem Ordner, Datei ohne Typ und Inhalt mit CR/CRLF und Zeichen jenseits der BMP, Heimrouter mit eigener Wurzel, jedes Filius-Programm mit Einstellungen abseits der Vorgabe samt persönlicher Firewall, von Java angelegte Ordner `/peer2peer` und `/mailserver`, E-Mail-Server und -Client mit Konto, Postfach, drei Ordnern, Adressbuch und Empfängern aller Formen) | diff --git a/packages/core/src/index.ts b/packages/core/src/index.ts index 463f47e..141cdfb 100644 --- a/packages/core/src/index.ts +++ b/packages/core/src/index.ts @@ -25,6 +25,7 @@ export * from './runtime/apps/web.js'; export * from './runtime/apps/routerPages.js'; export * from './runtime/apps/firewallSettings.js'; export * from './runtime/apps/emailServer.js'; +export * from './runtime/apps/emailClient.js'; export * from './runtime/email.js'; export * from './runtime/http.js'; export * from './util/equal.js'; diff --git a/packages/core/src/runtime/apps/emailClient.ts b/packages/core/src/runtime/apps/emailClient.ts new file mode 100644 index 0000000..c90c673 --- /dev/null +++ b/packages/core/src/runtime/apps/emailClient.ts @@ -0,0 +1,344 @@ +// FILIUS' e-mail program (filius.software.email: EmailAnwendung, SMTPClient, +// POP3Client) and the SMTP client its server sends mails on with. The +// program sends a mail to its account's SMTP server, one connection for each +// recipient, and fetches the account's mails from its POP3 server (each +// retrieved, then deleted). The window shows a failure's message; the +// program also writes how each connection went, as Java tells its +// observers. +// +// Departures from Java (emailClientJava.test.ts names each): +// - a connection attempt sends three SYNs, as every TCP connection in the +// core (Java's client sends one, tcpJava.test.ts); +// - the account's SMTP port counts (Java always connects to 25). + +import type { Id } from '../../ids.js'; +import type { EmailClientAccount, EmailMessage } from '../config.js'; +import { addressEntry, addressList, emailMessage, formatMail, isMailAddress, javaSplit, parseMail, type Mail, type MailboxEntry } from '../email.js'; +import type { NetworkRuntimeEngine } from '../engine.js'; +import { javaTrim } from '../http.js'; +import { pause, type Steps } from '../threads.js'; +import type { ConnectFailure } from './echo.js'; +import { CommandThread, ProgramLog } from './program.js'; + +export const SMTP_SERVER_PORT = 25; + +/** Why a mail could not be sent or fetched: the server's answer, or the connection. */ +export type MailFailure = + /** An answer the client did not expect (Java throws Exception(answer)). */ + | { readonly kind: 'answer'; readonly text: string } + /** The connection could not be made (TCPSocket's exceptions). */ + | { readonly kind: 'connect'; readonly failure: ConnectFailure } + /** The connection ended while the client waited for an answer (sw_tcpsocket_msg9). */ + | { readonly kind: 'receiveFailed' }; + +/** What the SMTP client tells the program it works for (EmailAnwendung or EmailServer). */ +export type SmtpClientLogEntry = + /** EmailServer.LINE_SEPARATOR: a connection begins. */ + | { readonly kind: 'connectionStarting' } + /** sw_smtpclient_msg1, msg2. */ + | { readonly kind: 'smtpConnected'; readonly address: string; readonly port: number } + /** sw_smtpclient_msg4 and the recipient. */ + | { readonly kind: 'mailSent'; readonly recipients: string } + /** sw_smtpclient_msg1, msg3. */ + | { readonly kind: 'smtpDisconnected'; readonly address: string; readonly port: number } + | { readonly kind: 'failed'; readonly failure: MailFailure }; + +export type EmailClientLogEntry = SmtpClientLogEntry; + +const encode = (text: string) => new TextEncoder().encode(text); +const decode = (bytes: Uint8Array) => new TextDecoder().decode(bytes); + +/** EingabenUeberpruefung.musterMindEinZeichen: at least one character, no line break. */ +const hasCharacters = (text: string) => /^[^\n\r\u0085\u2028\u2029]+$/.test(text); + +/** A thrown failure of a dialogue (Java's exceptions). */ +class DialogueFailure extends Error { + constructor(readonly failure: MailFailure) { + super(failure.kind); + } +} + +/** A client's connection to a server, as Java's TCPSocket of a ClientAnwendung. */ +class ClientConnection { + private constructor( + private readonly engine: NetworkRuntimeEngine, + readonly socketId: Id, + readonly address: string, + readonly port: number, + ) {} + + /** + * initialisiereSocket: the address (or name) resolved in the program's + * thread, then connected by the new socket's thread, which begins after + * what is already awake at this time (the last connection's close sends + * its FIN first); the failure otherwise. + */ + static *open(engine: NetworkRuntimeEngine, nodeId: Id, host: string, port: number): Steps { + const address = yield* engine.resolveHostSteps(nodeId, host); + if (address === undefined) return 'unresolved'; + yield pause(engine.state.currentTimeMilliseconds); + const socketId = engine.openTcpClientSocket(nodeId, address, port); + const result = socketId === undefined ? 'invalidSocket' : yield* engine.connectTcpSteps(socketId); + if (result !== 'connected') return result === 'timedOut' ? 'timedOut' : 'failed'; + return new ClientConnection(engine, socketId!, address, port); + } + + *send(text: string): Steps { + yield* this.engine.sendTcpSteps(this.socketId, encode(text)); + } + + /** TCPSocket.empfangen: the next message; a failure when the connection ends. */ + *receive(): Steps { + const received = yield* this.engine.receiveTcpSteps(this.socketId); + if (received.type !== 'message') throw new DialogueFailure({ kind: 'receiveFailed' }); + return decode(received.payload); + } + + close(): void { + this.engine.requestTcpClose(this.socketId); + } +} + +/** + * SMTPClient.initialisiereSocket, versenden, schliesseSocket: one mail to + * one server for the recipients given (a comma list), told to `log`; true + * when the server took it. + */ +export function* sendMailSteps( + engine: NetworkRuntimeEngine, + nodeId: Id, + log: (entry: SmtpClientLogEntry) => void, + server: string, + port: number, + mail: Mail, + sender: string, + recipients: string, +): Steps { + log({ kind: 'connectionStarting' }); + const connection = yield* ClientConnection.open(engine, nodeId, server, port); + if (typeof connection === 'string') { + log({ kind: 'failed', failure: { kind: 'connect', failure: connection } }); + return false; + } + log({ kind: 'smtpConnected', address: connection.address, port: connection.port }); + let sent = false; + try { + sent = yield* smtpDialogue(engine, nodeId, connection, mail, sender, recipients); + log({ kind: 'mailSent', recipients }); + } catch (error) { + if (!(error instanceof DialogueFailure)) throw error; + log({ kind: 'failed', failure: error.failure }); + } + connection.close(); + log({ kind: 'smtpDisconnected', address: connection.address, port: connection.port }); + return sent; +} + +/** SMTPClient.versenden: HELO, MAIL FROM, RCPT TO, DATA, the mail, QUIT; false where Java gives up without a word. */ +function* smtpDialogue(engine: NetworkRuntimeEngine, nodeId: Id, connection: ClientConnection, mail: Mail, sender: string, recipients: string): Steps { + const expect = function* (command: string, accepted: (answer: string) => boolean): Steps { + yield* connection.send(command); + const answer = yield* connection.receive(); + if (!accepted(answer)) throw new DialogueFailure({ kind: 'answer', text: answer }); + }; + const code = (answer: string) => answer.slice(0, 3); + if (!(yield* connection.receive()).startsWith('220')) return false; + yield* expect(`HELO ${engine.networkInterfaces(nodeId)[0]?.ipAddress ?? 'null'}`, (answer) => answer.startsWith('250')); + const senderAddress = addressEntry(sender).mailAddress; + if (senderAddress === null || (senderAddress !== '' && !isMailAddress(senderAddress))) return false; + yield* expect(`MAIL FROM: <${senderAddress}>`, (answer) => code(answer) === '250'); + for (const recipient of javaSplit(recipients, ',')) { + if (!isMailAddress(recipient)) return false; + yield* expect(`RCPT TO:<${recipient}>`, (answer) => code(answer) === '250' || code(answer) === '251'); + } + yield* expect('DATA', (answer) => code(answer) === '354'); + yield* expect(`${formatMail(mail)}\r\n.\r\n`, (answer) => answer.startsWith('250')); + yield* connection.send('QUIT'); + yield* connection.receive(); + return true; +} + +/** + * POP3Client.emailsHolen: connected to the server, logged in, each mail + * retrieved (and handed to `received`) and deleted, then QUIT; a failure + * told to `log`. + */ +export function* fetchMailSteps( + engine: NetworkRuntimeEngine, + nodeId: Id, + log: (entry: EmailClientLogEntry) => void, + server: string, + port: number, + username: string, + password: string, + received: (mail: Mail) => void, +): Steps { + const connection = yield* ClientConnection.open(engine, nodeId, server, port); + if (typeof connection === 'string') { + log({ kind: 'failed', failure: { kind: 'connect', failure: connection } }); + return; + } + const expect = function* (command: string): Steps { + yield* connection.send(command); + const answer = yield* connection.receive(); + if (!answer.startsWith('+OK')) throw new DialogueFailure({ kind: 'answer', text: answer }); + return answer; + }; + try { + // Java's chain of erfolg: a step that cannot be taken ends it without a word; QUIT comes in any case. + if ((yield* connection.receive()).startsWith('+') && hasCharacters(username)) { + yield* expect(`USER ${username}`); + if (hasCharacters(password)) { + yield* expect(`PASS ${password}`); + const count = Number.parseInt(javaSplit(yield* expect('STAT'), ' ')[1] ?? '', 10); + const numbers = + count > 0 + ? javaSplit(yield* expect('LIST'), '\n') + .slice(1) + .map((line) => Number.parseInt(javaSplit(line, ' ')[0] ?? '', 10)) + : []; + for (const number of numbers) { + const answer = yield* expect(`RETR ${number}`); + const lineEnd = answer.indexOf('\n'); + if (lineEnd > 0) received(parseMail(answer.slice(lineEnd + 1))); + yield* expect(`DELE ${number}`); + } + } + } + yield* expect('QUIT'); + } catch (error) { + if (!(error instanceof DialogueFailure)) throw error; + log({ kind: 'failed', failure: error.failure }); + } + connection.close(); +} + +/** What the program's window asks for a mail (GUIApplicationEmailAnwendungWindow). */ +export interface MailForm { + readonly to: string; + readonly cc: string; + readonly bcc: string; + readonly subject: string; + readonly text: string; +} + +/** Why the window does not send (emailanwendung_msg47, msg20, msg21). */ +export type MailFormProblem = 'noAccount' | 'invalidAddress' | 'noRecipient'; + +/** The window's mailPruefen: each address of the field, if any, as Java's pattern wants it. */ +const validField = (field: string) => javaTrim(field) === '' || javaSplit(field, ',').every((each) => isMailAddress(javaTrim(each))); + +/** A mail of the program's folders, as the model holds it. */ +function entryOf(message: EmailMessage): MailboxEntry { + const sender = message.from.name === null && message.from.mailAddress === null ? null : message.from; + return { + mail: { + sender, + to: message.to, + cc: message.cc, + bcc: message.bcc, + subject: message.subject, + text: message.body, + dateReceived: message.receivedAtMilliseconds === undefined ? '' : String(message.receivedAtMilliseconds), + }, + isNew: message.isNew, + isMarkedForDeletion: message.isMarkedForDeletion, + }; +} + +/** The program's folders back in the model: numbered from 1, inbox, sent, drafts. */ +export interface EmailClientFolders { + readonly inbox: readonly EmailMessage[]; + readonly sent: readonly EmailMessage[]; + readonly drafts: readonly EmailMessage[]; + readonly nextMessageID: number; +} + +/** EmailAnwendung: its account, inbox and sent mails. */ +export class EmailClient { + readonly log: ProgramLog; + readonly account: EmailClientAccount | null; + readonly inbox: MailboxEntry[]; + readonly sent: MailboxEntry[]; + private readonly drafts: readonly EmailMessage[]; + /** The SMTP client's and the POP3 client's threads. */ + private readonly smtp: CommandThread; + private readonly pop3: CommandThread; + + constructor( + private readonly engine: NetworkRuntimeEngine, + private readonly nodeId: Id, + configuration: { readonly account: EmailClientAccount | null; readonly inbox: readonly EmailMessage[]; readonly sent: readonly EmailMessage[]; readonly drafts: readonly EmailMessage[] }, + private readonly changed: (folders: EmailClientFolders) => void, + ) { + this.log = new ProgramLog(engine); + this.account = configuration.account; + this.inbox = configuration.inbox.map(entryOf); + this.sent = configuration.sent.map(entryOf); + this.drafts = configuration.drafts; + this.smtp = new CommandThread(engine); + this.pop3 = new CommandThread(engine); + } + + /** + * The window's send button: the mail made from the form (the account's + * name and address as sender), sent to the account's SMTP server, one + * connection for each recipient (EmailAnwendung.versendeEmail). + */ + send(form: MailForm): MailFormProblem | undefined { + const account = this.account; + if (account === null) return 'noAccount'; + if (![form.to, form.cc, form.bcc].every(validField)) return 'invalidAddress'; + const mail: Mail = { + // AddressEntry trims the name: without a last name, Java's window leaves out the space. + sender: addressEntry(`${account.firstName} ${account.lastName} <${account.email}>`), + to: addressList(form.to), + cc: addressList(form.cc), + bcc: addressList(form.bcc), + subject: form.subject, + text: form.text, + dateReceived: '', + }; + if (mail.to.length + mail.cc.length + mail.bcc.length === 0) return 'noRecipient'; + // Java joins the addresses into a comma list and reads them back (EmailAnwendung.versendeEmail, SMTPClient.versendeEmail). + const recipients = [...mail.to, ...mail.cc, ...mail.bcc].map((each) => each.mailAddress).filter((each): each is string => each !== null); + const entry: MailboxEntry = { mail, isNew: true, isMarkedForDeletion: false }; + for (const recipient of recipients) { + this.smtp.hand(() => this.sendTo(entry, recipient)); + } + this.engine.resumeThreads(); + return undefined; + } + + private *sendTo(entry: MailboxEntry, recipient: string): Steps { + const account = this.account!; + const sent = yield* sendMailSteps(this.engine, this.nodeId, (each) => this.log.write(each), account.smtpHost, account.smtpPort, entry.mail, account.email, recipient); + if (sent && !this.sent.includes(entry)) { + this.sent.push(entry); + this.changed(this.folders()); + } + } + + /** The window's fetch button: the account's mails from its POP3 server (EmailAnwendung.emailsAbholenEmails). */ + fetch(): boolean { + const account = this.account; + if (account === null) return false; + this.pop3.hand(() => + fetchMailSteps(this.engine, this.nodeId, (each) => this.log.write(each), account.pop3Host, account.pop3Port, account.username, account.password, (mail) => { + this.inbox.push({ mail, isNew: true, isMarkedForDeletion: false }); + this.changed(this.folders()); + }), + ); + this.engine.resumeThreads(); + return true; + } + + /** The folders as the model keeps them. */ + folders(): EmailClientFolders { + let id = 1; + const inbox = this.inbox.map((entry) => emailMessage(entry, id++)); + const sent = this.sent.map((entry) => ({ ...emailMessage(entry, id++), isSent: true })); + const drafts = this.drafts.map((message) => ({ ...message, id: id++ })); + return { inbox, sent, drafts, nextMessageID: id }; + } +} diff --git a/packages/core/src/runtime/apps/emailServer.ts b/packages/core/src/runtime/apps/emailServer.ts index 1fb0bed..159f44f 100644 --- a/packages/core/src/runtime/apps/emailServer.ts +++ b/packages/core/src/runtime/apps/emailServer.ts @@ -30,12 +30,13 @@ // connection ends). import type { Id } from '../../ids.js'; -import type { EmailMessage, EmailServerAccount } from '../config.js'; -import { addressEntry, addressList, addressText, formatMail, javaSplit, mailSize, parseMail, type Mail } from '../email.js'; +import type { EmailServerAccount } from '../config.js'; +import { addressEntry, addressText, emailMessage, formatMail, javaSplit, mailboxEntry, mailSize, parseMail, type Mail, type MailboxEntry } from '../email.js'; import type { NetworkRuntimeEngine } from '../engine.js'; import { javaTrim } from '../http.js'; -import type { Steps } from '../threads.js'; -import { ProgramLog } from './program.js'; +import { pause, type Steps } from '../threads.js'; +import { sendMailSteps, SMTP_SERVER_PORT, type SmtpClientLogEntry } from './emailClient.js'; +import { CommandThread, ProgramLog } from './program.js'; import type { PageLanguage } from './routerPages.js'; import type { EmailServerSnapshot } from '../snapshot.js'; import { TcpServerProgram } from './server.js'; @@ -54,14 +55,9 @@ export type EmailServerLogEntry = /** sw_smtpmitarbeiter_msg14: the answer could not be sent. */ | { readonly kind: 'sendFailed'; readonly address: string } /** sw_smtpmitarbeiter_msg12, msg13: a mail stored in the account's mailbox. */ - | { readonly kind: 'stored'; readonly username: string }; - -/** A message in a mailbox, as POP3 sees it. */ -export interface MailboxEntry { - mail: Mail; - isNew: boolean; - isMarkedForDeletion: boolean; -} + | { readonly kind: 'stored'; readonly username: string } + /** What the SMTP client tells the server when it sends a mail on. */ + | SmtpClientLogEntry; export interface MailAccount { readonly username: string; @@ -114,6 +110,19 @@ export interface MailConnection { send(text: string): Steps; } +/** How the server sends a mail to other domains (EmailServer.weiterleiten with its SMTPClient). */ +export interface MailOutbox { + /** EmailServer.emailWeiterleiten: later, by the server's own thread. */ + forward(mail: Mail, sender: string, recipients: readonly string[]): void; + /** + * SMTPClient.versendeEmail(null, …) in the calling thread: each + * recipient's mail exchange looked up (Resolver.holeIPAdresseMailServer), + * the mails then sent in a thread of their own, one after the other; the + * recipients without a mail exchange. + */ + lookUpAndSend(mail: Mail, sender: string, recipients: readonly string[]): Steps; +} + /** What the server's sessions share: its domain, accounts and window. */ export class MailServerState { constructor( @@ -126,6 +135,7 @@ export class MailServerState { /** The server's first address (primaryIPAdresse) and the wall clock, for a notice. */ private readonly ipAddress: () => string, private readonly now: () => number, + private readonly outbox: MailOutbox, ) {} /** EmailServer.sucheKonto: by name in any case. */ @@ -140,9 +150,14 @@ export class MailServerState { return at >= 0 && address.slice(at + 1).toLowerCase() === this.domain.toLowerCase(); } - /** SMTPMitarbeiter.verarbeiteEmail: each of the domain's recipients gets the mail as Java reads it anew. */ - deliver(mail: Mail, sender: string, recipients: readonly string[]): void { + /** + * SMTPMitarbeiter.verarbeiteEmail: each of the domain's recipients gets + * the mail as Java reads it anew; the others' go on to their domains (by + * the server's thread); the sender hears of the unknown ones. + */ + *deliver(mail: Mail, sender: string, recipients: readonly string[]): Steps { const unknown: string[] = []; + const elsewhere: string[] = []; for (const recipient of recipients) { const account = this.isOwnDomain(recipient) ? this.account(javaSplit(recipient, '@')[0] ?? '') : undefined; if (account !== undefined) { @@ -150,20 +165,31 @@ export class MailServerState { this.log({ kind: 'stored', username: account.username }); } else if (this.isOwnDomain(recipient) || !recipient.includes('@')) { unknown.push(recipient); + } else { + elsewhere.push(recipient); } - // Other domains: sent on with the e-mail program (F3.3b). } this.changed(); - if (unknown.length > 0) this.notifyUnknown(mail, sender, unknown); + // Java sends on the mail as it reads it anew; written for sending, that is the same text. + if (elsewhere.length > 0) this.outbox.forward(mail, sender, elsewhere); + if (unknown.length > 0) yield* this.notifyUnknown(mail, sender, unknown); } - /** EmailServer.sendUnknownReceiverResponse: a notice to a sender of the domain; none for an empty sender. */ - private notifyUnknown(mail: Mail, sender: string, unknown: readonly string[]): void { - const address = addressEntry(sender).mailAddress; - // An empty sender (<>) has no address of the domain. - if (address === null || !this.isOwnDomain(address)) return; - const account = this.account(javaSplit(address, '@')[0] ?? ''); - if (account === undefined) return; + /** EmailServer.weiterleiten: the mail sent on; the sender hears of recipients without a mail exchange. */ + *sendOn(mail: Mail, sender: string, recipients: readonly string[]): Steps { + const unknown = yield* this.outbox.lookUpAndSend(mail, sender, recipients); + if (unknown.length > 0) yield* this.notifyUnknown(mail, sender, unknown); + } + + /** + * EmailServer.sendUnknownReceiverResponse: a notice to the sender, stored + * when the sender is the domain's, else sent on with an empty sender; none + * for an empty sender. + */ + private *notifyUnknown(mail: Mail, sender: string, unknown: readonly string[]): Steps { + const senderEntry = addressEntry(sender); + const address = senderEntry.mailAddress; + if (address === null || address === '') return; const text = 'The mail could not be delivered either because user or mail domain is unknown.\n' + 'Message could not be delivered to the following recipients:\n' + @@ -181,6 +207,12 @@ export class MailServerState { text, dateReceived: '', }; + if (!this.isOwnDomain(address)) { + yield* this.sendOn(notice, '<>', [addressText(senderEntry)!]); + return; + } + const account = this.account(javaSplit(address, '@')[0] ?? ''); + if (account === undefined) return; account.mailbox.push({ mail: notice, isNew: true, isMarkedForDeletion: false }); this.log({ kind: 'stored', username: account.username }); this.changed(); @@ -236,7 +268,7 @@ export class SmtpSession { const recipients = this.recipients; this.state = 'envelope'; this.resetEnvelope(); - this.server.deliver(mail, sender, recipients); + yield* this.server.deliver(mail, sender, recipients); } else { this.source += message; } @@ -418,43 +450,6 @@ export class Pop3Session { } } -/** A message of the model as Java has it after loading the server's file: new, not deleted. */ -export function mailboxEntry(message: EmailMessage): MailboxEntry { - const reread = (entries: EmailMessage['to']) => addressList(entries.map((entry) => addressText(entry) ?? '').join(',')); - return { - mail: { - sender: addressEntry(addressText(message.from) ?? ''), - to: reread(message.to), - cc: reread(message.cc), - bcc: reread(message.bcc), - subject: message.subject, - text: message.body, - dateReceived: message.receivedAtMilliseconds === undefined ? '' : String(message.receivedAtMilliseconds), - }, - isNew: true, - isMarkedForDeletion: false, - }; -} - -/** A mailbox's message back in the model, numbered by the caller. */ -export function emailMessage(entry: MailboxEntry, id: number): EmailMessage { - const { mail } = entry; - const received = /^[0-9]+$/.test(mail.dateReceived) ? Number(mail.dateReceived) : undefined; - return { - id, - from: mail.sender ?? { name: null, mailAddress: null }, - to: mail.to, - cc: mail.cc, - bcc: mail.bcc, - subject: mail.subject ?? '', - body: mail.text, - ...(received === undefined ? {} : { receivedAtMilliseconds: received }), - isNew: entry.isNew, - isMarkedForDeletion: entry.isMarkedForDeletion, - isSent: false, - }; -} - const encode = (text: string) => new TextEncoder().encode(text); /** SMTPServer, POP3Server: a server whose connections each hold a session. */ @@ -497,10 +492,12 @@ export class EmailServer { readonly state: MailServerState; private readonly smtp: MailProtocolServer; private readonly pop3: MailProtocolServer; + /** The server's own thread (Anwendung.ausfuehren): it sends mails on. */ + private readonly commands: CommandThread; constructor( - engine: NetworkRuntimeEngine, - nodeId: Id, + private readonly engine: NetworkRuntimeEngine, + private readonly nodeId: Id, configuration: EmailServerSnapshot, changed: (accounts: readonly EmailServerAccount[]) => void, ipAddress: () => string, @@ -522,7 +519,15 @@ export class EmailServer { () => changed(this.accounts()), ipAddress, now, + { + forward: (mail, sender, recipients) => { + this.commands.hand(() => this.state.sendOn(mail, sender, recipients)); + engine.resumeThreads(); + }, + lookUpAndSend: (mail, sender, recipients) => this.lookUpAndSend(mail, sender, recipients), + }, ); + this.commands = new CommandThread(engine); // POP3 first, as EmailServer.starten (its socket draws the first initial sequence number). this.pop3 = new MailProtocolServer(engine, nodeId, POP3_PORT, configuration.isActive, (connection) => new Pop3Session(this.state, connection)); this.smtp = new MailProtocolServer(engine, nodeId, SMTP_PORT, configuration.isActive, (connection) => new SmtpSession(this.state, connection)); @@ -537,6 +542,39 @@ export class EmailServer { this.smtp.setActive(active); } + /** + * SMTPClient.versendeEmail(null, …): each recipient's mail exchange looked + * up here, then a new SMTP client sends the mail to each, one after the + * other, in its own thread; the recipients without a mail exchange. + */ + private *lookUpAndSend(mail: Mail, sender: string, recipients: readonly string[]): Steps { + const targets: [string, string][] = []; + const unknown: string[] = []; + for (const each of javaSplit(recipients.join(','), ',')) { + if (javaTrim(each) === '') continue; + const recipient = addressEntry(javaTrim(each)).mailAddress; + if (recipient === null) continue; + const domain = javaSplit(recipient, '@')[1]; + const resolution = domain === undefined ? undefined : yield* this.engine.resolveDnsMailServerSteps(this.nodeId, domain); + const address = resolution?.type === 'resolved' ? resolution.address : undefined; + if (address === undefined) unknown.push(recipient); + else targets.push([address, recipient]); + } + if (targets.length > 0) { + const engine = this.engine; + const nodeId = this.nodeId; + const log = (entry: SmtpClientLogEntry) => this.log.write(entry); + engine.startThread( + (function* (): Steps { + // A new thread: it begins after the one that made it goes on (the worker reads its next message first). + yield pause(engine.state.currentTimeMilliseconds); + for (const [address, recipient] of targets) yield* sendMailSteps(engine, nodeId, log, address, SMTP_SERVER_PORT, mail, sender, recipient); + })(), + ); + } + return unknown; + } + /** The accounts as the model keeps them. */ accounts(): EmailServerAccount[] { let id = 1; diff --git a/packages/core/src/runtime/email.ts b/packages/core/src/runtime/email.ts index 4dc63b7..3bffaee 100644 --- a/packages/core/src/runtime/email.ts +++ b/packages/core/src/runtime/email.ts @@ -9,7 +9,7 @@ // and reads the fields after it as text); a line that is no field begins the // text (Java drops it). -import type { EmailAddress } from './config.js'; +import type { EmailAddress, EmailMessage } from './config.js'; import { javaTrim } from './http.js'; /** An e-mail as Java's Email holds it while the programs run. */ @@ -63,6 +63,14 @@ export function addressList(text: string): EmailAddress[] { .map(addressEntry); } +const RAW_MAIL_ADDRESS = '[a-zA-Z0-9]([\\-_\\.]{0,1}[a-zA-Z0-9])*@[a-zA-Z0-9]([\\-_\\.]{0,1}[a-zA-Z0-9])*\\.{0,1}'; +const MAIL_ADDRESS_PATTERN = new RegExp(`^(?:[^<]*<${RAW_MAIL_ADDRESS}>|${RAW_MAIL_ADDRESS})$`); + +/** EingabenUeberpruefung.musterEmailAdresse: "Name
" or an address. */ +export function isMailAddress(text: string): boolean { + return MAIL_ADDRESS_PATTERN.test(text); +} + /** Email(String): the header fields Java knows, then the text, each line ended by "\n". */ export function parseMail(source: string): Mail { let sender: EmailAddress | null = null; @@ -115,3 +123,47 @@ export function mailSize(mail: Mail): number { const sender = mail.sender === null ? 'null' : shown(mail.sender); return (mail.text + sender + (mail.subject ?? 'null') + `[${mail.to.map(shown).join(', ')}]` + mail.dateReceived).length; } + +/** A message in a mailbox, as POP3 sees it. */ +export interface MailboxEntry { + mail: Mail; + isNew: boolean; + isMarkedForDeletion: boolean; +} + +/** A message of the model as Java has it after loading the server's file: new, not deleted. */ +export function mailboxEntry(message: EmailMessage): MailboxEntry { + const reread = (entries: EmailMessage['to']) => addressList(entries.map((entry) => addressText(entry) ?? '').join(',')); + return { + mail: { + sender: addressEntry(addressText(message.from) ?? ''), + to: reread(message.to), + cc: reread(message.cc), + bcc: reread(message.bcc), + subject: message.subject, + text: message.body, + dateReceived: message.receivedAtMilliseconds === undefined ? '' : String(message.receivedAtMilliseconds), + }, + isNew: true, + isMarkedForDeletion: false, + }; +} + +/** A mailbox's message back in the model, numbered by the caller. */ +export function emailMessage(entry: MailboxEntry, id: number): EmailMessage { + const { mail } = entry; + const received = /^[0-9]+$/.test(mail.dateReceived) ? Number(mail.dateReceived) : undefined; + return { + id, + from: mail.sender ?? { name: null, mailAddress: null }, + to: mail.to, + cc: mail.cc, + bcc: mail.bcc, + subject: mail.subject ?? '', + body: mail.text, + ...(received === undefined ? {} : { receivedAtMilliseconds: received }), + isNew: entry.isNew, + isMarkedForDeletion: entry.isMarkedForDeletion, + isSent: false, + }; +} diff --git a/packages/core/src/runtime/engine.ts b/packages/core/src/runtime/engine.ts index e866127..0c891bd 100644 --- a/packages/core/src/runtime/engine.ts +++ b/packages/core/src/runtime/engine.ts @@ -116,6 +116,7 @@ import { RuntimeSpeed } from './speed.js'; import { ApplicationThreads, waitUntil, type Steps, type Wait } from './threads.js'; import { EchoServer, SimpleClient } from './apps/echo.js'; import { WebBrowser, WebServer, type WebServerPage } from './apps/web.js'; +import { EmailClient, type EmailClientFolders } from './apps/emailClient.js'; import { EmailServer } from './apps/emailServer.js'; import { firewallLogPage, forwardingTablePage, ripTablePage, routerIndexPage } from './apps/routerPages.js'; import { applyFirewallSettings, firewallSettingsPage } from './apps/firewallSettings.js'; @@ -913,6 +914,7 @@ export class NetworkRuntimeEngine { private readonly webServersByNodeId = new Map(); private readonly webBrowsersByNodeId = new Map(); private readonly emailServersByNodeId = new Map(); + private readonly emailClientsByNodeId = new Map(); /** The time of day a program writes into a mail (Java's new Date()). */ private readonly wallClock: () => number; /** Each node's firewall log; it outlives a stop and a new start, as Java's log page does. */ @@ -1043,6 +1045,7 @@ export class NetworkRuntimeEngine { this.webServersByNodeId.clear(); this.webBrowsersByNodeId.clear(); this.emailServersByNodeId.clear(); + this.emailClientsByNodeId.clear(); this.arpLookups = []; this.protocolThreads.clear(); this.dnsQueriesBySocketId.clear(); @@ -1133,6 +1136,20 @@ export class NetworkRuntimeEngine { return this.emailServersByNodeId.get(nodeId); } + /** The node's e-mail program while the simulation runs, if it has one installed. */ + emailClient(nodeId: Id): EmailClient | undefined { + return this.emailClientsByNodeId.get(nodeId); + } + + /** An e-mail program's folders as a run changed them, into the snapshot (and so into the project saved from it). */ + private setEmailClientFolders(nodeId: Id, folders: EmailClientFolders): void { + const clients = new Map(this.stateValue.topologySnapshot.emailClientsByNodeId); + const client = clients.get(nodeId); + if (client === undefined) return; + clients.set(nodeId, { ...client, ...folders }); + this.stateValue.topologySnapshot = withSnapshot(this.stateValue.topologySnapshot, { emailClientsByNodeId: clients }); + } + /** An e-mail server's accounts as a run changed them, into the snapshot (and so into the project saved from it). */ private setEmailServerAccounts(nodeId: Id, accounts: readonly EmailServerAccount[]): void { const servers = new Map(this.stateValue.topologySnapshot.emailServersByNodeId); @@ -1153,6 +1170,7 @@ export class NetworkRuntimeEngine { this.webServersByNodeId.clear(); this.webBrowsersByNodeId.clear(); this.emailServersByNodeId.clear(); + this.emailClientsByNodeId.clear(); for (const node of snapshot.nodes) { const echoServer = snapshot.echoServersByNodeId.get(node.id); if (echoServer !== undefined) this.echoServersByNodeId.set(node.id, new EchoServer(this, node.id, echoServer)); @@ -1178,6 +1196,11 @@ export class NetworkRuntimeEngine { ), ); } + const emailClient = snapshot.emailClientsByNodeId.get(node.id); + if (emailClient !== undefined) { + const nodeId = node.id; + this.emailClientsByNodeId.set(nodeId, new EmailClient(this, nodeId, emailClient, (folders) => this.setEmailClientFolders(nodeId, folders))); + } if ((node.kind === 'router' || node.kind === 'gateway') && !this.swiftRouters) this.startRouterWebServer(node.id, node.kind); } } @@ -1961,6 +1984,22 @@ export class NetworkRuntimeEngine { return { type: 'resolved', address: exchange === undefined ? undefined : findDnsRecords(exchange.data, 'A', resolution.records)[0]?.data }; } + /** Resolver.holeIPAdresseMailServer in a program's thread (the e-mail server sending a mail on). */ + *resolveDnsMailServerSteps(nodeId: Id, domain: string): Steps { + const domainName = domain.endsWith('.') ? domain : `${domain}.`; + let lookup: DnsLookup | undefined; + const server = this.stateValue.topologySnapshot.deviceConfigurations.get(nodeId)?.dnsServer; + this.beginDnsResolution(nodeId, domainName, 'MX', server, (result) => { + lookup = result; + }); + yield* waitUntil(() => lookup !== undefined || this.stateValue.phase !== 'running'); + const result = lookup as DnsLookup | undefined; + if (result === undefined || result.type === 'timedOut') return { type: 'timedOut' }; + const records = [...result.answers, ...result.authority]; + const exchange = findDnsRecords(domainName, 'MX', records)[0]; + return { type: 'resolved', address: exchange === undefined ? undefined : findDnsRecords(exchange.data, 'A', records)[0]?.data }; + } + /** * DNSQueryAgent.query: one question from a fresh socket; `done` with the * first datagram back, or undefined after five round trips. diff --git a/packages/core/src/runtime/snapshot.ts b/packages/core/src/runtime/snapshot.ts index e66865e..2c0bb4f 100644 --- a/packages/core/src/runtime/snapshot.ts +++ b/packages/core/src/runtime/snapshot.ts @@ -22,6 +22,7 @@ import type { SwitchConfiguration, WebServerConfiguration, EmailServerAccount, + EmailClientConfiguration, } from './config.js'; import type { VirtualFileSystem } from '../model/virtualFileSystem.js'; import type { PageLanguage } from './apps/routerPages.js'; @@ -102,6 +103,8 @@ export interface TopologySnapshot { readonly webBrowserNodeIds: ReadonlySet; /** The installed e-mail servers, by node; a run's deliveries change their mailboxes here. */ readonly emailServersByNodeId: ReadonlyMap; + /** The installed e-mail programs, by node; a run's sent and fetched mails change their folders here. */ + readonly emailClientsByNodeId: ReadonlyMap; /** Each node's files, which its programs read (a web server its pages). */ readonly fileSystemsByNodeId: ReadonlyMap; /** The language of the pages the devices write themselves (a router's), as Java's in the locale it runs in. */ @@ -127,6 +130,7 @@ export interface TopologySnapshotInput { webServersByNodeId?: ReadonlyMap; webBrowserNodeIds?: ReadonlySet; emailServersByNodeId?: ReadonlyMap; + emailClientsByNodeId?: ReadonlyMap; fileSystemsByNodeId?: ReadonlyMap; language?: PageLanguage; } @@ -151,6 +155,7 @@ export function topologySnapshot(input: TopologySnapshotInput): TopologySnapshot webServersByNodeId: input.webServersByNodeId ?? new Map(), webBrowserNodeIds: input.webBrowserNodeIds ?? new Set(), emailServersByNodeId: input.emailServersByNodeId ?? new Map(), + emailClientsByNodeId: input.emailClientsByNodeId ?? new Map(), fileSystemsByNodeId: input.fileSystemsByNodeId ?? new Map(), language: input.language ?? 'de', }; diff --git a/packages/core/test/email-server.de.java.json b/packages/core/test/email-server.de.java.json index dc7a059..b90a445 100644 --- a/packages/core/test/email-server.de.java.json +++ b/packages/core/test/email-server.de.java.json @@ -3478,7 +3478,7 @@ "bob", [ [ - "From: \nTo: Bob Beispiel \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\tniemand@filius.de\n\tKeiner@filius.de\n\nDate: 10/1/26, 6:55 PM\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Bob Beispiel \nTo: \nSubject: Wer?\n\nIst da jemand?", + "From: \nTo: Bob Beispiel \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\tniemand@filius.de\n\tKeiner@filius.de\n\nDate: 01.10.26, 19:29\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Bob Beispiel \nTo: \nSubject: Wer?\n\nIst da jemand?", true, false ] diff --git a/packages/core/test/email-server.en.java.json b/packages/core/test/email-server.en.java.json index a5951c6..750927f 100644 --- a/packages/core/test/email-server.en.java.json +++ b/packages/core/test/email-server.en.java.json @@ -3478,7 +3478,7 @@ "bob", [ [ - "From: \nTo: Bob Beispiel \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\tniemand@filius.de\n\tKeiner@filius.de\n\nDate: 10/1/26, 6:55 PM\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Bob Beispiel \nTo: \nSubject: Wer?\n\nIst da jemand?", + "From: \nTo: Bob Beispiel \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\tniemand@filius.de\n\tKeiner@filius.de\n\nDate: 01/10/2026, 19:29\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Bob Beispiel \nTo: \nSubject: Wer?\n\nIst da jemand?", true, false ] diff --git a/packages/core/test/emailClient.test.ts b/packages/core/test/emailClient.test.ts new file mode 100644 index 0000000..0a21c44 --- /dev/null +++ b/packages/core/test/emailClient.test.ts @@ -0,0 +1,131 @@ +// The e-mail program (apps/emailClient.ts) where emailClientJava.test.ts's +// stories do not go: what the window refuses, the account's SMTP port, Bcc, +// and the folders as the model keeps them. + +import { describe, expect, it } from 'vitest'; +import { + deviceConfiguration, + formatMail, + NetworkRuntimeEngine, + topologySnapshot, + type EmailClientAccount, + type EmailClientConfiguration, + type TopologySnapshotInput, +} from '../src/index.js'; +import { link, pc, uuid } from './fixtures.js'; +import { MAIL_ACCOUNTS } from './mailAccounts.js'; +import { emailClientText } from './programLines.js'; + +const SERVER = uuid(0x6001); +const HOST = uuid(0x6002); + +const ACCOUNT: EmailClientAccount = { + pop3Host: '10.0.0.1', + pop3Port: 110, + smtpHost: '10.0.0.1', + smtpPort: 25, + username: 'bob', + password: 'passwort', + firstName: 'Bob', + lastName: '', + email: 'bob@filius.de', +}; + +function started(client: Partial): NetworkRuntimeEngine { + const input: TopologySnapshotInput = { + nodes: [pc(SERVER, uuid(0x6011)), pc(HOST, uuid(0x6012))], + links: [link(SERVER, uuid(0x6011), HOST, uuid(0x6012))], + deviceConfigurations: new Map([ + [SERVER, deviceConfiguration('10.0.0.1', '255.255.255.0', '', '')], + [HOST, deviceConfiguration('10.0.0.2', '255.255.255.0', '', '')], + ]), + emailServersByNodeId: new Map([[SERVER, { domain: 'filius.de', accounts: MAIL_ACCOUNTS, isActive: true }]]), + emailClientsByNodeId: new Map([[HOST, { account: ACCOUNT, inbox: [], sent: [], drafts: [], addressBook: [], nextMessageID: 1, ...client }]]), + }; + const engine = new NetworkRuntimeEngine(14); + engine.handle({ type: 'start', snapshot: topologySnapshot(input), seed: 14, initialTimeMilliseconds: 0 }); + return engine; +} + +const form = { to: '', cc: '', bcc: '', subject: 'Betreff', text: 'Text' }; + +describe('the e-mail program', () => { + it('refuses what its window refuses: no account, an address Java does not take, no recipient', () => { + expect(started({ account: null }).emailClient(HOST)!.send({ ...form, to: 'anna@filius.de' })).toBe('noAccount'); + expect(started({ account: null }).emailClient(HOST)!.fetch()).toBe(false); + const client = started({}).emailClient(HOST)!; + expect(client.send({ ...form, to: 'anna@filius.de, anna@' })).toBe('invalidAddress'); + expect(client.send({ ...form, cc: 'Anna ' })).toBe('invalidAddress'); + expect(client.send({ ...form, bcc: 'Anna Muster' })).toBe('invalidAddress'); + expect(client.send({ ...form, to: ' ' })).toBe('noRecipient'); + expect(client.send({ ...form, to: 'Anna Muster ' })).toBeUndefined(); + }); + + it('sends to a Bcc recipient too, who gets the mail without Bcc; the sent folder keeps it', () => { + const engine = started({}); + expect(engine.emailClient(HOST)!.send({ ...form, to: 'anna@filius.de', bcc: 'bob@filius.de' })).toBeUndefined(); + engine.handle({ type: 'advance', toMilliseconds: 20_000 }); + const mailbox = (username: string) => engine.emailServer(SERVER)!.state.accounts.find((each) => each.username === username)!.mailbox; + expect(formatMail(mailbox('bob')[0]!.mail)).toBe('From: Bob \nTo: \nSubject: Betreff\n\nText'); + expect(formatMail(mailbox('anna').at(-1)!.mail)).toBe(formatMail(mailbox('bob')[0]!.mail)); + expect(engine.emailClient(HOST)!.sent.map((entry) => entry.mail.bcc)).toEqual([[{ name: null, mailAddress: 'bob@filius.de' }]]); + }); + + it("uses the account's SMTP port (Java always 25): without a server there, the connection fails", () => { + const engine = started({ account: { ...ACCOUNT, smtpPort: 2525 } }); + engine.emailClient(HOST)!.send({ ...form, to: 'anna@filius.de' }); + engine.handle({ type: 'advance', toMilliseconds: 60_000 }); + expect(engine.emailClient(HOST)!.log.all.map((line) => emailClientText(line))).toEqual([ + '----', + 'filius.exception.TimeOutException: Zeitüberschreitung beim Verbindungsaufbau', + ]); + expect(engine.emailClient(HOST)!.sent).toEqual([]); + }); + + it('gives up without a word on an account address Java does not take (no MAIL FROM)', () => { + const engine = started({ account: { ...ACCOUNT, email: 'bob@' } }); + engine.emailClient(HOST)!.send({ ...form, to: 'anna@filius.de' }); + engine.handle({ type: 'advance', toMilliseconds: 20_000 }); + expect(engine.emailClient(HOST)!.log.all.map((line) => emailClientText(line))).toEqual([ + '----', + 'Verbindung zu 10.0.0.1:25 hergestellt', + 'Mail versendet an anna@filius.de', + 'Verbindung zu 10.0.0.1:25 getrennt', + ]); + expect(engine.emailServer(SERVER)!.log.all.filter((line) => line.kind === 'received').map((line) => line.kind === 'received' && line.text)).toEqual(['HELO 10.0.0.2']); + expect(engine.emailClient(HOST)!.sent).toEqual([]); + }); + + it('tells of a connection that ends while it waits for an answer', () => { + const engine = started({}); + engine.emailClient(HOST)!.send({ ...form, to: 'anna@filius.de' }); + // Switched off when the server has taken the connection: it closes it before its greeting arrives. + while (!engine.emailServer(SERVER)!.log.all.some((line) => line.kind === 'connectionOpened')) { + engine.handle({ type: 'advance', toMilliseconds: engine.state.currentTimeMilliseconds + 1 }); + } + engine.emailServer(SERVER)!.setActive(false); + engine.handle({ type: 'advance', toMilliseconds: 20_000 }); + expect(engine.emailClient(HOST)!.log.all.map((line) => line.kind)).toEqual(['connectionStarting', 'smtpConnected', 'failed', 'smtpDisconnected']); + expect(engine.emailClient(HOST)!.log.all[2]).toMatchObject({ failure: { kind: 'receiveFailed' } }); + }); + + it("takes a model's mail without a sender as Java's mail without one (no From)", () => { + const engine = started({ inbox: [{ ...MAIL_ACCOUNTS[0]!.mailbox[0]!, from: { name: null, mailAddress: null } }] }); + expect(formatMail(engine.emailClient(HOST)!.inbox[0]!.mail)).toBe('To: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile'); + }); + + it('keeps its folders in the snapshot: numbered inbox, sent, drafts; the drafts as they were', () => { + const draft = { ...MAIL_ACCOUNTS[0]!.mailbox[1]!, id: 9 }; + const engine = started({ drafts: [draft] }); + engine.emailClient(HOST)!.send({ ...form, to: 'bob@filius.de' }); + engine.handle({ type: 'advance', toMilliseconds: 20_000 }); + engine.emailClient(HOST)!.fetch(); + engine.handle({ type: 'advance', toMilliseconds: 40_000 }); + const folders = engine.state.topologySnapshot.emailClientsByNodeId.get(HOST)!; + expect(folders.inbox.map((message) => [message.id, message.subject, message.isSent])).toEqual([[1, 'Betreff', false]]); + expect(folders.sent.map((message) => [message.id, message.subject, message.isSent])).toEqual([[2, 'Betreff', true]]); + expect(folders.drafts).toEqual([{ ...draft, id: 3 }]); + expect(folders.nextMessageID).toBe(4); + expect(folders.account).toEqual(ACCOUNT); + }); +}); diff --git a/packages/core/test/emailClientJava.test.ts b/packages/core/test/emailClientJava.test.ts new file mode 100644 index 0000000..4b26bf9 --- /dev/null +++ b/packages/core/test/emailClientJava.test.ts @@ -0,0 +1,259 @@ +// The e-mail program as Java FILIUS runs it. tools/java-oracle's +// EmailClientRun let FILIUS' e-mail program send and fetch mails with two +// e-mail servers on mail-lan (filius.de, andere.de; the DNS server knows +// both domains' MX) and wrote every frame each card saw, Java's tables of +// them, what the program and each server told their windows, and at the end +// the program's inbox and sent mails and each server's accounts +// (email-client-java-.java.json). The engine plays the same stories +// with its programs (apps/emailClient.ts, apps/emailServer.ts): each card's +// frames in the same order, with the same content and rows, at about the +// same time; the same lines; the same mails at the end. + +import { readFileSync } from 'node:fs'; +import { dirname, join } from 'node:path'; +import { fileURLToPath } from 'node:url'; +import { describe, expect, it } from 'vitest'; +import { formatMail, withSnapshot, type EmailClientAccount, type LogLine, type MailboxEntry, type NetworkRuntimeEngine } from '../src/index.js'; +import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, watchedEngine, withClientPortText, type JavaFrame, type JavaTables } from './javaRun.js'; +import { MAIL_ACCOUNTS } from './mailAccounts.js'; +import { emailClientText, emailServerText, POLL_MILLISECONDS } from './programLines.js'; +import { snapshotOf, type Scenario } from './scenario.js'; + +const scenarioDirectory = join(dirname(fileURLToPath(import.meta.url)), 'scenarios'); + +const CLIENT = '00000000-0000-0000-0000-000000000201'; +const SERVER = '00000000-0000-0000-0000-000000000203'; +const OTHER_SERVER = '00000000-0000-0000-0000-000000000204'; + +type Program = 'client' | 'server' | 'otherServer'; +type JavaMail = [string, string, string]; + +interface JavaRun extends JavaTables { + frames: Record; + events: [number, Program, string][]; + inbox: JavaMail[]; + sent: JavaMail[]; + accounts: [string, JavaMail[]][]; + otherAccounts: [string, JavaMail[]][]; +} + +type Act = (engine: NetworkRuntimeEngine) => void; + +const send = + (to: string, cc: string, subject: string, text: string): Act => + (engine) => { + expect(engine.emailClient(CLIENT)!.send({ to, cc, bcc: '', subject, text })).toBeUndefined(); + }; +const fetch: Act = (engine) => { + expect(engine.emailClient(CLIENT)!.fetch()).toBe(true); +}; + +interface Story { + readonly host: string; + readonly password?: string; + readonly acts: readonly [number, Act][]; + /** The waits Java ends only at a look every 100 ms, one after the other: each connection opened, and the DNS answer of unknownHost (see tolerance). */ + readonly looks: number; +} + +const STORIES: Record = { + send: { + host: '192.168.0.30', + looks: 3, + acts: [[500, send('bob@filius.de', 'Carla ', 'Treffen', 'Hallo zusammen,\nbis morgen!')]], + }, + fetch: { host: '192.168.0.30', looks: 1, acts: [[500, fetch]] }, + byName: { + host: 'mail.filius.de', + looks: 5, + acts: [ + [500, send('niemand@andere.de', '', 'Hallo?', 'Ist da wer?')], + [12_000, send('jemand@nirgendwo.de', '', 'Hallo?', 'Ist da wer?')], + [25_000, fetch], + ], + }, + wrongPass: { + host: '192.168.0.30', + password: 'falsch', + looks: 1, + acts: [[500, fetch]], + }, + noServer: { + host: '192.168.0.10', + looks: 1, + acts: [[500, send('bob@filius.de', '', 'Ins Leere', 'Niemand da')]], + }, + unknownHost: { host: 'gibtsnicht.filius.de', looks: 1, acts: [[500, send('bob@filius.de', '', 'Ins Leere', 'Niemand da')]] }, +}; + +/** Java's wait for a SYN's answer (TCPSocket: three times 2.75 s, its timeout here). */ +const JAVA_TIMEOUT_MILLISECONDS = 3 * 2_750; + +/** + * Where Java errs: its run corrected, as Java means it. noServer: the + * program's SYN goes once in Java, not three times (tcpJava.test.ts, + * closedPort); its failure comes two attempts later in the engine. + */ +const JAVA_BUGS: Record JavaRun> = { + noServer: (java) => ({ + ...java, + events: java.events.map(([time, who, text]) => (who === 'client' && text.includes('Exception') ? [time + 2 * JAVA_TIMEOUT_MILLISECONDS, who, text] : [time, who, text])), + }), +}; + +/** Where the frames are compared only up to a time (Java's). noServer: the engine's second SYN, which Java does not send. */ +const UNTIL: Record number> = { + noServer: (java) => java.events.find(([, who, text]) => who === 'client' && text.includes('Exception'))![0] - 250, +}; + +/** + * Java's client and server look every 100 ms whether a connection is made + * (TCPSocket.verbinden, ServerSocket.oeffnen); the engine knows at once. Java + * falls behind by up to a look with each such wait of the story (Story.looks). + */ +const tolerance = (story: Story) => GAP_TOLERANCE_MILLISECONDS + story.looks * POLL_MILLISECONDS; + +/** + * byName: which socket draws the next initial sequence number, the program's + * second or the server's to andere.de, is a race of Java's threads (both + * are made within a few milliseconds); compared below the millions. + */ +const WITHOUT_INITIAL_NUMBERS = new Set(['byName']); +const withoutInitialNumbers = (text: string) => + text + .replace(/(seq|ack)=(\d+)/g, (_, name: string, value: string) => `${name}=${Number(value) % 1_000_000}`) + .replace(/(SEQ|ACK): \d+\.(\d{3}\.\d{3})/g, '$1: n.$2'); + +/** A notice's date: Java's in its locale and the time it ran. */ +const withoutDate = (text: string) => text.replace(/\nDate: [^\n]*\n/g, '\nDate: \n'); + +/** A frame's text with placeholders: the client's port, a DNS query's random ID, a notice's date. */ +const frameText = (text: string) => withoutDate(withClientPortText(text)).replace(/ID=\d+/g, 'ID=x'); + +type Lines = Record; + +function javaLines(java: JavaRun): Lines { + const lines: Lines = { client: [], server: [], otherServer: [] }; + for (const [time, program, text] of java.events) { + // Anwendung.starten and the refreshes tell the observers nothing (null), which the windows skip. + if (text === 'null' || text.startsWith('call ')) continue; + lines[program].push([time, withClientPortText(text)]); + } + return lines; +} + +function engineLines(engine: NetworkRuntimeEngine): Lines { + const lines = (log: readonly LogLine[], text: (entry: E) => string): [number, string][] => log.map((line) => [line.timeMilliseconds, withClientPortText(text(line))]); + return { + client: lines(engine.emailClient(CLIENT)!.log.all, emailClientText), + server: lines(engine.emailServer(SERVER)!.log.all, (entry) => emailServerText(entry)), + otherServer: lines(engine.emailServer(OTHER_SERVER)!.log.all, (entry) => emailServerText(entry)), + }; +} + +const mails = (entries: readonly MailboxEntry[]): JavaMail[] => + entries.map((entry) => [withoutDate(formatMail(entry.mail)), String(entry.isNew), String(entry.isMarkedForDeletion)]); +const javaMails = (list: JavaMail[]): JavaMail[] => list.map(([text, isNew, deleted]) => [withoutDate(text), isNew, deleted]); + +describe('the e-mail program as Java FILIUS runs it', () => { + it('corrects Java only where it errs, and cuts only after the story began', () => { + for (const [name, correct] of Object.entries(JAVA_BUGS)) { + const java = JSON.parse(readFileSync(join(scenarioDirectory, `email-client-java-${name}.java.json`), 'utf8')) as JavaRun; + expect(JSON.stringify(correct(java)), name).not.toBe(JSON.stringify(java)); + expect(UNTIL[name]?.(java) ?? Number.POSITIVE_INFINITY, name).toBeGreaterThan(1_000); + } + }); + + const scenario = JSON.parse(readFileSync(join(scenarioDirectory, 'mail-lan.scenario.json'), 'utf8')) as Scenario; + + for (const [name, story] of Object.entries(STORIES)) { + it(name, () => { + const measured = JSON.parse(readFileSync(join(scenarioDirectory, `email-client-java-${name}.java.json`), 'utf8')) as JavaRun; + const java = JAVA_BUGS[name]?.(measured) ?? measured; + const account: EmailClientAccount = { + pop3Host: story.host, + pop3Port: 110, + smtpHost: story.host, + smtpPort: 25, + username: 'anna', + password: story.password ?? 'geheim', + firstName: 'Anna', + lastName: 'Muster', + email: 'anna@filius.de', + }; + const snapshot = withSnapshot(snapshotOf(scenario), { + emailServersByNodeId: new Map([ + [SERVER, { domain: 'filius.de', accounts: MAIL_ACCOUNTS, isActive: true }], + [ + OTHER_SERVER, + { + domain: 'andere.de', + accounts: [ + { + username: 'carla', + password: 'carla', + firstName: 'Carla', + lastName: 'Carla', + mailbox: [], + }, + ], + isActive: true, + }, + ], + ]), + emailClientsByNodeId: new Map([ + [ + CLIENT, + { + account, + inbox: [], + sent: [], + drafts: [], + addressBook: [], + nextMessageID: 1, + }, + ], + ]), + }); + const { engine } = watchedEngine(scenario, snapshot); + for (const [time, act] of story.acts) { + engine.handle({ type: 'advance', toMilliseconds: time }); + act(engine); + } + engine.handle({ + type: 'advance', + toMilliseconds: Math.max(...java.events.map(([time]) => time)) + 5_000, + }); + + const numbers = WITHOUT_INITIAL_NUMBERS.has(name) ? withoutInitialNumbers : (text: string) => text; + expectSameCaptures(engine, scenario, java.frames, { + text: (text) => numbers(frameText(text)), + tables: java, + cell: (text) => numbers(withoutDate(text).replace(/ID=\d+/g, 'ID=x')), + until: UNTIL[name]?.(measured), + tolerance: tolerance(story), + }); + + const expected = javaLines(java); + const actual = engineLines(engine); + for (const program of ['client', 'server', 'otherServer'] as const) { + const lineText = (text: string) => numbers(withoutDate(text)); + expect( + actual[program].map(([, text]) => lineText(text)), + `${program}'s lines`, + ).toEqual(expected[program].map(([, text]) => lineText(text))); + for (const [index, [javaTime, text]] of expected[program].entries()) { + const late = javaTime - actual[program][index]![0]; + expect(Math.abs(late), `${program}'s line ${JSON.stringify(text.slice(0, 60))}: Java ${late} ms later`).toBeLessThanOrEqual(tolerance(story)); + } + } + + const client = engine.emailClient(CLIENT)!; + expect(mails(client.inbox), 'inbox').toEqual(javaMails(java.inbox)); + expect(mails(client.sent), 'sent').toEqual(javaMails(java.sent)); + const accounts = (nodeId: string) => engine.emailServer(nodeId)!.state.accounts.map((each) => [each.username, mails(each.mailbox)]); + expect(accounts(SERVER), 'filius.de').toEqual(java.accounts.map(([username, list]) => [username, javaMails(list)])); + expect(accounts(OTHER_SERVER), 'andere.de').toEqual(java.otherAccounts.map(([username, list]) => [username, javaMails(list)])); + }); + } +}); diff --git a/packages/core/test/emailServer.test.ts b/packages/core/test/emailServer.test.ts index a4a0114..cf6ed00 100644 --- a/packages/core/test/emailServer.test.ts +++ b/packages/core/test/emailServer.test.ts @@ -17,6 +17,7 @@ import { type TopologySnapshotInput, addressText, formatMail, + isMailAddress, mailboxEntry, MailServerState, mailSize, @@ -53,6 +54,14 @@ interface JavaCase { const CLIENT = '192.168.0.20'; +/** Without a network, no mail goes to another domain (MailCases: Java's server thread never runs). */ +const NO_OUTBOX = { + forward: () => undefined, + *lookUpAndSend(): Steps { + return []; + }, +}; + /** Runs a dialogue's steps to their end: nothing waits here, the connection sends at once. */ function run(steps: Steps): void { for (let next = steps.next(); next.done !== true; next = steps.next()) throw new Error('a step waited'); @@ -70,6 +79,7 @@ function play(javaCase: JavaCase, language: PageLanguage): JavaStep[] { () => undefined, () => '192.168.0.30', () => 0, + NO_OUTBOX, ); const sent: string[] = []; const connection = { @@ -264,6 +274,15 @@ describe('e-mail as Java writes it', () => { expect(addressText({ name: null, mailAddress: null })).toBeNull(); }); + it("checks an address as Java's pattern does: an address, or a name and an address in angle brackets", () => { + expect(isMailAddress('anna@filius.de')).toBe(true); + expect(isMailAddress('Anna Muster ')).toBe(true); + expect(isMailAddress('anna@filius.de x')).toBe(false); + expect(isMailAddress('Anna x')).toBe(false); + expect(isMailAddress('anna@')).toBe(false); + expect(isMailAddress('anna..b@filius.de')).toBe(false); + }); + it('writes no Bcc, and counts a size as Java does', () => { const mail = parseMail('From: A \nTo: x@y.de, Y \nBcc: geheim@b.de\nSubject: Hallo \n\nText\n'); expect(mail.bcc).toEqual([{ name: null, mailAddress: 'geheim@b.de' }]); @@ -309,7 +328,7 @@ function talk(engine: NetworkRuntimeEngine, port: number, ...messages: string[]) describe('the e-mail server beyond the cases', () => { it('writes a failed answer as Java does (sw_smtpmitarbeiter_msg14)', () => { const lines: EmailServerLogEntry[] = []; - const state = new MailServerState('filius.de', [], 'de', (entry) => lines.push(entry), () => undefined, () => '10.0.0.1', () => 0); + const state = new MailServerState('filius.de', [], 'de', (entry) => lines.push(entry), () => undefined, () => '10.0.0.1', () => 0, NO_OUTBOX); const session = new SmtpSession(state, { address: '10.0.0.2', *send(): Steps { @@ -374,12 +393,29 @@ describe('the e-mail server in the engine', () => { expect(mailbox()).toEqual([]); }); + it('sends no notice to an empty sender, also when the recipient is unknown (Java: <> gets none)', () => { + const engine = new NetworkRuntimeEngine(14); + engine.handle({ type: 'start', snapshot: topologySnapshot(mailNetwork()), seed: 14, initialTimeMilliseconds: 0 }); + expect(talk(engine, 25, 'HELO x', 'MAIL FROM:<>', 'RCPT TO:', 'DATA', 'Subject: x\n\ny\n.\n', 'QUIT').at(-1)).toBe('221 Server beendet Verbindung.'); + expect(engine.emailServer(SERVER)!.log.all.filter((line) => line.kind === 'stored')).toEqual([]); + }); + + it("sends a notice to another domain's sender with an empty sender, and none back when that fails", () => { + const engine = new NetworkRuntimeEngine(14); + engine.handle({ type: 'start', snapshot: topologySnapshot(mailNetwork()), seed: 14, initialTimeMilliseconds: 0 }); + // nirgendwo.de has no mail exchange (no DNS server here): the notice goes nowhere, and its own failure tells no one. + expect(talk(engine, 25, 'HELO x', 'MAIL FROM:', 'RCPT TO:', 'DATA', 'Subject: x\n\ny\n.\n', 'QUIT').at(-1)).toBe( + '221 Server beendet Verbindung.', + ); + expect(engine.emailServer(SERVER)!.log.all.filter((line) => line.kind === 'stored' || line.kind === 'connectionStarting')).toEqual([]); + }); + it("writes a notice's date in the project's language, at the wall clock's time", () => { const at = new Date(2026, 9, 1, 18, 5).getTime(); const notice = (language: PageLanguage) => { const accounts: MailAccount[] = MAIL_ACCOUNTS.map((account) => ({ ...account, mailbox: [] })); - const state = new MailServerState('filius.de', accounts, language, () => undefined, () => undefined, () => '10.0.0.1', () => at); - state.deliver(parseMail('Subject: x\n\ny\n'), 'anna@filius.de', ['niemand@filius.de']); + const state = new MailServerState('filius.de', accounts, language, () => undefined, () => undefined, () => '10.0.0.1', () => at, NO_OUTBOX); + run(state.deliver(parseMail('Subject: x\n\ny\n'), 'anna@filius.de', ['niemand@filius.de'])); return formatMail(accounts[0]!.mailbox[0]!.mail); }; expect(notice('de')).toContain('\nDate: 01.10.26, 18:05\nMail-Server: 10.0.0.1\n'); diff --git a/packages/core/test/programLines.ts b/packages/core/test/programLines.ts index a6b1310..1aaa60d 100644 --- a/packages/core/test/programLines.ts +++ b/packages/core/test/programLines.ts @@ -2,7 +2,7 @@ // message bundle says them: for comparing the core's structured lines with // what the Java oracle recorded (echoJava.test.ts, webJava.test.ts). -import type { EchoServerLogEntry, EmailServerLogEntry, PageLanguage, SendFailure, SimpleClientLogEntry, WebBrowserLogEntry } from '../src/index.js'; +import type { EchoServerLogEntry, EmailClientLogEntry, EmailServerLogEntry, PageLanguage, SendFailure, SimpleClientLogEntry, WebBrowserLogEntry } from '../src/index.js'; /** Java's client and server look every 100 ms whether they are connected, or switched off; the core at once. */ export const POLL_MILLISECONDS = 100; @@ -102,5 +102,34 @@ export function emailServerText(entry: EmailServerLogEntry, language: PageLangua return language === 'de' ? `Fehler beim Senden an ${entry.address}` : `Error while sending ${entry.address}`; case 'stored': return language === 'de' ? `E-Mail für ${entry.username} im Postfach gespeichert.` : `E-mail for ${entry.username} saved in mailbox.`; + default: + return emailClientText(entry); + } +} + +/** + * What the SMTP and POP3 clients tell the program they work for, as Java's + * observers get it (sw_smtpclient_msg1 to msg4; a failure as Java's + * exception prints itself; the window shows its message). + */ +export function emailClientText(entry: EmailClientLogEntry): string { + switch (entry.kind) { + case 'connectionStarting': + return '----'; + case 'smtpConnected': + return `Verbindung zu ${entry.address}:${entry.port} hergestellt`; + case 'mailSent': + return `Mail versendet an ${entry.recipients}`; + case 'smtpDisconnected': + return `Verbindung zu ${entry.address}:${entry.port} getrennt`; + case 'failed': + switch (entry.failure.kind) { + case 'answer': + return `java.lang.Exception: ${entry.failure.text}`; + case 'connect': + return entry.failure.failure === 'timedOut' ? `filius.exception.TimeOutException: ${CONNECT_FAILURES.timedOut}` : `filius.exception.VerbindungsException: ${CONNECT_FAILURES[entry.failure.failure]}`; + case 'receiveFailed': + return 'filius.exception.VerbindungsException: Verbindung nicht aufgebaut!'; + } } } diff --git a/packages/core/test/scenarios/email-client-java-byName.java.json b/packages/core/test/scenarios/email-client-java-byName.java.json new file mode 100644 index 0000000..faa4ad6 --- /dev/null +++ b/packages/core/test/scenarios/email-client-java-byName.java.json @@ -0,0 +1,30114 @@ +{ + "frames": { + "00000000-0000-0000-0000-000000000201": [ + { + "time": 515, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 751, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:11", + "arp": 2, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.20" + }, + { + "time": 754, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 52531, + "destinationPort": 53, + "payload": "ID=43842 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" + }, + { + "time": 985, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 52531, + "payload": "ID=43842 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" + }, + { + "time": 995, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + }, + { + "time": 1218, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "arp": 2, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.20" + }, + { + "time": 1218, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": null, + "tcpFlags": "S", + "sequence": 5000000, + "acknowledgement": 0 + }, + { + "time": 1442, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": null, + "tcpFlags": "SA", + "sequence": 2000000, + "acknowledgement": 5000001 + }, + { + "time": 1443, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000001, + "acknowledgement": 2000001 + }, + { + "time": 1734, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": "220 Willkommen bei filius.de", + "tcpFlags": "P", + "sequence": 2000001, + "acknowledgement": 0 + }, + { + "time": 1735, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000001, + "acknowledgement": 2000029 + }, + { + "time": 1790, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": "HELO 192.168.0.20", + "tcpFlags": "P", + "sequence": 5000001, + "acknowledgement": 0 + }, + { + "time": 2013, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": null, + "tcpFlags": "A", + "sequence": 2000029, + "acknowledgement": 5000018 + }, + { + "time": 2068, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": "250 Hello 192.168.0.20", + "tcpFlags": "P", + "sequence": 2000029, + "acknowledgement": 0 + }, + { + "time": 2069, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000018, + "acknowledgement": 2000051 + }, + { + "time": 2124, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": "MAIL FROM: ", + "tcpFlags": "P", + "sequence": 5000018, + "acknowledgement": 0 + }, + { + "time": 2347, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": null, + "tcpFlags": "A", + "sequence": 2000051, + "acknowledgement": 5000045 + }, + { + "time": 2403, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": "250 Sender OK", + "tcpFlags": "P", + "sequence": 2000051, + "acknowledgement": 0 + }, + { + "time": 2403, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000045, + "acknowledgement": 2000064 + }, + { + "time": 2459, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": "RCPT TO:", + "tcpFlags": "P", + "sequence": 5000045, + "acknowledgement": 0 + }, + { + "time": 2681, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": null, + "tcpFlags": "A", + "sequence": 2000064, + "acknowledgement": 5000072 + }, + { + "time": 2737, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": "250 Recipient OK", + "tcpFlags": "P", + "sequence": 2000064, + "acknowledgement": 0 + }, + { + "time": 2738, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000072, + "acknowledgement": 2000080 + }, + { + "time": 2793, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": "DATA", + "tcpFlags": "P", + "sequence": 5000072, + "acknowledgement": 0 + }, + { + "time": 3015, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": null, + "tcpFlags": "A", + "sequence": 2000080, + "acknowledgement": 5000076 + }, + { + "time": 3071, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": "354 End data with .", + "tcpFlags": "P", + "sequence": 2000080, + "acknowledgement": 0 + }, + { + "time": 3071, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000076, + "acknowledgement": 2000115 + }, + { + "time": 3127, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n", + "tcpFlags": "P", + "sequence": 5000076, + "acknowledgement": 0 + }, + { + "time": 3349, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": null, + "tcpFlags": "A", + "sequence": 2000115, + "acknowledgement": 5000168 + }, + { + "time": 3404, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": "250 Mail queued for delivery", + "tcpFlags": "P", + "sequence": 2000115, + "acknowledgement": 0 + }, + { + "time": 3404, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000168, + "acknowledgement": 2000143 + }, + { + "time": 3460, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": "QUIT", + "tcpFlags": "P", + "sequence": 5000168, + "acknowledgement": 0 + }, + { + "time": 3632, + "source": "02:00:00:00:02:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.10" + }, + { + "time": 3687, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": null, + "tcpFlags": "A", + "sequence": 2000143, + "acknowledgement": 5000172 + }, + { + "time": 3742, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": "221 Server beendet Verbindung.", + "tcpFlags": "P", + "sequence": 2000143, + "acknowledgement": 0 + }, + { + "time": 3743, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000172, + "acknowledgement": 2000173 + }, + { + "time": 3798, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": null, + "tcpFlags": "F", + "sequence": 5000172, + "acknowledgement": 0 + }, + { + "time": 3964, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": null, + "tcpFlags": "F", + "sequence": 2000173, + "acknowledgement": 0 + }, + { + "time": 3965, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000173, + "acknowledgement": 2000174 + }, + { + "time": 4020, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": null, + "tcpFlags": "A", + "sequence": 2000174, + "acknowledgement": 5000173 + }, + { + "time": 4076, + "source": "02:00:00:00:02:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + }, + { + "time": 6522, + "source": "02:00:00:00:02:14", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.10" + }, + { + "time": 12001, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 57606, + "destinationPort": 53, + "payload": "ID=60054 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" + }, + { + "time": 12223, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 57606, + "payload": "ID=60054 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" + }, + { + "time": 12224, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": null, + "tcpFlags": "S", + "sequence": 11000000, + "acknowledgement": 0 + }, + { + "time": 12445, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": null, + "tcpFlags": "SA", + "sequence": 10000000, + "acknowledgement": 11000001 + }, + { + "time": 12446, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 11000001, + "acknowledgement": 10000001 + }, + { + "time": 12686, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": "220 Willkommen bei filius.de", + "tcpFlags": "P", + "sequence": 10000001, + "acknowledgement": 0 + }, + { + "time": 12686, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 11000001, + "acknowledgement": 10000029 + }, + { + "time": 12742, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": "HELO 192.168.0.20", + "tcpFlags": "P", + "sequence": 11000001, + "acknowledgement": 0 + }, + { + "time": 12964, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": null, + "tcpFlags": "A", + "sequence": 10000029, + "acknowledgement": 11000018 + }, + { + "time": 13019, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": "250 Hello 192.168.0.20", + "tcpFlags": "P", + "sequence": 10000029, + "acknowledgement": 0 + }, + { + "time": 13019, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 11000018, + "acknowledgement": 10000051 + }, + { + "time": 13075, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": "MAIL FROM: ", + "tcpFlags": "P", + "sequence": 11000018, + "acknowledgement": 0 + }, + { + "time": 13296, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": null, + "tcpFlags": "A", + "sequence": 10000051, + "acknowledgement": 11000045 + }, + { + "time": 13351, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": "250 Sender OK", + "tcpFlags": "P", + "sequence": 10000051, + "acknowledgement": 0 + }, + { + "time": 13351, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 11000045, + "acknowledgement": 10000064 + }, + { + "time": 13407, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": "RCPT TO:", + "tcpFlags": "P", + "sequence": 11000045, + "acknowledgement": 0 + }, + { + "time": 13628, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": null, + "tcpFlags": "A", + "sequence": 10000064, + "acknowledgement": 11000074 + }, + { + "time": 13683, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": "250 Recipient OK", + "tcpFlags": "P", + "sequence": 10000064, + "acknowledgement": 0 + }, + { + "time": 13683, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 11000074, + "acknowledgement": 10000080 + }, + { + "time": 13739, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": "DATA", + "tcpFlags": "P", + "sequence": 11000074, + "acknowledgement": 0 + }, + { + "time": 13960, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": null, + "tcpFlags": "A", + "sequence": 10000080, + "acknowledgement": 11000078 + }, + { + "time": 14015, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": "354 End data with .", + "tcpFlags": "P", + "sequence": 10000080, + "acknowledgement": 0 + }, + { + "time": 14016, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 11000078, + "acknowledgement": 10000115 + }, + { + "time": 14071, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n", + "tcpFlags": "P", + "sequence": 11000078, + "acknowledgement": 0 + }, + { + "time": 14292, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": null, + "tcpFlags": "A", + "sequence": 10000115, + "acknowledgement": 11000172 + }, + { + "time": 14348, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": "250 Mail queued for delivery", + "tcpFlags": "P", + "sequence": 10000115, + "acknowledgement": 0 + }, + { + "time": 14348, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 11000172, + "acknowledgement": 10000143 + }, + { + "time": 14403, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": "QUIT", + "tcpFlags": "P", + "sequence": 11000172, + "acknowledgement": 0 + }, + { + "time": 14626, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": null, + "tcpFlags": "A", + "sequence": 10000143, + "acknowledgement": 11000176 + }, + { + "time": 14681, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": "221 Server beendet Verbindung.", + "tcpFlags": "P", + "sequence": 10000143, + "acknowledgement": 0 + }, + { + "time": 14681, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 11000176, + "acknowledgement": 10000173 + }, + { + "time": 14736, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": null, + "tcpFlags": "F", + "sequence": 11000176, + "acknowledgement": 0 + }, + { + "time": 14903, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": null, + "tcpFlags": "F", + "sequence": 10000173, + "acknowledgement": 0 + }, + { + "time": 14903, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 11000177, + "acknowledgement": 10000174 + }, + { + "time": 14958, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": null, + "tcpFlags": "A", + "sequence": 10000174, + "acknowledgement": 11000177 + }, + { + "time": 25002, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 56276, + "destinationPort": 53, + "payload": "ID=40953 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" + }, + { + "time": 25224, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 56276, + "payload": "ID=40953 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" + }, + { + "time": 25224, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "S", + "sequence": 13000000, + "acknowledgement": 0 + }, + { + "time": 25446, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "SA", + "sequence": 1000000, + "acknowledgement": 13000001 + }, + { + "time": 25446, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000001, + "acknowledgement": 1000001 + }, + { + "time": 25750, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK POP3 server ready", + "tcpFlags": "P", + "sequence": 1000001, + "acknowledgement": 0 + }, + { + "time": 25750, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000001, + "acknowledgement": 1000022 + }, + { + "time": 25805, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": "USER anna", + "tcpFlags": "P", + "sequence": 13000001, + "acknowledgement": 0 + }, + { + "time": 26027, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1000022, + "acknowledgement": 13000010 + }, + { + "time": 26082, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK enter password", + "tcpFlags": "P", + "sequence": 1000022, + "acknowledgement": 0 + }, + { + "time": 26082, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000010, + "acknowledgement": 1000040 + }, + { + "time": 26137, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": "PASS geheim", + "tcpFlags": "P", + "sequence": 13000010, + "acknowledgement": 0 + }, + { + "time": 26359, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1000040, + "acknowledgement": 13000021 + }, + { + "time": 26414, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK Mailbox locked and ready", + "tcpFlags": "P", + "sequence": 1000040, + "acknowledgement": 0 + }, + { + "time": 26415, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000021, + "acknowledgement": 1000068 + }, + { + "time": 26470, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": "STAT", + "tcpFlags": "P", + "sequence": 13000021, + "acknowledgement": 0 + }, + { + "time": 26691, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1000068, + "acknowledgement": 13000025 + }, + { + "time": 26746, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK 4 1054", + "tcpFlags": "P", + "sequence": 1000068, + "acknowledgement": 0 + }, + { + "time": 26746, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000025, + "acknowledgement": 1000078 + }, + { + "time": 26802, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": "LIST", + "tcpFlags": "P", + "sequence": 13000025, + "acknowledgement": 0 + }, + { + "time": 27023, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1000078, + "acknowledgement": 13000029 + }, + { + "time": 27078, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK 4 1054\n0 80\n1 89\n2 441\n3 444\n", + "tcpFlags": "P", + "sequence": 1000078, + "acknowledgement": 0 + }, + { + "time": 27078, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000029, + "acknowledgement": 1000111 + }, + { + "time": 27134, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": "RETR 0", + "tcpFlags": "P", + "sequence": 13000029, + "acknowledgement": 0 + }, + { + "time": 27355, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1000111, + "acknowledgement": 13000035 + }, + { + "time": 27410, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile", + "tcpFlags": "P", + "sequence": 1000111, + "acknowledgement": 0 + }, + { + "time": 27411, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000035, + "acknowledgement": 1000233 + }, + { + "time": 27466, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": "DELE 0", + "tcpFlags": "P", + "sequence": 13000035, + "acknowledgement": 0 + }, + { + "time": 27687, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1000233, + "acknowledgement": 13000041 + }, + { + "time": 27742, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK message marked for delete", + "tcpFlags": "P", + "sequence": 1000233, + "acknowledgement": 0 + }, + { + "time": 27743, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000041, + "acknowledgement": 1000262 + }, + { + "time": 27798, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": "RETR 1", + "tcpFlags": "P", + "sequence": 13000041, + "acknowledgement": 0 + }, + { + "time": 28019, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1000262, + "acknowledgement": 13000047 + }, + { + "time": 28075, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?", + "tcpFlags": "P", + "sequence": 1000262, + "acknowledgement": 0 + }, + { + "time": 28075, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000047, + "acknowledgement": 1000414 + }, + { + "time": 28130, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": "DELE 1", + "tcpFlags": "P", + "sequence": 13000047, + "acknowledgement": 0 + }, + { + "time": 28351, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1000414, + "acknowledgement": 13000053 + }, + { + "time": 28407, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK message marked for delete", + "tcpFlags": "P", + "sequence": 1000414, + "acknowledgement": 0 + }, + { + "time": 28407, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000053, + "acknowledgement": 1000443 + }, + { + "time": 28463, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": "RETR 2", + "tcpFlags": "P", + "sequence": 13000053, + "acknowledgement": 0 + }, + { + "time": 28684, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1000443, + "acknowledgement": 13000059 + }, + { + "time": 28739, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?", + "tcpFlags": "P", + "sequence": 1000443, + "acknowledgement": 0 + }, + { + "time": 28739, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000059, + "acknowledgement": 1000925 + }, + { + "time": 28794, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": "DELE 2", + "tcpFlags": "P", + "sequence": 13000059, + "acknowledgement": 0 + }, + { + "time": 29016, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1000925, + "acknowledgement": 13000065 + }, + { + "time": 29071, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK message marked for delete", + "tcpFlags": "P", + "sequence": 1000925, + "acknowledgement": 0 + }, + { + "time": 29071, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000065, + "acknowledgement": 1000954 + }, + { + "time": 29126, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": "RETR 3", + "tcpFlags": "P", + "sequence": 13000065, + "acknowledgement": 0 + }, + { + "time": 29348, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1000954, + "acknowledgement": 13000071 + }, + { + "time": 29403, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009jemand@nirgendwo.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?", + "tcpFlags": "P", + "sequence": 1000954, + "acknowledgement": 0 + }, + { + "time": 29403, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000071, + "acknowledgement": 1001440 + }, + { + "time": 29458, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": "DELE 3", + "tcpFlags": "P", + "sequence": 13000071, + "acknowledgement": 0 + }, + { + "time": 29679, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1001440, + "acknowledgement": 13000077 + }, + { + "time": 29735, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK message marked for delete", + "tcpFlags": "P", + "sequence": 1001440, + "acknowledgement": 0 + }, + { + "time": 29735, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000077, + "acknowledgement": 1001469 + }, + { + "time": 29790, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": "QUIT", + "tcpFlags": "P", + "sequence": 13000077, + "acknowledgement": 0 + }, + { + "time": 30012, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1001469, + "acknowledgement": 13000081 + }, + { + "time": 30067, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK", + "tcpFlags": "P", + "sequence": 1001469, + "acknowledgement": 0 + }, + { + "time": 30067, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000081, + "acknowledgement": 1001472 + }, + { + "time": 30123, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "F", + "sequence": 13000081, + "acknowledgement": 0 + }, + { + "time": 30289, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "F", + "sequence": 1001472, + "acknowledgement": 0 + }, + { + "time": 30289, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000082, + "acknowledgement": 1001473 + }, + { + "time": 30344, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1001473, + "acknowledgement": 13000082 + } + ], + "00000000-0000-0000-0000-000000000202": [ + { + "time": 638, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 640, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:11", + "arp": 2, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.20" + }, + { + "time": 868, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 52531, + "destinationPort": 53, + "payload": "ID=43842 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" + }, + { + "time": 873, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 52531, + "payload": "ID=43842 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" + }, + { + "time": 1106, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + }, + { + "time": 3632, + "source": "02:00:00:00:02:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.10" + }, + { + "time": 3632, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:13", + "arp": 2, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.30" + }, + { + "time": 3853, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:12", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 62746, + "destinationPort": 53, + "payload": "ID=3243 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n" + }, + { + "time": 3854, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.30", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 62746, + "payload": "ID=3243 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n" + }, + { + "time": 4076, + "source": "02:00:00:00:02:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + }, + { + "time": 6522, + "source": "02:00:00:00:02:14", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.10" + }, + { + "time": 6522, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:14", + "arp": 2, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.31" + }, + { + "time": 6743, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:12", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 58459, + "destinationPort": 53, + "payload": "ID=47846 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n" + }, + { + "time": 6745, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.31", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 58459, + "payload": "ID=47846 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n" + }, + { + "time": 12111, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 57606, + "destinationPort": 53, + "payload": "ID=60054 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" + }, + { + "time": 12112, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 57606, + "payload": "ID=60054 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" + }, + { + "time": 14571, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:12", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 53558, + "destinationPort": 53, + "payload": "ID=35053 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnirgendwo.de. MX IN\n" + }, + { + "time": 14572, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.30", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 53558, + "payload": "ID=35053 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + }, + { + "time": 25112, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 56276, + "destinationPort": 53, + "payload": "ID=40953 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" + }, + { + "time": 25113, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 56276, + "payload": "ID=40953 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" + } + ], + "00000000-0000-0000-0000-000000000203": [ + { + "time": 638, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 1106, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + }, + { + "time": 1106, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "arp": 2, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.20" + }, + { + "time": 1330, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": null, + "tcpFlags": "S", + "sequence": 5000000, + "acknowledgement": 0 + }, + { + "time": 1331, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": null, + "tcpFlags": "SA", + "sequence": 2000000, + "acknowledgement": 5000001 + }, + { + "time": 1554, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000001, + "acknowledgement": 2000001 + }, + { + "time": 1623, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": "220 Willkommen bei filius.de", + "tcpFlags": "P", + "sequence": 2000001, + "acknowledgement": 0 + }, + { + "time": 1846, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000001, + "acknowledgement": 2000029 + }, + { + "time": 1901, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": "HELO 192.168.0.20", + "tcpFlags": "P", + "sequence": 5000001, + "acknowledgement": 0 + }, + { + "time": 1902, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": null, + "tcpFlags": "A", + "sequence": 2000029, + "acknowledgement": 5000018 + }, + { + "time": 1957, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": "250 Hello 192.168.0.20", + "tcpFlags": "P", + "sequence": 2000029, + "acknowledgement": 0 + }, + { + "time": 2180, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000018, + "acknowledgement": 2000051 + }, + { + "time": 2236, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": "MAIL FROM: ", + "tcpFlags": "P", + "sequence": 5000018, + "acknowledgement": 0 + }, + { + "time": 2236, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": null, + "tcpFlags": "A", + "sequence": 2000051, + "acknowledgement": 5000045 + }, + { + "time": 2292, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": "250 Sender OK", + "tcpFlags": "P", + "sequence": 2000051, + "acknowledgement": 0 + }, + { + "time": 2514, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000045, + "acknowledgement": 2000064 + }, + { + "time": 2570, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": "RCPT TO:", + "tcpFlags": "P", + "sequence": 5000045, + "acknowledgement": 0 + }, + { + "time": 2570, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": null, + "tcpFlags": "A", + "sequence": 2000064, + "acknowledgement": 5000072 + }, + { + "time": 2626, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": "250 Recipient OK", + "tcpFlags": "P", + "sequence": 2000064, + "acknowledgement": 0 + }, + { + "time": 2849, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000072, + "acknowledgement": 2000080 + }, + { + "time": 2904, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": "DATA", + "tcpFlags": "P", + "sequence": 5000072, + "acknowledgement": 0 + }, + { + "time": 2904, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": null, + "tcpFlags": "A", + "sequence": 2000080, + "acknowledgement": 5000076 + }, + { + "time": 2960, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": "354 End data with .", + "tcpFlags": "P", + "sequence": 2000080, + "acknowledgement": 0 + }, + { + "time": 3182, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000076, + "acknowledgement": 2000115 + }, + { + "time": 3237, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n", + "tcpFlags": "P", + "sequence": 5000076, + "acknowledgement": 0 + }, + { + "time": 3238, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": null, + "tcpFlags": "A", + "sequence": 2000115, + "acknowledgement": 5000168 + }, + { + "time": 3293, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": "250 Mail queued for delivery", + "tcpFlags": "P", + "sequence": 2000115, + "acknowledgement": 0 + }, + { + "time": 3515, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000168, + "acknowledgement": 2000143 + }, + { + "time": 3521, + "source": "02:00:00:00:02:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.10" + }, + { + "time": 3571, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": "QUIT", + "tcpFlags": "P", + "sequence": 5000168, + "acknowledgement": 0 + }, + { + "time": 3576, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": null, + "tcpFlags": "A", + "sequence": 2000143, + "acknowledgement": 5000172 + }, + { + "time": 3632, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": "221 Server beendet Verbindung.", + "tcpFlags": "P", + "sequence": 2000143, + "acknowledgement": 0 + }, + { + "time": 3742, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:13", + "arp": 2, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.30" + }, + { + "time": 3743, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:12", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 62746, + "destinationPort": 53, + "payload": "ID=3243 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n" + }, + { + "time": 3853, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000172, + "acknowledgement": 2000173 + }, + { + "time": 3854, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": null, + "tcpFlags": "F", + "sequence": 2000173, + "acknowledgement": 0 + }, + { + "time": 3909, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": null, + "tcpFlags": "F", + "sequence": 5000172, + "acknowledgement": 0 + }, + { + "time": 3909, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 62333, + "payload": null, + "tcpFlags": "A", + "sequence": 2000174, + "acknowledgement": 5000173 + }, + { + "time": 3965, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.30", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 62746, + "payload": "ID=3243 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n" + }, + { + "time": 3966, + "source": "02:00:00:00:02:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + }, + { + "time": 4075, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62333, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000173, + "acknowledgement": 2000174 + }, + { + "time": 4187, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.30" + }, + { + "time": 4187, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": null, + "tcpFlags": "S", + "sequence": 7000000, + "acknowledgement": 0 + }, + { + "time": 4409, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": null, + "tcpFlags": "SA", + "sequence": 4000000, + "acknowledgement": 7000001 + }, + { + "time": 4409, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000001, + "acknowledgement": 4000001 + }, + { + "time": 4636, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": "220 Willkommen bei andere.de", + "tcpFlags": "P", + "sequence": 4000001, + "acknowledgement": 0 + }, + { + "time": 4636, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000001, + "acknowledgement": 4000029 + }, + { + "time": 4692, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": "HELO 192.168.0.30", + "tcpFlags": "P", + "sequence": 7000001, + "acknowledgement": 0 + }, + { + "time": 4913, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": null, + "tcpFlags": "A", + "sequence": 4000029, + "acknowledgement": 7000018 + }, + { + "time": 4968, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": "250 Hello 192.168.0.30", + "tcpFlags": "P", + "sequence": 4000029, + "acknowledgement": 0 + }, + { + "time": 4969, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000018, + "acknowledgement": 4000051 + }, + { + "time": 5024, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": "MAIL FROM: ", + "tcpFlags": "P", + "sequence": 7000018, + "acknowledgement": 0 + }, + { + "time": 5245, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": null, + "tcpFlags": "A", + "sequence": 4000051, + "acknowledgement": 7000045 + }, + { + "time": 5301, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": "250 Sender OK", + "tcpFlags": "P", + "sequence": 4000051, + "acknowledgement": 0 + }, + { + "time": 5301, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000045, + "acknowledgement": 4000064 + }, + { + "time": 5356, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": "RCPT TO:", + "tcpFlags": "P", + "sequence": 7000045, + "acknowledgement": 0 + }, + { + "time": 5578, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": null, + "tcpFlags": "A", + "sequence": 4000064, + "acknowledgement": 7000072 + }, + { + "time": 5633, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": "250 Recipient OK", + "tcpFlags": "P", + "sequence": 4000064, + "acknowledgement": 0 + }, + { + "time": 5634, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000072, + "acknowledgement": 4000080 + }, + { + "time": 5689, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": "DATA", + "tcpFlags": "P", + "sequence": 7000072, + "acknowledgement": 0 + }, + { + "time": 5910, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": null, + "tcpFlags": "A", + "sequence": 4000080, + "acknowledgement": 7000076 + }, + { + "time": 5966, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": "354 End data with .", + "tcpFlags": "P", + "sequence": 4000080, + "acknowledgement": 0 + }, + { + "time": 5966, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000076, + "acknowledgement": 4000115 + }, + { + "time": 6021, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n", + "tcpFlags": "P", + "sequence": 7000076, + "acknowledgement": 0 + }, + { + "time": 6243, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": null, + "tcpFlags": "A", + "sequence": 4000115, + "acknowledgement": 7000168 + }, + { + "time": 6298, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": "250 Mail queued for delivery", + "tcpFlags": "P", + "sequence": 4000115, + "acknowledgement": 0 + }, + { + "time": 6299, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000168, + "acknowledgement": 4000143 + }, + { + "time": 6354, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": "QUIT", + "tcpFlags": "P", + "sequence": 7000168, + "acknowledgement": 0 + }, + { + "time": 6522, + "source": "02:00:00:00:02:14", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.10" + }, + { + "time": 6577, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": null, + "tcpFlags": "A", + "sequence": 4000143, + "acknowledgement": 7000172 + }, + { + "time": 6966, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": "221 Server beendet Verbindung.", + "tcpFlags": "P", + "sequence": 4000143, + "acknowledgement": 0 + }, + { + "time": 6967, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000172, + "acknowledgement": 4000173 + }, + { + "time": 7022, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": null, + "tcpFlags": "S", + "sequence": 9000000, + "acknowledgement": 0 + }, + { + "time": 7022, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": null, + "tcpFlags": "F", + "sequence": 7000172, + "acknowledgement": 0 + }, + { + "time": 7077, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": null, + "tcpFlags": "SA", + "sequence": 6000000, + "acknowledgement": 9000001 + }, + { + "time": 7188, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": null, + "tcpFlags": "F", + "sequence": 4000173, + "acknowledgement": 0 + }, + { + "time": 7188, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000173, + "acknowledgement": 4000174 + }, + { + "time": 7243, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": null, + "tcpFlags": "A", + "sequence": 4000174, + "acknowledgement": 7000173 + }, + { + "time": 7299, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000001, + "acknowledgement": 6000001 + }, + { + "time": 7350, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": "220 Willkommen bei filius.de", + "tcpFlags": "P", + "sequence": 6000001, + "acknowledgement": 0 + }, + { + "time": 7572, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000001, + "acknowledgement": 6000029 + }, + { + "time": 7627, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": "HELO 192.168.0.31", + "tcpFlags": "P", + "sequence": 9000001, + "acknowledgement": 0 + }, + { + "time": 7627, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": null, + "tcpFlags": "A", + "sequence": 6000029, + "acknowledgement": 9000018 + }, + { + "time": 7682, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": "250 Hello 192.168.0.31", + "tcpFlags": "P", + "sequence": 6000029, + "acknowledgement": 0 + }, + { + "time": 7904, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000018, + "acknowledgement": 6000051 + }, + { + "time": 7959, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": "MAIL FROM: <>", + "tcpFlags": "P", + "sequence": 9000018, + "acknowledgement": 0 + }, + { + "time": 7959, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": null, + "tcpFlags": "A", + "sequence": 6000051, + "acknowledgement": 9000031 + }, + { + "time": 8014, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": "250 Sender OK", + "tcpFlags": "P", + "sequence": 6000051, + "acknowledgement": 0 + }, + { + "time": 8236, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000031, + "acknowledgement": 6000064 + }, + { + "time": 8291, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": "RCPT TO:", + "tcpFlags": "P", + "sequence": 9000031, + "acknowledgement": 0 + }, + { + "time": 8291, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": null, + "tcpFlags": "A", + "sequence": 6000064, + "acknowledgement": 9000055 + }, + { + "time": 8347, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": "250 Recipient OK", + "tcpFlags": "P", + "sequence": 6000064, + "acknowledgement": 0 + }, + { + "time": 8568, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000055, + "acknowledgement": 6000080 + }, + { + "time": 8623, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": "DATA", + "tcpFlags": "P", + "sequence": 9000055, + "acknowledgement": 0 + }, + { + "time": 8623, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": null, + "tcpFlags": "A", + "sequence": 6000080, + "acknowledgement": 9000059 + }, + { + "time": 8679, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": "354 End data with .", + "tcpFlags": "P", + "sequence": 6000080, + "acknowledgement": 0 + }, + { + "time": 8900, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000059, + "acknowledgement": 6000115 + }, + { + "time": 8956, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": "From: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n", + "tcpFlags": "P", + "sequence": 9000059, + "acknowledgement": 0 + }, + { + "time": 8956, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": null, + "tcpFlags": "A", + "sequence": 6000115, + "acknowledgement": 9000525 + }, + { + "time": 9011, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": "250 Mail queued for delivery", + "tcpFlags": "P", + "sequence": 6000115, + "acknowledgement": 0 + }, + { + "time": 9232, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000525, + "acknowledgement": 6000143 + }, + { + "time": 9288, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": "QUIT", + "tcpFlags": "P", + "sequence": 9000525, + "acknowledgement": 0 + }, + { + "time": 9288, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": null, + "tcpFlags": "A", + "sequence": 6000143, + "acknowledgement": 9000529 + }, + { + "time": 9343, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": "221 Server beendet Verbindung.", + "tcpFlags": "P", + "sequence": 6000143, + "acknowledgement": 0 + }, + { + "time": 9565, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000529, + "acknowledgement": 6000173 + }, + { + "time": 9565, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": null, + "tcpFlags": "F", + "sequence": 6000173, + "acknowledgement": 0 + }, + { + "time": 9620, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": null, + "tcpFlags": "F", + "sequence": 9000529, + "acknowledgement": 0 + }, + { + "time": 9620, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": null, + "tcpFlags": "A", + "sequence": 6000174, + "acknowledgement": 9000530 + }, + { + "time": 9786, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000530, + "acknowledgement": 6000174 + }, + { + "time": 12334, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": null, + "tcpFlags": "S", + "sequence": 11000000, + "acknowledgement": 0 + }, + { + "time": 12335, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": null, + "tcpFlags": "SA", + "sequence": 10000000, + "acknowledgement": 11000001 + }, + { + "time": 12556, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 11000001, + "acknowledgement": 10000001 + }, + { + "time": 12575, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": "220 Willkommen bei filius.de", + "tcpFlags": "P", + "sequence": 10000001, + "acknowledgement": 0 + }, + { + "time": 12797, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 11000001, + "acknowledgement": 10000029 + }, + { + "time": 12852, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": "HELO 192.168.0.20", + "tcpFlags": "P", + "sequence": 11000001, + "acknowledgement": 0 + }, + { + "time": 12853, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": null, + "tcpFlags": "A", + "sequence": 10000029, + "acknowledgement": 11000018 + }, + { + "time": 12908, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": "250 Hello 192.168.0.20", + "tcpFlags": "P", + "sequence": 10000029, + "acknowledgement": 0 + }, + { + "time": 13130, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 11000018, + "acknowledgement": 10000051 + }, + { + "time": 13185, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": "MAIL FROM: ", + "tcpFlags": "P", + "sequence": 11000018, + "acknowledgement": 0 + }, + { + "time": 13185, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": null, + "tcpFlags": "A", + "sequence": 10000051, + "acknowledgement": 11000045 + }, + { + "time": 13241, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": "250 Sender OK", + "tcpFlags": "P", + "sequence": 10000051, + "acknowledgement": 0 + }, + { + "time": 13462, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 11000045, + "acknowledgement": 10000064 + }, + { + "time": 13517, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": "RCPT TO:", + "tcpFlags": "P", + "sequence": 11000045, + "acknowledgement": 0 + }, + { + "time": 13517, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": null, + "tcpFlags": "A", + "sequence": 10000064, + "acknowledgement": 11000074 + }, + { + "time": 13573, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": "250 Recipient OK", + "tcpFlags": "P", + "sequence": 10000064, + "acknowledgement": 0 + }, + { + "time": 13794, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 11000074, + "acknowledgement": 10000080 + }, + { + "time": 13849, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": "DATA", + "tcpFlags": "P", + "sequence": 11000074, + "acknowledgement": 0 + }, + { + "time": 13850, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": null, + "tcpFlags": "A", + "sequence": 10000080, + "acknowledgement": 11000078 + }, + { + "time": 13905, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": "354 End data with .", + "tcpFlags": "P", + "sequence": 10000080, + "acknowledgement": 0 + }, + { + "time": 14126, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 11000078, + "acknowledgement": 10000115 + }, + { + "time": 14181, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n", + "tcpFlags": "P", + "sequence": 11000078, + "acknowledgement": 0 + }, + { + "time": 14182, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": null, + "tcpFlags": "A", + "sequence": 10000115, + "acknowledgement": 11000172 + }, + { + "time": 14237, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": "250 Mail queued for delivery", + "tcpFlags": "P", + "sequence": 10000115, + "acknowledgement": 0 + }, + { + "time": 14458, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 11000172, + "acknowledgement": 10000143 + }, + { + "time": 14460, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:12", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 53558, + "destinationPort": 53, + "payload": "ID=35053 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnirgendwo.de. MX IN\n" + }, + { + "time": 14514, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": "QUIT", + "tcpFlags": "P", + "sequence": 11000172, + "acknowledgement": 0 + }, + { + "time": 14515, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": null, + "tcpFlags": "A", + "sequence": 10000143, + "acknowledgement": 11000176 + }, + { + "time": 14571, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": "221 Server beendet Verbindung.", + "tcpFlags": "P", + "sequence": 10000143, + "acknowledgement": 0 + }, + { + "time": 14682, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.30", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 53558, + "payload": "ID=35053 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + }, + { + "time": 14792, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 11000176, + "acknowledgement": 10000173 + }, + { + "time": 14792, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": null, + "tcpFlags": "F", + "sequence": 10000173, + "acknowledgement": 0 + }, + { + "time": 14847, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": null, + "tcpFlags": "F", + "sequence": 11000176, + "acknowledgement": 0 + }, + { + "time": 14847, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 65366, + "payload": null, + "tcpFlags": "A", + "sequence": 10000174, + "acknowledgement": 11000177 + }, + { + "time": 15013, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 65366, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 11000177, + "acknowledgement": 10000174 + }, + { + "time": 25335, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "S", + "sequence": 13000000, + "acknowledgement": 0 + }, + { + "time": 25335, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "SA", + "sequence": 1000000, + "acknowledgement": 13000001 + }, + { + "time": 25556, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000001, + "acknowledgement": 1000001 + }, + { + "time": 25639, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK POP3 server ready", + "tcpFlags": "P", + "sequence": 1000001, + "acknowledgement": 0 + }, + { + "time": 25860, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000001, + "acknowledgement": 1000022 + }, + { + "time": 25916, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": "USER anna", + "tcpFlags": "P", + "sequence": 13000001, + "acknowledgement": 0 + }, + { + "time": 25916, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1000022, + "acknowledgement": 13000010 + }, + { + "time": 25971, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK enter password", + "tcpFlags": "P", + "sequence": 1000022, + "acknowledgement": 0 + }, + { + "time": 26193, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000010, + "acknowledgement": 1000040 + }, + { + "time": 26248, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": "PASS geheim", + "tcpFlags": "P", + "sequence": 13000010, + "acknowledgement": 0 + }, + { + "time": 26248, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1000040, + "acknowledgement": 13000021 + }, + { + "time": 26304, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK Mailbox locked and ready", + "tcpFlags": "P", + "sequence": 1000040, + "acknowledgement": 0 + }, + { + "time": 26525, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000021, + "acknowledgement": 1000068 + }, + { + "time": 26580, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": "STAT", + "tcpFlags": "P", + "sequence": 13000021, + "acknowledgement": 0 + }, + { + "time": 26581, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1000068, + "acknowledgement": 13000025 + }, + { + "time": 26636, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK 4 1054", + "tcpFlags": "P", + "sequence": 1000068, + "acknowledgement": 0 + }, + { + "time": 26857, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000025, + "acknowledgement": 1000078 + }, + { + "time": 26912, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": "LIST", + "tcpFlags": "P", + "sequence": 13000025, + "acknowledgement": 0 + }, + { + "time": 26912, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1000078, + "acknowledgement": 13000029 + }, + { + "time": 26968, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK 4 1054\n0 80\n1 89\n2 441\n3 444\n", + "tcpFlags": "P", + "sequence": 1000078, + "acknowledgement": 0 + }, + { + "time": 27189, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000029, + "acknowledgement": 1000111 + }, + { + "time": 27244, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": "RETR 0", + "tcpFlags": "P", + "sequence": 13000029, + "acknowledgement": 0 + }, + { + "time": 27244, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1000111, + "acknowledgement": 13000035 + }, + { + "time": 27300, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile", + "tcpFlags": "P", + "sequence": 1000111, + "acknowledgement": 0 + }, + { + "time": 27521, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000035, + "acknowledgement": 1000233 + }, + { + "time": 27576, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": "DELE 0", + "tcpFlags": "P", + "sequence": 13000035, + "acknowledgement": 0 + }, + { + "time": 27577, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1000233, + "acknowledgement": 13000041 + }, + { + "time": 27632, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK message marked for delete", + "tcpFlags": "P", + "sequence": 1000233, + "acknowledgement": 0 + }, + { + "time": 27853, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000041, + "acknowledgement": 1000262 + }, + { + "time": 27908, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": "RETR 1", + "tcpFlags": "P", + "sequence": 13000041, + "acknowledgement": 0 + }, + { + "time": 27909, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1000262, + "acknowledgement": 13000047 + }, + { + "time": 27964, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?", + "tcpFlags": "P", + "sequence": 1000262, + "acknowledgement": 0 + }, + { + "time": 28185, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000047, + "acknowledgement": 1000414 + }, + { + "time": 28241, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": "DELE 1", + "tcpFlags": "P", + "sequence": 13000047, + "acknowledgement": 0 + }, + { + "time": 28241, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1000414, + "acknowledgement": 13000053 + }, + { + "time": 28296, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK message marked for delete", + "tcpFlags": "P", + "sequence": 1000414, + "acknowledgement": 0 + }, + { + "time": 28518, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000053, + "acknowledgement": 1000443 + }, + { + "time": 28573, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": "RETR 2", + "tcpFlags": "P", + "sequence": 13000053, + "acknowledgement": 0 + }, + { + "time": 28573, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1000443, + "acknowledgement": 13000059 + }, + { + "time": 28628, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?", + "tcpFlags": "P", + "sequence": 1000443, + "acknowledgement": 0 + }, + { + "time": 28850, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000059, + "acknowledgement": 1000925 + }, + { + "time": 28905, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": "DELE 2", + "tcpFlags": "P", + "sequence": 13000059, + "acknowledgement": 0 + }, + { + "time": 28905, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1000925, + "acknowledgement": 13000065 + }, + { + "time": 28960, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK message marked for delete", + "tcpFlags": "P", + "sequence": 1000925, + "acknowledgement": 0 + }, + { + "time": 29182, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000065, + "acknowledgement": 1000954 + }, + { + "time": 29237, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": "RETR 3", + "tcpFlags": "P", + "sequence": 13000065, + "acknowledgement": 0 + }, + { + "time": 29237, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1000954, + "acknowledgement": 13000071 + }, + { + "time": 29292, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009jemand@nirgendwo.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?", + "tcpFlags": "P", + "sequence": 1000954, + "acknowledgement": 0 + }, + { + "time": 29513, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000071, + "acknowledgement": 1001440 + }, + { + "time": 29569, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": "DELE 3", + "tcpFlags": "P", + "sequence": 13000071, + "acknowledgement": 0 + }, + { + "time": 29569, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1001440, + "acknowledgement": 13000077 + }, + { + "time": 29624, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK message marked for delete", + "tcpFlags": "P", + "sequence": 1001440, + "acknowledgement": 0 + }, + { + "time": 29846, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000077, + "acknowledgement": 1001469 + }, + { + "time": 29901, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": "QUIT", + "tcpFlags": "P", + "sequence": 13000077, + "acknowledgement": 0 + }, + { + "time": 29901, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1001469, + "acknowledgement": 13000081 + }, + { + "time": 29957, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": "+OK", + "tcpFlags": "P", + "sequence": 1001469, + "acknowledgement": 0 + }, + { + "time": 30178, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000081, + "acknowledgement": 1001472 + }, + { + "time": 30178, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "F", + "sequence": 1001472, + "acknowledgement": 0 + }, + { + "time": 30233, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "F", + "sequence": 13000081, + "acknowledgement": 0 + }, + { + "time": 30233, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 56326, + "payload": null, + "tcpFlags": "A", + "sequence": 1001473, + "acknowledgement": 13000082 + }, + { + "time": 30399, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56326, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 13000082, + "acknowledgement": 1001473 + } + ], + "00000000-0000-0000-0000-000000000204": [ + { + "time": 638, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 1106, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + }, + { + "time": 3632, + "source": "02:00:00:00:02:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.10" + }, + { + "time": 4076, + "source": "02:00:00:00:02:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + }, + { + "time": 4076, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.30" + }, + { + "time": 4298, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": null, + "tcpFlags": "S", + "sequence": 7000000, + "acknowledgement": 0 + }, + { + "time": 4298, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": null, + "tcpFlags": "SA", + "sequence": 4000000, + "acknowledgement": 7000001 + }, + { + "time": 4520, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000001, + "acknowledgement": 4000001 + }, + { + "time": 4525, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": "220 Willkommen bei andere.de", + "tcpFlags": "P", + "sequence": 4000001, + "acknowledgement": 0 + }, + { + "time": 4747, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000001, + "acknowledgement": 4000029 + }, + { + "time": 4802, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": "HELO 192.168.0.30", + "tcpFlags": "P", + "sequence": 7000001, + "acknowledgement": 0 + }, + { + "time": 4802, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": null, + "tcpFlags": "A", + "sequence": 4000029, + "acknowledgement": 7000018 + }, + { + "time": 4858, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": "250 Hello 192.168.0.30", + "tcpFlags": "P", + "sequence": 4000029, + "acknowledgement": 0 + }, + { + "time": 5079, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000018, + "acknowledgement": 4000051 + }, + { + "time": 5134, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": "MAIL FROM: ", + "tcpFlags": "P", + "sequence": 7000018, + "acknowledgement": 0 + }, + { + "time": 5135, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": null, + "tcpFlags": "A", + "sequence": 4000051, + "acknowledgement": 7000045 + }, + { + "time": 5190, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": "250 Sender OK", + "tcpFlags": "P", + "sequence": 4000051, + "acknowledgement": 0 + }, + { + "time": 5412, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000045, + "acknowledgement": 4000064 + }, + { + "time": 5467, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": "RCPT TO:", + "tcpFlags": "P", + "sequence": 7000045, + "acknowledgement": 0 + }, + { + "time": 5467, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": null, + "tcpFlags": "A", + "sequence": 4000064, + "acknowledgement": 7000072 + }, + { + "time": 5523, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": "250 Recipient OK", + "tcpFlags": "P", + "sequence": 4000064, + "acknowledgement": 0 + }, + { + "time": 5744, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000072, + "acknowledgement": 4000080 + }, + { + "time": 5799, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": "DATA", + "tcpFlags": "P", + "sequence": 7000072, + "acknowledgement": 0 + }, + { + "time": 5800, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": null, + "tcpFlags": "A", + "sequence": 4000080, + "acknowledgement": 7000076 + }, + { + "time": 5855, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": "354 End data with .", + "tcpFlags": "P", + "sequence": 4000080, + "acknowledgement": 0 + }, + { + "time": 6077, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000076, + "acknowledgement": 4000115 + }, + { + "time": 6132, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n", + "tcpFlags": "P", + "sequence": 7000076, + "acknowledgement": 0 + }, + { + "time": 6133, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": null, + "tcpFlags": "A", + "sequence": 4000115, + "acknowledgement": 7000168 + }, + { + "time": 6188, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": "250 Mail queued for delivery", + "tcpFlags": "P", + "sequence": 4000115, + "acknowledgement": 0 + }, + { + "time": 6409, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000168, + "acknowledgement": 4000143 + }, + { + "time": 6411, + "source": "02:00:00:00:02:14", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.10" + }, + { + "time": 6464, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": "QUIT", + "tcpFlags": "P", + "sequence": 7000168, + "acknowledgement": 0 + }, + { + "time": 6467, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": null, + "tcpFlags": "A", + "sequence": 4000143, + "acknowledgement": 7000172 + }, + { + "time": 6633, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:14", + "arp": 2, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.31" + }, + { + "time": 6633, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:12", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 58459, + "destinationPort": 53, + "payload": "ID=47846 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n" + }, + { + "time": 6855, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.31", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 58459, + "payload": "ID=47846 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n" + }, + { + "time": 6856, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": "221 Server beendet Verbindung.", + "tcpFlags": "P", + "sequence": 4000143, + "acknowledgement": 0 + }, + { + "time": 6911, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": null, + "tcpFlags": "S", + "sequence": 9000000, + "acknowledgement": 0 + }, + { + "time": 7077, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000172, + "acknowledgement": 4000173 + }, + { + "time": 7078, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": null, + "tcpFlags": "F", + "sequence": 4000173, + "acknowledgement": 0 + }, + { + "time": 7133, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": null, + "tcpFlags": "F", + "sequence": 7000172, + "acknowledgement": 0 + }, + { + "time": 7133, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64673, + "payload": null, + "tcpFlags": "A", + "sequence": 4000174, + "acknowledgement": 7000173 + }, + { + "time": 7188, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": null, + "tcpFlags": "SA", + "sequence": 6000000, + "acknowledgement": 9000001 + }, + { + "time": 7188, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000001, + "acknowledgement": 6000001 + }, + { + "time": 7299, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64673, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000173, + "acknowledgement": 4000174 + }, + { + "time": 7461, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": "220 Willkommen bei filius.de", + "tcpFlags": "P", + "sequence": 6000001, + "acknowledgement": 0 + }, + { + "time": 7461, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000001, + "acknowledgement": 6000029 + }, + { + "time": 7516, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": "HELO 192.168.0.31", + "tcpFlags": "P", + "sequence": 9000001, + "acknowledgement": 0 + }, + { + "time": 7738, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": null, + "tcpFlags": "A", + "sequence": 6000029, + "acknowledgement": 9000018 + }, + { + "time": 7793, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": "250 Hello 192.168.0.31", + "tcpFlags": "P", + "sequence": 6000029, + "acknowledgement": 0 + }, + { + "time": 7793, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000018, + "acknowledgement": 6000051 + }, + { + "time": 7848, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": "MAIL FROM: <>", + "tcpFlags": "P", + "sequence": 9000018, + "acknowledgement": 0 + }, + { + "time": 8070, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": null, + "tcpFlags": "A", + "sequence": 6000051, + "acknowledgement": 9000031 + }, + { + "time": 8125, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": "250 Sender OK", + "tcpFlags": "P", + "sequence": 6000051, + "acknowledgement": 0 + }, + { + "time": 8125, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000031, + "acknowledgement": 6000064 + }, + { + "time": 8180, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": "RCPT TO:", + "tcpFlags": "P", + "sequence": 9000031, + "acknowledgement": 0 + }, + { + "time": 8402, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": null, + "tcpFlags": "A", + "sequence": 6000064, + "acknowledgement": 9000055 + }, + { + "time": 8457, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": "250 Recipient OK", + "tcpFlags": "P", + "sequence": 6000064, + "acknowledgement": 0 + }, + { + "time": 8457, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000055, + "acknowledgement": 6000080 + }, + { + "time": 8513, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": "DATA", + "tcpFlags": "P", + "sequence": 9000055, + "acknowledgement": 0 + }, + { + "time": 8734, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": null, + "tcpFlags": "A", + "sequence": 6000080, + "acknowledgement": 9000059 + }, + { + "time": 8789, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": "354 End data with .", + "tcpFlags": "P", + "sequence": 6000080, + "acknowledgement": 0 + }, + { + "time": 8790, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000059, + "acknowledgement": 6000115 + }, + { + "time": 8845, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": "From: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n", + "tcpFlags": "P", + "sequence": 9000059, + "acknowledgement": 0 + }, + { + "time": 9066, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": null, + "tcpFlags": "A", + "sequence": 6000115, + "acknowledgement": 9000525 + }, + { + "time": 9122, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": "250 Mail queued for delivery", + "tcpFlags": "P", + "sequence": 6000115, + "acknowledgement": 0 + }, + { + "time": 9122, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000525, + "acknowledgement": 6000143 + }, + { + "time": 9177, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": "QUIT", + "tcpFlags": "P", + "sequence": 9000525, + "acknowledgement": 0 + }, + { + "time": 9399, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": null, + "tcpFlags": "A", + "sequence": 6000143, + "acknowledgement": 9000529 + }, + { + "time": 9454, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": "221 Server beendet Verbindung.", + "tcpFlags": "P", + "sequence": 6000143, + "acknowledgement": 0 + }, + { + "time": 9454, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000529, + "acknowledgement": 6000173 + }, + { + "time": 9509, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": null, + "tcpFlags": "F", + "sequence": 9000529, + "acknowledgement": 0 + }, + { + "time": 9676, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": null, + "tcpFlags": "F", + "sequence": 6000173, + "acknowledgement": 0 + }, + { + "time": 9676, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 50936, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000530, + "acknowledgement": 6000174 + }, + { + "time": 9731, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 50936, + "payload": null, + "tcpFlags": "A", + "sequence": 6000174, + "acknowledgement": 9000530 + } + ] + }, + "rows": { + "00000000-0000-0000-0000-000000000201": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:02:11", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "3", + "192.168.0.20:52531", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "3", + "192.168.0.20:52531", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=43842 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" + ], + [ + "4", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "4", + "192.168.0.10:53", + "192.168.0.20:52531", + "UDP", + "Transport", + "" + ], + [ + "4", + "192.168.0.10:53", + "192.168.0.20:52531", + "DNS", + "Anwendung", + "ID=43842 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" + ], + [ + "5", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "6", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "7", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000" + ], + [ + "8", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SYN, SEQ: 2.000.000, ACK: 5.000.001" + ], + [ + "9", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 2.000.001" + ], + [ + "10", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.001" + ], + [ + "10", + "192.168.0.30:25", + "192.168.0.20:62333", + "SMTP", + "Anwendung", + "220 Willkommen bei filius.de" + ], + [ + "11", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 2.000.029" + ], + [ + "12", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.001" + ], + [ + "12", + "192.168.0.20:62333", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "HELO 192.168.0.20" + ], + [ + "13", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.029, ACK: 5.000.018" + ], + [ + "14", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.029" + ], + [ + "14", + "192.168.0.30:25", + "192.168.0.20:62333", + "SMTP", + "Anwendung", + "250 Hello 192.168.0.20" + ], + [ + "15", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.018, ACK: 2.000.051" + ], + [ + "16", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.018" + ], + [ + "16", + "192.168.0.20:62333", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "MAIL FROM: " + ], + [ + "17", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.051, ACK: 5.000.045" + ], + [ + "18", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.051" + ], + [ + "18", + "192.168.0.30:25", + "192.168.0.20:62333", + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "19", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.045, ACK: 2.000.064" + ], + [ + "20", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "20", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.045" + ], + [ + "20", + "192.168.0.20:62333", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "21", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.064, ACK: 5.000.072" + ], + [ + "22", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.064" + ], + [ + "22", + "192.168.0.30:25", + "192.168.0.20:62333", + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "23", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "23", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.072, ACK: 2.000.080" + ], + [ + "24", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "24", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.072" + ], + [ + "24", + "192.168.0.20:62333", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "DATA" + ], + [ + "25", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "25", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.080, ACK: 5.000.076" + ], + [ + "26", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.080" + ], + [ + "26", + "192.168.0.30:25", + "192.168.0.20:62333", + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "27", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.076, ACK: 2.000.115" + ], + [ + "28", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "28", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.076" + ], + [ + "28", + "192.168.0.20:62333", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" + ], + [ + "29", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "29", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.115, ACK: 5.000.168" + ], + [ + "30", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "30", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.115" + ], + [ + "30", + "192.168.0.30:25", + "192.168.0.20:62333", + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "31", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "31", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.168, ACK: 2.000.143" + ], + [ + "32", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "32", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.168" + ], + [ + "32", + "192.168.0.20:62333", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "33", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "33", + "192.168.0.30", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "34", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "34", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.143, ACK: 5.000.172" + ], + [ + "35", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "35", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.143" + ], + [ + "35", + "192.168.0.30:25", + "192.168.0.20:62333", + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "36", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "36", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "36", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.172, ACK: 2.000.173" + ], + [ + "37", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "FIN, SEQ: 5.000.172" + ], + [ + "38", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "38", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "FIN, SEQ: 2.000.173" + ], + [ + "39", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "39", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.173, ACK: 2.000.174" + ], + [ + "40", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "40", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "40", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.174, ACK: 5.000.173" + ], + [ + "41", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "41", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "42", + "02:00:00:00:02:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "42", + "192.168.0.31", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "43", + "02:00:00:00:02:11", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "43", + "192.168.0.20:57606", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "43", + "192.168.0.20:57606", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=60054 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" + ], + [ + "44", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "44", + "192.168.0.10:53", + "192.168.0.20:57606", + "UDP", + "Transport", + "" + ], + [ + "44", + "192.168.0.10:53", + "192.168.0.20:57606", + "DNS", + "Anwendung", + "ID=60054 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" + ], + [ + "45", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "45", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SYN, SEQ: 11.000.000" + ], + [ + "46", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "46", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SYN, SEQ: 10.000.000, ACK: 11.000.001" + ], + [ + "47", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "47", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.001, ACK: 10.000.001" + ], + [ + "48", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "48", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "48", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.001" + ], + [ + "48", + "192.168.0.30:25", + "192.168.0.20:65366", + "SMTP", + "Anwendung", + "220 Willkommen bei filius.de" + ], + [ + "49", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "49", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "49", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.001, ACK: 10.000.029" + ], + [ + "50", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "50", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "50", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.001" + ], + [ + "50", + "192.168.0.20:65366", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "HELO 192.168.0.20" + ], + [ + "51", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "51", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "51", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.029, ACK: 11.000.018" + ], + [ + "52", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "52", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "52", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.029" + ], + [ + "52", + "192.168.0.30:25", + "192.168.0.20:65366", + "SMTP", + "Anwendung", + "250 Hello 192.168.0.20" + ], + [ + "53", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "53", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "53", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.018, ACK: 10.000.051" + ], + [ + "54", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "54", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "54", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.018" + ], + [ + "54", + "192.168.0.20:65366", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "MAIL FROM: " + ], + [ + "55", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "55", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "55", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.051, ACK: 11.000.045" + ], + [ + "56", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "56", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "56", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.051" + ], + [ + "56", + "192.168.0.30:25", + "192.168.0.20:65366", + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "57", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "57", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "57", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.045, ACK: 10.000.064" + ], + [ + "58", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "58", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "58", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.045" + ], + [ + "58", + "192.168.0.20:65366", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "59", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "59", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "59", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.064, ACK: 11.000.074" + ], + [ + "60", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "60", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "60", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.064" + ], + [ + "60", + "192.168.0.30:25", + "192.168.0.20:65366", + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "61", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "61", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "61", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.074, ACK: 10.000.080" + ], + [ + "62", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "62", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "62", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.074" + ], + [ + "62", + "192.168.0.20:65366", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "DATA" + ], + [ + "63", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "63", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "63", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.080, ACK: 11.000.078" + ], + [ + "64", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "64", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "64", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.080" + ], + [ + "64", + "192.168.0.30:25", + "192.168.0.20:65366", + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "65", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "65", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "65", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.078, ACK: 10.000.115" + ], + [ + "66", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "66", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "66", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.078" + ], + [ + "66", + "192.168.0.20:65366", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" + ], + [ + "67", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "67", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "67", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.115, ACK: 11.000.172" + ], + [ + "68", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "68", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "68", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.115" + ], + [ + "68", + "192.168.0.30:25", + "192.168.0.20:65366", + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "69", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "69", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "69", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.172, ACK: 10.000.143" + ], + [ + "70", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "70", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "70", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.172" + ], + [ + "70", + "192.168.0.20:65366", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "71", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "71", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "71", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.143, ACK: 11.000.176" + ], + [ + "72", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "72", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "72", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.143" + ], + [ + "72", + "192.168.0.30:25", + "192.168.0.20:65366", + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "73", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "73", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "73", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.176, ACK: 10.000.173" + ], + [ + "74", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "74", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "74", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "FIN, SEQ: 11.000.176" + ], + [ + "75", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "75", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "75", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "FIN, SEQ: 10.000.173" + ], + [ + "76", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "76", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "76", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.177, ACK: 10.000.174" + ], + [ + "77", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "77", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "77", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.174, ACK: 11.000.177" + ], + [ + "78", + "02:00:00:00:02:11", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "78", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "78", + "192.168.0.20:56276", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "78", + "192.168.0.20:56276", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=40953 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" + ], + [ + "79", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "79", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "79", + "192.168.0.10:53", + "192.168.0.20:56276", + "UDP", + "Transport", + "" + ], + [ + "79", + "192.168.0.10:53", + "192.168.0.20:56276", + "DNS", + "Anwendung", + "ID=40953 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" + ], + [ + "80", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "80", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "80", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SYN, SEQ: 13.000.000" + ], + [ + "81", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "81", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "81", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SYN, SEQ: 1.000.000, ACK: 13.000.001" + ], + [ + "82", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "82", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "82", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.001, ACK: 1.000.001" + ], + [ + "83", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "83", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "83", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.001" + ], + [ + "83", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK POP3 server ready" + ], + [ + "84", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "84", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "84", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.001, ACK: 1.000.022" + ], + [ + "85", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "85", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "85", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.001" + ], + [ + "85", + "192.168.0.20:56326", + "192.168.0.30:110", + "POP3", + "Anwendung", + "USER anna" + ], + [ + "86", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "86", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "86", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.022, ACK: 13.000.010" + ], + [ + "87", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "87", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "87", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.022" + ], + [ + "87", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK enter password" + ], + [ + "88", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "88", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "88", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.010, ACK: 1.000.040" + ], + [ + "89", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "89", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "89", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.010" + ], + [ + "89", + "192.168.0.20:56326", + "192.168.0.30:110", + "POP3", + "Anwendung", + "PASS geheim" + ], + [ + "90", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "90", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "90", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.040, ACK: 13.000.021" + ], + [ + "91", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "91", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "91", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.040" + ], + [ + "91", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK Mailbox locked and ready" + ], + [ + "92", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "92", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "92", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.021, ACK: 1.000.068" + ], + [ + "93", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "93", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "93", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.021" + ], + [ + "93", + "192.168.0.20:56326", + "192.168.0.30:110", + "", + "Anwendung", + "STAT" + ], + [ + "94", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "94", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "94", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.068, ACK: 13.000.025" + ], + [ + "95", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "95", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "95", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.068" + ], + [ + "95", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK 4 1054" + ], + [ + "96", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "96", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "96", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.025, ACK: 1.000.078" + ], + [ + "97", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "97", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "97", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.025" + ], + [ + "97", + "192.168.0.20:56326", + "192.168.0.30:110", + "", + "Anwendung", + "LIST" + ], + [ + "98", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "98", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "98", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.078, ACK: 13.000.029" + ], + [ + "99", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "99", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "99", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.078" + ], + [ + "99", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK 4 1054\n0 80\n1 89\n2 441\n3 444\n" + ], + [ + "100", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "100", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "100", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.029, ACK: 1.000.111" + ], + [ + "101", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "101", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "101", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.029" + ], + [ + "101", + "192.168.0.20:56326", + "192.168.0.30:110", + "POP3", + "Anwendung", + "RETR 0" + ], + [ + "102", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "102", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "102", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.111, ACK: 13.000.035" + ], + [ + "103", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "103", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "103", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.111" + ], + [ + "103", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile" + ], + [ + "104", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "104", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "104", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.035, ACK: 1.000.233" + ], + [ + "105", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "105", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "105", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.035" + ], + [ + "105", + "192.168.0.20:56326", + "192.168.0.30:110", + "POP3", + "Anwendung", + "DELE 0" + ], + [ + "106", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "106", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "106", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.233, ACK: 13.000.041" + ], + [ + "107", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "107", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "107", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.233" + ], + [ + "107", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK message marked for delete" + ], + [ + "108", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "108", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "108", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.041, ACK: 1.000.262" + ], + [ + "109", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "109", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "109", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.041" + ], + [ + "109", + "192.168.0.20:56326", + "192.168.0.30:110", + "POP3", + "Anwendung", + "RETR 1" + ], + [ + "110", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "110", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "110", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.262, ACK: 13.000.047" + ], + [ + "111", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "111", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "111", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.262" + ], + [ + "111", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?" + ], + [ + "112", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "112", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "112", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.047, ACK: 1.000.414" + ], + [ + "113", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "113", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "113", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.047" + ], + [ + "113", + "192.168.0.20:56326", + "192.168.0.30:110", + "POP3", + "Anwendung", + "DELE 1" + ], + [ + "114", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "114", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "114", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.414, ACK: 13.000.053" + ], + [ + "115", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "115", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "115", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.414" + ], + [ + "115", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK message marked for delete" + ], + [ + "116", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "116", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "116", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.053, ACK: 1.000.443" + ], + [ + "117", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "117", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "117", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.053" + ], + [ + "117", + "192.168.0.20:56326", + "192.168.0.30:110", + "POP3", + "Anwendung", + "RETR 2" + ], + [ + "118", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "118", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "118", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.443, ACK: 13.000.059" + ], + [ + "119", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "119", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "119", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.443" + ], + [ + "119", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?" + ], + [ + "120", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "120", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "120", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.059, ACK: 1.000.925" + ], + [ + "121", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "121", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "121", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.059" + ], + [ + "121", + "192.168.0.20:56326", + "192.168.0.30:110", + "POP3", + "Anwendung", + "DELE 2" + ], + [ + "122", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "122", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "122", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.925, ACK: 13.000.065" + ], + [ + "123", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "123", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "123", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.925" + ], + [ + "123", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK message marked for delete" + ], + [ + "124", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "124", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "124", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.065, ACK: 1.000.954" + ], + [ + "125", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "125", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "125", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.065" + ], + [ + "125", + "192.168.0.20:56326", + "192.168.0.30:110", + "POP3", + "Anwendung", + "RETR 3" + ], + [ + "126", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "126", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "126", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.954, ACK: 13.000.071" + ], + [ + "127", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "127", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "127", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.954" + ], + [ + "127", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009jemand@nirgendwo.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?" + ], + [ + "128", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "128", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "128", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.071, ACK: 1.001.440" + ], + [ + "129", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "129", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "129", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.071" + ], + [ + "129", + "192.168.0.20:56326", + "192.168.0.30:110", + "POP3", + "Anwendung", + "DELE 3" + ], + [ + "130", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "130", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "130", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.001.440, ACK: 13.000.077" + ], + [ + "131", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "131", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "131", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.001.440" + ], + [ + "131", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK message marked for delete" + ], + [ + "132", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "132", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "132", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.077, ACK: 1.001.469" + ], + [ + "133", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "133", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "133", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.077" + ], + [ + "133", + "192.168.0.20:56326", + "192.168.0.30:110", + "POP3", + "Anwendung", + "QUIT" + ], + [ + "134", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "134", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "134", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.001.469, ACK: 13.000.081" + ], + [ + "135", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "135", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "135", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.001.469" + ], + [ + "135", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK" + ], + [ + "136", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "136", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "136", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.081, ACK: 1.001.472" + ], + [ + "137", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "137", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "137", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "FIN, SEQ: 13.000.081" + ], + [ + "138", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "138", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "138", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "FIN, SEQ: 1.001.472" + ], + [ + "139", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "139", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "139", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.082, ACK: 1.001.473" + ], + [ + "140", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "140", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "140", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.001.473, ACK: 13.000.082" + ] + ], + "00000000-0000-0000-0000-000000000202": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:02:11", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "3", + "192.168.0.20:52531", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "3", + "192.168.0.20:52531", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=43842 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" + ], + [ + "4", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "4", + "192.168.0.10:53", + "192.168.0.20:52531", + "UDP", + "Transport", + "" + ], + [ + "4", + "192.168.0.10:53", + "192.168.0.20:52531", + "DNS", + "Anwendung", + "ID=43842 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" + ], + [ + "5", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "6", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.30", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "7", + "02:00:00:00:02:12", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x806" + ], + [ + "7", + "192.168.0.10", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:13|192.168.0.30]" + ], + [ + "8", + "02:00:00:00:02:13", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.30", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "8", + "192.168.0.30:62746", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "8", + "192.168.0.30:62746", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=3243 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n" + ], + [ + "9", + "02:00:00:00:02:12", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.10", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "9", + "192.168.0.10:53", + "192.168.0.30:62746", + "UDP", + "Transport", + "" + ], + [ + "9", + "192.168.0.10:53", + "192.168.0.30:62746", + "DNS", + "Anwendung", + "ID=3243 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n" + ], + [ + "10", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "10", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "11", + "02:00:00:00:02:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "11", + "192.168.0.31", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "12", + "02:00:00:00:02:12", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x806" + ], + [ + "12", + "192.168.0.10", + "192.168.0.31", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:14|192.168.0.31]" + ], + [ + "13", + "02:00:00:00:02:14", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.31", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "13", + "192.168.0.31:58459", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "13", + "192.168.0.31:58459", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=47846 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n" + ], + [ + "14", + "02:00:00:00:02:12", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.10", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "14", + "192.168.0.10:53", + "192.168.0.31:58459", + "UDP", + "Transport", + "" + ], + [ + "14", + "192.168.0.10:53", + "192.168.0.31:58459", + "DNS", + "Anwendung", + "ID=47846 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n" + ], + [ + "15", + "02:00:00:00:02:11", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "15", + "192.168.0.20:57606", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "15", + "192.168.0.20:57606", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=60054 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" + ], + [ + "16", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "16", + "192.168.0.10:53", + "192.168.0.20:57606", + "UDP", + "Transport", + "" + ], + [ + "16", + "192.168.0.10:53", + "192.168.0.20:57606", + "DNS", + "Anwendung", + "ID=60054 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" + ], + [ + "17", + "02:00:00:00:02:13", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "17", + "192.168.0.30:53558", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "17", + "192.168.0.30:53558", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=35053 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnirgendwo.de. MX IN\n" + ], + [ + "18", + "02:00:00:00:02:12", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.10", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "18", + "192.168.0.10:53", + "192.168.0.30:53558", + "UDP", + "Transport", + "" + ], + [ + "18", + "192.168.0.10:53", + "192.168.0.30:53558", + "DNS", + "Anwendung", + "ID=35053 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "19", + "02:00:00:00:02:11", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "19", + "192.168.0.20:56276", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "19", + "192.168.0.20:56276", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=40953 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" + ], + [ + "20", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "20", + "192.168.0.10:53", + "192.168.0.20:56276", + "UDP", + "Transport", + "" + ], + [ + "20", + "192.168.0.10:53", + "192.168.0.20:56276", + "DNS", + "Anwendung", + "ID=40953 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" + ] + ], + "00000000-0000-0000-0000-000000000203": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "3", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "4", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000" + ], + [ + "5", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SYN, SEQ: 2.000.000, ACK: 5.000.001" + ], + [ + "6", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 2.000.001" + ], + [ + "7", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.001" + ], + [ + "7", + "192.168.0.30:25", + "192.168.0.20:62333", + "SMTP", + "Anwendung", + "220 Willkommen bei filius.de" + ], + [ + "8", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 2.000.029" + ], + [ + "9", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.001" + ], + [ + "9", + "192.168.0.20:62333", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "HELO 192.168.0.20" + ], + [ + "10", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.029, ACK: 5.000.018" + ], + [ + "11", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.029" + ], + [ + "11", + "192.168.0.30:25", + "192.168.0.20:62333", + "SMTP", + "Anwendung", + "250 Hello 192.168.0.20" + ], + [ + "12", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.018, ACK: 2.000.051" + ], + [ + "13", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.018" + ], + [ + "13", + "192.168.0.20:62333", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "MAIL FROM: " + ], + [ + "14", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.051, ACK: 5.000.045" + ], + [ + "15", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.051" + ], + [ + "15", + "192.168.0.30:25", + "192.168.0.20:62333", + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "16", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.045, ACK: 2.000.064" + ], + [ + "17", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.045" + ], + [ + "17", + "192.168.0.20:62333", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "18", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.064, ACK: 5.000.072" + ], + [ + "19", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.064" + ], + [ + "19", + "192.168.0.30:25", + "192.168.0.20:62333", + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "20", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "20", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.072, ACK: 2.000.080" + ], + [ + "21", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.072" + ], + [ + "21", + "192.168.0.20:62333", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "DATA" + ], + [ + "22", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.080, ACK: 5.000.076" + ], + [ + "23", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "23", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.080" + ], + [ + "23", + "192.168.0.30:25", + "192.168.0.20:62333", + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "24", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "24", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.076, ACK: 2.000.115" + ], + [ + "25", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "25", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.076" + ], + [ + "25", + "192.168.0.20:62333", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" + ], + [ + "26", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.115, ACK: 5.000.168" + ], + [ + "27", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.115" + ], + [ + "27", + "192.168.0.30:25", + "192.168.0.20:62333", + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "28", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "28", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.168, ACK: 2.000.143" + ], + [ + "29", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "29", + "192.168.0.30", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "30", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "30", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.168" + ], + [ + "30", + "192.168.0.20:62333", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "31", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "31", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.143, ACK: 5.000.172" + ], + [ + "32", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "32", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.143" + ], + [ + "32", + "192.168.0.30:25", + "192.168.0.20:62333", + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "33", + "02:00:00:00:02:12", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x806" + ], + [ + "33", + "192.168.0.10", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:13|192.168.0.30]" + ], + [ + "34", + "02:00:00:00:02:13", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "192.168.0.30", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "34", + "192.168.0.30:62746", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "34", + "192.168.0.30:62746", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=3243 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n" + ], + [ + "35", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "35", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.172, ACK: 2.000.173" + ], + [ + "36", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "36", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "36", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "FIN, SEQ: 2.000.173" + ], + [ + "37", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "FIN, SEQ: 5.000.172" + ], + [ + "38", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "38", + "192.168.0.30:25", + "192.168.0.20:62333", + "TCP", + "Transport", + "SEQ: 2.000.174, ACK: 5.000.173" + ], + [ + "39", + "02:00:00:00:02:12", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.10", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "39", + "192.168.0.10:53", + "192.168.0.30:62746", + "UDP", + "Transport", + "" + ], + [ + "39", + "192.168.0.10:53", + "192.168.0.30:62746", + "DNS", + "Anwendung", + "ID=3243 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n" + ], + [ + "40", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "40", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "41", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "41", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "41", + "192.168.0.20:62333", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.173, ACK: 2.000.174" + ], + [ + "42", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x806" + ], + [ + "42", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:14 [op=REPLY, sender=02:00:00:00:02:14|192.168.0.31, target=02:00:00:00:02:13|192.168.0.30]" + ], + [ + "43", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "43", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000" + ], + [ + "44", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "44", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SYN, SEQ: 4.000.000, ACK: 7.000.001" + ], + [ + "45", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "45", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 4.000.001" + ], + [ + "46", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "46", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.001" + ], + [ + "46", + "192.168.0.31:25", + "192.168.0.30:64673", + "SMTP", + "Anwendung", + "220 Willkommen bei andere.de" + ], + [ + "47", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "47", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 4.000.029" + ], + [ + "48", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "48", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "48", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "48", + "192.168.0.30:64673", + "192.168.0.31:25", + "SMTP", + "Anwendung", + "HELO 192.168.0.30" + ], + [ + "49", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "49", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "49", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.029, ACK: 7.000.018" + ], + [ + "50", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "50", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "50", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.029" + ], + [ + "50", + "192.168.0.31:25", + "192.168.0.30:64673", + "SMTP", + "Anwendung", + "250 Hello 192.168.0.30" + ], + [ + "51", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "51", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "51", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.018, ACK: 4.000.051" + ], + [ + "52", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "52", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "52", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.018" + ], + [ + "52", + "192.168.0.30:64673", + "192.168.0.31:25", + "SMTP", + "Anwendung", + "MAIL FROM: " + ], + [ + "53", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "53", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "53", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.051, ACK: 7.000.045" + ], + [ + "54", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "54", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "54", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.051" + ], + [ + "54", + "192.168.0.31:25", + "192.168.0.30:64673", + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "55", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "55", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "55", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.045, ACK: 4.000.064" + ], + [ + "56", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "56", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "56", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.045" + ], + [ + "56", + "192.168.0.30:64673", + "192.168.0.31:25", + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "57", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "57", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "57", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.064, ACK: 7.000.072" + ], + [ + "58", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "58", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "58", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.064" + ], + [ + "58", + "192.168.0.31:25", + "192.168.0.30:64673", + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "59", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "59", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "59", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.072, ACK: 4.000.080" + ], + [ + "60", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "60", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "60", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.072" + ], + [ + "60", + "192.168.0.30:64673", + "192.168.0.31:25", + "SMTP", + "Anwendung", + "DATA" + ], + [ + "61", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "61", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "61", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.080, ACK: 7.000.076" + ], + [ + "62", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "62", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "62", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.080" + ], + [ + "62", + "192.168.0.31:25", + "192.168.0.30:64673", + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "63", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "63", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "63", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.076, ACK: 4.000.115" + ], + [ + "64", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "64", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "64", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.076" + ], + [ + "64", + "192.168.0.30:64673", + "192.168.0.31:25", + "SMTP", + "Anwendung", + "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" + ], + [ + "65", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "65", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "65", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.115, ACK: 7.000.168" + ], + [ + "66", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "66", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "66", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.115" + ], + [ + "66", + "192.168.0.31:25", + "192.168.0.30:64673", + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "67", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "67", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "67", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.168, ACK: 4.000.143" + ], + [ + "68", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "68", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "68", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.168" + ], + [ + "68", + "192.168.0.30:64673", + "192.168.0.31:25", + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "69", + "02:00:00:00:02:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "69", + "192.168.0.31", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "70", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "70", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "70", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.143, ACK: 7.000.172" + ], + [ + "71", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "71", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "71", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.143" + ], + [ + "71", + "192.168.0.31:25", + "192.168.0.30:64673", + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "72", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "72", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "72", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.172, ACK: 4.000.173" + ], + [ + "73", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "73", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "73", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SYN, SEQ: 9.000.000" + ], + [ + "74", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "74", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "74", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "FIN, SEQ: 7.000.172" + ], + [ + "75", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "75", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "75", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000, ACK: 9.000.001" + ], + [ + "76", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "76", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "76", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "FIN, SEQ: 4.000.173" + ], + [ + "77", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "77", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "77", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.173, ACK: 4.000.174" + ], + [ + "78", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "78", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "78", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.174, ACK: 7.000.173" + ], + [ + "79", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "79", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "79", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 6.000.001" + ], + [ + "80", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "80", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "80", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "80", + "192.168.0.30:25", + "192.168.0.31:50936", + "SMTP", + "Anwendung", + "220 Willkommen bei filius.de" + ], + [ + "81", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "81", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "81", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 6.000.029" + ], + [ + "82", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "82", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "82", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.001" + ], + [ + "82", + "192.168.0.31:50936", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "HELO 192.168.0.31" + ], + [ + "83", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "83", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "83", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.029, ACK: 9.000.018" + ], + [ + "84", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "84", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "84", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.029" + ], + [ + "84", + "192.168.0.30:25", + "192.168.0.31:50936", + "SMTP", + "Anwendung", + "250 Hello 192.168.0.31" + ], + [ + "85", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "85", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "85", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.018, ACK: 6.000.051" + ], + [ + "86", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "86", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "86", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.018" + ], + [ + "86", + "192.168.0.31:50936", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "MAIL FROM: <>" + ], + [ + "87", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "87", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "87", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.051, ACK: 9.000.031" + ], + [ + "88", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "88", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "88", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.051" + ], + [ + "88", + "192.168.0.30:25", + "192.168.0.31:50936", + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "89", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "89", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "89", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.031, ACK: 6.000.064" + ], + [ + "90", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "90", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "90", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.031" + ], + [ + "90", + "192.168.0.31:50936", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "91", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "91", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "91", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.064, ACK: 9.000.055" + ], + [ + "92", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "92", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "92", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.064" + ], + [ + "92", + "192.168.0.30:25", + "192.168.0.31:50936", + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "93", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "93", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "93", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.055, ACK: 6.000.080" + ], + [ + "94", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "94", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "94", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.055" + ], + [ + "94", + "192.168.0.31:50936", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "DATA" + ], + [ + "95", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "95", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "95", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.080, ACK: 9.000.059" + ], + [ + "96", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "96", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "96", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.080" + ], + [ + "96", + "192.168.0.30:25", + "192.168.0.31:50936", + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "97", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "97", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "97", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.059, ACK: 6.000.115" + ], + [ + "98", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "98", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "98", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.059" + ], + [ + "98", + "192.168.0.31:50936", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "From: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" + ], + [ + "99", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "99", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "99", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.115, ACK: 9.000.525" + ], + [ + "100", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "100", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "100", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.115" + ], + [ + "100", + "192.168.0.30:25", + "192.168.0.31:50936", + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "101", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "101", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "101", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.525, ACK: 6.000.143" + ], + [ + "102", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "102", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "102", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.525" + ], + [ + "102", + "192.168.0.31:50936", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "103", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "103", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "103", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.143, ACK: 9.000.529" + ], + [ + "104", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "104", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "104", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.143" + ], + [ + "104", + "192.168.0.30:25", + "192.168.0.31:50936", + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "105", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "105", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "105", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.529, ACK: 6.000.173" + ], + [ + "106", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "106", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "106", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "FIN, SEQ: 6.000.173" + ], + [ + "107", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "107", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "107", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "FIN, SEQ: 9.000.529" + ], + [ + "108", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "108", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "108", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.174, ACK: 9.000.530" + ], + [ + "109", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "109", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "109", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.530, ACK: 6.000.174" + ], + [ + "110", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "110", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "110", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SYN, SEQ: 11.000.000" + ], + [ + "111", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "111", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "111", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SYN, SEQ: 10.000.000, ACK: 11.000.001" + ], + [ + "112", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "112", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "112", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.001, ACK: 10.000.001" + ], + [ + "113", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "113", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "113", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.001" + ], + [ + "113", + "192.168.0.30:25", + "192.168.0.20:65366", + "SMTP", + "Anwendung", + "220 Willkommen bei filius.de" + ], + [ + "114", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "114", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "114", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.001, ACK: 10.000.029" + ], + [ + "115", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "115", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "115", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.001" + ], + [ + "115", + "192.168.0.20:65366", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "HELO 192.168.0.20" + ], + [ + "116", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "116", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "116", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.029, ACK: 11.000.018" + ], + [ + "117", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "117", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "117", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.029" + ], + [ + "117", + "192.168.0.30:25", + "192.168.0.20:65366", + "SMTP", + "Anwendung", + "250 Hello 192.168.0.20" + ], + [ + "118", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "118", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "118", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.018, ACK: 10.000.051" + ], + [ + "119", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "119", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "119", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.018" + ], + [ + "119", + "192.168.0.20:65366", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "MAIL FROM: " + ], + [ + "120", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "120", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "120", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.051, ACK: 11.000.045" + ], + [ + "121", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "121", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "121", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.051" + ], + [ + "121", + "192.168.0.30:25", + "192.168.0.20:65366", + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "122", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "122", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "122", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.045, ACK: 10.000.064" + ], + [ + "123", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "123", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "123", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.045" + ], + [ + "123", + "192.168.0.20:65366", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "124", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "124", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "124", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.064, ACK: 11.000.074" + ], + [ + "125", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "125", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "125", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.064" + ], + [ + "125", + "192.168.0.30:25", + "192.168.0.20:65366", + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "126", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "126", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "126", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.074, ACK: 10.000.080" + ], + [ + "127", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "127", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "127", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.074" + ], + [ + "127", + "192.168.0.20:65366", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "DATA" + ], + [ + "128", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "128", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "128", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.080, ACK: 11.000.078" + ], + [ + "129", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "129", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "129", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.080" + ], + [ + "129", + "192.168.0.30:25", + "192.168.0.20:65366", + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "130", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "130", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "130", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.078, ACK: 10.000.115" + ], + [ + "131", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "131", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "131", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.078" + ], + [ + "131", + "192.168.0.20:65366", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" + ], + [ + "132", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "132", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "132", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.115, ACK: 11.000.172" + ], + [ + "133", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "133", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "133", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.115" + ], + [ + "133", + "192.168.0.30:25", + "192.168.0.20:65366", + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "134", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "134", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "134", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.172, ACK: 10.000.143" + ], + [ + "135", + "02:00:00:00:02:13", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "135", + "192.168.0.30", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "135", + "192.168.0.30:53558", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "135", + "192.168.0.30:53558", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=35053 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnirgendwo.de. MX IN\n" + ], + [ + "136", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "136", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "136", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.172" + ], + [ + "136", + "192.168.0.20:65366", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "137", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "137", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "137", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.143, ACK: 11.000.176" + ], + [ + "138", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "138", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "138", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.143" + ], + [ + "138", + "192.168.0.30:25", + "192.168.0.20:65366", + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "139", + "02:00:00:00:02:12", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "139", + "192.168.0.10", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "139", + "192.168.0.10:53", + "192.168.0.30:53558", + "UDP", + "Transport", + "" + ], + [ + "139", + "192.168.0.10:53", + "192.168.0.30:53558", + "DNS", + "Anwendung", + "ID=35053 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "140", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "140", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "140", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.176, ACK: 10.000.173" + ], + [ + "141", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "141", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "141", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "FIN, SEQ: 10.000.173" + ], + [ + "142", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "142", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "142", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "FIN, SEQ: 11.000.176" + ], + [ + "143", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "143", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "143", + "192.168.0.30:25", + "192.168.0.20:65366", + "TCP", + "Transport", + "SEQ: 10.000.174, ACK: 11.000.177" + ], + [ + "144", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "144", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "144", + "192.168.0.20:65366", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 11.000.177, ACK: 10.000.174" + ], + [ + "145", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "145", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "145", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SYN, SEQ: 13.000.000" + ], + [ + "146", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "146", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "146", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SYN, SEQ: 1.000.000, ACK: 13.000.001" + ], + [ + "147", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "147", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "147", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.001, ACK: 1.000.001" + ], + [ + "148", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "148", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "148", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.001" + ], + [ + "148", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK POP3 server ready" + ], + [ + "149", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "149", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "149", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.001, ACK: 1.000.022" + ], + [ + "150", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "150", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "150", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.001" + ], + [ + "150", + "192.168.0.20:56326", + "192.168.0.30:110", + "POP3", + "Anwendung", + "USER anna" + ], + [ + "151", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "151", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "151", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.022, ACK: 13.000.010" + ], + [ + "152", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "152", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "152", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.022" + ], + [ + "152", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK enter password" + ], + [ + "153", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "153", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "153", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.010, ACK: 1.000.040" + ], + [ + "154", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "154", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "154", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.010" + ], + [ + "154", + "192.168.0.20:56326", + "192.168.0.30:110", + "POP3", + "Anwendung", + "PASS geheim" + ], + [ + "155", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "155", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "155", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.040, ACK: 13.000.021" + ], + [ + "156", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "156", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "156", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.040" + ], + [ + "156", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK Mailbox locked and ready" + ], + [ + "157", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "157", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "157", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.021, ACK: 1.000.068" + ], + [ + "158", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "158", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "158", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.021" + ], + [ + "158", + "192.168.0.20:56326", + "192.168.0.30:110", + "", + "Anwendung", + "STAT" + ], + [ + "159", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "159", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "159", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.068, ACK: 13.000.025" + ], + [ + "160", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "160", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "160", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.068" + ], + [ + "160", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK 4 1054" + ], + [ + "161", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "161", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "161", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.025, ACK: 1.000.078" + ], + [ + "162", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "162", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "162", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.025" + ], + [ + "162", + "192.168.0.20:56326", + "192.168.0.30:110", + "", + "Anwendung", + "LIST" + ], + [ + "163", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "163", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "163", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.078, ACK: 13.000.029" + ], + [ + "164", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "164", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "164", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.078" + ], + [ + "164", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK 4 1054\n0 80\n1 89\n2 441\n3 444\n" + ], + [ + "165", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "165", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "165", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.029, ACK: 1.000.111" + ], + [ + "166", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "166", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "166", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.029" + ], + [ + "166", + "192.168.0.20:56326", + "192.168.0.30:110", + "POP3", + "Anwendung", + "RETR 0" + ], + [ + "167", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "167", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "167", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.111, ACK: 13.000.035" + ], + [ + "168", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "168", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "168", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.111" + ], + [ + "168", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile" + ], + [ + "169", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "169", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "169", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.035, ACK: 1.000.233" + ], + [ + "170", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "170", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "170", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.035" + ], + [ + "170", + "192.168.0.20:56326", + "192.168.0.30:110", + "POP3", + "Anwendung", + "DELE 0" + ], + [ + "171", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "171", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "171", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.233, ACK: 13.000.041" + ], + [ + "172", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "172", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "172", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.233" + ], + [ + "172", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK message marked for delete" + ], + [ + "173", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "173", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "173", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.041, ACK: 1.000.262" + ], + [ + "174", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "174", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "174", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.041" + ], + [ + "174", + "192.168.0.20:56326", + "192.168.0.30:110", + "POP3", + "Anwendung", + "RETR 1" + ], + [ + "175", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "175", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "175", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.262, ACK: 13.000.047" + ], + [ + "176", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "176", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "176", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.262" + ], + [ + "176", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?" + ], + [ + "177", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "177", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "177", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.047, ACK: 1.000.414" + ], + [ + "178", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "178", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "178", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.047" + ], + [ + "178", + "192.168.0.20:56326", + "192.168.0.30:110", + "POP3", + "Anwendung", + "DELE 1" + ], + [ + "179", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "179", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "179", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.414, ACK: 13.000.053" + ], + [ + "180", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "180", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "180", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.414" + ], + [ + "180", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK message marked for delete" + ], + [ + "181", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "181", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "181", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.053, ACK: 1.000.443" + ], + [ + "182", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "182", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "182", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.053" + ], + [ + "182", + "192.168.0.20:56326", + "192.168.0.30:110", + "POP3", + "Anwendung", + "RETR 2" + ], + [ + "183", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "183", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "183", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.443, ACK: 13.000.059" + ], + [ + "184", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "184", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "184", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.443" + ], + [ + "184", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?" + ], + [ + "185", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "185", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "185", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.059, ACK: 1.000.925" + ], + [ + "186", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "186", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "186", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.059" + ], + [ + "186", + "192.168.0.20:56326", + "192.168.0.30:110", + "POP3", + "Anwendung", + "DELE 2" + ], + [ + "187", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "187", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "187", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.925, ACK: 13.000.065" + ], + [ + "188", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "188", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "188", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.925" + ], + [ + "188", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK message marked for delete" + ], + [ + "189", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "189", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "189", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.065, ACK: 1.000.954" + ], + [ + "190", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "190", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "190", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.065" + ], + [ + "190", + "192.168.0.20:56326", + "192.168.0.30:110", + "POP3", + "Anwendung", + "RETR 3" + ], + [ + "191", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "191", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "191", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.954, ACK: 13.000.071" + ], + [ + "192", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "192", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "192", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.000.954" + ], + [ + "192", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009jemand@nirgendwo.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?" + ], + [ + "193", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "193", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "193", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.071, ACK: 1.001.440" + ], + [ + "194", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "194", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "194", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.071" + ], + [ + "194", + "192.168.0.20:56326", + "192.168.0.30:110", + "POP3", + "Anwendung", + "DELE 3" + ], + [ + "195", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "195", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "195", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.001.440, ACK: 13.000.077" + ], + [ + "196", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "196", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "196", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.001.440" + ], + [ + "196", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK message marked for delete" + ], + [ + "197", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "197", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "197", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.077, ACK: 1.001.469" + ], + [ + "198", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "198", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "198", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.077" + ], + [ + "198", + "192.168.0.20:56326", + "192.168.0.30:110", + "POP3", + "Anwendung", + "QUIT" + ], + [ + "199", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "199", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "199", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.001.469, ACK: 13.000.081" + ], + [ + "200", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "200", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "200", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.001.469" + ], + [ + "200", + "192.168.0.30:110", + "192.168.0.20:56326", + "POP3", + "Anwendung", + "+OK" + ], + [ + "201", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "201", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "201", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.081, ACK: 1.001.472" + ], + [ + "202", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "202", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "202", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "FIN, SEQ: 1.001.472" + ], + [ + "203", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "203", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "203", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "FIN, SEQ: 13.000.081" + ], + [ + "204", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "204", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "204", + "192.168.0.30:110", + "192.168.0.20:56326", + "TCP", + "Transport", + "SEQ: 1.001.473, ACK: 13.000.082" + ], + [ + "205", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "205", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "205", + "192.168.0.20:56326", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 13.000.082, ACK: 1.001.473" + ] + ], + "00000000-0000-0000-0000-000000000204": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "3", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.30", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "4", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "5", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:14 [op=REPLY, sender=02:00:00:00:02:14|192.168.0.31, target=02:00:00:00:02:13|192.168.0.30]" + ], + [ + "6", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000" + ], + [ + "7", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SYN, SEQ: 4.000.000, ACK: 7.000.001" + ], + [ + "8", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 4.000.001" + ], + [ + "9", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.001" + ], + [ + "9", + "192.168.0.31:25", + "192.168.0.30:64673", + "SMTP", + "Anwendung", + "220 Willkommen bei andere.de" + ], + [ + "10", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 4.000.029" + ], + [ + "11", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "11", + "192.168.0.30:64673", + "192.168.0.31:25", + "SMTP", + "Anwendung", + "HELO 192.168.0.30" + ], + [ + "12", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.029, ACK: 7.000.018" + ], + [ + "13", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.029" + ], + [ + "13", + "192.168.0.31:25", + "192.168.0.30:64673", + "SMTP", + "Anwendung", + "250 Hello 192.168.0.30" + ], + [ + "14", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.018, ACK: 4.000.051" + ], + [ + "15", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.018" + ], + [ + "15", + "192.168.0.30:64673", + "192.168.0.31:25", + "SMTP", + "Anwendung", + "MAIL FROM: " + ], + [ + "16", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.051, ACK: 7.000.045" + ], + [ + "17", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.051" + ], + [ + "17", + "192.168.0.31:25", + "192.168.0.30:64673", + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "18", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.045, ACK: 4.000.064" + ], + [ + "19", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.045" + ], + [ + "19", + "192.168.0.30:64673", + "192.168.0.31:25", + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "20", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "20", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.064, ACK: 7.000.072" + ], + [ + "21", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.064" + ], + [ + "21", + "192.168.0.31:25", + "192.168.0.30:64673", + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "22", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.072, ACK: 4.000.080" + ], + [ + "23", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "23", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.072" + ], + [ + "23", + "192.168.0.30:64673", + "192.168.0.31:25", + "SMTP", + "Anwendung", + "DATA" + ], + [ + "24", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "24", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.080, ACK: 7.000.076" + ], + [ + "25", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "25", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.080" + ], + [ + "25", + "192.168.0.31:25", + "192.168.0.30:64673", + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "26", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.076, ACK: 4.000.115" + ], + [ + "27", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.076" + ], + [ + "27", + "192.168.0.30:64673", + "192.168.0.31:25", + "SMTP", + "Anwendung", + "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" + ], + [ + "28", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "28", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.115, ACK: 7.000.168" + ], + [ + "29", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "29", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.115" + ], + [ + "29", + "192.168.0.31:25", + "192.168.0.30:64673", + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "30", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "30", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.168, ACK: 4.000.143" + ], + [ + "31", + "02:00:00:00:02:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "31", + "192.168.0.31", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "32", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "32", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.168" + ], + [ + "32", + "192.168.0.30:64673", + "192.168.0.31:25", + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "33", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "33", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "33", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.143, ACK: 7.000.172" + ], + [ + "34", + "02:00:00:00:02:12", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x806" + ], + [ + "34", + "192.168.0.10", + "192.168.0.31", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:14|192.168.0.31]" + ], + [ + "35", + "02:00:00:00:02:14", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.31", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "35", + "192.168.0.31:58459", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "35", + "192.168.0.31:58459", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=47846 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n" + ], + [ + "36", + "02:00:00:00:02:12", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "36", + "192.168.0.10", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "36", + "192.168.0.10:53", + "192.168.0.31:58459", + "UDP", + "Transport", + "" + ], + [ + "36", + "192.168.0.10:53", + "192.168.0.31:58459", + "DNS", + "Anwendung", + "ID=47846 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n" + ], + [ + "37", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.143" + ], + [ + "37", + "192.168.0.31:25", + "192.168.0.30:64673", + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "38", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "38", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SYN, SEQ: 9.000.000" + ], + [ + "39", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "39", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.172, ACK: 4.000.173" + ], + [ + "40", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "40", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "40", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "FIN, SEQ: 4.000.173" + ], + [ + "41", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "41", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "41", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "FIN, SEQ: 7.000.172" + ], + [ + "42", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "42", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "42", + "192.168.0.31:25", + "192.168.0.30:64673", + "TCP", + "Transport", + "SEQ: 4.000.174, ACK: 7.000.173" + ], + [ + "43", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "43", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000, ACK: 9.000.001" + ], + [ + "44", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "44", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 6.000.001" + ], + [ + "45", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "45", + "192.168.0.30:64673", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 7.000.173, ACK: 4.000.174" + ], + [ + "46", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "46", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "46", + "192.168.0.30:25", + "192.168.0.31:50936", + "SMTP", + "Anwendung", + "220 Willkommen bei filius.de" + ], + [ + "47", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "47", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 6.000.029" + ], + [ + "48", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "48", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "48", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.001" + ], + [ + "48", + "192.168.0.31:50936", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "HELO 192.168.0.31" + ], + [ + "49", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "49", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "49", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.029, ACK: 9.000.018" + ], + [ + "50", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "50", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "50", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.029" + ], + [ + "50", + "192.168.0.30:25", + "192.168.0.31:50936", + "SMTP", + "Anwendung", + "250 Hello 192.168.0.31" + ], + [ + "51", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "51", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "51", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.018, ACK: 6.000.051" + ], + [ + "52", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "52", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "52", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.018" + ], + [ + "52", + "192.168.0.31:50936", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "MAIL FROM: <>" + ], + [ + "53", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "53", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "53", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.051, ACK: 9.000.031" + ], + [ + "54", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "54", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "54", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.051" + ], + [ + "54", + "192.168.0.30:25", + "192.168.0.31:50936", + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "55", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "55", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "55", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.031, ACK: 6.000.064" + ], + [ + "56", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "56", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "56", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.031" + ], + [ + "56", + "192.168.0.31:50936", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "57", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "57", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "57", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.064, ACK: 9.000.055" + ], + [ + "58", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "58", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "58", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.064" + ], + [ + "58", + "192.168.0.30:25", + "192.168.0.31:50936", + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "59", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "59", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "59", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.055, ACK: 6.000.080" + ], + [ + "60", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "60", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "60", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.055" + ], + [ + "60", + "192.168.0.31:50936", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "DATA" + ], + [ + "61", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "61", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "61", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.080, ACK: 9.000.059" + ], + [ + "62", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "62", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "62", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.080" + ], + [ + "62", + "192.168.0.30:25", + "192.168.0.31:50936", + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "63", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "63", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "63", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.059, ACK: 6.000.115" + ], + [ + "64", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "64", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "64", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.059" + ], + [ + "64", + "192.168.0.31:50936", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "From: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" + ], + [ + "65", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "65", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "65", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.115, ACK: 9.000.525" + ], + [ + "66", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "66", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "66", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.115" + ], + [ + "66", + "192.168.0.30:25", + "192.168.0.31:50936", + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "67", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "67", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "67", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.525, ACK: 6.000.143" + ], + [ + "68", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "68", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "68", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.525" + ], + [ + "68", + "192.168.0.31:50936", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "69", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "69", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "69", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.143, ACK: 9.000.529" + ], + [ + "70", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "70", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "70", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.143" + ], + [ + "70", + "192.168.0.30:25", + "192.168.0.31:50936", + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "71", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "71", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "71", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.529, ACK: 6.000.173" + ], + [ + "72", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "72", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "72", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "FIN, SEQ: 9.000.529" + ], + [ + "73", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "73", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "73", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "FIN, SEQ: 6.000.173" + ], + [ + "74", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "74", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "74", + "192.168.0.31:50936", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 9.000.530, ACK: 6.000.174" + ], + [ + "75", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "75", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "75", + "192.168.0.30:25", + "192.168.0.31:50936", + "TCP", + "Transport", + "SEQ: 6.000.174, ACK: 9.000.530" + ] + ] + }, + "layeredRows": { + "00000000-0000-0000-0000-000000000201": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:02:11", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "3", + "52531", + "53", + "UDP", + "Transport", + "" + ], + [ + "3", + null, + null, + "DNS", + "Anwendung", + "ID=43842 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" + ], + [ + "4", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "4", + "53", + "52531", + "UDP", + "Transport", + "" + ], + [ + "4", + null, + null, + "DNS", + "Anwendung", + "ID=43842 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" + ], + [ + "5", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "6", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "7", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "62333", + "25", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000" + ], + [ + "8", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "25", + "62333", + "TCP", + "Transport", + "SYN, SEQ: 2.000.000, ACK: 5.000.001" + ], + [ + "9", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 2.000.001" + ], + [ + "10", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.001" + ], + [ + "10", + null, + null, + "SMTP", + "Anwendung", + "220 Willkommen bei filius.de" + ], + [ + "11", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 2.000.029" + ], + [ + "12", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.001" + ], + [ + "12", + null, + null, + "SMTP", + "Anwendung", + "HELO 192.168.0.20" + ], + [ + "13", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.029, ACK: 5.000.018" + ], + [ + "14", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.029" + ], + [ + "14", + null, + null, + "SMTP", + "Anwendung", + "250 Hello 192.168.0.20" + ], + [ + "15", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.018, ACK: 2.000.051" + ], + [ + "16", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.018" + ], + [ + "16", + null, + null, + "SMTP", + "Anwendung", + "MAIL FROM: " + ], + [ + "17", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.051, ACK: 5.000.045" + ], + [ + "18", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.051" + ], + [ + "18", + null, + null, + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "19", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.045, ACK: 2.000.064" + ], + [ + "20", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "20", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.045" + ], + [ + "20", + null, + null, + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "21", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.064, ACK: 5.000.072" + ], + [ + "22", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.064" + ], + [ + "22", + null, + null, + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "23", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "23", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.072, ACK: 2.000.080" + ], + [ + "24", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "24", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.072" + ], + [ + "24", + null, + null, + "SMTP", + "Anwendung", + "DATA" + ], + [ + "25", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "25", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.080, ACK: 5.000.076" + ], + [ + "26", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.080" + ], + [ + "26", + null, + null, + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "27", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.076, ACK: 2.000.115" + ], + [ + "28", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "28", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.076" + ], + [ + "28", + null, + null, + "SMTP", + "Anwendung", + "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" + ], + [ + "29", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "29", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.115, ACK: 5.000.168" + ], + [ + "30", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "30", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.115" + ], + [ + "30", + null, + null, + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "31", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "31", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.168, ACK: 2.000.143" + ], + [ + "32", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "32", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.168" + ], + [ + "32", + null, + null, + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "33", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "33", + "192.168.0.30", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "34", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "34", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.143, ACK: 5.000.172" + ], + [ + "35", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "35", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.143" + ], + [ + "35", + null, + null, + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "36", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "36", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "36", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.172, ACK: 2.000.173" + ], + [ + "37", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "62333", + "25", + "TCP", + "Transport", + "FIN, SEQ: 5.000.172" + ], + [ + "38", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "38", + "25", + "62333", + "TCP", + "Transport", + "FIN, SEQ: 2.000.173" + ], + [ + "39", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "39", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.173, ACK: 2.000.174" + ], + [ + "40", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "40", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "40", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.174, ACK: 5.000.173" + ], + [ + "41", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "41", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "42", + "02:00:00:00:02:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "42", + "192.168.0.31", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "43", + "02:00:00:00:02:11", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "43", + "57606", + "53", + "UDP", + "Transport", + "" + ], + [ + "43", + null, + null, + "DNS", + "Anwendung", + "ID=60054 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" + ], + [ + "44", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "44", + "53", + "57606", + "UDP", + "Transport", + "" + ], + [ + "44", + null, + null, + "DNS", + "Anwendung", + "ID=60054 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" + ], + [ + "45", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "45", + "65366", + "25", + "TCP", + "Transport", + "SYN, SEQ: 11.000.000" + ], + [ + "46", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "46", + "25", + "65366", + "TCP", + "Transport", + "SYN, SEQ: 10.000.000, ACK: 11.000.001" + ], + [ + "47", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "47", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.001, ACK: 10.000.001" + ], + [ + "48", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "48", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "48", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.001" + ], + [ + "48", + null, + null, + "SMTP", + "Anwendung", + "220 Willkommen bei filius.de" + ], + [ + "49", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "49", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "49", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.001, ACK: 10.000.029" + ], + [ + "50", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "50", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "50", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.001" + ], + [ + "50", + null, + null, + "SMTP", + "Anwendung", + "HELO 192.168.0.20" + ], + [ + "51", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "51", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "51", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.029, ACK: 11.000.018" + ], + [ + "52", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "52", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "52", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.029" + ], + [ + "52", + null, + null, + "SMTP", + "Anwendung", + "250 Hello 192.168.0.20" + ], + [ + "53", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "53", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "53", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.018, ACK: 10.000.051" + ], + [ + "54", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "54", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "54", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.018" + ], + [ + "54", + null, + null, + "SMTP", + "Anwendung", + "MAIL FROM: " + ], + [ + "55", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "55", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "55", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.051, ACK: 11.000.045" + ], + [ + "56", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "56", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "56", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.051" + ], + [ + "56", + null, + null, + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "57", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "57", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "57", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.045, ACK: 10.000.064" + ], + [ + "58", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "58", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "58", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.045" + ], + [ + "58", + null, + null, + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "59", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "59", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "59", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.064, ACK: 11.000.074" + ], + [ + "60", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "60", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "60", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.064" + ], + [ + "60", + null, + null, + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "61", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "61", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "61", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.074, ACK: 10.000.080" + ], + [ + "62", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "62", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "62", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.074" + ], + [ + "62", + null, + null, + "SMTP", + "Anwendung", + "DATA" + ], + [ + "63", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "63", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "63", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.080, ACK: 11.000.078" + ], + [ + "64", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "64", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "64", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.080" + ], + [ + "64", + null, + null, + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "65", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "65", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "65", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.078, ACK: 10.000.115" + ], + [ + "66", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "66", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "66", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.078" + ], + [ + "66", + null, + null, + "SMTP", + "Anwendung", + "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" + ], + [ + "67", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "67", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "67", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.115, ACK: 11.000.172" + ], + [ + "68", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "68", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "68", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.115" + ], + [ + "68", + null, + null, + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "69", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "69", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "69", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.172, ACK: 10.000.143" + ], + [ + "70", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "70", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "70", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.172" + ], + [ + "70", + null, + null, + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "71", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "71", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "71", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.143, ACK: 11.000.176" + ], + [ + "72", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "72", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "72", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.143" + ], + [ + "72", + null, + null, + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "73", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "73", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "73", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.176, ACK: 10.000.173" + ], + [ + "74", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "74", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "74", + "65366", + "25", + "TCP", + "Transport", + "FIN, SEQ: 11.000.176" + ], + [ + "75", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "75", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "75", + "25", + "65366", + "TCP", + "Transport", + "FIN, SEQ: 10.000.173" + ], + [ + "76", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "76", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "76", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.177, ACK: 10.000.174" + ], + [ + "77", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "77", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "77", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.174, ACK: 11.000.177" + ], + [ + "78", + "02:00:00:00:02:11", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "78", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "78", + "56276", + "53", + "UDP", + "Transport", + "" + ], + [ + "78", + null, + null, + "DNS", + "Anwendung", + "ID=40953 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" + ], + [ + "79", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "79", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "79", + "53", + "56276", + "UDP", + "Transport", + "" + ], + [ + "79", + null, + null, + "DNS", + "Anwendung", + "ID=40953 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" + ], + [ + "80", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "80", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "80", + "56326", + "110", + "TCP", + "Transport", + "SYN, SEQ: 13.000.000" + ], + [ + "81", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "81", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "81", + "110", + "56326", + "TCP", + "Transport", + "SYN, SEQ: 1.000.000, ACK: 13.000.001" + ], + [ + "82", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "82", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "82", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.001, ACK: 1.000.001" + ], + [ + "83", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "83", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "83", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.001" + ], + [ + "83", + null, + null, + "POP3", + "Anwendung", + "+OK POP3 server ready" + ], + [ + "84", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "84", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "84", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.001, ACK: 1.000.022" + ], + [ + "85", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "85", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "85", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.001" + ], + [ + "85", + null, + null, + "POP3", + "Anwendung", + "USER anna" + ], + [ + "86", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "86", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "86", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.022, ACK: 13.000.010" + ], + [ + "87", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "87", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "87", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.022" + ], + [ + "87", + null, + null, + "POP3", + "Anwendung", + "+OK enter password" + ], + [ + "88", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "88", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "88", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.010, ACK: 1.000.040" + ], + [ + "89", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "89", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "89", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.010" + ], + [ + "89", + null, + null, + "POP3", + "Anwendung", + "PASS geheim" + ], + [ + "90", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "90", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "90", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.040, ACK: 13.000.021" + ], + [ + "91", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "91", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "91", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.040" + ], + [ + "91", + null, + null, + "POP3", + "Anwendung", + "+OK Mailbox locked and ready" + ], + [ + "92", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "92", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "92", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.021, ACK: 1.000.068" + ], + [ + "93", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "93", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "93", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.021" + ], + [ + "93", + null, + null, + "", + "Anwendung", + "STAT" + ], + [ + "94", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "94", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "94", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.068, ACK: 13.000.025" + ], + [ + "95", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "95", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "95", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.068" + ], + [ + "95", + null, + null, + "POP3", + "Anwendung", + "+OK 4 1054" + ], + [ + "96", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "96", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "96", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.025, ACK: 1.000.078" + ], + [ + "97", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "97", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "97", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.025" + ], + [ + "97", + null, + null, + "", + "Anwendung", + "LIST" + ], + [ + "98", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "98", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "98", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.078, ACK: 13.000.029" + ], + [ + "99", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "99", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "99", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.078" + ], + [ + "99", + null, + null, + "POP3", + "Anwendung", + "+OK 4 1054\n0 80\n1 89\n2 441\n3 444\n" + ], + [ + "100", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "100", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "100", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.029, ACK: 1.000.111" + ], + [ + "101", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "101", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "101", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.029" + ], + [ + "101", + null, + null, + "POP3", + "Anwendung", + "RETR 0" + ], + [ + "102", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "102", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "102", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.111, ACK: 13.000.035" + ], + [ + "103", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "103", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "103", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.111" + ], + [ + "103", + null, + null, + "POP3", + "Anwendung", + "+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile" + ], + [ + "104", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "104", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "104", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.035, ACK: 1.000.233" + ], + [ + "105", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "105", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "105", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.035" + ], + [ + "105", + null, + null, + "POP3", + "Anwendung", + "DELE 0" + ], + [ + "106", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "106", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "106", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.233, ACK: 13.000.041" + ], + [ + "107", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "107", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "107", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.233" + ], + [ + "107", + null, + null, + "POP3", + "Anwendung", + "+OK message marked for delete" + ], + [ + "108", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "108", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "108", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.041, ACK: 1.000.262" + ], + [ + "109", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "109", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "109", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.041" + ], + [ + "109", + null, + null, + "POP3", + "Anwendung", + "RETR 1" + ], + [ + "110", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "110", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "110", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.262, ACK: 13.000.047" + ], + [ + "111", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "111", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "111", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.262" + ], + [ + "111", + null, + null, + "POP3", + "Anwendung", + "+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?" + ], + [ + "112", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "112", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "112", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.047, ACK: 1.000.414" + ], + [ + "113", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "113", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "113", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.047" + ], + [ + "113", + null, + null, + "POP3", + "Anwendung", + "DELE 1" + ], + [ + "114", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "114", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "114", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.414, ACK: 13.000.053" + ], + [ + "115", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "115", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "115", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.414" + ], + [ + "115", + null, + null, + "POP3", + "Anwendung", + "+OK message marked for delete" + ], + [ + "116", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "116", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "116", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.053, ACK: 1.000.443" + ], + [ + "117", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "117", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "117", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.053" + ], + [ + "117", + null, + null, + "POP3", + "Anwendung", + "RETR 2" + ], + [ + "118", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "118", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "118", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.443, ACK: 13.000.059" + ], + [ + "119", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "119", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "119", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.443" + ], + [ + "119", + null, + null, + "POP3", + "Anwendung", + "+OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?" + ], + [ + "120", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "120", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "120", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.059, ACK: 1.000.925" + ], + [ + "121", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "121", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "121", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.059" + ], + [ + "121", + null, + null, + "POP3", + "Anwendung", + "DELE 2" + ], + [ + "122", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "122", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "122", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.925, ACK: 13.000.065" + ], + [ + "123", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "123", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "123", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.925" + ], + [ + "123", + null, + null, + "POP3", + "Anwendung", + "+OK message marked for delete" + ], + [ + "124", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "124", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "124", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.065, ACK: 1.000.954" + ], + [ + "125", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "125", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "125", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.065" + ], + [ + "125", + null, + null, + "POP3", + "Anwendung", + "RETR 3" + ], + [ + "126", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "126", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "126", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.954, ACK: 13.000.071" + ], + [ + "127", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "127", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "127", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.954" + ], + [ + "127", + null, + null, + "POP3", + "Anwendung", + "+OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009jemand@nirgendwo.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?" + ], + [ + "128", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "128", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "128", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.071, ACK: 1.001.440" + ], + [ + "129", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "129", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "129", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.071" + ], + [ + "129", + null, + null, + "POP3", + "Anwendung", + "DELE 3" + ], + [ + "130", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "130", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "130", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.001.440, ACK: 13.000.077" + ], + [ + "131", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "131", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "131", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.001.440" + ], + [ + "131", + null, + null, + "POP3", + "Anwendung", + "+OK message marked for delete" + ], + [ + "132", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "132", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "132", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.077, ACK: 1.001.469" + ], + [ + "133", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "133", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "133", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.077" + ], + [ + "133", + null, + null, + "POP3", + "Anwendung", + "QUIT" + ], + [ + "134", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "134", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "134", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.001.469, ACK: 13.000.081" + ], + [ + "135", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "135", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "135", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.001.469" + ], + [ + "135", + null, + null, + "POP3", + "Anwendung", + "+OK" + ], + [ + "136", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "136", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "136", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.081, ACK: 1.001.472" + ], + [ + "137", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "137", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "137", + "56326", + "110", + "TCP", + "Transport", + "FIN, SEQ: 13.000.081" + ], + [ + "138", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "138", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "138", + "110", + "56326", + "TCP", + "Transport", + "FIN, SEQ: 1.001.472" + ], + [ + "139", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "139", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "139", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.082, ACK: 1.001.473" + ], + [ + "140", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "140", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "140", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.001.473, ACK: 13.000.082" + ] + ], + "00000000-0000-0000-0000-000000000202": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:02:11", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "3", + "52531", + "53", + "UDP", + "Transport", + "" + ], + [ + "3", + null, + null, + "DNS", + "Anwendung", + "ID=43842 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" + ], + [ + "4", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "4", + "53", + "52531", + "UDP", + "Transport", + "" + ], + [ + "4", + null, + null, + "DNS", + "Anwendung", + "ID=43842 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" + ], + [ + "5", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "6", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.30", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "7", + "02:00:00:00:02:12", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x806" + ], + [ + "7", + "192.168.0.10", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:13|192.168.0.30]" + ], + [ + "8", + "02:00:00:00:02:13", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.30", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "8", + "62746", + "53", + "UDP", + "Transport", + "" + ], + [ + "8", + null, + null, + "DNS", + "Anwendung", + "ID=3243 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n" + ], + [ + "9", + "02:00:00:00:02:12", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.10", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "9", + "53", + "62746", + "UDP", + "Transport", + "" + ], + [ + "9", + null, + null, + "DNS", + "Anwendung", + "ID=3243 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n" + ], + [ + "10", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "10", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "11", + "02:00:00:00:02:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "11", + "192.168.0.31", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "12", + "02:00:00:00:02:12", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x806" + ], + [ + "12", + "192.168.0.10", + "192.168.0.31", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:14|192.168.0.31]" + ], + [ + "13", + "02:00:00:00:02:14", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.31", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "13", + "58459", + "53", + "UDP", + "Transport", + "" + ], + [ + "13", + null, + null, + "DNS", + "Anwendung", + "ID=47846 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n" + ], + [ + "14", + "02:00:00:00:02:12", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.10", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "14", + "53", + "58459", + "UDP", + "Transport", + "" + ], + [ + "14", + null, + null, + "DNS", + "Anwendung", + "ID=47846 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n" + ], + [ + "15", + "02:00:00:00:02:11", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "15", + "57606", + "53", + "UDP", + "Transport", + "" + ], + [ + "15", + null, + null, + "DNS", + "Anwendung", + "ID=60054 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" + ], + [ + "16", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "16", + "53", + "57606", + "UDP", + "Transport", + "" + ], + [ + "16", + null, + null, + "DNS", + "Anwendung", + "ID=60054 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" + ], + [ + "17", + "02:00:00:00:02:13", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "17", + "53558", + "53", + "UDP", + "Transport", + "" + ], + [ + "17", + null, + null, + "DNS", + "Anwendung", + "ID=35053 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnirgendwo.de. MX IN\n" + ], + [ + "18", + "02:00:00:00:02:12", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.10", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "18", + "53", + "53558", + "UDP", + "Transport", + "" + ], + [ + "18", + null, + null, + "DNS", + "Anwendung", + "ID=35053 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "19", + "02:00:00:00:02:11", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "19", + "56276", + "53", + "UDP", + "Transport", + "" + ], + [ + "19", + null, + null, + "DNS", + "Anwendung", + "ID=40953 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" + ], + [ + "20", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "20", + "53", + "56276", + "UDP", + "Transport", + "" + ], + [ + "20", + null, + null, + "DNS", + "Anwendung", + "ID=40953 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" + ] + ], + "00000000-0000-0000-0000-000000000203": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "3", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "4", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "62333", + "25", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000" + ], + [ + "5", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "25", + "62333", + "TCP", + "Transport", + "SYN, SEQ: 2.000.000, ACK: 5.000.001" + ], + [ + "6", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 2.000.001" + ], + [ + "7", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.001" + ], + [ + "7", + null, + null, + "SMTP", + "Anwendung", + "220 Willkommen bei filius.de" + ], + [ + "8", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 2.000.029" + ], + [ + "9", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.001" + ], + [ + "9", + null, + null, + "SMTP", + "Anwendung", + "HELO 192.168.0.20" + ], + [ + "10", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.029, ACK: 5.000.018" + ], + [ + "11", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.029" + ], + [ + "11", + null, + null, + "SMTP", + "Anwendung", + "250 Hello 192.168.0.20" + ], + [ + "12", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.018, ACK: 2.000.051" + ], + [ + "13", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.018" + ], + [ + "13", + null, + null, + "SMTP", + "Anwendung", + "MAIL FROM: " + ], + [ + "14", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.051, ACK: 5.000.045" + ], + [ + "15", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.051" + ], + [ + "15", + null, + null, + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "16", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.045, ACK: 2.000.064" + ], + [ + "17", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.045" + ], + [ + "17", + null, + null, + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "18", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.064, ACK: 5.000.072" + ], + [ + "19", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.064" + ], + [ + "19", + null, + null, + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "20", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "20", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.072, ACK: 2.000.080" + ], + [ + "21", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.072" + ], + [ + "21", + null, + null, + "SMTP", + "Anwendung", + "DATA" + ], + [ + "22", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.080, ACK: 5.000.076" + ], + [ + "23", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "23", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.080" + ], + [ + "23", + null, + null, + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "24", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "24", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.076, ACK: 2.000.115" + ], + [ + "25", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "25", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.076" + ], + [ + "25", + null, + null, + "SMTP", + "Anwendung", + "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" + ], + [ + "26", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.115, ACK: 5.000.168" + ], + [ + "27", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.115" + ], + [ + "27", + null, + null, + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "28", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "28", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.168, ACK: 2.000.143" + ], + [ + "29", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "29", + "192.168.0.30", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "30", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "30", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.168" + ], + [ + "30", + null, + null, + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "31", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "31", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.143, ACK: 5.000.172" + ], + [ + "32", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "32", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.143" + ], + [ + "32", + null, + null, + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "33", + "02:00:00:00:02:12", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x806" + ], + [ + "33", + "192.168.0.10", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:13|192.168.0.30]" + ], + [ + "34", + "02:00:00:00:02:13", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "192.168.0.30", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "34", + "62746", + "53", + "UDP", + "Transport", + "" + ], + [ + "34", + null, + null, + "DNS", + "Anwendung", + "ID=3243 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n" + ], + [ + "35", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "35", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.172, ACK: 2.000.173" + ], + [ + "36", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "36", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "36", + "25", + "62333", + "TCP", + "Transport", + "FIN, SEQ: 2.000.173" + ], + [ + "37", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "62333", + "25", + "TCP", + "Transport", + "FIN, SEQ: 5.000.172" + ], + [ + "38", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "38", + "25", + "62333", + "TCP", + "Transport", + "SEQ: 2.000.174, ACK: 5.000.173" + ], + [ + "39", + "02:00:00:00:02:12", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.10", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "39", + "53", + "62746", + "UDP", + "Transport", + "" + ], + [ + "39", + null, + null, + "DNS", + "Anwendung", + "ID=3243 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n" + ], + [ + "40", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "40", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "41", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "41", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "41", + "62333", + "25", + "TCP", + "Transport", + "SEQ: 5.000.173, ACK: 2.000.174" + ], + [ + "42", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x806" + ], + [ + "42", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:14 [op=REPLY, sender=02:00:00:00:02:14|192.168.0.31, target=02:00:00:00:02:13|192.168.0.30]" + ], + [ + "43", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "43", + "64673", + "25", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000" + ], + [ + "44", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "44", + "25", + "64673", + "TCP", + "Transport", + "SYN, SEQ: 4.000.000, ACK: 7.000.001" + ], + [ + "45", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "45", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 4.000.001" + ], + [ + "46", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "46", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.001" + ], + [ + "46", + null, + null, + "SMTP", + "Anwendung", + "220 Willkommen bei andere.de" + ], + [ + "47", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "47", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 4.000.029" + ], + [ + "48", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "48", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "48", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "48", + null, + null, + "SMTP", + "Anwendung", + "HELO 192.168.0.30" + ], + [ + "49", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "49", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "49", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.029, ACK: 7.000.018" + ], + [ + "50", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "50", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "50", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.029" + ], + [ + "50", + null, + null, + "SMTP", + "Anwendung", + "250 Hello 192.168.0.30" + ], + [ + "51", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "51", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "51", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.018, ACK: 4.000.051" + ], + [ + "52", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "52", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "52", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.018" + ], + [ + "52", + null, + null, + "SMTP", + "Anwendung", + "MAIL FROM: " + ], + [ + "53", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "53", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "53", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.051, ACK: 7.000.045" + ], + [ + "54", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "54", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "54", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.051" + ], + [ + "54", + null, + null, + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "55", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "55", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "55", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.045, ACK: 4.000.064" + ], + [ + "56", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "56", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "56", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.045" + ], + [ + "56", + null, + null, + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "57", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "57", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "57", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.064, ACK: 7.000.072" + ], + [ + "58", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "58", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "58", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.064" + ], + [ + "58", + null, + null, + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "59", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "59", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "59", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.072, ACK: 4.000.080" + ], + [ + "60", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "60", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "60", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.072" + ], + [ + "60", + null, + null, + "SMTP", + "Anwendung", + "DATA" + ], + [ + "61", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "61", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "61", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.080, ACK: 7.000.076" + ], + [ + "62", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "62", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "62", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.080" + ], + [ + "62", + null, + null, + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "63", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "63", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "63", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.076, ACK: 4.000.115" + ], + [ + "64", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "64", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "64", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.076" + ], + [ + "64", + null, + null, + "SMTP", + "Anwendung", + "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" + ], + [ + "65", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "65", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "65", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.115, ACK: 7.000.168" + ], + [ + "66", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "66", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "66", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.115" + ], + [ + "66", + null, + null, + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "67", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "67", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "67", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.168, ACK: 4.000.143" + ], + [ + "68", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "68", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "68", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.168" + ], + [ + "68", + null, + null, + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "69", + "02:00:00:00:02:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "69", + "192.168.0.31", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "70", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "70", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "70", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.143, ACK: 7.000.172" + ], + [ + "71", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "71", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "71", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.143" + ], + [ + "71", + null, + null, + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "72", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "72", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "72", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.172, ACK: 4.000.173" + ], + [ + "73", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "73", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "73", + "50936", + "25", + "TCP", + "Transport", + "SYN, SEQ: 9.000.000" + ], + [ + "74", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "74", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "74", + "64673", + "25", + "TCP", + "Transport", + "FIN, SEQ: 7.000.172" + ], + [ + "75", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "75", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "75", + "25", + "50936", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000, ACK: 9.000.001" + ], + [ + "76", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "76", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "76", + "25", + "64673", + "TCP", + "Transport", + "FIN, SEQ: 4.000.173" + ], + [ + "77", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "77", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "77", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.173, ACK: 4.000.174" + ], + [ + "78", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "78", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "78", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.174, ACK: 7.000.173" + ], + [ + "79", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "79", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "79", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 6.000.001" + ], + [ + "80", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "80", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "80", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "80", + null, + null, + "SMTP", + "Anwendung", + "220 Willkommen bei filius.de" + ], + [ + "81", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "81", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "81", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 6.000.029" + ], + [ + "82", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "82", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "82", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.001" + ], + [ + "82", + null, + null, + "SMTP", + "Anwendung", + "HELO 192.168.0.31" + ], + [ + "83", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "83", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "83", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.029, ACK: 9.000.018" + ], + [ + "84", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "84", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "84", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.029" + ], + [ + "84", + null, + null, + "SMTP", + "Anwendung", + "250 Hello 192.168.0.31" + ], + [ + "85", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "85", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "85", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.018, ACK: 6.000.051" + ], + [ + "86", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "86", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "86", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.018" + ], + [ + "86", + null, + null, + "SMTP", + "Anwendung", + "MAIL FROM: <>" + ], + [ + "87", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "87", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "87", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.051, ACK: 9.000.031" + ], + [ + "88", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "88", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "88", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.051" + ], + [ + "88", + null, + null, + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "89", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "89", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "89", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.031, ACK: 6.000.064" + ], + [ + "90", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "90", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "90", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.031" + ], + [ + "90", + null, + null, + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "91", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "91", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "91", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.064, ACK: 9.000.055" + ], + [ + "92", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "92", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "92", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.064" + ], + [ + "92", + null, + null, + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "93", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "93", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "93", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.055, ACK: 6.000.080" + ], + [ + "94", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "94", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "94", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.055" + ], + [ + "94", + null, + null, + "SMTP", + "Anwendung", + "DATA" + ], + [ + "95", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "95", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "95", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.080, ACK: 9.000.059" + ], + [ + "96", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "96", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "96", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.080" + ], + [ + "96", + null, + null, + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "97", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "97", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "97", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.059, ACK: 6.000.115" + ], + [ + "98", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "98", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "98", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.059" + ], + [ + "98", + null, + null, + "SMTP", + "Anwendung", + "From: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" + ], + [ + "99", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "99", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "99", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.115, ACK: 9.000.525" + ], + [ + "100", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "100", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "100", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.115" + ], + [ + "100", + null, + null, + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "101", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "101", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "101", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.525, ACK: 6.000.143" + ], + [ + "102", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "102", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "102", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.525" + ], + [ + "102", + null, + null, + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "103", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "103", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "103", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.143, ACK: 9.000.529" + ], + [ + "104", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "104", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "104", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.143" + ], + [ + "104", + null, + null, + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "105", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "105", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "105", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.529, ACK: 6.000.173" + ], + [ + "106", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "106", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "106", + "25", + "50936", + "TCP", + "Transport", + "FIN, SEQ: 6.000.173" + ], + [ + "107", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "107", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "107", + "50936", + "25", + "TCP", + "Transport", + "FIN, SEQ: 9.000.529" + ], + [ + "108", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "108", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "108", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.174, ACK: 9.000.530" + ], + [ + "109", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "109", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "109", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.530, ACK: 6.000.174" + ], + [ + "110", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "110", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "110", + "65366", + "25", + "TCP", + "Transport", + "SYN, SEQ: 11.000.000" + ], + [ + "111", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "111", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "111", + "25", + "65366", + "TCP", + "Transport", + "SYN, SEQ: 10.000.000, ACK: 11.000.001" + ], + [ + "112", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "112", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "112", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.001, ACK: 10.000.001" + ], + [ + "113", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "113", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "113", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.001" + ], + [ + "113", + null, + null, + "SMTP", + "Anwendung", + "220 Willkommen bei filius.de" + ], + [ + "114", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "114", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "114", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.001, ACK: 10.000.029" + ], + [ + "115", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "115", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "115", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.001" + ], + [ + "115", + null, + null, + "SMTP", + "Anwendung", + "HELO 192.168.0.20" + ], + [ + "116", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "116", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "116", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.029, ACK: 11.000.018" + ], + [ + "117", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "117", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "117", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.029" + ], + [ + "117", + null, + null, + "SMTP", + "Anwendung", + "250 Hello 192.168.0.20" + ], + [ + "118", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "118", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "118", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.018, ACK: 10.000.051" + ], + [ + "119", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "119", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "119", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.018" + ], + [ + "119", + null, + null, + "SMTP", + "Anwendung", + "MAIL FROM: " + ], + [ + "120", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "120", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "120", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.051, ACK: 11.000.045" + ], + [ + "121", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "121", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "121", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.051" + ], + [ + "121", + null, + null, + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "122", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "122", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "122", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.045, ACK: 10.000.064" + ], + [ + "123", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "123", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "123", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.045" + ], + [ + "123", + null, + null, + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "124", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "124", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "124", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.064, ACK: 11.000.074" + ], + [ + "125", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "125", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "125", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.064" + ], + [ + "125", + null, + null, + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "126", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "126", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "126", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.074, ACK: 10.000.080" + ], + [ + "127", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "127", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "127", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.074" + ], + [ + "127", + null, + null, + "SMTP", + "Anwendung", + "DATA" + ], + [ + "128", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "128", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "128", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.080, ACK: 11.000.078" + ], + [ + "129", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "129", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "129", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.080" + ], + [ + "129", + null, + null, + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "130", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "130", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "130", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.078, ACK: 10.000.115" + ], + [ + "131", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "131", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "131", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.078" + ], + [ + "131", + null, + null, + "SMTP", + "Anwendung", + "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" + ], + [ + "132", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "132", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "132", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.115, ACK: 11.000.172" + ], + [ + "133", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "133", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "133", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.115" + ], + [ + "133", + null, + null, + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "134", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "134", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "134", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.172, ACK: 10.000.143" + ], + [ + "135", + "02:00:00:00:02:13", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "135", + "192.168.0.30", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "135", + "53558", + "53", + "UDP", + "Transport", + "" + ], + [ + "135", + null, + null, + "DNS", + "Anwendung", + "ID=35053 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnirgendwo.de. MX IN\n" + ], + [ + "136", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "136", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "136", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.172" + ], + [ + "136", + null, + null, + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "137", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "137", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "137", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.143, ACK: 11.000.176" + ], + [ + "138", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "138", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "138", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.143" + ], + [ + "138", + null, + null, + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "139", + "02:00:00:00:02:12", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "139", + "192.168.0.10", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "139", + "53", + "53558", + "UDP", + "Transport", + "" + ], + [ + "139", + null, + null, + "DNS", + "Anwendung", + "ID=35053 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "140", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "140", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "140", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.176, ACK: 10.000.173" + ], + [ + "141", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "141", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "141", + "25", + "65366", + "TCP", + "Transport", + "FIN, SEQ: 10.000.173" + ], + [ + "142", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "142", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "142", + "65366", + "25", + "TCP", + "Transport", + "FIN, SEQ: 11.000.176" + ], + [ + "143", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "143", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "143", + "25", + "65366", + "TCP", + "Transport", + "SEQ: 10.000.174, ACK: 11.000.177" + ], + [ + "144", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "144", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "144", + "65366", + "25", + "TCP", + "Transport", + "SEQ: 11.000.177, ACK: 10.000.174" + ], + [ + "145", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "145", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "145", + "56326", + "110", + "TCP", + "Transport", + "SYN, SEQ: 13.000.000" + ], + [ + "146", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "146", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "146", + "110", + "56326", + "TCP", + "Transport", + "SYN, SEQ: 1.000.000, ACK: 13.000.001" + ], + [ + "147", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "147", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "147", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.001, ACK: 1.000.001" + ], + [ + "148", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "148", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "148", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.001" + ], + [ + "148", + null, + null, + "POP3", + "Anwendung", + "+OK POP3 server ready" + ], + [ + "149", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "149", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "149", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.001, ACK: 1.000.022" + ], + [ + "150", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "150", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "150", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.001" + ], + [ + "150", + null, + null, + "POP3", + "Anwendung", + "USER anna" + ], + [ + "151", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "151", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "151", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.022, ACK: 13.000.010" + ], + [ + "152", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "152", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "152", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.022" + ], + [ + "152", + null, + null, + "POP3", + "Anwendung", + "+OK enter password" + ], + [ + "153", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "153", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "153", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.010, ACK: 1.000.040" + ], + [ + "154", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "154", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "154", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.010" + ], + [ + "154", + null, + null, + "POP3", + "Anwendung", + "PASS geheim" + ], + [ + "155", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "155", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "155", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.040, ACK: 13.000.021" + ], + [ + "156", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "156", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "156", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.040" + ], + [ + "156", + null, + null, + "POP3", + "Anwendung", + "+OK Mailbox locked and ready" + ], + [ + "157", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "157", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "157", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.021, ACK: 1.000.068" + ], + [ + "158", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "158", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "158", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.021" + ], + [ + "158", + null, + null, + "", + "Anwendung", + "STAT" + ], + [ + "159", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "159", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "159", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.068, ACK: 13.000.025" + ], + [ + "160", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "160", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "160", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.068" + ], + [ + "160", + null, + null, + "POP3", + "Anwendung", + "+OK 4 1054" + ], + [ + "161", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "161", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "161", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.025, ACK: 1.000.078" + ], + [ + "162", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "162", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "162", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.025" + ], + [ + "162", + null, + null, + "", + "Anwendung", + "LIST" + ], + [ + "163", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "163", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "163", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.078, ACK: 13.000.029" + ], + [ + "164", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "164", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "164", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.078" + ], + [ + "164", + null, + null, + "POP3", + "Anwendung", + "+OK 4 1054\n0 80\n1 89\n2 441\n3 444\n" + ], + [ + "165", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "165", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "165", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.029, ACK: 1.000.111" + ], + [ + "166", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "166", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "166", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.029" + ], + [ + "166", + null, + null, + "POP3", + "Anwendung", + "RETR 0" + ], + [ + "167", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "167", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "167", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.111, ACK: 13.000.035" + ], + [ + "168", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "168", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "168", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.111" + ], + [ + "168", + null, + null, + "POP3", + "Anwendung", + "+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile" + ], + [ + "169", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "169", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "169", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.035, ACK: 1.000.233" + ], + [ + "170", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "170", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "170", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.035" + ], + [ + "170", + null, + null, + "POP3", + "Anwendung", + "DELE 0" + ], + [ + "171", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "171", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "171", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.233, ACK: 13.000.041" + ], + [ + "172", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "172", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "172", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.233" + ], + [ + "172", + null, + null, + "POP3", + "Anwendung", + "+OK message marked for delete" + ], + [ + "173", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "173", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "173", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.041, ACK: 1.000.262" + ], + [ + "174", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "174", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "174", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.041" + ], + [ + "174", + null, + null, + "POP3", + "Anwendung", + "RETR 1" + ], + [ + "175", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "175", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "175", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.262, ACK: 13.000.047" + ], + [ + "176", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "176", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "176", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.262" + ], + [ + "176", + null, + null, + "POP3", + "Anwendung", + "+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?" + ], + [ + "177", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "177", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "177", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.047, ACK: 1.000.414" + ], + [ + "178", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "178", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "178", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.047" + ], + [ + "178", + null, + null, + "POP3", + "Anwendung", + "DELE 1" + ], + [ + "179", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "179", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "179", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.414, ACK: 13.000.053" + ], + [ + "180", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "180", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "180", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.414" + ], + [ + "180", + null, + null, + "POP3", + "Anwendung", + "+OK message marked for delete" + ], + [ + "181", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "181", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "181", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.053, ACK: 1.000.443" + ], + [ + "182", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "182", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "182", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.053" + ], + [ + "182", + null, + null, + "POP3", + "Anwendung", + "RETR 2" + ], + [ + "183", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "183", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "183", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.443, ACK: 13.000.059" + ], + [ + "184", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "184", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "184", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.443" + ], + [ + "184", + null, + null, + "POP3", + "Anwendung", + "+OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?" + ], + [ + "185", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "185", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "185", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.059, ACK: 1.000.925" + ], + [ + "186", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "186", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "186", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.059" + ], + [ + "186", + null, + null, + "POP3", + "Anwendung", + "DELE 2" + ], + [ + "187", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "187", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "187", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.925, ACK: 13.000.065" + ], + [ + "188", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "188", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "188", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.925" + ], + [ + "188", + null, + null, + "POP3", + "Anwendung", + "+OK message marked for delete" + ], + [ + "189", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "189", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "189", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.065, ACK: 1.000.954" + ], + [ + "190", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "190", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "190", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.065" + ], + [ + "190", + null, + null, + "POP3", + "Anwendung", + "RETR 3" + ], + [ + "191", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "191", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "191", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.954, ACK: 13.000.071" + ], + [ + "192", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "192", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "192", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.000.954" + ], + [ + "192", + null, + null, + "POP3", + "Anwendung", + "+OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009jemand@nirgendwo.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?" + ], + [ + "193", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "193", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "193", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.071, ACK: 1.001.440" + ], + [ + "194", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "194", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "194", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.071" + ], + [ + "194", + null, + null, + "POP3", + "Anwendung", + "DELE 3" + ], + [ + "195", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "195", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "195", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.001.440, ACK: 13.000.077" + ], + [ + "196", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "196", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "196", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.001.440" + ], + [ + "196", + null, + null, + "POP3", + "Anwendung", + "+OK message marked for delete" + ], + [ + "197", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "197", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "197", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.077, ACK: 1.001.469" + ], + [ + "198", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "198", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "198", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.077" + ], + [ + "198", + null, + null, + "POP3", + "Anwendung", + "QUIT" + ], + [ + "199", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "199", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "199", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.001.469, ACK: 13.000.081" + ], + [ + "200", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "200", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "200", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.001.469" + ], + [ + "200", + null, + null, + "POP3", + "Anwendung", + "+OK" + ], + [ + "201", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "201", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "201", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.081, ACK: 1.001.472" + ], + [ + "202", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "202", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "202", + "110", + "56326", + "TCP", + "Transport", + "FIN, SEQ: 1.001.472" + ], + [ + "203", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "203", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "203", + "56326", + "110", + "TCP", + "Transport", + "FIN, SEQ: 13.000.081" + ], + [ + "204", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "204", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "204", + "110", + "56326", + "TCP", + "Transport", + "SEQ: 1.001.473, ACK: 13.000.082" + ], + [ + "205", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "205", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "205", + "56326", + "110", + "TCP", + "Transport", + "SEQ: 13.000.082, ACK: 1.001.473" + ] + ], + "00000000-0000-0000-0000-000000000204": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "3", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.30", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "4", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "5", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:14 [op=REPLY, sender=02:00:00:00:02:14|192.168.0.31, target=02:00:00:00:02:13|192.168.0.30]" + ], + [ + "6", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "64673", + "25", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000" + ], + [ + "7", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "25", + "64673", + "TCP", + "Transport", + "SYN, SEQ: 4.000.000, ACK: 7.000.001" + ], + [ + "8", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 4.000.001" + ], + [ + "9", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.001" + ], + [ + "9", + null, + null, + "SMTP", + "Anwendung", + "220 Willkommen bei andere.de" + ], + [ + "10", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 4.000.029" + ], + [ + "11", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "11", + null, + null, + "SMTP", + "Anwendung", + "HELO 192.168.0.30" + ], + [ + "12", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.029, ACK: 7.000.018" + ], + [ + "13", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.029" + ], + [ + "13", + null, + null, + "SMTP", + "Anwendung", + "250 Hello 192.168.0.30" + ], + [ + "14", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.018, ACK: 4.000.051" + ], + [ + "15", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.018" + ], + [ + "15", + null, + null, + "SMTP", + "Anwendung", + "MAIL FROM: " + ], + [ + "16", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.051, ACK: 7.000.045" + ], + [ + "17", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.051" + ], + [ + "17", + null, + null, + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "18", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.045, ACK: 4.000.064" + ], + [ + "19", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.045" + ], + [ + "19", + null, + null, + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "20", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "20", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.064, ACK: 7.000.072" + ], + [ + "21", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.064" + ], + [ + "21", + null, + null, + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "22", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.072, ACK: 4.000.080" + ], + [ + "23", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "23", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.072" + ], + [ + "23", + null, + null, + "SMTP", + "Anwendung", + "DATA" + ], + [ + "24", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "24", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.080, ACK: 7.000.076" + ], + [ + "25", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "25", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.080" + ], + [ + "25", + null, + null, + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "26", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.076, ACK: 4.000.115" + ], + [ + "27", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.076" + ], + [ + "27", + null, + null, + "SMTP", + "Anwendung", + "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" + ], + [ + "28", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "28", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.115, ACK: 7.000.168" + ], + [ + "29", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "29", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.115" + ], + [ + "29", + null, + null, + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "30", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "30", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.168, ACK: 4.000.143" + ], + [ + "31", + "02:00:00:00:02:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "31", + "192.168.0.31", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "32", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "32", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.168" + ], + [ + "32", + null, + null, + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "33", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "33", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "33", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.143, ACK: 7.000.172" + ], + [ + "34", + "02:00:00:00:02:12", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x806" + ], + [ + "34", + "192.168.0.10", + "192.168.0.31", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:14|192.168.0.31]" + ], + [ + "35", + "02:00:00:00:02:14", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.31", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "35", + "58459", + "53", + "UDP", + "Transport", + "" + ], + [ + "35", + null, + null, + "DNS", + "Anwendung", + "ID=47846 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n" + ], + [ + "36", + "02:00:00:00:02:12", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "36", + "192.168.0.10", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "36", + "53", + "58459", + "UDP", + "Transport", + "" + ], + [ + "36", + null, + null, + "DNS", + "Anwendung", + "ID=47846 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n" + ], + [ + "37", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.143" + ], + [ + "37", + null, + null, + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "38", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "38", + "50936", + "25", + "TCP", + "Transport", + "SYN, SEQ: 9.000.000" + ], + [ + "39", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "39", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.172, ACK: 4.000.173" + ], + [ + "40", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "40", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "40", + "25", + "64673", + "TCP", + "Transport", + "FIN, SEQ: 4.000.173" + ], + [ + "41", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "41", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "41", + "64673", + "25", + "TCP", + "Transport", + "FIN, SEQ: 7.000.172" + ], + [ + "42", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "42", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "42", + "25", + "64673", + "TCP", + "Transport", + "SEQ: 4.000.174, ACK: 7.000.173" + ], + [ + "43", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "43", + "25", + "50936", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000, ACK: 9.000.001" + ], + [ + "44", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "44", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 6.000.001" + ], + [ + "45", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "45", + "64673", + "25", + "TCP", + "Transport", + "SEQ: 7.000.173, ACK: 4.000.174" + ], + [ + "46", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "46", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "46", + null, + null, + "SMTP", + "Anwendung", + "220 Willkommen bei filius.de" + ], + [ + "47", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "47", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 6.000.029" + ], + [ + "48", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "48", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "48", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.001" + ], + [ + "48", + null, + null, + "SMTP", + "Anwendung", + "HELO 192.168.0.31" + ], + [ + "49", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "49", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "49", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.029, ACK: 9.000.018" + ], + [ + "50", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "50", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "50", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.029" + ], + [ + "50", + null, + null, + "SMTP", + "Anwendung", + "250 Hello 192.168.0.31" + ], + [ + "51", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "51", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "51", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.018, ACK: 6.000.051" + ], + [ + "52", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "52", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "52", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.018" + ], + [ + "52", + null, + null, + "SMTP", + "Anwendung", + "MAIL FROM: <>" + ], + [ + "53", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "53", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "53", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.051, ACK: 9.000.031" + ], + [ + "54", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "54", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "54", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.051" + ], + [ + "54", + null, + null, + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "55", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "55", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "55", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.031, ACK: 6.000.064" + ], + [ + "56", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "56", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "56", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.031" + ], + [ + "56", + null, + null, + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "57", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "57", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "57", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.064, ACK: 9.000.055" + ], + [ + "58", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "58", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "58", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.064" + ], + [ + "58", + null, + null, + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "59", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "59", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "59", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.055, ACK: 6.000.080" + ], + [ + "60", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "60", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "60", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.055" + ], + [ + "60", + null, + null, + "SMTP", + "Anwendung", + "DATA" + ], + [ + "61", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "61", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "61", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.080, ACK: 9.000.059" + ], + [ + "62", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "62", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "62", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.080" + ], + [ + "62", + null, + null, + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "63", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "63", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "63", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.059, ACK: 6.000.115" + ], + [ + "64", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "64", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "64", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.059" + ], + [ + "64", + null, + null, + "SMTP", + "Anwendung", + "From: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" + ], + [ + "65", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "65", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "65", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.115, ACK: 9.000.525" + ], + [ + "66", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "66", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "66", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.115" + ], + [ + "66", + null, + null, + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "67", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "67", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "67", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.525, ACK: 6.000.143" + ], + [ + "68", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "68", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "68", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.525" + ], + [ + "68", + null, + null, + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "69", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "69", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "69", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.143, ACK: 9.000.529" + ], + [ + "70", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "70", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "70", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.143" + ], + [ + "70", + null, + null, + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "71", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "71", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "71", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.529, ACK: 6.000.173" + ], + [ + "72", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "72", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "72", + "50936", + "25", + "TCP", + "Transport", + "FIN, SEQ: 9.000.529" + ], + [ + "73", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "73", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "73", + "25", + "50936", + "TCP", + "Transport", + "FIN, SEQ: 6.000.173" + ], + [ + "74", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "74", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "74", + "50936", + "25", + "TCP", + "Transport", + "SEQ: 9.000.530, ACK: 6.000.174" + ], + [ + "75", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "75", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "75", + "25", + "50936", + "TCP", + "Transport", + "SEQ: 6.000.174, ACK: 9.000.530" + ] + ] + }, + "events": [ + [ + 215, + "client", + "null" + ], + [ + 218, + "server", + "null" + ], + [ + 221, + "otherServer", + "null" + ], + [ + 500, + "client", + "call versendeEmail niemand@andere.de | | " + ], + [ + 503, + "client", + "----" + ], + [ + 1486, + "client", + "Verbindung zu 192.168.0.30:25 hergestellt" + ], + [ + 1623, + "server", + "----" + ], + [ + 1846, + "server", + "192.168.0.20> 220 Willkommen bei filius.de" + ], + [ + 1902, + "server", + "192.168.0.20< HELO 192.168.0.20" + ], + [ + 2180, + "server", + "192.168.0.20> 250 Hello 192.168.0.20" + ], + [ + 2236, + "server", + "192.168.0.20< MAIL FROM: " + ], + [ + 2514, + "server", + "192.168.0.20> 250 Sender OK" + ], + [ + 2570, + "server", + "192.168.0.20< RCPT TO:" + ], + [ + 2849, + "server", + "192.168.0.20> 250 Recipient OK" + ], + [ + 2904, + "server", + "192.168.0.20< DATA" + ], + [ + 3182, + "server", + "192.168.0.20> 354 End data with ." + ], + [ + 3238, + "server", + "192.168.0.20< From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" + ], + [ + 3515, + "server", + "192.168.0.20> 250 Mail queued for delivery" + ], + [ + 3571, + "server", + "192.168.0.20< QUIT" + ], + [ + 3743, + "client", + "Mail versendet an niemand@andere.de" + ], + [ + 3743, + "client", + "null" + ], + [ + 3743, + "client", + "Verbindung zu 192.168.0.30:25 getrennt" + ], + [ + 3854, + "server", + "192.168.0.20> 221 Server beendet Verbindung." + ], + [ + 3966, + "server", + "----" + ], + [ + 4466, + "server", + "Verbindung zu 192.168.0.31:25 hergestellt" + ], + [ + 4525, + "otherServer", + "----" + ], + [ + 4747, + "otherServer", + "192.168.0.30> 220 Willkommen bei andere.de" + ], + [ + 4802, + "otherServer", + "192.168.0.30< HELO 192.168.0.30" + ], + [ + 5079, + "otherServer", + "192.168.0.30> 250 Hello 192.168.0.30" + ], + [ + 5135, + "otherServer", + "192.168.0.30< MAIL FROM: " + ], + [ + 5412, + "otherServer", + "192.168.0.30> 250 Sender OK" + ], + [ + 5467, + "otherServer", + "192.168.0.30< RCPT TO:" + ], + [ + 5744, + "otherServer", + "192.168.0.30> 250 Recipient OK" + ], + [ + 5800, + "otherServer", + "192.168.0.30< DATA" + ], + [ + 6077, + "otherServer", + "192.168.0.30> 354 End data with ." + ], + [ + 6132, + "otherServer", + "192.168.0.30< From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" + ], + [ + 6409, + "otherServer", + "192.168.0.30> 250 Mail queued for delivery" + ], + [ + 6856, + "otherServer", + "192.168.0.30< QUIT" + ], + [ + 6856, + "otherServer", + "----" + ], + [ + 6967, + "server", + "Mail versendet an niemand@andere.de" + ], + [ + 6967, + "server", + "null" + ], + [ + 6967, + "server", + "Verbindung zu 192.168.0.31:25 getrennt" + ], + [ + 7078, + "otherServer", + "192.168.0.30> 221 Server beendet Verbindung." + ], + [ + 7256, + "otherServer", + "Verbindung zu 192.168.0.30:25 hergestellt" + ], + [ + 7350, + "server", + "----" + ], + [ + 7572, + "server", + "192.168.0.31> 220 Willkommen bei filius.de" + ], + [ + 7627, + "server", + "192.168.0.31< HELO 192.168.0.31" + ], + [ + 7904, + "server", + "192.168.0.31> 250 Hello 192.168.0.31" + ], + [ + 7959, + "server", + "192.168.0.31< MAIL FROM: <>" + ], + [ + 8236, + "server", + "192.168.0.31> 250 Sender OK" + ], + [ + 8291, + "server", + "192.168.0.31< RCPT TO:" + ], + [ + 8568, + "server", + "192.168.0.31> 250 Recipient OK" + ], + [ + 8623, + "server", + "192.168.0.31< DATA" + ], + [ + 8901, + "server", + "192.168.0.31> 354 End data with ." + ], + [ + 8956, + "server", + "192.168.0.31< From: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" + ], + [ + 9233, + "server", + "192.168.0.31> 250 Mail queued for delivery" + ], + [ + 9233, + "server", + "E-Mail für anna im Postfach gespeichert." + ], + [ + 9288, + "server", + "192.168.0.31< QUIT" + ], + [ + 9454, + "otherServer", + "Mail versendet an anna@filius.de" + ], + [ + 9454, + "otherServer", + "null" + ], + [ + 9454, + "otherServer", + "Verbindung zu 192.168.0.30:25 getrennt" + ], + [ + 9565, + "server", + "192.168.0.31> 221 Server beendet Verbindung." + ], + [ + 12000, + "client", + "call versendeEmail jemand@nirgendwo.de | | " + ], + [ + 12000, + "client", + "----" + ], + [ + 12524, + "client", + "Verbindung zu 192.168.0.30:25 hergestellt" + ], + [ + 12575, + "server", + "----" + ], + [ + 12797, + "server", + "192.168.0.20> 220 Willkommen bei filius.de" + ], + [ + 12853, + "server", + "192.168.0.20< HELO 192.168.0.20" + ], + [ + 13130, + "server", + "192.168.0.20> 250 Hello 192.168.0.20" + ], + [ + 13185, + "server", + "192.168.0.20< MAIL FROM: " + ], + [ + 13462, + "server", + "192.168.0.20> 250 Sender OK" + ], + [ + 13517, + "server", + "192.168.0.20< RCPT TO:" + ], + [ + 13794, + "server", + "192.168.0.20> 250 Recipient OK" + ], + [ + 13849, + "server", + "192.168.0.20< DATA" + ], + [ + 14126, + "server", + "192.168.0.20> 354 End data with ." + ], + [ + 14182, + "server", + "192.168.0.20< From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" + ], + [ + 14459, + "server", + "192.168.0.20> 250 Mail queued for delivery" + ], + [ + 14514, + "server", + "192.168.0.20< QUIT" + ], + [ + 14681, + "client", + "Mail versendet an jemand@nirgendwo.de" + ], + [ + 14681, + "client", + "null" + ], + [ + 14681, + "client", + "Verbindung zu 192.168.0.30:25 getrennt" + ], + [ + 14683, + "server", + "E-Mail für anna im Postfach gespeichert." + ], + [ + 14792, + "server", + "192.168.0.20> 221 Server beendet Verbindung." + ], + [ + 25000, + "client", + "call emailsAbholenEmails" + ], + [ + 25639, + "server", + "----" + ], + [ + 25639, + "server", + "192.168.0.20> +OK POP3 server ready" + ], + [ + 25916, + "server", + "192.168.0.20< USER anna" + ], + [ + 25917, + "server", + "192.168.0.20> +OK enter password" + ], + [ + 26248, + "server", + "192.168.0.20< PASS geheim" + ], + [ + 26249, + "server", + "192.168.0.20> +OK Mailbox locked and ready" + ], + [ + 26580, + "server", + "192.168.0.20< STAT" + ], + [ + 26582, + "server", + "192.168.0.20> +OK 4 1054" + ], + [ + 26912, + "server", + "192.168.0.20< LIST" + ], + [ + 26913, + "server", + "192.168.0.20> +OK 4 1054\n0 80\n1 89\n2 441\n3 444\n" + ], + [ + 27244, + "server", + "192.168.0.20< RETR 0" + ], + [ + 27245, + "server", + "192.168.0.20> +OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile" + ], + [ + 27576, + "server", + "192.168.0.20< DELE 0" + ], + [ + 27577, + "server", + "192.168.0.20> +OK message marked for delete" + ], + [ + 27909, + "server", + "192.168.0.20< RETR 1" + ], + [ + 27909, + "server", + "192.168.0.20> +OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?" + ], + [ + 28241, + "server", + "192.168.0.20< DELE 1" + ], + [ + 28241, + "server", + "192.168.0.20> +OK message marked for delete" + ], + [ + 28573, + "server", + "192.168.0.20< RETR 2" + ], + [ + 28574, + "server", + "192.168.0.20> +OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?" + ], + [ + 28905, + "server", + "192.168.0.20< DELE 2" + ], + [ + 28906, + "server", + "192.168.0.20> +OK message marked for delete" + ], + [ + 29237, + "server", + "192.168.0.20< RETR 3" + ], + [ + 29237, + "server", + "192.168.0.20> +OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009jemand@nirgendwo.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?" + ], + [ + 29569, + "server", + "192.168.0.20< DELE 3" + ], + [ + 29569, + "server", + "192.168.0.20> +OK message marked for delete" + ], + [ + 29901, + "server", + "192.168.0.20< QUIT" + ], + [ + 29901, + "server", + "null" + ], + [ + 29901, + "server", + "192.168.0.20> +OK" + ], + [ + 30067, + "client", + "null" + ] + ], + "inbox": [ + [ + "From: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile", + "true", + "false" + ], + [ + "From: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?", + "true", + "false" + ], + [ + "From: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?", + "true", + "false" + ], + [ + "From: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009jemand@nirgendwo.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?", + "true", + "false" + ] + ], + "sent": [ + [ + "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?", + "true", + "false" + ], + [ + "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?", + "true", + "false" + ] + ], + "accounts": [ + [ + "anna", + [] + ], + [ + "bob", + [] + ] + ], + "otherAccounts": [ + [ + "carla", + [] + ] + ] +} diff --git a/packages/core/test/scenarios/email-client-java-fetch.java.json b/packages/core/test/scenarios/email-client-java-fetch.java.json new file mode 100644 index 0000000..7229447 --- /dev/null +++ b/packages/core/test/scenarios/email-client-java-fetch.java.json @@ -0,0 +1,6621 @@ +{ + "frames": { + "00000000-0000-0000-0000-000000000201": [ + { + "time": 517, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + }, + { + "time": 750, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "arp": 2, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.20" + }, + { + "time": 753, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "S", + "sequence": 5000000, + "acknowledgement": 0 + }, + { + "time": 980, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": null, + "tcpFlags": "SA", + "sequence": 1000000, + "acknowledgement": 5000001 + }, + { + "time": 981, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000001, + "acknowledgement": 1000001 + }, + { + "time": 1229, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": "+OK POP3 server ready", + "tcpFlags": "P", + "sequence": 1000001, + "acknowledgement": 0 + }, + { + "time": 1230, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000001, + "acknowledgement": 1000022 + }, + { + "time": 1285, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": "USER anna", + "tcpFlags": "P", + "sequence": 5000001, + "acknowledgement": 0 + }, + { + "time": 1508, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": null, + "tcpFlags": "A", + "sequence": 1000022, + "acknowledgement": 5000010 + }, + { + "time": 1563, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": "+OK enter password", + "tcpFlags": "P", + "sequence": 1000022, + "acknowledgement": 0 + }, + { + "time": 1564, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000010, + "acknowledgement": 1000040 + }, + { + "time": 1619, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": "PASS geheim", + "tcpFlags": "P", + "sequence": 5000010, + "acknowledgement": 0 + }, + { + "time": 1842, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": null, + "tcpFlags": "A", + "sequence": 1000040, + "acknowledgement": 5000021 + }, + { + "time": 1898, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": "+OK Mailbox locked and ready", + "tcpFlags": "P", + "sequence": 1000040, + "acknowledgement": 0 + }, + { + "time": 1898, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000021, + "acknowledgement": 1000068 + }, + { + "time": 1953, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": "STAT", + "tcpFlags": "P", + "sequence": 5000021, + "acknowledgement": 0 + }, + { + "time": 2176, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": null, + "tcpFlags": "A", + "sequence": 1000068, + "acknowledgement": 5000025 + }, + { + "time": 2232, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": "+OK 2 169", + "tcpFlags": "P", + "sequence": 1000068, + "acknowledgement": 0 + }, + { + "time": 2232, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000025, + "acknowledgement": 1000077 + }, + { + "time": 2287, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": "LIST", + "tcpFlags": "P", + "sequence": 5000025, + "acknowledgement": 0 + }, + { + "time": 2510, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": null, + "tcpFlags": "A", + "sequence": 1000077, + "acknowledgement": 5000029 + }, + { + "time": 2566, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": "+OK 2 169\n0 80\n1 89\n", + "tcpFlags": "P", + "sequence": 1000077, + "acknowledgement": 0 + }, + { + "time": 2566, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000029, + "acknowledgement": 1000097 + }, + { + "time": 2621, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": "RETR 0", + "tcpFlags": "P", + "sequence": 5000029, + "acknowledgement": 0 + }, + { + "time": 2844, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": null, + "tcpFlags": "A", + "sequence": 1000097, + "acknowledgement": 5000035 + }, + { + "time": 2899, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": "+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile", + "tcpFlags": "P", + "sequence": 1000097, + "acknowledgement": 0 + }, + { + "time": 2899, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000035, + "acknowledgement": 1000219 + }, + { + "time": 2955, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": "DELE 0", + "tcpFlags": "P", + "sequence": 5000035, + "acknowledgement": 0 + }, + { + "time": 3178, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": null, + "tcpFlags": "A", + "sequence": 1000219, + "acknowledgement": 5000041 + }, + { + "time": 3233, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": "+OK message marked for delete", + "tcpFlags": "P", + "sequence": 1000219, + "acknowledgement": 0 + }, + { + "time": 3234, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000041, + "acknowledgement": 1000248 + }, + { + "time": 3289, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": "RETR 1", + "tcpFlags": "P", + "sequence": 5000041, + "acknowledgement": 0 + }, + { + "time": 3512, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": null, + "tcpFlags": "A", + "sequence": 1000248, + "acknowledgement": 5000047 + }, + { + "time": 3567, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": "+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?", + "tcpFlags": "P", + "sequence": 1000248, + "acknowledgement": 0 + }, + { + "time": 3567, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000047, + "acknowledgement": 1000400 + }, + { + "time": 3623, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": "DELE 1", + "tcpFlags": "P", + "sequence": 5000047, + "acknowledgement": 0 + }, + { + "time": 3844, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": null, + "tcpFlags": "A", + "sequence": 1000400, + "acknowledgement": 5000053 + }, + { + "time": 3900, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": "+OK message marked for delete", + "tcpFlags": "P", + "sequence": 1000400, + "acknowledgement": 0 + }, + { + "time": 3900, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000053, + "acknowledgement": 1000429 + }, + { + "time": 3955, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": "QUIT", + "tcpFlags": "P", + "sequence": 5000053, + "acknowledgement": 0 + }, + { + "time": 4177, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": null, + "tcpFlags": "A", + "sequence": 1000429, + "acknowledgement": 5000057 + }, + { + "time": 4232, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": "+OK", + "tcpFlags": "P", + "sequence": 1000429, + "acknowledgement": 0 + }, + { + "time": 4232, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000057, + "acknowledgement": 1000432 + }, + { + "time": 4287, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "F", + "sequence": 5000057, + "acknowledgement": 0 + }, + { + "time": 4454, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": null, + "tcpFlags": "F", + "sequence": 1000432, + "acknowledgement": 0 + }, + { + "time": 4454, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000058, + "acknowledgement": 1000433 + }, + { + "time": 4509, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": null, + "tcpFlags": "A", + "sequence": 1000433, + "acknowledgement": 5000058 + } + ], + "00000000-0000-0000-0000-000000000202": [ + { + "time": 638, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + } + ], + "00000000-0000-0000-0000-000000000203": [ + { + "time": 638, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + }, + { + "time": 639, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "arp": 2, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.20" + }, + { + "time": 867, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "S", + "sequence": 5000000, + "acknowledgement": 0 + }, + { + "time": 869, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": null, + "tcpFlags": "SA", + "sequence": 1000000, + "acknowledgement": 5000001 + }, + { + "time": 1092, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000001, + "acknowledgement": 1000001 + }, + { + "time": 1118, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": "+OK POP3 server ready", + "tcpFlags": "P", + "sequence": 1000001, + "acknowledgement": 0 + }, + { + "time": 1341, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000001, + "acknowledgement": 1000022 + }, + { + "time": 1396, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": "USER anna", + "tcpFlags": "P", + "sequence": 5000001, + "acknowledgement": 0 + }, + { + "time": 1397, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": null, + "tcpFlags": "A", + "sequence": 1000022, + "acknowledgement": 5000010 + }, + { + "time": 1452, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": "+OK enter password", + "tcpFlags": "P", + "sequence": 1000022, + "acknowledgement": 0 + }, + { + "time": 1675, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000010, + "acknowledgement": 1000040 + }, + { + "time": 1730, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": "PASS geheim", + "tcpFlags": "P", + "sequence": 5000010, + "acknowledgement": 0 + }, + { + "time": 1731, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": null, + "tcpFlags": "A", + "sequence": 1000040, + "acknowledgement": 5000021 + }, + { + "time": 1786, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": "+OK Mailbox locked and ready", + "tcpFlags": "P", + "sequence": 1000040, + "acknowledgement": 0 + }, + { + "time": 2009, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000021, + "acknowledgement": 1000068 + }, + { + "time": 2065, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": "STAT", + "tcpFlags": "P", + "sequence": 5000021, + "acknowledgement": 0 + }, + { + "time": 2065, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": null, + "tcpFlags": "A", + "sequence": 1000068, + "acknowledgement": 5000025 + }, + { + "time": 2120, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": "+OK 2 169", + "tcpFlags": "P", + "sequence": 1000068, + "acknowledgement": 0 + }, + { + "time": 2343, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000025, + "acknowledgement": 1000077 + }, + { + "time": 2398, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": "LIST", + "tcpFlags": "P", + "sequence": 5000025, + "acknowledgement": 0 + }, + { + "time": 2399, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": null, + "tcpFlags": "A", + "sequence": 1000077, + "acknowledgement": 5000029 + }, + { + "time": 2455, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": "+OK 2 169\n0 80\n1 89\n", + "tcpFlags": "P", + "sequence": 1000077, + "acknowledgement": 0 + }, + { + "time": 2677, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000029, + "acknowledgement": 1000097 + }, + { + "time": 2732, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": "RETR 0", + "tcpFlags": "P", + "sequence": 5000029, + "acknowledgement": 0 + }, + { + "time": 2733, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": null, + "tcpFlags": "A", + "sequence": 1000097, + "acknowledgement": 5000035 + }, + { + "time": 2788, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": "+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile", + "tcpFlags": "P", + "sequence": 1000097, + "acknowledgement": 0 + }, + { + "time": 3011, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000035, + "acknowledgement": 1000219 + }, + { + "time": 3066, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": "DELE 0", + "tcpFlags": "P", + "sequence": 5000035, + "acknowledgement": 0 + }, + { + "time": 3067, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": null, + "tcpFlags": "A", + "sequence": 1000219, + "acknowledgement": 5000041 + }, + { + "time": 3122, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": "+OK message marked for delete", + "tcpFlags": "P", + "sequence": 1000219, + "acknowledgement": 0 + }, + { + "time": 3345, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000041, + "acknowledgement": 1000248 + }, + { + "time": 3400, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": "RETR 1", + "tcpFlags": "P", + "sequence": 5000041, + "acknowledgement": 0 + }, + { + "time": 3401, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": null, + "tcpFlags": "A", + "sequence": 1000248, + "acknowledgement": 5000047 + }, + { + "time": 3456, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": "+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?", + "tcpFlags": "P", + "sequence": 1000248, + "acknowledgement": 0 + }, + { + "time": 3678, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000047, + "acknowledgement": 1000400 + }, + { + "time": 3733, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": "DELE 1", + "tcpFlags": "P", + "sequence": 5000047, + "acknowledgement": 0 + }, + { + "time": 3734, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": null, + "tcpFlags": "A", + "sequence": 1000400, + "acknowledgement": 5000053 + }, + { + "time": 3789, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": "+OK message marked for delete", + "tcpFlags": "P", + "sequence": 1000400, + "acknowledgement": 0 + }, + { + "time": 4010, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000053, + "acknowledgement": 1000429 + }, + { + "time": 4066, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": "QUIT", + "tcpFlags": "P", + "sequence": 5000053, + "acknowledgement": 0 + }, + { + "time": 4066, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": null, + "tcpFlags": "A", + "sequence": 1000429, + "acknowledgement": 5000057 + }, + { + "time": 4121, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": "+OK", + "tcpFlags": "P", + "sequence": 1000429, + "acknowledgement": 0 + }, + { + "time": 4343, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000057, + "acknowledgement": 1000432 + }, + { + "time": 4343, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": null, + "tcpFlags": "F", + "sequence": 1000432, + "acknowledgement": 0 + }, + { + "time": 4398, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "F", + "sequence": 5000057, + "acknowledgement": 0 + }, + { + "time": 4399, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 62384, + "payload": null, + "tcpFlags": "A", + "sequence": 1000433, + "acknowledgement": 5000058 + }, + { + "time": 4565, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 62384, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000058, + "acknowledgement": 1000433 + } + ], + "00000000-0000-0000-0000-000000000204": [ + { + "time": 638, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + } + ] + }, + "rows": { + "00000000-0000-0000-0000-000000000201": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "2", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000" + ], + [ + "4", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SYN, SEQ: 1.000.000, ACK: 5.000.001" + ], + [ + "5", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 1.000.001" + ], + [ + "6", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.001" + ], + [ + "6", + "192.168.0.30:110", + "192.168.0.20:62384", + "POP3", + "Anwendung", + "+OK POP3 server ready" + ], + [ + "7", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 1.000.022" + ], + [ + "8", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.001" + ], + [ + "8", + "192.168.0.20:62384", + "192.168.0.30:110", + "POP3", + "Anwendung", + "USER anna" + ], + [ + "9", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.022, ACK: 5.000.010" + ], + [ + "10", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.022" + ], + [ + "10", + "192.168.0.30:110", + "192.168.0.20:62384", + "POP3", + "Anwendung", + "+OK enter password" + ], + [ + "11", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.010, ACK: 1.000.040" + ], + [ + "12", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.010" + ], + [ + "12", + "192.168.0.20:62384", + "192.168.0.30:110", + "POP3", + "Anwendung", + "PASS geheim" + ], + [ + "13", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.040, ACK: 5.000.021" + ], + [ + "14", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.040" + ], + [ + "14", + "192.168.0.30:110", + "192.168.0.20:62384", + "POP3", + "Anwendung", + "+OK Mailbox locked and ready" + ], + [ + "15", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.021, ACK: 1.000.068" + ], + [ + "16", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.021" + ], + [ + "16", + "192.168.0.20:62384", + "192.168.0.30:110", + "", + "Anwendung", + "STAT" + ], + [ + "17", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.068, ACK: 5.000.025" + ], + [ + "18", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.068" + ], + [ + "18", + "192.168.0.30:110", + "192.168.0.20:62384", + "POP3", + "Anwendung", + "+OK 2 169" + ], + [ + "19", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.025, ACK: 1.000.077" + ], + [ + "20", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "20", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.025" + ], + [ + "20", + "192.168.0.20:62384", + "192.168.0.30:110", + "", + "Anwendung", + "LIST" + ], + [ + "21", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.077, ACK: 5.000.029" + ], + [ + "22", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.077" + ], + [ + "22", + "192.168.0.30:110", + "192.168.0.20:62384", + "POP3", + "Anwendung", + "+OK 2 169\n0 80\n1 89\n" + ], + [ + "23", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "23", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.029, ACK: 1.000.097" + ], + [ + "24", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "24", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.029" + ], + [ + "24", + "192.168.0.20:62384", + "192.168.0.30:110", + "POP3", + "Anwendung", + "RETR 0" + ], + [ + "25", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "25", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.097, ACK: 5.000.035" + ], + [ + "26", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.097" + ], + [ + "26", + "192.168.0.30:110", + "192.168.0.20:62384", + "POP3", + "Anwendung", + "+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile" + ], + [ + "27", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.035, ACK: 1.000.219" + ], + [ + "28", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "28", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.035" + ], + [ + "28", + "192.168.0.20:62384", + "192.168.0.30:110", + "POP3", + "Anwendung", + "DELE 0" + ], + [ + "29", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "29", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.219, ACK: 5.000.041" + ], + [ + "30", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "30", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.219" + ], + [ + "30", + "192.168.0.30:110", + "192.168.0.20:62384", + "POP3", + "Anwendung", + "+OK message marked for delete" + ], + [ + "31", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "31", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.041, ACK: 1.000.248" + ], + [ + "32", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "32", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.041" + ], + [ + "32", + "192.168.0.20:62384", + "192.168.0.30:110", + "POP3", + "Anwendung", + "RETR 1" + ], + [ + "33", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "33", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "33", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.248, ACK: 5.000.047" + ], + [ + "34", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "34", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.248" + ], + [ + "34", + "192.168.0.30:110", + "192.168.0.20:62384", + "POP3", + "Anwendung", + "+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?" + ], + [ + "35", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "35", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.047, ACK: 1.000.400" + ], + [ + "36", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "36", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "36", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.047" + ], + [ + "36", + "192.168.0.20:62384", + "192.168.0.30:110", + "POP3", + "Anwendung", + "DELE 1" + ], + [ + "37", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.400, ACK: 5.000.053" + ], + [ + "38", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "38", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.400" + ], + [ + "38", + "192.168.0.30:110", + "192.168.0.20:62384", + "POP3", + "Anwendung", + "+OK message marked for delete" + ], + [ + "39", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "39", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.053, ACK: 1.000.429" + ], + [ + "40", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "40", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "40", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.053" + ], + [ + "40", + "192.168.0.20:62384", + "192.168.0.30:110", + "POP3", + "Anwendung", + "QUIT" + ], + [ + "41", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "41", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "41", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.429, ACK: 5.000.057" + ], + [ + "42", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "42", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "42", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.429" + ], + [ + "42", + "192.168.0.30:110", + "192.168.0.20:62384", + "POP3", + "Anwendung", + "+OK" + ], + [ + "43", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "43", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.057, ACK: 1.000.432" + ], + [ + "44", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "44", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "FIN, SEQ: 5.000.057" + ], + [ + "45", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "45", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "FIN, SEQ: 1.000.432" + ], + [ + "46", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "46", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.058, ACK: 1.000.433" + ], + [ + "47", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "47", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.433, ACK: 5.000.058" + ] + ], + "00000000-0000-0000-0000-000000000202": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ] + ], + "00000000-0000-0000-0000-000000000203": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "2", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000" + ], + [ + "4", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SYN, SEQ: 1.000.000, ACK: 5.000.001" + ], + [ + "5", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 1.000.001" + ], + [ + "6", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.001" + ], + [ + "6", + "192.168.0.30:110", + "192.168.0.20:62384", + "POP3", + "Anwendung", + "+OK POP3 server ready" + ], + [ + "7", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 1.000.022" + ], + [ + "8", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.001" + ], + [ + "8", + "192.168.0.20:62384", + "192.168.0.30:110", + "POP3", + "Anwendung", + "USER anna" + ], + [ + "9", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.022, ACK: 5.000.010" + ], + [ + "10", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.022" + ], + [ + "10", + "192.168.0.30:110", + "192.168.0.20:62384", + "POP3", + "Anwendung", + "+OK enter password" + ], + [ + "11", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.010, ACK: 1.000.040" + ], + [ + "12", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.010" + ], + [ + "12", + "192.168.0.20:62384", + "192.168.0.30:110", + "POP3", + "Anwendung", + "PASS geheim" + ], + [ + "13", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.040, ACK: 5.000.021" + ], + [ + "14", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.040" + ], + [ + "14", + "192.168.0.30:110", + "192.168.0.20:62384", + "POP3", + "Anwendung", + "+OK Mailbox locked and ready" + ], + [ + "15", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.021, ACK: 1.000.068" + ], + [ + "16", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.021" + ], + [ + "16", + "192.168.0.20:62384", + "192.168.0.30:110", + "", + "Anwendung", + "STAT" + ], + [ + "17", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.068, ACK: 5.000.025" + ], + [ + "18", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.068" + ], + [ + "18", + "192.168.0.30:110", + "192.168.0.20:62384", + "POP3", + "Anwendung", + "+OK 2 169" + ], + [ + "19", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.025, ACK: 1.000.077" + ], + [ + "20", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "20", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.025" + ], + [ + "20", + "192.168.0.20:62384", + "192.168.0.30:110", + "", + "Anwendung", + "LIST" + ], + [ + "21", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.077, ACK: 5.000.029" + ], + [ + "22", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.077" + ], + [ + "22", + "192.168.0.30:110", + "192.168.0.20:62384", + "POP3", + "Anwendung", + "+OK 2 169\n0 80\n1 89\n" + ], + [ + "23", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "23", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.029, ACK: 1.000.097" + ], + [ + "24", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "24", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.029" + ], + [ + "24", + "192.168.0.20:62384", + "192.168.0.30:110", + "POP3", + "Anwendung", + "RETR 0" + ], + [ + "25", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "25", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.097, ACK: 5.000.035" + ], + [ + "26", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.097" + ], + [ + "26", + "192.168.0.30:110", + "192.168.0.20:62384", + "POP3", + "Anwendung", + "+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile" + ], + [ + "27", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.035, ACK: 1.000.219" + ], + [ + "28", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "28", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.035" + ], + [ + "28", + "192.168.0.20:62384", + "192.168.0.30:110", + "POP3", + "Anwendung", + "DELE 0" + ], + [ + "29", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "29", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.219, ACK: 5.000.041" + ], + [ + "30", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "30", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.219" + ], + [ + "30", + "192.168.0.30:110", + "192.168.0.20:62384", + "POP3", + "Anwendung", + "+OK message marked for delete" + ], + [ + "31", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "31", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.041, ACK: 1.000.248" + ], + [ + "32", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "32", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.041" + ], + [ + "32", + "192.168.0.20:62384", + "192.168.0.30:110", + "POP3", + "Anwendung", + "RETR 1" + ], + [ + "33", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "33", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "33", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.248, ACK: 5.000.047" + ], + [ + "34", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "34", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.248" + ], + [ + "34", + "192.168.0.30:110", + "192.168.0.20:62384", + "POP3", + "Anwendung", + "+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?" + ], + [ + "35", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "35", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.047, ACK: 1.000.400" + ], + [ + "36", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "36", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "36", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.047" + ], + [ + "36", + "192.168.0.20:62384", + "192.168.0.30:110", + "POP3", + "Anwendung", + "DELE 1" + ], + [ + "37", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.400, ACK: 5.000.053" + ], + [ + "38", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "38", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.400" + ], + [ + "38", + "192.168.0.30:110", + "192.168.0.20:62384", + "POP3", + "Anwendung", + "+OK message marked for delete" + ], + [ + "39", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "39", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.053, ACK: 1.000.429" + ], + [ + "40", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "40", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "40", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.053" + ], + [ + "40", + "192.168.0.20:62384", + "192.168.0.30:110", + "POP3", + "Anwendung", + "QUIT" + ], + [ + "41", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "41", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "41", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.429, ACK: 5.000.057" + ], + [ + "42", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "42", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "42", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.429" + ], + [ + "42", + "192.168.0.30:110", + "192.168.0.20:62384", + "POP3", + "Anwendung", + "+OK" + ], + [ + "43", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "43", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.057, ACK: 1.000.432" + ], + [ + "44", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "44", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "FIN, SEQ: 1.000.432" + ], + [ + "45", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "45", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "FIN, SEQ: 5.000.057" + ], + [ + "46", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "46", + "192.168.0.30:110", + "192.168.0.20:62384", + "TCP", + "Transport", + "SEQ: 1.000.433, ACK: 5.000.058" + ], + [ + "47", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "47", + "192.168.0.20:62384", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.058, ACK: 1.000.433" + ] + ], + "00000000-0000-0000-0000-000000000204": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ] + ] + }, + "layeredRows": { + "00000000-0000-0000-0000-000000000201": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "2", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "62384", + "110", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000" + ], + [ + "4", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "110", + "62384", + "TCP", + "Transport", + "SYN, SEQ: 1.000.000, ACK: 5.000.001" + ], + [ + "5", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 1.000.001" + ], + [ + "6", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.001" + ], + [ + "6", + null, + null, + "POP3", + "Anwendung", + "+OK POP3 server ready" + ], + [ + "7", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 1.000.022" + ], + [ + "8", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.001" + ], + [ + "8", + null, + null, + "POP3", + "Anwendung", + "USER anna" + ], + [ + "9", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.022, ACK: 5.000.010" + ], + [ + "10", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.022" + ], + [ + "10", + null, + null, + "POP3", + "Anwendung", + "+OK enter password" + ], + [ + "11", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.010, ACK: 1.000.040" + ], + [ + "12", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.010" + ], + [ + "12", + null, + null, + "POP3", + "Anwendung", + "PASS geheim" + ], + [ + "13", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.040, ACK: 5.000.021" + ], + [ + "14", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.040" + ], + [ + "14", + null, + null, + "POP3", + "Anwendung", + "+OK Mailbox locked and ready" + ], + [ + "15", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.021, ACK: 1.000.068" + ], + [ + "16", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.021" + ], + [ + "16", + null, + null, + "", + "Anwendung", + "STAT" + ], + [ + "17", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.068, ACK: 5.000.025" + ], + [ + "18", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.068" + ], + [ + "18", + null, + null, + "POP3", + "Anwendung", + "+OK 2 169" + ], + [ + "19", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.025, ACK: 1.000.077" + ], + [ + "20", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "20", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.025" + ], + [ + "20", + null, + null, + "", + "Anwendung", + "LIST" + ], + [ + "21", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.077, ACK: 5.000.029" + ], + [ + "22", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.077" + ], + [ + "22", + null, + null, + "POP3", + "Anwendung", + "+OK 2 169\n0 80\n1 89\n" + ], + [ + "23", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "23", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.029, ACK: 1.000.097" + ], + [ + "24", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "24", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.029" + ], + [ + "24", + null, + null, + "POP3", + "Anwendung", + "RETR 0" + ], + [ + "25", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "25", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.097, ACK: 5.000.035" + ], + [ + "26", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.097" + ], + [ + "26", + null, + null, + "POP3", + "Anwendung", + "+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile" + ], + [ + "27", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.035, ACK: 1.000.219" + ], + [ + "28", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "28", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.035" + ], + [ + "28", + null, + null, + "POP3", + "Anwendung", + "DELE 0" + ], + [ + "29", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "29", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.219, ACK: 5.000.041" + ], + [ + "30", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "30", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.219" + ], + [ + "30", + null, + null, + "POP3", + "Anwendung", + "+OK message marked for delete" + ], + [ + "31", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "31", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.041, ACK: 1.000.248" + ], + [ + "32", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "32", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.041" + ], + [ + "32", + null, + null, + "POP3", + "Anwendung", + "RETR 1" + ], + [ + "33", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "33", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "33", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.248, ACK: 5.000.047" + ], + [ + "34", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "34", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.248" + ], + [ + "34", + null, + null, + "POP3", + "Anwendung", + "+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?" + ], + [ + "35", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "35", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.047, ACK: 1.000.400" + ], + [ + "36", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "36", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "36", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.047" + ], + [ + "36", + null, + null, + "POP3", + "Anwendung", + "DELE 1" + ], + [ + "37", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.400, ACK: 5.000.053" + ], + [ + "38", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "38", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.400" + ], + [ + "38", + null, + null, + "POP3", + "Anwendung", + "+OK message marked for delete" + ], + [ + "39", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "39", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.053, ACK: 1.000.429" + ], + [ + "40", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "40", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "40", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.053" + ], + [ + "40", + null, + null, + "POP3", + "Anwendung", + "QUIT" + ], + [ + "41", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "41", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "41", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.429, ACK: 5.000.057" + ], + [ + "42", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "42", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "42", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.429" + ], + [ + "42", + null, + null, + "POP3", + "Anwendung", + "+OK" + ], + [ + "43", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "43", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.057, ACK: 1.000.432" + ], + [ + "44", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "44", + "62384", + "110", + "TCP", + "Transport", + "FIN, SEQ: 5.000.057" + ], + [ + "45", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "45", + "110", + "62384", + "TCP", + "Transport", + "FIN, SEQ: 1.000.432" + ], + [ + "46", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "46", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.058, ACK: 1.000.433" + ], + [ + "47", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "47", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.433, ACK: 5.000.058" + ] + ], + "00000000-0000-0000-0000-000000000202": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ] + ], + "00000000-0000-0000-0000-000000000203": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "2", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "62384", + "110", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000" + ], + [ + "4", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "110", + "62384", + "TCP", + "Transport", + "SYN, SEQ: 1.000.000, ACK: 5.000.001" + ], + [ + "5", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 1.000.001" + ], + [ + "6", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.001" + ], + [ + "6", + null, + null, + "POP3", + "Anwendung", + "+OK POP3 server ready" + ], + [ + "7", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 1.000.022" + ], + [ + "8", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.001" + ], + [ + "8", + null, + null, + "POP3", + "Anwendung", + "USER anna" + ], + [ + "9", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.022, ACK: 5.000.010" + ], + [ + "10", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.022" + ], + [ + "10", + null, + null, + "POP3", + "Anwendung", + "+OK enter password" + ], + [ + "11", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.010, ACK: 1.000.040" + ], + [ + "12", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.010" + ], + [ + "12", + null, + null, + "POP3", + "Anwendung", + "PASS geheim" + ], + [ + "13", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.040, ACK: 5.000.021" + ], + [ + "14", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.040" + ], + [ + "14", + null, + null, + "POP3", + "Anwendung", + "+OK Mailbox locked and ready" + ], + [ + "15", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.021, ACK: 1.000.068" + ], + [ + "16", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.021" + ], + [ + "16", + null, + null, + "", + "Anwendung", + "STAT" + ], + [ + "17", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.068, ACK: 5.000.025" + ], + [ + "18", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.068" + ], + [ + "18", + null, + null, + "POP3", + "Anwendung", + "+OK 2 169" + ], + [ + "19", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.025, ACK: 1.000.077" + ], + [ + "20", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "20", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.025" + ], + [ + "20", + null, + null, + "", + "Anwendung", + "LIST" + ], + [ + "21", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.077, ACK: 5.000.029" + ], + [ + "22", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.077" + ], + [ + "22", + null, + null, + "POP3", + "Anwendung", + "+OK 2 169\n0 80\n1 89\n" + ], + [ + "23", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "23", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.029, ACK: 1.000.097" + ], + [ + "24", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "24", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.029" + ], + [ + "24", + null, + null, + "POP3", + "Anwendung", + "RETR 0" + ], + [ + "25", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "25", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.097, ACK: 5.000.035" + ], + [ + "26", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.097" + ], + [ + "26", + null, + null, + "POP3", + "Anwendung", + "+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile" + ], + [ + "27", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.035, ACK: 1.000.219" + ], + [ + "28", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "28", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.035" + ], + [ + "28", + null, + null, + "POP3", + "Anwendung", + "DELE 0" + ], + [ + "29", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "29", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.219, ACK: 5.000.041" + ], + [ + "30", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "30", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.219" + ], + [ + "30", + null, + null, + "POP3", + "Anwendung", + "+OK message marked for delete" + ], + [ + "31", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "31", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.041, ACK: 1.000.248" + ], + [ + "32", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "32", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.041" + ], + [ + "32", + null, + null, + "POP3", + "Anwendung", + "RETR 1" + ], + [ + "33", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "33", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "33", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.248, ACK: 5.000.047" + ], + [ + "34", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "34", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.248" + ], + [ + "34", + null, + null, + "POP3", + "Anwendung", + "+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?" + ], + [ + "35", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "35", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.047, ACK: 1.000.400" + ], + [ + "36", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "36", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "36", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.047" + ], + [ + "36", + null, + null, + "POP3", + "Anwendung", + "DELE 1" + ], + [ + "37", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.400, ACK: 5.000.053" + ], + [ + "38", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "38", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.400" + ], + [ + "38", + null, + null, + "POP3", + "Anwendung", + "+OK message marked for delete" + ], + [ + "39", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "39", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.053, ACK: 1.000.429" + ], + [ + "40", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "40", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "40", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.053" + ], + [ + "40", + null, + null, + "POP3", + "Anwendung", + "QUIT" + ], + [ + "41", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "41", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "41", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.429, ACK: 5.000.057" + ], + [ + "42", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "42", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "42", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.429" + ], + [ + "42", + null, + null, + "POP3", + "Anwendung", + "+OK" + ], + [ + "43", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "43", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.057, ACK: 1.000.432" + ], + [ + "44", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "44", + "110", + "62384", + "TCP", + "Transport", + "FIN, SEQ: 1.000.432" + ], + [ + "45", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "45", + "62384", + "110", + "TCP", + "Transport", + "FIN, SEQ: 5.000.057" + ], + [ + "46", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "46", + "110", + "62384", + "TCP", + "Transport", + "SEQ: 1.000.433, ACK: 5.000.058" + ], + [ + "47", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "47", + "62384", + "110", + "TCP", + "Transport", + "SEQ: 5.000.058, ACK: 1.000.433" + ] + ], + "00000000-0000-0000-0000-000000000204": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ] + ] + }, + "events": [ + [ + 210, + "client", + "null" + ], + [ + 212, + "server", + "null" + ], + [ + 216, + "otherServer", + "null" + ], + [ + 500, + "client", + "call emailsAbholenEmails" + ], + [ + 1117, + "server", + "----" + ], + [ + 1117, + "server", + "192.168.0.20> +OK POP3 server ready" + ], + [ + 1397, + "server", + "192.168.0.20< USER anna" + ], + [ + 1400, + "server", + "192.168.0.20> +OK enter password" + ], + [ + 1731, + "server", + "192.168.0.20< PASS geheim" + ], + [ + 1731, + "server", + "192.168.0.20> +OK Mailbox locked and ready" + ], + [ + 2065, + "server", + "192.168.0.20< STAT" + ], + [ + 2066, + "server", + "192.168.0.20> +OK 2 169" + ], + [ + 2399, + "server", + "192.168.0.20< LIST" + ], + [ + 2399, + "server", + "192.168.0.20> +OK 2 169\n0 80\n1 89\n" + ], + [ + 2732, + "server", + "192.168.0.20< RETR 0" + ], + [ + 2733, + "server", + "192.168.0.20> +OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile" + ], + [ + 3067, + "server", + "192.168.0.20< DELE 0" + ], + [ + 3070, + "server", + "192.168.0.20> +OK message marked for delete" + ], + [ + 3401, + "server", + "192.168.0.20< RETR 1" + ], + [ + 3401, + "server", + "192.168.0.20> +OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?" + ], + [ + 3734, + "server", + "192.168.0.20< DELE 1" + ], + [ + 3734, + "server", + "192.168.0.20> +OK message marked for delete" + ], + [ + 4066, + "server", + "192.168.0.20< QUIT" + ], + [ + 4066, + "server", + "null" + ], + [ + 4066, + "server", + "192.168.0.20> +OK" + ], + [ + 4232, + "client", + "null" + ] + ], + "inbox": [ + [ + "From: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile", + "true", + "false" + ], + [ + "From: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?", + "true", + "false" + ] + ], + "sent": [], + "accounts": [ + [ + "anna", + [] + ], + [ + "bob", + [] + ] + ], + "otherAccounts": [ + [ + "carla", + [] + ] + ] +} diff --git a/packages/core/test/scenarios/email-client-java-noServer.java.json b/packages/core/test/scenarios/email-client-java-noServer.java.json new file mode 100644 index 0000000..78626ec --- /dev/null +++ b/packages/core/test/scenarios/email-client-java-noServer.java.json @@ -0,0 +1,457 @@ +{ + "frames": { + "00000000-0000-0000-0000-000000000201": [ + { + "time": 518, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 756, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:11", + "arp": 2, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.20" + }, + { + "time": 758, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 6, + "sourcePort": 56629, + "destinationPort": 25, + "payload": null, + "tcpFlags": "S", + "sequence": 5000000, + "acknowledgement": 0 + } + ], + "00000000-0000-0000-0000-000000000202": [ + { + "time": 642, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 644, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:11", + "arp": 2, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.20" + }, + { + "time": 872, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 6, + "sourcePort": 56629, + "destinationPort": 25, + "payload": null, + "tcpFlags": "S", + "sequence": 5000000, + "acknowledgement": 0 + } + ], + "00000000-0000-0000-0000-000000000203": [ + { + "time": 642, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + } + ], + "00000000-0000-0000-0000-000000000204": [ + { + "time": 642, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + } + ] + }, + "rows": { + "00000000-0000-0000-0000-000000000201": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:02:11", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "192.168.0.20:56629", + "192.168.0.10:25", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000" + ] + ], + "00000000-0000-0000-0000-000000000202": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:02:11", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "192.168.0.20:56629", + "192.168.0.10:25", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000" + ] + ], + "00000000-0000-0000-0000-000000000203": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ] + ], + "00000000-0000-0000-0000-000000000204": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ] + ] + }, + "layeredRows": { + "00000000-0000-0000-0000-000000000201": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:02:11", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "56629", + "25", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000" + ] + ], + "00000000-0000-0000-0000-000000000202": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:02:11", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "56629", + "25", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000" + ] + ], + "00000000-0000-0000-0000-000000000203": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ] + ], + "00000000-0000-0000-0000-000000000204": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ] + ] + }, + "events": [ + [ + 212, + "client", + "null" + ], + [ + 214, + "server", + "null" + ], + [ + 218, + "otherServer", + "null" + ], + [ + 500, + "client", + "call versendeEmail bob@filius.de | | " + ], + [ + 503, + "client", + "----" + ], + [ + 8810, + "client", + "filius.exception.TimeOutException: Zeitüberschreitung beim Verbindungsaufbau" + ] + ], + "inbox": [], + "sent": [], + "accounts": [ + [ + "anna", + [ + [ + "From: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile", + "true", + "false" + ], + [ + "From: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?", + "true", + "false" + ] + ] + ], + [ + "bob", + [] + ] + ], + "otherAccounts": [ + [ + "carla", + [] + ] + ] +} diff --git a/packages/core/test/scenarios/email-client-java-send.java.json b/packages/core/test/scenarios/email-client-java-send.java.json new file mode 100644 index 0000000..bae70ae --- /dev/null +++ b/packages/core/test/scenarios/email-client-java-send.java.json @@ -0,0 +1,14940 @@ +{ + "frames": { + "00000000-0000-0000-0000-000000000201": [ + { + "time": 519, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + }, + { + "time": 749, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "arp": 2, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.20" + }, + { + "time": 752, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": null, + "tcpFlags": "S", + "sequence": 5000000, + "acknowledgement": 0 + }, + { + "time": 979, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": null, + "tcpFlags": "SA", + "sequence": 2000000, + "acknowledgement": 5000001 + }, + { + "time": 980, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000001, + "acknowledgement": 2000001 + }, + { + "time": 1232, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": "220 Willkommen bei filius.de", + "tcpFlags": "P", + "sequence": 2000001, + "acknowledgement": 0 + }, + { + "time": 1232, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000001, + "acknowledgement": 2000029 + }, + { + "time": 1288, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": "HELO 192.168.0.20", + "tcpFlags": "P", + "sequence": 5000001, + "acknowledgement": 0 + }, + { + "time": 1510, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": null, + "tcpFlags": "A", + "sequence": 2000029, + "acknowledgement": 5000018 + }, + { + "time": 1566, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": "250 Hello 192.168.0.20", + "tcpFlags": "P", + "sequence": 2000029, + "acknowledgement": 0 + }, + { + "time": 1566, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000018, + "acknowledgement": 2000051 + }, + { + "time": 1622, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": "MAIL FROM: ", + "tcpFlags": "P", + "sequence": 5000018, + "acknowledgement": 0 + }, + { + "time": 1844, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": null, + "tcpFlags": "A", + "sequence": 2000051, + "acknowledgement": 5000045 + }, + { + "time": 1900, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": "250 Sender OK", + "tcpFlags": "P", + "sequence": 2000051, + "acknowledgement": 0 + }, + { + "time": 1900, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000045, + "acknowledgement": 2000064 + }, + { + "time": 1956, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": "RCPT TO:", + "tcpFlags": "P", + "sequence": 5000045, + "acknowledgement": 0 + }, + { + "time": 2179, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": null, + "tcpFlags": "A", + "sequence": 2000064, + "acknowledgement": 5000068 + }, + { + "time": 2234, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": "250 Recipient OK", + "tcpFlags": "P", + "sequence": 2000064, + "acknowledgement": 0 + }, + { + "time": 2235, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000068, + "acknowledgement": 2000080 + }, + { + "time": 2290, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": "DATA", + "tcpFlags": "P", + "sequence": 5000068, + "acknowledgement": 0 + }, + { + "time": 2513, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": null, + "tcpFlags": "A", + "sequence": 2000080, + "acknowledgement": 5000072 + }, + { + "time": 2568, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": "354 End data with .", + "tcpFlags": "P", + "sequence": 2000080, + "acknowledgement": 0 + }, + { + "time": 2569, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000072, + "acknowledgement": 2000115 + }, + { + "time": 2624, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": "From: Anna Muster \nTo: \nCc: Carla \nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n", + "tcpFlags": "P", + "sequence": 5000072, + "acknowledgement": 0 + }, + { + "time": 2847, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": null, + "tcpFlags": "A", + "sequence": 2000115, + "acknowledgement": 5000205 + }, + { + "time": 2902, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": "250 Mail queued for delivery", + "tcpFlags": "P", + "sequence": 2000115, + "acknowledgement": 0 + }, + { + "time": 2903, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000205, + "acknowledgement": 2000143 + }, + { + "time": 2958, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": "QUIT", + "tcpFlags": "P", + "sequence": 5000205, + "acknowledgement": 0 + }, + { + "time": 3180, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": null, + "tcpFlags": "A", + "sequence": 2000143, + "acknowledgement": 5000209 + }, + { + "time": 3236, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": "221 Server beendet Verbindung.", + "tcpFlags": "P", + "sequence": 2000143, + "acknowledgement": 0 + }, + { + "time": 3236, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000209, + "acknowledgement": 2000173 + }, + { + "time": 3291, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": null, + "tcpFlags": "F", + "sequence": 5000209, + "acknowledgement": 0 + }, + { + "time": 3347, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": null, + "tcpFlags": "S", + "sequence": 7000000, + "acknowledgement": 0 + }, + { + "time": 3458, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": null, + "tcpFlags": "F", + "sequence": 2000173, + "acknowledgement": 0 + }, + { + "time": 3458, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000210, + "acknowledgement": 2000174 + }, + { + "time": 3513, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": null, + "tcpFlags": "A", + "sequence": 2000174, + "acknowledgement": 5000210 + }, + { + "time": 3568, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": null, + "tcpFlags": "SA", + "sequence": 6000000, + "acknowledgement": 7000001 + }, + { + "time": 3569, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000001, + "acknowledgement": 6000001 + }, + { + "time": 3857, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": "220 Willkommen bei filius.de", + "tcpFlags": "P", + "sequence": 6000001, + "acknowledgement": 0 + }, + { + "time": 3857, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000001, + "acknowledgement": 6000029 + }, + { + "time": 3913, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": "HELO 192.168.0.20", + "tcpFlags": "P", + "sequence": 7000001, + "acknowledgement": 0 + }, + { + "time": 4135, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": null, + "tcpFlags": "A", + "sequence": 6000029, + "acknowledgement": 7000018 + }, + { + "time": 4190, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": "250 Hello 192.168.0.20", + "tcpFlags": "P", + "sequence": 6000029, + "acknowledgement": 0 + }, + { + "time": 4190, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000018, + "acknowledgement": 6000051 + }, + { + "time": 4246, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": "MAIL FROM: ", + "tcpFlags": "P", + "sequence": 7000018, + "acknowledgement": 0 + }, + { + "time": 4467, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": null, + "tcpFlags": "A", + "sequence": 6000051, + "acknowledgement": 7000045 + }, + { + "time": 4523, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": "250 Sender OK", + "tcpFlags": "P", + "sequence": 6000051, + "acknowledgement": 0 + }, + { + "time": 4523, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000045, + "acknowledgement": 6000064 + }, + { + "time": 4578, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": "RCPT TO:", + "tcpFlags": "P", + "sequence": 7000045, + "acknowledgement": 0 + }, + { + "time": 4800, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": null, + "tcpFlags": "A", + "sequence": 6000064, + "acknowledgement": 7000070 + }, + { + "time": 4855, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": "250 Recipient OK", + "tcpFlags": "P", + "sequence": 6000064, + "acknowledgement": 0 + }, + { + "time": 4856, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000070, + "acknowledgement": 6000080 + }, + { + "time": 4911, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": "DATA", + "tcpFlags": "P", + "sequence": 7000070, + "acknowledgement": 0 + }, + { + "time": 5133, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": null, + "tcpFlags": "A", + "sequence": 6000080, + "acknowledgement": 7000074 + }, + { + "time": 5188, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": "354 End data with .", + "tcpFlags": "P", + "sequence": 6000080, + "acknowledgement": 0 + }, + { + "time": 5188, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000074, + "acknowledgement": 6000115 + }, + { + "time": 5244, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": "From: Anna Muster \nTo: \nCc: Carla \nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n", + "tcpFlags": "P", + "sequence": 7000074, + "acknowledgement": 0 + }, + { + "time": 5466, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": null, + "tcpFlags": "A", + "sequence": 6000115, + "acknowledgement": 7000207 + }, + { + "time": 5521, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": "250 Mail queued for delivery", + "tcpFlags": "P", + "sequence": 6000115, + "acknowledgement": 0 + }, + { + "time": 5521, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000207, + "acknowledgement": 6000143 + }, + { + "time": 5577, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": "QUIT", + "tcpFlags": "P", + "sequence": 7000207, + "acknowledgement": 0 + }, + { + "time": 5749, + "source": "02:00:00:00:02:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.10" + }, + { + "time": 5804, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": null, + "tcpFlags": "A", + "sequence": 6000143, + "acknowledgement": 7000211 + }, + { + "time": 5860, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": "221 Server beendet Verbindung.", + "tcpFlags": "P", + "sequence": 6000143, + "acknowledgement": 0 + }, + { + "time": 5860, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000211, + "acknowledgement": 6000173 + }, + { + "time": 5915, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": null, + "tcpFlags": "F", + "sequence": 7000211, + "acknowledgement": 0 + }, + { + "time": 6081, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": null, + "tcpFlags": "F", + "sequence": 6000173, + "acknowledgement": 0 + }, + { + "time": 6082, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000212, + "acknowledgement": 6000174 + }, + { + "time": 6137, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": null, + "tcpFlags": "A", + "sequence": 6000174, + "acknowledgement": 7000212 + }, + { + "time": 6197, + "source": "02:00:00:00:02:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + } + ], + "00000000-0000-0000-0000-000000000202": [ + { + "time": 637, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + }, + { + "time": 5749, + "source": "02:00:00:00:02:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.10" + }, + { + "time": 5749, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:13", + "arp": 2, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.30" + }, + { + "time": 5971, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:12", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 65069, + "destinationPort": 53, + "payload": "ID=27146 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n" + }, + { + "time": 5975, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.30", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 65069, + "payload": "ID=27146 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n" + }, + { + "time": 6197, + "source": "02:00:00:00:02:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + } + ], + "00000000-0000-0000-0000-000000000203": [ + { + "time": 637, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + }, + { + "time": 638, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "arp": 2, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.20" + }, + { + "time": 865, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": null, + "tcpFlags": "S", + "sequence": 5000000, + "acknowledgement": 0 + }, + { + "time": 868, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": null, + "tcpFlags": "SA", + "sequence": 2000000, + "acknowledgement": 5000001 + }, + { + "time": 1091, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000001, + "acknowledgement": 2000001 + }, + { + "time": 1120, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": "220 Willkommen bei filius.de", + "tcpFlags": "P", + "sequence": 2000001, + "acknowledgement": 0 + }, + { + "time": 1343, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000001, + "acknowledgement": 2000029 + }, + { + "time": 1399, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": "HELO 192.168.0.20", + "tcpFlags": "P", + "sequence": 5000001, + "acknowledgement": 0 + }, + { + "time": 1399, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": null, + "tcpFlags": "A", + "sequence": 2000029, + "acknowledgement": 5000018 + }, + { + "time": 1455, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": "250 Hello 192.168.0.20", + "tcpFlags": "P", + "sequence": 2000029, + "acknowledgement": 0 + }, + { + "time": 1677, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000018, + "acknowledgement": 2000051 + }, + { + "time": 1733, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": "MAIL FROM: ", + "tcpFlags": "P", + "sequence": 5000018, + "acknowledgement": 0 + }, + { + "time": 1733, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": null, + "tcpFlags": "A", + "sequence": 2000051, + "acknowledgement": 5000045 + }, + { + "time": 1789, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": "250 Sender OK", + "tcpFlags": "P", + "sequence": 2000051, + "acknowledgement": 0 + }, + { + "time": 2012, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000045, + "acknowledgement": 2000064 + }, + { + "time": 2067, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": "RCPT TO:", + "tcpFlags": "P", + "sequence": 5000045, + "acknowledgement": 0 + }, + { + "time": 2068, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": null, + "tcpFlags": "A", + "sequence": 2000064, + "acknowledgement": 5000068 + }, + { + "time": 2123, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": "250 Recipient OK", + "tcpFlags": "P", + "sequence": 2000064, + "acknowledgement": 0 + }, + { + "time": 2346, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000068, + "acknowledgement": 2000080 + }, + { + "time": 2401, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": "DATA", + "tcpFlags": "P", + "sequence": 5000068, + "acknowledgement": 0 + }, + { + "time": 2402, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": null, + "tcpFlags": "A", + "sequence": 2000080, + "acknowledgement": 5000072 + }, + { + "time": 2457, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": "354 End data with .", + "tcpFlags": "P", + "sequence": 2000080, + "acknowledgement": 0 + }, + { + "time": 2680, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000072, + "acknowledgement": 2000115 + }, + { + "time": 2735, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": "From: Anna Muster \nTo: \nCc: Carla \nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n", + "tcpFlags": "P", + "sequence": 5000072, + "acknowledgement": 0 + }, + { + "time": 2736, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": null, + "tcpFlags": "A", + "sequence": 2000115, + "acknowledgement": 5000205 + }, + { + "time": 2791, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": "250 Mail queued for delivery", + "tcpFlags": "P", + "sequence": 2000115, + "acknowledgement": 0 + }, + { + "time": 3013, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000205, + "acknowledgement": 2000143 + }, + { + "time": 3069, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": "QUIT", + "tcpFlags": "P", + "sequence": 5000205, + "acknowledgement": 0 + }, + { + "time": 3069, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": null, + "tcpFlags": "A", + "sequence": 2000143, + "acknowledgement": 5000209 + }, + { + "time": 3125, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": "221 Server beendet Verbindung.", + "tcpFlags": "P", + "sequence": 2000143, + "acknowledgement": 0 + }, + { + "time": 3347, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000209, + "acknowledgement": 2000173 + }, + { + "time": 3347, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": null, + "tcpFlags": "F", + "sequence": 2000173, + "acknowledgement": 0 + }, + { + "time": 3402, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": null, + "tcpFlags": "F", + "sequence": 5000209, + "acknowledgement": 0 + }, + { + "time": 3402, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56784, + "payload": null, + "tcpFlags": "A", + "sequence": 2000174, + "acknowledgement": 5000210 + }, + { + "time": 3457, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": null, + "tcpFlags": "S", + "sequence": 7000000, + "acknowledgement": 0 + }, + { + "time": 3458, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": null, + "tcpFlags": "SA", + "sequence": 6000000, + "acknowledgement": 7000001 + }, + { + "time": 3569, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56784, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 5000210, + "acknowledgement": 2000174 + }, + { + "time": 3679, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000001, + "acknowledgement": 6000001 + }, + { + "time": 3746, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": "220 Willkommen bei filius.de", + "tcpFlags": "P", + "sequence": 6000001, + "acknowledgement": 0 + }, + { + "time": 3968, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000001, + "acknowledgement": 6000029 + }, + { + "time": 4024, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": "HELO 192.168.0.20", + "tcpFlags": "P", + "sequence": 7000001, + "acknowledgement": 0 + }, + { + "time": 4024, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": null, + "tcpFlags": "A", + "sequence": 6000029, + "acknowledgement": 7000018 + }, + { + "time": 4079, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": "250 Hello 192.168.0.20", + "tcpFlags": "P", + "sequence": 6000029, + "acknowledgement": 0 + }, + { + "time": 4301, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000018, + "acknowledgement": 6000051 + }, + { + "time": 4356, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": "MAIL FROM: ", + "tcpFlags": "P", + "sequence": 7000018, + "acknowledgement": 0 + }, + { + "time": 4357, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": null, + "tcpFlags": "A", + "sequence": 6000051, + "acknowledgement": 7000045 + }, + { + "time": 4412, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": "250 Sender OK", + "tcpFlags": "P", + "sequence": 6000051, + "acknowledgement": 0 + }, + { + "time": 4634, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000045, + "acknowledgement": 6000064 + }, + { + "time": 4689, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": "RCPT TO:", + "tcpFlags": "P", + "sequence": 7000045, + "acknowledgement": 0 + }, + { + "time": 4689, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": null, + "tcpFlags": "A", + "sequence": 6000064, + "acknowledgement": 7000070 + }, + { + "time": 4745, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": "250 Recipient OK", + "tcpFlags": "P", + "sequence": 6000064, + "acknowledgement": 0 + }, + { + "time": 4966, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000070, + "acknowledgement": 6000080 + }, + { + "time": 5022, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": "DATA", + "tcpFlags": "P", + "sequence": 7000070, + "acknowledgement": 0 + }, + { + "time": 5022, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": null, + "tcpFlags": "A", + "sequence": 6000080, + "acknowledgement": 7000074 + }, + { + "time": 5077, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": "354 End data with .", + "tcpFlags": "P", + "sequence": 6000080, + "acknowledgement": 0 + }, + { + "time": 5299, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000074, + "acknowledgement": 6000115 + }, + { + "time": 5355, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": "From: Anna Muster \nTo: \nCc: Carla \nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n", + "tcpFlags": "P", + "sequence": 7000074, + "acknowledgement": 0 + }, + { + "time": 5355, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": null, + "tcpFlags": "A", + "sequence": 6000115, + "acknowledgement": 7000207 + }, + { + "time": 5410, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": "250 Mail queued for delivery", + "tcpFlags": "P", + "sequence": 6000115, + "acknowledgement": 0 + }, + { + "time": 5632, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000207, + "acknowledgement": 6000143 + }, + { + "time": 5638, + "source": "02:00:00:00:02:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.10" + }, + { + "time": 5687, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": "QUIT", + "tcpFlags": "P", + "sequence": 7000207, + "acknowledgement": 0 + }, + { + "time": 5693, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": null, + "tcpFlags": "A", + "sequence": 6000143, + "acknowledgement": 7000211 + }, + { + "time": 5749, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": "221 Server beendet Verbindung.", + "tcpFlags": "P", + "sequence": 6000143, + "acknowledgement": 0 + }, + { + "time": 5860, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:13", + "arp": 2, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.30" + }, + { + "time": 5860, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:12", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 65069, + "destinationPort": 53, + "payload": "ID=27146 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n" + }, + { + "time": 5970, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000211, + "acknowledgement": 6000173 + }, + { + "time": 5971, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": null, + "tcpFlags": "F", + "sequence": 6000173, + "acknowledgement": 0 + }, + { + "time": 6026, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": null, + "tcpFlags": "F", + "sequence": 7000211, + "acknowledgement": 0 + }, + { + "time": 6026, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 56507, + "payload": null, + "tcpFlags": "A", + "sequence": 6000174, + "acknowledgement": 7000212 + }, + { + "time": 6085, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.30", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 65069, + "payload": "ID=27146 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n" + }, + { + "time": 6086, + "source": "02:00:00:00:02:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + }, + { + "time": 6192, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56507, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 7000212, + "acknowledgement": 6000174 + }, + { + "time": 6308, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.30" + }, + { + "time": 6308, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": null, + "tcpFlags": "S", + "sequence": 9000000, + "acknowledgement": 0 + }, + { + "time": 6529, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": null, + "tcpFlags": "SA", + "sequence": 4000000, + "acknowledgement": 9000001 + }, + { + "time": 6530, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000001, + "acknowledgement": 4000001 + }, + { + "time": 6835, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": "220 Willkommen bei andere.de", + "tcpFlags": "P", + "sequence": 4000001, + "acknowledgement": 0 + }, + { + "time": 6835, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000001, + "acknowledgement": 4000029 + }, + { + "time": 6890, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": "HELO 192.168.0.30", + "tcpFlags": "P", + "sequence": 9000001, + "acknowledgement": 0 + }, + { + "time": 7112, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": null, + "tcpFlags": "A", + "sequence": 4000029, + "acknowledgement": 9000018 + }, + { + "time": 7167, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": "250 Hello 192.168.0.30", + "tcpFlags": "P", + "sequence": 4000029, + "acknowledgement": 0 + }, + { + "time": 7167, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000018, + "acknowledgement": 4000051 + }, + { + "time": 7222, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": "MAIL FROM: ", + "tcpFlags": "P", + "sequence": 9000018, + "acknowledgement": 0 + }, + { + "time": 7444, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": null, + "tcpFlags": "A", + "sequence": 4000051, + "acknowledgement": 9000045 + }, + { + "time": 7499, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": "250 Sender OK", + "tcpFlags": "P", + "sequence": 4000051, + "acknowledgement": 0 + }, + { + "time": 7499, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000045, + "acknowledgement": 4000064 + }, + { + "time": 7554, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": "RCPT TO:", + "tcpFlags": "P", + "sequence": 9000045, + "acknowledgement": 0 + }, + { + "time": 7776, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": null, + "tcpFlags": "A", + "sequence": 4000064, + "acknowledgement": 9000070 + }, + { + "time": 7831, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": "250 Recipient OK", + "tcpFlags": "P", + "sequence": 4000064, + "acknowledgement": 0 + }, + { + "time": 7832, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000070, + "acknowledgement": 4000080 + }, + { + "time": 7887, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": "DATA", + "tcpFlags": "P", + "sequence": 9000070, + "acknowledgement": 0 + }, + { + "time": 8109, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": null, + "tcpFlags": "A", + "sequence": 4000080, + "acknowledgement": 9000074 + }, + { + "time": 8164, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": "354 End data with .", + "tcpFlags": "P", + "sequence": 4000080, + "acknowledgement": 0 + }, + { + "time": 8164, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000074, + "acknowledgement": 4000115 + }, + { + "time": 8219, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": "From: Anna Muster \nTo: \nCc: Carla \nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n", + "tcpFlags": "P", + "sequence": 9000074, + "acknowledgement": 0 + }, + { + "time": 8441, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": null, + "tcpFlags": "A", + "sequence": 4000115, + "acknowledgement": 9000207 + }, + { + "time": 8496, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": "250 Mail queued for delivery", + "tcpFlags": "P", + "sequence": 4000115, + "acknowledgement": 0 + }, + { + "time": 8496, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000207, + "acknowledgement": 4000143 + }, + { + "time": 8551, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": "QUIT", + "tcpFlags": "P", + "sequence": 9000207, + "acknowledgement": 0 + }, + { + "time": 8773, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": null, + "tcpFlags": "A", + "sequence": 4000143, + "acknowledgement": 9000211 + }, + { + "time": 8828, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": "221 Server beendet Verbindung.", + "tcpFlags": "P", + "sequence": 4000143, + "acknowledgement": 0 + }, + { + "time": 8829, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000211, + "acknowledgement": 4000173 + }, + { + "time": 8884, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": null, + "tcpFlags": "F", + "sequence": 9000211, + "acknowledgement": 0 + }, + { + "time": 9050, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": null, + "tcpFlags": "F", + "sequence": 4000173, + "acknowledgement": 0 + }, + { + "time": 9050, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000212, + "acknowledgement": 4000174 + }, + { + "time": 9105, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": null, + "tcpFlags": "A", + "sequence": 4000174, + "acknowledgement": 9000212 + } + ], + "00000000-0000-0000-0000-000000000204": [ + { + "time": 637, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + }, + { + "time": 5749, + "source": "02:00:00:00:02:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.10" + }, + { + "time": 6197, + "source": "02:00:00:00:02:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + }, + { + "time": 6197, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.30" + }, + { + "time": 6419, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": null, + "tcpFlags": "S", + "sequence": 9000000, + "acknowledgement": 0 + }, + { + "time": 6419, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": null, + "tcpFlags": "SA", + "sequence": 4000000, + "acknowledgement": 9000001 + }, + { + "time": 6640, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000001, + "acknowledgement": 4000001 + }, + { + "time": 6724, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": "220 Willkommen bei andere.de", + "tcpFlags": "P", + "sequence": 4000001, + "acknowledgement": 0 + }, + { + "time": 6946, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000001, + "acknowledgement": 4000029 + }, + { + "time": 7001, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": "HELO 192.168.0.30", + "tcpFlags": "P", + "sequence": 9000001, + "acknowledgement": 0 + }, + { + "time": 7001, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": null, + "tcpFlags": "A", + "sequence": 4000029, + "acknowledgement": 9000018 + }, + { + "time": 7056, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": "250 Hello 192.168.0.30", + "tcpFlags": "P", + "sequence": 4000029, + "acknowledgement": 0 + }, + { + "time": 7278, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000018, + "acknowledgement": 4000051 + }, + { + "time": 7333, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": "MAIL FROM: ", + "tcpFlags": "P", + "sequence": 9000018, + "acknowledgement": 0 + }, + { + "time": 7333, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": null, + "tcpFlags": "A", + "sequence": 4000051, + "acknowledgement": 9000045 + }, + { + "time": 7388, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": "250 Sender OK", + "tcpFlags": "P", + "sequence": 4000051, + "acknowledgement": 0 + }, + { + "time": 7610, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000045, + "acknowledgement": 4000064 + }, + { + "time": 7665, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": "RCPT TO:", + "tcpFlags": "P", + "sequence": 9000045, + "acknowledgement": 0 + }, + { + "time": 7665, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": null, + "tcpFlags": "A", + "sequence": 4000064, + "acknowledgement": 9000070 + }, + { + "time": 7721, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": "250 Recipient OK", + "tcpFlags": "P", + "sequence": 4000064, + "acknowledgement": 0 + }, + { + "time": 7942, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000070, + "acknowledgement": 4000080 + }, + { + "time": 7998, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": "DATA", + "tcpFlags": "P", + "sequence": 9000070, + "acknowledgement": 0 + }, + { + "time": 7998, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": null, + "tcpFlags": "A", + "sequence": 4000080, + "acknowledgement": 9000074 + }, + { + "time": 8053, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": "354 End data with .", + "tcpFlags": "P", + "sequence": 4000080, + "acknowledgement": 0 + }, + { + "time": 8275, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000074, + "acknowledgement": 4000115 + }, + { + "time": 8330, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": "From: Anna Muster \nTo: \nCc: Carla \nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n", + "tcpFlags": "P", + "sequence": 9000074, + "acknowledgement": 0 + }, + { + "time": 8330, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": null, + "tcpFlags": "A", + "sequence": 4000115, + "acknowledgement": 9000207 + }, + { + "time": 8386, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": "250 Mail queued for delivery", + "tcpFlags": "P", + "sequence": 4000115, + "acknowledgement": 0 + }, + { + "time": 8607, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000207, + "acknowledgement": 4000143 + }, + { + "time": 8662, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": "QUIT", + "tcpFlags": "P", + "sequence": 9000207, + "acknowledgement": 0 + }, + { + "time": 8662, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": null, + "tcpFlags": "A", + "sequence": 4000143, + "acknowledgement": 9000211 + }, + { + "time": 8718, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": "221 Server beendet Verbindung.", + "tcpFlags": "P", + "sequence": 4000143, + "acknowledgement": 0 + }, + { + "time": 8939, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000211, + "acknowledgement": 4000173 + }, + { + "time": 8939, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": null, + "tcpFlags": "F", + "sequence": 4000173, + "acknowledgement": 0 + }, + { + "time": 8994, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": null, + "tcpFlags": "F", + "sequence": 9000211, + "acknowledgement": 0 + }, + { + "time": 8995, + "source": "02:00:00:00:02:14", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 25, + "destinationPort": 64361, + "payload": null, + "tcpFlags": "A", + "sequence": 4000174, + "acknowledgement": 9000212 + }, + { + "time": 9161, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64361, + "destinationPort": 25, + "payload": null, + "tcpFlags": "A", + "sequence": 9000212, + "acknowledgement": 4000174 + } + ] + }, + "rows": { + "00000000-0000-0000-0000-000000000201": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "2", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000" + ], + [ + "4", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SYN, SEQ: 2.000.000, ACK: 5.000.001" + ], + [ + "5", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 2.000.001" + ], + [ + "6", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.001" + ], + [ + "6", + "192.168.0.30:25", + "192.168.0.20:56784", + "SMTP", + "Anwendung", + "220 Willkommen bei filius.de" + ], + [ + "7", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 2.000.029" + ], + [ + "8", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.001" + ], + [ + "8", + "192.168.0.20:56784", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "HELO 192.168.0.20" + ], + [ + "9", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.029, ACK: 5.000.018" + ], + [ + "10", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.029" + ], + [ + "10", + "192.168.0.30:25", + "192.168.0.20:56784", + "SMTP", + "Anwendung", + "250 Hello 192.168.0.20" + ], + [ + "11", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.018, ACK: 2.000.051" + ], + [ + "12", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.018" + ], + [ + "12", + "192.168.0.20:56784", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "MAIL FROM: " + ], + [ + "13", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.051, ACK: 5.000.045" + ], + [ + "14", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.051" + ], + [ + "14", + "192.168.0.30:25", + "192.168.0.20:56784", + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "15", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.045, ACK: 2.000.064" + ], + [ + "16", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.045" + ], + [ + "16", + "192.168.0.20:56784", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "17", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.064, ACK: 5.000.068" + ], + [ + "18", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.064" + ], + [ + "18", + "192.168.0.30:25", + "192.168.0.20:56784", + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "19", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.068, ACK: 2.000.080" + ], + [ + "20", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "20", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.068" + ], + [ + "20", + "192.168.0.20:56784", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "DATA" + ], + [ + "21", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.080, ACK: 5.000.072" + ], + [ + "22", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.080" + ], + [ + "22", + "192.168.0.30:25", + "192.168.0.20:56784", + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "23", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "23", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.072, ACK: 2.000.115" + ], + [ + "24", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "24", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.072" + ], + [ + "24", + "192.168.0.20:56784", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "From: Anna Muster \nTo: \nCc: Carla \nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n" + ], + [ + "25", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "25", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.115, ACK: 5.000.205" + ], + [ + "26", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.115" + ], + [ + "26", + "192.168.0.30:25", + "192.168.0.20:56784", + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "27", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.205, ACK: 2.000.143" + ], + [ + "28", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "28", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.205" + ], + [ + "28", + "192.168.0.20:56784", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "29", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "29", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.143, ACK: 5.000.209" + ], + [ + "30", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "30", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.143" + ], + [ + "30", + "192.168.0.30:25", + "192.168.0.20:56784", + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "31", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "31", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.209, ACK: 2.000.173" + ], + [ + "32", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "32", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "FIN, SEQ: 5.000.209" + ], + [ + "33", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "33", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "33", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000" + ], + [ + "34", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "34", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "FIN, SEQ: 2.000.173" + ], + [ + "35", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "35", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.210, ACK: 2.000.174" + ], + [ + "36", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "36", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "36", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.174, ACK: 5.000.210" + ], + [ + "37", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000, ACK: 7.000.001" + ], + [ + "38", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "38", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 6.000.001" + ], + [ + "39", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "39", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "39", + "192.168.0.30:25", + "192.168.0.20:56507", + "SMTP", + "Anwendung", + "220 Willkommen bei filius.de" + ], + [ + "40", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "40", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "40", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 6.000.029" + ], + [ + "41", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "41", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "41", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "41", + "192.168.0.20:56507", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "HELO 192.168.0.20" + ], + [ + "42", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "42", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "42", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.029, ACK: 7.000.018" + ], + [ + "43", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "43", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.029" + ], + [ + "43", + "192.168.0.30:25", + "192.168.0.20:56507", + "SMTP", + "Anwendung", + "250 Hello 192.168.0.20" + ], + [ + "44", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "44", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.018, ACK: 6.000.051" + ], + [ + "45", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "45", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.018" + ], + [ + "45", + "192.168.0.20:56507", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "MAIL FROM: " + ], + [ + "46", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "46", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.051, ACK: 7.000.045" + ], + [ + "47", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "47", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.051" + ], + [ + "47", + "192.168.0.30:25", + "192.168.0.20:56507", + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "48", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "48", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "48", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.045, ACK: 6.000.064" + ], + [ + "49", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "49", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "49", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.045" + ], + [ + "49", + "192.168.0.20:56507", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "50", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "50", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "50", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.064, ACK: 7.000.070" + ], + [ + "51", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "51", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "51", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.064" + ], + [ + "51", + "192.168.0.30:25", + "192.168.0.20:56507", + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "52", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "52", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "52", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.070, ACK: 6.000.080" + ], + [ + "53", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "53", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "53", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.070" + ], + [ + "53", + "192.168.0.20:56507", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "DATA" + ], + [ + "54", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "54", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "54", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.080, ACK: 7.000.074" + ], + [ + "55", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "55", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "55", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.080" + ], + [ + "55", + "192.168.0.30:25", + "192.168.0.20:56507", + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "56", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "56", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "56", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.074, ACK: 6.000.115" + ], + [ + "57", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "57", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "57", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.074" + ], + [ + "57", + "192.168.0.20:56507", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "From: Anna Muster \nTo: \nCc: Carla \nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n" + ], + [ + "58", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "58", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "58", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.115, ACK: 7.000.207" + ], + [ + "59", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "59", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "59", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.115" + ], + [ + "59", + "192.168.0.30:25", + "192.168.0.20:56507", + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "60", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "60", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "60", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.207, ACK: 6.000.143" + ], + [ + "61", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "61", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "61", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.207" + ], + [ + "61", + "192.168.0.20:56507", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "62", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "62", + "192.168.0.30", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "63", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "63", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "63", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.143, ACK: 7.000.211" + ], + [ + "64", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "64", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "64", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.143" + ], + [ + "64", + "192.168.0.30:25", + "192.168.0.20:56507", + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "65", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "65", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "65", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.211, ACK: 6.000.173" + ], + [ + "66", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "66", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "66", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "FIN, SEQ: 7.000.211" + ], + [ + "67", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "67", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "67", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "FIN, SEQ: 6.000.173" + ], + [ + "68", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "68", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "68", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.212, ACK: 6.000.174" + ], + [ + "69", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "69", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "69", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.174, ACK: 7.000.212" + ], + [ + "70", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "70", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000202": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "2", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.30", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "3", + "02:00:00:00:02:12", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.10", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:13|192.168.0.30]" + ], + [ + "4", + "02:00:00:00:02:13", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.30", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "4", + "192.168.0.30:65069", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "4", + "192.168.0.30:65069", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=27146 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n" + ], + [ + "5", + "02:00:00:00:02:12", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.10", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "5", + "192.168.0.10:53", + "192.168.0.30:65069", + "UDP", + "Transport", + "" + ], + [ + "5", + "192.168.0.10:53", + "192.168.0.30:65069", + "DNS", + "Anwendung", + "ID=27146 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n" + ], + [ + "6", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000203": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "2", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000" + ], + [ + "4", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SYN, SEQ: 2.000.000, ACK: 5.000.001" + ], + [ + "5", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 2.000.001" + ], + [ + "6", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.001" + ], + [ + "6", + "192.168.0.30:25", + "192.168.0.20:56784", + "SMTP", + "Anwendung", + "220 Willkommen bei filius.de" + ], + [ + "7", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 2.000.029" + ], + [ + "8", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.001" + ], + [ + "8", + "192.168.0.20:56784", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "HELO 192.168.0.20" + ], + [ + "9", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.029, ACK: 5.000.018" + ], + [ + "10", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.029" + ], + [ + "10", + "192.168.0.30:25", + "192.168.0.20:56784", + "SMTP", + "Anwendung", + "250 Hello 192.168.0.20" + ], + [ + "11", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.018, ACK: 2.000.051" + ], + [ + "12", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.018" + ], + [ + "12", + "192.168.0.20:56784", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "MAIL FROM: " + ], + [ + "13", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.051, ACK: 5.000.045" + ], + [ + "14", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.051" + ], + [ + "14", + "192.168.0.30:25", + "192.168.0.20:56784", + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "15", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.045, ACK: 2.000.064" + ], + [ + "16", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.045" + ], + [ + "16", + "192.168.0.20:56784", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "17", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.064, ACK: 5.000.068" + ], + [ + "18", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.064" + ], + [ + "18", + "192.168.0.30:25", + "192.168.0.20:56784", + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "19", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.068, ACK: 2.000.080" + ], + [ + "20", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "20", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.068" + ], + [ + "20", + "192.168.0.20:56784", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "DATA" + ], + [ + "21", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.080, ACK: 5.000.072" + ], + [ + "22", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.080" + ], + [ + "22", + "192.168.0.30:25", + "192.168.0.20:56784", + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "23", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "23", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.072, ACK: 2.000.115" + ], + [ + "24", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "24", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.072" + ], + [ + "24", + "192.168.0.20:56784", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "From: Anna Muster \nTo: \nCc: Carla \nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n" + ], + [ + "25", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "25", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.115, ACK: 5.000.205" + ], + [ + "26", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.115" + ], + [ + "26", + "192.168.0.30:25", + "192.168.0.20:56784", + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "27", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.205, ACK: 2.000.143" + ], + [ + "28", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "28", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.205" + ], + [ + "28", + "192.168.0.20:56784", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "29", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "29", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.143, ACK: 5.000.209" + ], + [ + "30", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "30", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.143" + ], + [ + "30", + "192.168.0.30:25", + "192.168.0.20:56784", + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "31", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "31", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.209, ACK: 2.000.173" + ], + [ + "32", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "32", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "FIN, SEQ: 2.000.173" + ], + [ + "33", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "33", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "33", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "FIN, SEQ: 5.000.209" + ], + [ + "34", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "34", + "192.168.0.30:25", + "192.168.0.20:56784", + "TCP", + "Transport", + "SEQ: 2.000.174, ACK: 5.000.210" + ], + [ + "35", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "35", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000" + ], + [ + "36", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "36", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "36", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000, ACK: 7.000.001" + ], + [ + "37", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "192.168.0.20:56784", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 5.000.210, ACK: 2.000.174" + ], + [ + "38", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "38", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 6.000.001" + ], + [ + "39", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "39", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "39", + "192.168.0.30:25", + "192.168.0.20:56507", + "SMTP", + "Anwendung", + "220 Willkommen bei filius.de" + ], + [ + "40", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "40", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "40", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 6.000.029" + ], + [ + "41", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "41", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "41", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "41", + "192.168.0.20:56507", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "HELO 192.168.0.20" + ], + [ + "42", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "42", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "42", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.029, ACK: 7.000.018" + ], + [ + "43", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "43", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.029" + ], + [ + "43", + "192.168.0.30:25", + "192.168.0.20:56507", + "SMTP", + "Anwendung", + "250 Hello 192.168.0.20" + ], + [ + "44", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "44", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.018, ACK: 6.000.051" + ], + [ + "45", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "45", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.018" + ], + [ + "45", + "192.168.0.20:56507", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "MAIL FROM: " + ], + [ + "46", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "46", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.051, ACK: 7.000.045" + ], + [ + "47", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "47", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.051" + ], + [ + "47", + "192.168.0.30:25", + "192.168.0.20:56507", + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "48", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "48", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "48", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.045, ACK: 6.000.064" + ], + [ + "49", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "49", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "49", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.045" + ], + [ + "49", + "192.168.0.20:56507", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "50", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "50", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "50", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.064, ACK: 7.000.070" + ], + [ + "51", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "51", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "51", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.064" + ], + [ + "51", + "192.168.0.30:25", + "192.168.0.20:56507", + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "52", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "52", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "52", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.070, ACK: 6.000.080" + ], + [ + "53", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "53", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "53", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.070" + ], + [ + "53", + "192.168.0.20:56507", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "DATA" + ], + [ + "54", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "54", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "54", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.080, ACK: 7.000.074" + ], + [ + "55", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "55", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "55", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.080" + ], + [ + "55", + "192.168.0.30:25", + "192.168.0.20:56507", + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "56", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "56", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "56", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.074, ACK: 6.000.115" + ], + [ + "57", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "57", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "57", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.074" + ], + [ + "57", + "192.168.0.20:56507", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "From: Anna Muster \nTo: \nCc: Carla \nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n" + ], + [ + "58", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "58", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "58", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.115, ACK: 7.000.207" + ], + [ + "59", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "59", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "59", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.115" + ], + [ + "59", + "192.168.0.30:25", + "192.168.0.20:56507", + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "60", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "60", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "60", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.207, ACK: 6.000.143" + ], + [ + "61", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "61", + "192.168.0.30", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "62", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "62", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "62", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.207" + ], + [ + "62", + "192.168.0.20:56507", + "192.168.0.30:25", + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "63", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "63", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "63", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.143, ACK: 7.000.211" + ], + [ + "64", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "64", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "64", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.143" + ], + [ + "64", + "192.168.0.30:25", + "192.168.0.20:56507", + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "65", + "02:00:00:00:02:12", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x806" + ], + [ + "65", + "192.168.0.10", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:13|192.168.0.30]" + ], + [ + "66", + "02:00:00:00:02:13", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "66", + "192.168.0.30", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "66", + "192.168.0.30:65069", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "66", + "192.168.0.30:65069", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=27146 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n" + ], + [ + "67", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "67", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "67", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.211, ACK: 6.000.173" + ], + [ + "68", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "68", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "68", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "FIN, SEQ: 6.000.173" + ], + [ + "69", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "69", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "69", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "FIN, SEQ: 7.000.211" + ], + [ + "70", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "70", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "70", + "192.168.0.30:25", + "192.168.0.20:56507", + "TCP", + "Transport", + "SEQ: 6.000.174, ACK: 7.000.212" + ], + [ + "71", + "02:00:00:00:02:12", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "71", + "192.168.0.10", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "71", + "192.168.0.10:53", + "192.168.0.30:65069", + "UDP", + "Transport", + "" + ], + [ + "71", + "192.168.0.10:53", + "192.168.0.30:65069", + "DNS", + "Anwendung", + "ID=27146 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n" + ], + [ + "72", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "72", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "73", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "73", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "73", + "192.168.0.20:56507", + "192.168.0.30:25", + "TCP", + "Transport", + "SEQ: 7.000.212, ACK: 6.000.174" + ], + [ + "74", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x806" + ], + [ + "74", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:14 [op=REPLY, sender=02:00:00:00:02:14|192.168.0.31, target=02:00:00:00:02:13|192.168.0.30]" + ], + [ + "75", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "75", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "75", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SYN, SEQ: 9.000.000" + ], + [ + "76", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "76", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "76", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SYN, SEQ: 4.000.000, ACK: 9.000.001" + ], + [ + "77", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "77", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "77", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 4.000.001" + ], + [ + "78", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "78", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "78", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.001" + ], + [ + "78", + "192.168.0.31:25", + "192.168.0.30:64361", + "SMTP", + "Anwendung", + "220 Willkommen bei andere.de" + ], + [ + "79", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "79", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "79", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 4.000.029" + ], + [ + "80", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "80", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "80", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.001" + ], + [ + "80", + "192.168.0.30:64361", + "192.168.0.31:25", + "SMTP", + "Anwendung", + "HELO 192.168.0.30" + ], + [ + "81", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "81", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "81", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.029, ACK: 9.000.018" + ], + [ + "82", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "82", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "82", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.029" + ], + [ + "82", + "192.168.0.31:25", + "192.168.0.30:64361", + "SMTP", + "Anwendung", + "250 Hello 192.168.0.30" + ], + [ + "83", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "83", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "83", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.018, ACK: 4.000.051" + ], + [ + "84", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "84", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "84", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.018" + ], + [ + "84", + "192.168.0.30:64361", + "192.168.0.31:25", + "SMTP", + "Anwendung", + "MAIL FROM: " + ], + [ + "85", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "85", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "85", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.051, ACK: 9.000.045" + ], + [ + "86", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "86", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "86", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.051" + ], + [ + "86", + "192.168.0.31:25", + "192.168.0.30:64361", + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "87", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "87", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "87", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.045, ACK: 4.000.064" + ], + [ + "88", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "88", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "88", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.045" + ], + [ + "88", + "192.168.0.30:64361", + "192.168.0.31:25", + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "89", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "89", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "89", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.064, ACK: 9.000.070" + ], + [ + "90", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "90", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "90", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.064" + ], + [ + "90", + "192.168.0.31:25", + "192.168.0.30:64361", + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "91", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "91", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "91", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.070, ACK: 4.000.080" + ], + [ + "92", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "92", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "92", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.070" + ], + [ + "92", + "192.168.0.30:64361", + "192.168.0.31:25", + "SMTP", + "Anwendung", + "DATA" + ], + [ + "93", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "93", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "93", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.080, ACK: 9.000.074" + ], + [ + "94", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "94", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "94", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.080" + ], + [ + "94", + "192.168.0.31:25", + "192.168.0.30:64361", + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "95", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "95", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "95", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.074, ACK: 4.000.115" + ], + [ + "96", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "96", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "96", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.074" + ], + [ + "96", + "192.168.0.30:64361", + "192.168.0.31:25", + "SMTP", + "Anwendung", + "From: Anna Muster \nTo: \nCc: Carla \nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n" + ], + [ + "97", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "97", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "97", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.115, ACK: 9.000.207" + ], + [ + "98", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "98", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "98", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.115" + ], + [ + "98", + "192.168.0.31:25", + "192.168.0.30:64361", + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "99", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "99", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "99", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.207, ACK: 4.000.143" + ], + [ + "100", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "100", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "100", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.207" + ], + [ + "100", + "192.168.0.30:64361", + "192.168.0.31:25", + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "101", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "101", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "101", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.143, ACK: 9.000.211" + ], + [ + "102", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "102", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "102", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.143" + ], + [ + "102", + "192.168.0.31:25", + "192.168.0.30:64361", + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "103", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "103", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "103", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.211, ACK: 4.000.173" + ], + [ + "104", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "104", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "104", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "FIN, SEQ: 9.000.211" + ], + [ + "105", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "105", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "105", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "FIN, SEQ: 4.000.173" + ], + [ + "106", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "106", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "106", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.212, ACK: 4.000.174" + ], + [ + "107", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "107", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "107", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.174, ACK: 9.000.212" + ] + ], + "00000000-0000-0000-0000-000000000204": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "2", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.30", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "3", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "4", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:14 [op=REPLY, sender=02:00:00:00:02:14|192.168.0.31, target=02:00:00:00:02:13|192.168.0.30]" + ], + [ + "5", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SYN, SEQ: 9.000.000" + ], + [ + "6", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SYN, SEQ: 4.000.000, ACK: 9.000.001" + ], + [ + "7", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 4.000.001" + ], + [ + "8", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.001" + ], + [ + "8", + "192.168.0.31:25", + "192.168.0.30:64361", + "SMTP", + "Anwendung", + "220 Willkommen bei andere.de" + ], + [ + "9", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 4.000.029" + ], + [ + "10", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.001" + ], + [ + "10", + "192.168.0.30:64361", + "192.168.0.31:25", + "SMTP", + "Anwendung", + "HELO 192.168.0.30" + ], + [ + "11", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.029, ACK: 9.000.018" + ], + [ + "12", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.029" + ], + [ + "12", + "192.168.0.31:25", + "192.168.0.30:64361", + "SMTP", + "Anwendung", + "250 Hello 192.168.0.30" + ], + [ + "13", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.018, ACK: 4.000.051" + ], + [ + "14", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.018" + ], + [ + "14", + "192.168.0.30:64361", + "192.168.0.31:25", + "SMTP", + "Anwendung", + "MAIL FROM: " + ], + [ + "15", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.051, ACK: 9.000.045" + ], + [ + "16", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.051" + ], + [ + "16", + "192.168.0.31:25", + "192.168.0.30:64361", + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "17", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.045, ACK: 4.000.064" + ], + [ + "18", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.045" + ], + [ + "18", + "192.168.0.30:64361", + "192.168.0.31:25", + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "19", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.064, ACK: 9.000.070" + ], + [ + "20", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "20", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.064" + ], + [ + "20", + "192.168.0.31:25", + "192.168.0.30:64361", + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "21", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.070, ACK: 4.000.080" + ], + [ + "22", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.070" + ], + [ + "22", + "192.168.0.30:64361", + "192.168.0.31:25", + "SMTP", + "Anwendung", + "DATA" + ], + [ + "23", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "23", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.080, ACK: 9.000.074" + ], + [ + "24", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "24", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.080" + ], + [ + "24", + "192.168.0.31:25", + "192.168.0.30:64361", + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "25", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "25", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.074, ACK: 4.000.115" + ], + [ + "26", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.074" + ], + [ + "26", + "192.168.0.30:64361", + "192.168.0.31:25", + "SMTP", + "Anwendung", + "From: Anna Muster \nTo: \nCc: Carla \nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n" + ], + [ + "27", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.115, ACK: 9.000.207" + ], + [ + "28", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "28", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.115" + ], + [ + "28", + "192.168.0.31:25", + "192.168.0.30:64361", + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "29", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "29", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.207, ACK: 4.000.143" + ], + [ + "30", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "30", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.207" + ], + [ + "30", + "192.168.0.30:64361", + "192.168.0.31:25", + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "31", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "31", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.143, ACK: 9.000.211" + ], + [ + "32", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "32", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.143" + ], + [ + "32", + "192.168.0.31:25", + "192.168.0.30:64361", + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "33", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "33", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "33", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.211, ACK: 4.000.173" + ], + [ + "34", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "34", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "FIN, SEQ: 4.000.173" + ], + [ + "35", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "35", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "FIN, SEQ: 9.000.211" + ], + [ + "36", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "36", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "36", + "192.168.0.31:25", + "192.168.0.30:64361", + "TCP", + "Transport", + "SEQ: 4.000.174, ACK: 9.000.212" + ], + [ + "37", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "192.168.0.30:64361", + "192.168.0.31:25", + "TCP", + "Transport", + "SEQ: 9.000.212, ACK: 4.000.174" + ] + ] + }, + "layeredRows": { + "00000000-0000-0000-0000-000000000201": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "2", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "56784", + "25", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000" + ], + [ + "4", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "25", + "56784", + "TCP", + "Transport", + "SYN, SEQ: 2.000.000, ACK: 5.000.001" + ], + [ + "5", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 2.000.001" + ], + [ + "6", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.001" + ], + [ + "6", + null, + null, + "SMTP", + "Anwendung", + "220 Willkommen bei filius.de" + ], + [ + "7", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 2.000.029" + ], + [ + "8", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.001" + ], + [ + "8", + null, + null, + "SMTP", + "Anwendung", + "HELO 192.168.0.20" + ], + [ + "9", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.029, ACK: 5.000.018" + ], + [ + "10", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.029" + ], + [ + "10", + null, + null, + "SMTP", + "Anwendung", + "250 Hello 192.168.0.20" + ], + [ + "11", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.018, ACK: 2.000.051" + ], + [ + "12", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.018" + ], + [ + "12", + null, + null, + "SMTP", + "Anwendung", + "MAIL FROM: " + ], + [ + "13", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.051, ACK: 5.000.045" + ], + [ + "14", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.051" + ], + [ + "14", + null, + null, + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "15", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.045, ACK: 2.000.064" + ], + [ + "16", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.045" + ], + [ + "16", + null, + null, + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "17", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.064, ACK: 5.000.068" + ], + [ + "18", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.064" + ], + [ + "18", + null, + null, + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "19", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.068, ACK: 2.000.080" + ], + [ + "20", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "20", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.068" + ], + [ + "20", + null, + null, + "SMTP", + "Anwendung", + "DATA" + ], + [ + "21", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.080, ACK: 5.000.072" + ], + [ + "22", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.080" + ], + [ + "22", + null, + null, + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "23", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "23", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.072, ACK: 2.000.115" + ], + [ + "24", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "24", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.072" + ], + [ + "24", + null, + null, + "SMTP", + "Anwendung", + "From: Anna Muster \nTo: \nCc: Carla \nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n" + ], + [ + "25", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "25", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.115, ACK: 5.000.205" + ], + [ + "26", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.115" + ], + [ + "26", + null, + null, + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "27", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.205, ACK: 2.000.143" + ], + [ + "28", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "28", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.205" + ], + [ + "28", + null, + null, + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "29", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "29", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.143, ACK: 5.000.209" + ], + [ + "30", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "30", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.143" + ], + [ + "30", + null, + null, + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "31", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "31", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.209, ACK: 2.000.173" + ], + [ + "32", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "32", + "56784", + "25", + "TCP", + "Transport", + "FIN, SEQ: 5.000.209" + ], + [ + "33", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "33", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "33", + "56507", + "25", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000" + ], + [ + "34", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "34", + "25", + "56784", + "TCP", + "Transport", + "FIN, SEQ: 2.000.173" + ], + [ + "35", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "35", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.210, ACK: 2.000.174" + ], + [ + "36", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "36", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "36", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.174, ACK: 5.000.210" + ], + [ + "37", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "25", + "56507", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000, ACK: 7.000.001" + ], + [ + "38", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "38", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 6.000.001" + ], + [ + "39", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "39", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "39", + null, + null, + "SMTP", + "Anwendung", + "220 Willkommen bei filius.de" + ], + [ + "40", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "40", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "40", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 6.000.029" + ], + [ + "41", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "41", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "41", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "41", + null, + null, + "SMTP", + "Anwendung", + "HELO 192.168.0.20" + ], + [ + "42", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "42", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "42", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.029, ACK: 7.000.018" + ], + [ + "43", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "43", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.029" + ], + [ + "43", + null, + null, + "SMTP", + "Anwendung", + "250 Hello 192.168.0.20" + ], + [ + "44", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "44", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.018, ACK: 6.000.051" + ], + [ + "45", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "45", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.018" + ], + [ + "45", + null, + null, + "SMTP", + "Anwendung", + "MAIL FROM: " + ], + [ + "46", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "46", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.051, ACK: 7.000.045" + ], + [ + "47", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "47", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.051" + ], + [ + "47", + null, + null, + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "48", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "48", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "48", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.045, ACK: 6.000.064" + ], + [ + "49", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "49", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "49", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.045" + ], + [ + "49", + null, + null, + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "50", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "50", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "50", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.064, ACK: 7.000.070" + ], + [ + "51", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "51", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "51", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.064" + ], + [ + "51", + null, + null, + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "52", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "52", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "52", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.070, ACK: 6.000.080" + ], + [ + "53", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "53", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "53", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.070" + ], + [ + "53", + null, + null, + "SMTP", + "Anwendung", + "DATA" + ], + [ + "54", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "54", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "54", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.080, ACK: 7.000.074" + ], + [ + "55", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "55", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "55", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.080" + ], + [ + "55", + null, + null, + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "56", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "56", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "56", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.074, ACK: 6.000.115" + ], + [ + "57", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "57", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "57", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.074" + ], + [ + "57", + null, + null, + "SMTP", + "Anwendung", + "From: Anna Muster \nTo: \nCc: Carla \nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n" + ], + [ + "58", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "58", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "58", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.115, ACK: 7.000.207" + ], + [ + "59", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "59", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "59", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.115" + ], + [ + "59", + null, + null, + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "60", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "60", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "60", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.207, ACK: 6.000.143" + ], + [ + "61", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "61", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "61", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.207" + ], + [ + "61", + null, + null, + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "62", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "62", + "192.168.0.30", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "63", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "63", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "63", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.143, ACK: 7.000.211" + ], + [ + "64", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "64", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "64", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.143" + ], + [ + "64", + null, + null, + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "65", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "65", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "65", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.211, ACK: 6.000.173" + ], + [ + "66", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "66", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "66", + "56507", + "25", + "TCP", + "Transport", + "FIN, SEQ: 7.000.211" + ], + [ + "67", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "67", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "67", + "25", + "56507", + "TCP", + "Transport", + "FIN, SEQ: 6.000.173" + ], + [ + "68", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "68", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "68", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.212, ACK: 6.000.174" + ], + [ + "69", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "69", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "69", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.174, ACK: 7.000.212" + ], + [ + "70", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "70", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000202": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "2", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.30", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "3", + "02:00:00:00:02:12", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.10", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:13|192.168.0.30]" + ], + [ + "4", + "02:00:00:00:02:13", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.30", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "4", + "65069", + "53", + "UDP", + "Transport", + "" + ], + [ + "4", + null, + null, + "DNS", + "Anwendung", + "ID=27146 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n" + ], + [ + "5", + "02:00:00:00:02:12", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.10", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "5", + "53", + "65069", + "UDP", + "Transport", + "" + ], + [ + "5", + null, + null, + "DNS", + "Anwendung", + "ID=27146 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n" + ], + [ + "6", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000203": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "2", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "56784", + "25", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000" + ], + [ + "4", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "25", + "56784", + "TCP", + "Transport", + "SYN, SEQ: 2.000.000, ACK: 5.000.001" + ], + [ + "5", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 2.000.001" + ], + [ + "6", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.001" + ], + [ + "6", + null, + null, + "SMTP", + "Anwendung", + "220 Willkommen bei filius.de" + ], + [ + "7", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 2.000.029" + ], + [ + "8", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.001" + ], + [ + "8", + null, + null, + "SMTP", + "Anwendung", + "HELO 192.168.0.20" + ], + [ + "9", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.029, ACK: 5.000.018" + ], + [ + "10", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.029" + ], + [ + "10", + null, + null, + "SMTP", + "Anwendung", + "250 Hello 192.168.0.20" + ], + [ + "11", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.018, ACK: 2.000.051" + ], + [ + "12", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.018" + ], + [ + "12", + null, + null, + "SMTP", + "Anwendung", + "MAIL FROM: " + ], + [ + "13", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.051, ACK: 5.000.045" + ], + [ + "14", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.051" + ], + [ + "14", + null, + null, + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "15", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.045, ACK: 2.000.064" + ], + [ + "16", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.045" + ], + [ + "16", + null, + null, + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "17", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.064, ACK: 5.000.068" + ], + [ + "18", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.064" + ], + [ + "18", + null, + null, + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "19", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.068, ACK: 2.000.080" + ], + [ + "20", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "20", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.068" + ], + [ + "20", + null, + null, + "SMTP", + "Anwendung", + "DATA" + ], + [ + "21", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.080, ACK: 5.000.072" + ], + [ + "22", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.080" + ], + [ + "22", + null, + null, + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "23", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "23", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.072, ACK: 2.000.115" + ], + [ + "24", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "24", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.072" + ], + [ + "24", + null, + null, + "SMTP", + "Anwendung", + "From: Anna Muster \nTo: \nCc: Carla \nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n" + ], + [ + "25", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "25", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.115, ACK: 5.000.205" + ], + [ + "26", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.115" + ], + [ + "26", + null, + null, + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "27", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.205, ACK: 2.000.143" + ], + [ + "28", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "28", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.205" + ], + [ + "28", + null, + null, + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "29", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "29", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.143, ACK: 5.000.209" + ], + [ + "30", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "30", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.143" + ], + [ + "30", + null, + null, + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "31", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "31", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.209, ACK: 2.000.173" + ], + [ + "32", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "32", + "25", + "56784", + "TCP", + "Transport", + "FIN, SEQ: 2.000.173" + ], + [ + "33", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "33", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "33", + "56784", + "25", + "TCP", + "Transport", + "FIN, SEQ: 5.000.209" + ], + [ + "34", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "34", + "25", + "56784", + "TCP", + "Transport", + "SEQ: 2.000.174, ACK: 5.000.210" + ], + [ + "35", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "35", + "56507", + "25", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000" + ], + [ + "36", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "36", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "36", + "25", + "56507", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000, ACK: 7.000.001" + ], + [ + "37", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "56784", + "25", + "TCP", + "Transport", + "SEQ: 5.000.210, ACK: 2.000.174" + ], + [ + "38", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "38", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 6.000.001" + ], + [ + "39", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "39", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "39", + null, + null, + "SMTP", + "Anwendung", + "220 Willkommen bei filius.de" + ], + [ + "40", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "40", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "40", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 6.000.029" + ], + [ + "41", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "41", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "41", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "41", + null, + null, + "SMTP", + "Anwendung", + "HELO 192.168.0.20" + ], + [ + "42", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "42", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "42", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.029, ACK: 7.000.018" + ], + [ + "43", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "43", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.029" + ], + [ + "43", + null, + null, + "SMTP", + "Anwendung", + "250 Hello 192.168.0.20" + ], + [ + "44", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "44", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.018, ACK: 6.000.051" + ], + [ + "45", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "45", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.018" + ], + [ + "45", + null, + null, + "SMTP", + "Anwendung", + "MAIL FROM: " + ], + [ + "46", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "46", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.051, ACK: 7.000.045" + ], + [ + "47", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "47", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.051" + ], + [ + "47", + null, + null, + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "48", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "48", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "48", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.045, ACK: 6.000.064" + ], + [ + "49", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "49", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "49", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.045" + ], + [ + "49", + null, + null, + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "50", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "50", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "50", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.064, ACK: 7.000.070" + ], + [ + "51", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "51", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "51", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.064" + ], + [ + "51", + null, + null, + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "52", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "52", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "52", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.070, ACK: 6.000.080" + ], + [ + "53", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "53", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "53", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.070" + ], + [ + "53", + null, + null, + "SMTP", + "Anwendung", + "DATA" + ], + [ + "54", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "54", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "54", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.080, ACK: 7.000.074" + ], + [ + "55", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "55", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "55", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.080" + ], + [ + "55", + null, + null, + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "56", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "56", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "56", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.074, ACK: 6.000.115" + ], + [ + "57", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "57", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "57", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.074" + ], + [ + "57", + null, + null, + "SMTP", + "Anwendung", + "From: Anna Muster \nTo: \nCc: Carla \nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n" + ], + [ + "58", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "58", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "58", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.115, ACK: 7.000.207" + ], + [ + "59", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "59", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "59", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.115" + ], + [ + "59", + null, + null, + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "60", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "60", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "60", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.207, ACK: 6.000.143" + ], + [ + "61", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "61", + "192.168.0.30", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "62", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "62", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "62", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.207" + ], + [ + "62", + null, + null, + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "63", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "63", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "63", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.143, ACK: 7.000.211" + ], + [ + "64", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "64", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "64", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.143" + ], + [ + "64", + null, + null, + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "65", + "02:00:00:00:02:12", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x806" + ], + [ + "65", + "192.168.0.10", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:13|192.168.0.30]" + ], + [ + "66", + "02:00:00:00:02:13", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "66", + "192.168.0.30", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "66", + "65069", + "53", + "UDP", + "Transport", + "" + ], + [ + "66", + null, + null, + "DNS", + "Anwendung", + "ID=27146 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n" + ], + [ + "67", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "67", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "67", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.211, ACK: 6.000.173" + ], + [ + "68", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "68", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "68", + "25", + "56507", + "TCP", + "Transport", + "FIN, SEQ: 6.000.173" + ], + [ + "69", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "69", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "69", + "56507", + "25", + "TCP", + "Transport", + "FIN, SEQ: 7.000.211" + ], + [ + "70", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "70", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "70", + "25", + "56507", + "TCP", + "Transport", + "SEQ: 6.000.174, ACK: 7.000.212" + ], + [ + "71", + "02:00:00:00:02:12", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "71", + "192.168.0.10", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "71", + "53", + "65069", + "UDP", + "Transport", + "" + ], + [ + "71", + null, + null, + "DNS", + "Anwendung", + "ID=27146 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n" + ], + [ + "72", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "72", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "73", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "73", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "73", + "56507", + "25", + "TCP", + "Transport", + "SEQ: 7.000.212, ACK: 6.000.174" + ], + [ + "74", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x806" + ], + [ + "74", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:14 [op=REPLY, sender=02:00:00:00:02:14|192.168.0.31, target=02:00:00:00:02:13|192.168.0.30]" + ], + [ + "75", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "75", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "75", + "64361", + "25", + "TCP", + "Transport", + "SYN, SEQ: 9.000.000" + ], + [ + "76", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "76", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "76", + "25", + "64361", + "TCP", + "Transport", + "SYN, SEQ: 4.000.000, ACK: 9.000.001" + ], + [ + "77", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "77", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "77", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 4.000.001" + ], + [ + "78", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "78", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "78", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.001" + ], + [ + "78", + null, + null, + "SMTP", + "Anwendung", + "220 Willkommen bei andere.de" + ], + [ + "79", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "79", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "79", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 4.000.029" + ], + [ + "80", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "80", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "80", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.001" + ], + [ + "80", + null, + null, + "SMTP", + "Anwendung", + "HELO 192.168.0.30" + ], + [ + "81", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "81", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "81", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.029, ACK: 9.000.018" + ], + [ + "82", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "82", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "82", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.029" + ], + [ + "82", + null, + null, + "SMTP", + "Anwendung", + "250 Hello 192.168.0.30" + ], + [ + "83", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "83", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "83", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.018, ACK: 4.000.051" + ], + [ + "84", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "84", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "84", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.018" + ], + [ + "84", + null, + null, + "SMTP", + "Anwendung", + "MAIL FROM: " + ], + [ + "85", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "85", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "85", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.051, ACK: 9.000.045" + ], + [ + "86", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "86", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "86", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.051" + ], + [ + "86", + null, + null, + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "87", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "87", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "87", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.045, ACK: 4.000.064" + ], + [ + "88", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "88", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "88", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.045" + ], + [ + "88", + null, + null, + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "89", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "89", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "89", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.064, ACK: 9.000.070" + ], + [ + "90", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "90", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "90", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.064" + ], + [ + "90", + null, + null, + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "91", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "91", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "91", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.070, ACK: 4.000.080" + ], + [ + "92", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "92", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "92", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.070" + ], + [ + "92", + null, + null, + "SMTP", + "Anwendung", + "DATA" + ], + [ + "93", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "93", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "93", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.080, ACK: 9.000.074" + ], + [ + "94", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "94", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "94", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.080" + ], + [ + "94", + null, + null, + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "95", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "95", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "95", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.074, ACK: 4.000.115" + ], + [ + "96", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "96", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "96", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.074" + ], + [ + "96", + null, + null, + "SMTP", + "Anwendung", + "From: Anna Muster \nTo: \nCc: Carla \nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n" + ], + [ + "97", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "97", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "97", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.115, ACK: 9.000.207" + ], + [ + "98", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "98", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "98", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.115" + ], + [ + "98", + null, + null, + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "99", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "99", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "99", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.207, ACK: 4.000.143" + ], + [ + "100", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "100", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "100", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.207" + ], + [ + "100", + null, + null, + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "101", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "101", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "101", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.143, ACK: 9.000.211" + ], + [ + "102", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "102", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "102", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.143" + ], + [ + "102", + null, + null, + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "103", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "103", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "103", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.211, ACK: 4.000.173" + ], + [ + "104", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "104", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "104", + "64361", + "25", + "TCP", + "Transport", + "FIN, SEQ: 9.000.211" + ], + [ + "105", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "105", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "105", + "25", + "64361", + "TCP", + "Transport", + "FIN, SEQ: 4.000.173" + ], + [ + "106", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "106", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "106", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.212, ACK: 4.000.174" + ], + [ + "107", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "107", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "107", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.174, ACK: 9.000.212" + ] + ], + "00000000-0000-0000-0000-000000000204": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "2", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.30", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "3", + "02:00:00:00:02:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "4", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:14 [op=REPLY, sender=02:00:00:00:02:14|192.168.0.31, target=02:00:00:00:02:13|192.168.0.30]" + ], + [ + "5", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "64361", + "25", + "TCP", + "Transport", + "SYN, SEQ: 9.000.000" + ], + [ + "6", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "25", + "64361", + "TCP", + "Transport", + "SYN, SEQ: 4.000.000, ACK: 9.000.001" + ], + [ + "7", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 4.000.001" + ], + [ + "8", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.001" + ], + [ + "8", + null, + null, + "SMTP", + "Anwendung", + "220 Willkommen bei andere.de" + ], + [ + "9", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 4.000.029" + ], + [ + "10", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.001" + ], + [ + "10", + null, + null, + "SMTP", + "Anwendung", + "HELO 192.168.0.30" + ], + [ + "11", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.029, ACK: 9.000.018" + ], + [ + "12", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.029" + ], + [ + "12", + null, + null, + "SMTP", + "Anwendung", + "250 Hello 192.168.0.30" + ], + [ + "13", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.018, ACK: 4.000.051" + ], + [ + "14", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.018" + ], + [ + "14", + null, + null, + "SMTP", + "Anwendung", + "MAIL FROM: " + ], + [ + "15", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.051, ACK: 9.000.045" + ], + [ + "16", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.051" + ], + [ + "16", + null, + null, + "SMTP", + "Anwendung", + "250 Sender OK" + ], + [ + "17", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.045, ACK: 4.000.064" + ], + [ + "18", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.045" + ], + [ + "18", + null, + null, + "SMTP", + "Anwendung", + "RCPT TO:" + ], + [ + "19", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.064, ACK: 9.000.070" + ], + [ + "20", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "20", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.064" + ], + [ + "20", + null, + null, + "SMTP", + "Anwendung", + "250 Recipient OK" + ], + [ + "21", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.070, ACK: 4.000.080" + ], + [ + "22", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.070" + ], + [ + "22", + null, + null, + "SMTP", + "Anwendung", + "DATA" + ], + [ + "23", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "23", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.080, ACK: 9.000.074" + ], + [ + "24", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "24", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.080" + ], + [ + "24", + null, + null, + "SMTP", + "Anwendung", + "354 End data with ." + ], + [ + "25", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "25", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.074, ACK: 4.000.115" + ], + [ + "26", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.074" + ], + [ + "26", + null, + null, + "SMTP", + "Anwendung", + "From: Anna Muster \nTo: \nCc: Carla \nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n" + ], + [ + "27", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.115, ACK: 9.000.207" + ], + [ + "28", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "28", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.115" + ], + [ + "28", + null, + null, + "SMTP", + "Anwendung", + "250 Mail queued for delivery" + ], + [ + "29", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "29", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.207, ACK: 4.000.143" + ], + [ + "30", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "30", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.207" + ], + [ + "30", + null, + null, + "SMTP", + "Anwendung", + "QUIT" + ], + [ + "31", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "31", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.143, ACK: 9.000.211" + ], + [ + "32", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "32", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.143" + ], + [ + "32", + null, + null, + "SMTP", + "Anwendung", + "221 Server beendet Verbindung." + ], + [ + "33", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "33", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "33", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.211, ACK: 4.000.173" + ], + [ + "34", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "34", + "25", + "64361", + "TCP", + "Transport", + "FIN, SEQ: 4.000.173" + ], + [ + "35", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "35", + "64361", + "25", + "TCP", + "Transport", + "FIN, SEQ: 9.000.211" + ], + [ + "36", + "02:00:00:00:02:14", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "36", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "36", + "25", + "64361", + "TCP", + "Transport", + "SEQ: 4.000.174, ACK: 9.000.212" + ], + [ + "37", + "02:00:00:00:02:13", + "02:00:00:00:02:14", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "64361", + "25", + "TCP", + "Transport", + "SEQ: 9.000.212, ACK: 4.000.174" + ] + ] + }, + "events": [ + [ + 212, + "client", + "null" + ], + [ + 215, + "server", + "null" + ], + [ + 219, + "otherServer", + "null" + ], + [ + 501, + "client", + "call versendeEmail bob@filius.de | Carla | " + ], + [ + 504, + "client", + "----" + ], + [ + 1007, + "client", + "Verbindung zu 192.168.0.30:25 hergestellt" + ], + [ + 1119, + "server", + "----" + ], + [ + 1344, + "server", + "192.168.0.20> 220 Willkommen bei filius.de" + ], + [ + 1399, + "server", + "192.168.0.20< HELO 192.168.0.20" + ], + [ + 1678, + "server", + "192.168.0.20> 250 Hello 192.168.0.20" + ], + [ + 1733, + "server", + "192.168.0.20< MAIL FROM: " + ], + [ + 2012, + "server", + "192.168.0.20> 250 Sender OK" + ], + [ + 2068, + "server", + "192.168.0.20< RCPT TO:" + ], + [ + 2346, + "server", + "192.168.0.20> 250 Recipient OK" + ], + [ + 2402, + "server", + "192.168.0.20< DATA" + ], + [ + 2680, + "server", + "192.168.0.20> 354 End data with ." + ], + [ + 2735, + "server", + "192.168.0.20< From: Anna Muster \nTo: \nCc: Carla \nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n" + ], + [ + 3014, + "server", + "192.168.0.20> 250 Mail queued for delivery" + ], + [ + 3014, + "server", + "E-Mail für bob im Postfach gespeichert." + ], + [ + 3069, + "server", + "192.168.0.20< QUIT" + ], + [ + 3236, + "client", + "Mail versendet an bob@filius.de" + ], + [ + 3236, + "client", + "null" + ], + [ + 3236, + "client", + "Verbindung zu 192.168.0.30:25 getrennt" + ], + [ + 3237, + "client", + "----" + ], + [ + 3347, + "server", + "192.168.0.20> 221 Server beendet Verbindung." + ], + [ + 3637, + "client", + "Verbindung zu 192.168.0.30:25 hergestellt" + ], + [ + 3746, + "server", + "----" + ], + [ + 3968, + "server", + "192.168.0.20> 220 Willkommen bei filius.de" + ], + [ + 4024, + "server", + "192.168.0.20< HELO 192.168.0.20" + ], + [ + 4301, + "server", + "192.168.0.20> 250 Hello 192.168.0.20" + ], + [ + 4357, + "server", + "192.168.0.20< MAIL FROM: " + ], + [ + 4634, + "server", + "192.168.0.20> 250 Sender OK" + ], + [ + 4689, + "server", + "192.168.0.20< RCPT TO:" + ], + [ + 4967, + "server", + "192.168.0.20> 250 Recipient OK" + ], + [ + 5022, + "server", + "192.168.0.20< DATA" + ], + [ + 5299, + "server", + "192.168.0.20> 354 End data with ." + ], + [ + 5355, + "server", + "192.168.0.20< From: Anna Muster \nTo: \nCc: Carla \nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n" + ], + [ + 5632, + "server", + "192.168.0.20> 250 Mail queued for delivery" + ], + [ + 5688, + "server", + "192.168.0.20< QUIT" + ], + [ + 5860, + "client", + "Mail versendet an carla@andere.de" + ], + [ + 5860, + "client", + "null" + ], + [ + 5860, + "client", + "Verbindung zu 192.168.0.30:25 getrennt" + ], + [ + 5971, + "server", + "192.168.0.20> 221 Server beendet Verbindung." + ], + [ + 6086, + "server", + "----" + ], + [ + 6586, + "server", + "Verbindung zu 192.168.0.31:25 hergestellt" + ], + [ + 6724, + "otherServer", + "----" + ], + [ + 6946, + "otherServer", + "192.168.0.30> 220 Willkommen bei andere.de" + ], + [ + 7001, + "otherServer", + "192.168.0.30< HELO 192.168.0.30" + ], + [ + 7278, + "otherServer", + "192.168.0.30> 250 Hello 192.168.0.30" + ], + [ + 7333, + "otherServer", + "192.168.0.30< MAIL FROM: " + ], + [ + 7610, + "otherServer", + "192.168.0.30> 250 Sender OK" + ], + [ + 7665, + "otherServer", + "192.168.0.30< RCPT TO:" + ], + [ + 7942, + "otherServer", + "192.168.0.30> 250 Recipient OK" + ], + [ + 7998, + "otherServer", + "192.168.0.30< DATA" + ], + [ + 8275, + "otherServer", + "192.168.0.30> 354 End data with ." + ], + [ + 8330, + "otherServer", + "192.168.0.30< From: Anna Muster \nTo: \nCc: Carla \nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n" + ], + [ + 8607, + "otherServer", + "192.168.0.30> 250 Mail queued for delivery" + ], + [ + 8607, + "otherServer", + "E-Mail für carla im Postfach gespeichert." + ], + [ + 8662, + "otherServer", + "192.168.0.30< QUIT" + ], + [ + 8828, + "server", + "Mail versendet an carla@andere.de" + ], + [ + 8828, + "server", + "null" + ], + [ + 8829, + "server", + "Verbindung zu 192.168.0.31:25 getrennt" + ], + [ + 8939, + "otherServer", + "192.168.0.30> 221 Server beendet Verbindung." + ] + ], + "inbox": [], + "sent": [ + [ + "From: Anna Muster \nTo: \nCc: Carla \nSubject: Treffen\n\nHallo zusammen,\nbis morgen!", + "true", + "false" + ] + ], + "accounts": [ + [ + "anna", + [ + [ + "From: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile", + "true", + "false" + ], + [ + "From: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?", + "true", + "false" + ] + ] + ], + [ + "bob", + [ + [ + "From: Anna Muster \nTo: \nCc: Carla \nSubject: Treffen\n\nHallo zusammen,\nbis morgen!", + "true", + "false" + ] + ] + ] + ], + "otherAccounts": [ + [ + "carla", + [ + [ + "From: Anna Muster \nTo: \nCc: Carla \nSubject: Treffen\n\nHallo zusammen,\nbis morgen!", + "true", + "false" + ] + ] + ] + ] +} diff --git a/packages/core/test/scenarios/email-client-java-unknownHost.java.json b/packages/core/test/scenarios/email-client-java-unknownHost.java.json new file mode 100644 index 0000000..a61521b --- /dev/null +++ b/packages/core/test/scenarios/email-client-java-unknownHost.java.json @@ -0,0 +1,633 @@ +{ + "frames": { + "00000000-0000-0000-0000-000000000201": [ + { + "time": 541, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 810, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:11", + "arp": 2, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.20" + }, + { + "time": 819, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 52467, + "destinationPort": 53, + "payload": "ID=30279 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. A IN\n" + }, + { + "time": 1065, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 52467, + "payload": "ID=30279 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + } + ], + "00000000-0000-0000-0000-000000000202": [ + { + "time": 687, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 692, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:11", + "arp": 2, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.20" + }, + { + "time": 937, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 52467, + "destinationPort": 53, + "payload": "ID=30279 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. A IN\n" + }, + { + "time": 949, + "source": "02:00:00:00:02:12", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 52467, + "payload": "ID=30279 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + } + ], + "00000000-0000-0000-0000-000000000203": [ + { + "time": 690, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + } + ], + "00000000-0000-0000-0000-000000000204": [ + { + "time": 688, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + } + ] + }, + "rows": { + "00000000-0000-0000-0000-000000000201": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:02:11", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "3", + "192.168.0.20:52467", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "3", + "192.168.0.20:52467", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=30279 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. A IN\n" + ], + [ + "4", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "4", + "192.168.0.10:53", + "192.168.0.20:52467", + "UDP", + "Transport", + "" + ], + [ + "4", + "192.168.0.10:53", + "192.168.0.20:52467", + "DNS", + "Anwendung", + "ID=30279 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ] + ], + "00000000-0000-0000-0000-000000000202": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:02:11", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "3", + "192.168.0.20:52467", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "3", + "192.168.0.20:52467", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=30279 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. A IN\n" + ], + [ + "4", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "4", + "192.168.0.10:53", + "192.168.0.20:52467", + "UDP", + "Transport", + "" + ], + [ + "4", + "192.168.0.10:53", + "192.168.0.20:52467", + "DNS", + "Anwendung", + "ID=30279 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ] + ], + "00000000-0000-0000-0000-000000000203": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ] + ], + "00000000-0000-0000-0000-000000000204": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ] + ] + }, + "layeredRows": { + "00000000-0000-0000-0000-000000000201": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:02:11", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "3", + "52467", + "53", + "UDP", + "Transport", + "" + ], + [ + "3", + null, + null, + "DNS", + "Anwendung", + "ID=30279 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. A IN\n" + ], + [ + "4", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "4", + "53", + "52467", + "UDP", + "Transport", + "" + ], + [ + "4", + null, + null, + "DNS", + "Anwendung", + "ID=30279 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ] + ], + "00000000-0000-0000-0000-000000000202": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:02:11", + "02:00:00:00:02:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "3", + "52467", + "53", + "UDP", + "Transport", + "" + ], + [ + "3", + null, + null, + "DNS", + "Anwendung", + "ID=30279 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. A IN\n" + ], + [ + "4", + "02:00:00:00:02:12", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "4", + "53", + "52467", + "UDP", + "Transport", + "" + ], + [ + "4", + null, + null, + "DNS", + "Anwendung", + "ID=30279 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ] + ], + "00000000-0000-0000-0000-000000000203": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ] + ], + "00000000-0000-0000-0000-000000000204": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ] + ] + }, + "events": [ + [ + 284, + "client", + "null" + ], + [ + 304, + "server", + "null" + ], + [ + 317, + "otherServer", + "null" + ], + [ + 500, + "client", + "call versendeEmail bob@filius.de | | " + ], + [ + 508, + "client", + "----" + ], + [ + 1069, + "client", + "filius.exception.VerbindungsException: Ziel konnte nicht bestimmt werden!" + ] + ], + "inbox": [], + "sent": [], + "accounts": [ + [ + "anna", + [ + [ + "From: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile", + "true", + "false" + ], + [ + "From: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?", + "true", + "false" + ] + ] + ], + [ + "bob", + [] + ] + ], + "otherAccounts": [ + [ + "carla", + [] + ] + ] +} diff --git a/packages/core/test/scenarios/email-client-java-wrongPass.java.json b/packages/core/test/scenarios/email-client-java-wrongPass.java.json new file mode 100644 index 0000000..0c46721 --- /dev/null +++ b/packages/core/test/scenarios/email-client-java-wrongPass.java.json @@ -0,0 +1,2631 @@ +{ + "frames": { + "00000000-0000-0000-0000-000000000201": [ + { + "time": 522, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + }, + { + "time": 756, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "arp": 2, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.20" + }, + { + "time": 758, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 64754, + "destinationPort": 110, + "payload": null, + "tcpFlags": "S", + "sequence": 5000000, + "acknowledgement": 0 + }, + { + "time": 985, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 64754, + "payload": null, + "tcpFlags": "SA", + "sequence": 1000000, + "acknowledgement": 5000001 + }, + { + "time": 986, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 64754, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000001, + "acknowledgement": 1000001 + }, + { + "time": 1230, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 64754, + "payload": "+OK POP3 server ready", + "tcpFlags": "P", + "sequence": 1000001, + "acknowledgement": 0 + }, + { + "time": 1231, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 64754, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000001, + "acknowledgement": 1000022 + }, + { + "time": 1286, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 64754, + "destinationPort": 110, + "payload": "USER anna", + "tcpFlags": "P", + "sequence": 5000001, + "acknowledgement": 0 + }, + { + "time": 1509, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 64754, + "payload": null, + "tcpFlags": "A", + "sequence": 1000022, + "acknowledgement": 5000010 + }, + { + "time": 1565, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 64754, + "payload": "+OK enter password", + "tcpFlags": "P", + "sequence": 1000022, + "acknowledgement": 0 + }, + { + "time": 1565, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 64754, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000010, + "acknowledgement": 1000040 + }, + { + "time": 1621, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 64754, + "destinationPort": 110, + "payload": "PASS falsch", + "tcpFlags": "P", + "sequence": 5000010, + "acknowledgement": 0 + }, + { + "time": 1843, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 64754, + "payload": null, + "tcpFlags": "A", + "sequence": 1000040, + "acknowledgement": 5000021 + }, + { + "time": 1899, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 64754, + "payload": "-ERR user or password wrong", + "tcpFlags": "P", + "sequence": 1000040, + "acknowledgement": 0 + }, + { + "time": 1899, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 64754, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000021, + "acknowledgement": 1000067 + }, + { + "time": 1955, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 64754, + "destinationPort": 110, + "payload": null, + "tcpFlags": "F", + "sequence": 5000021, + "acknowledgement": 0 + }, + { + "time": 2177, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 64754, + "payload": null, + "tcpFlags": "A", + "sequence": 1000067, + "acknowledgement": 5000022 + }, + { + "time": 2233, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 64754, + "payload": null, + "tcpFlags": "F", + "sequence": 1000067, + "acknowledgement": 0 + }, + { + "time": 2233, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 64754, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000022, + "acknowledgement": 1000068 + } + ], + "00000000-0000-0000-0000-000000000202": [ + { + "time": 643, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + } + ], + "00000000-0000-0000-0000-000000000203": [ + { + "time": 643, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + }, + { + "time": 644, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "arp": 2, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.20" + }, + { + "time": 872, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 64754, + "destinationPort": 110, + "payload": null, + "tcpFlags": "S", + "sequence": 5000000, + "acknowledgement": 0 + }, + { + "time": 874, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 64754, + "payload": null, + "tcpFlags": "SA", + "sequence": 1000000, + "acknowledgement": 5000001 + }, + { + "time": 1097, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 64754, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000001, + "acknowledgement": 1000001 + }, + { + "time": 1119, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 64754, + "payload": "+OK POP3 server ready", + "tcpFlags": "P", + "sequence": 1000001, + "acknowledgement": 0 + }, + { + "time": 1342, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 64754, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000001, + "acknowledgement": 1000022 + }, + { + "time": 1397, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 64754, + "destinationPort": 110, + "payload": "USER anna", + "tcpFlags": "P", + "sequence": 5000001, + "acknowledgement": 0 + }, + { + "time": 1398, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 64754, + "payload": null, + "tcpFlags": "A", + "sequence": 1000022, + "acknowledgement": 5000010 + }, + { + "time": 1453, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 64754, + "payload": "+OK enter password", + "tcpFlags": "P", + "sequence": 1000022, + "acknowledgement": 0 + }, + { + "time": 1676, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 64754, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000010, + "acknowledgement": 1000040 + }, + { + "time": 1732, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 64754, + "destinationPort": 110, + "payload": "PASS falsch", + "tcpFlags": "P", + "sequence": 5000010, + "acknowledgement": 0 + }, + { + "time": 1732, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 64754, + "payload": null, + "tcpFlags": "A", + "sequence": 1000040, + "acknowledgement": 5000021 + }, + { + "time": 1788, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 64754, + "payload": "-ERR user or password wrong", + "tcpFlags": "P", + "sequence": 1000040, + "acknowledgement": 0 + }, + { + "time": 2010, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 64754, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000021, + "acknowledgement": 1000067 + }, + { + "time": 2066, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 64754, + "destinationPort": 110, + "payload": null, + "tcpFlags": "F", + "sequence": 5000021, + "acknowledgement": 0 + }, + { + "time": 2066, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 64754, + "payload": null, + "tcpFlags": "A", + "sequence": 1000067, + "acknowledgement": 5000022 + }, + { + "time": 2122, + "source": "02:00:00:00:02:13", + "destination": "02:00:00:00:02:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 110, + "destinationPort": 64754, + "payload": null, + "tcpFlags": "F", + "sequence": 1000067, + "acknowledgement": 0 + }, + { + "time": 2344, + "source": "02:00:00:00:02:11", + "destination": "02:00:00:00:02:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 64754, + "destinationPort": 110, + "payload": null, + "tcpFlags": "A", + "sequence": 5000022, + "acknowledgement": 1000068 + } + ], + "00000000-0000-0000-0000-000000000204": [ + { + "time": 643, + "source": "02:00:00:00:02:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + } + ] + }, + "rows": { + "00000000-0000-0000-0000-000000000201": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "2", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "192.168.0.20:64754", + "192.168.0.30:110", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000" + ], + [ + "4", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "192.168.0.30:110", + "192.168.0.20:64754", + "TCP", + "Transport", + "SYN, SEQ: 1.000.000, ACK: 5.000.001" + ], + [ + "5", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "192.168.0.20:64754", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 1.000.001" + ], + [ + "6", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "192.168.0.30:110", + "192.168.0.20:64754", + "TCP", + "Transport", + "SEQ: 1.000.001" + ], + [ + "6", + "192.168.0.30:110", + "192.168.0.20:64754", + "POP3", + "Anwendung", + "+OK POP3 server ready" + ], + [ + "7", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "192.168.0.20:64754", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 1.000.022" + ], + [ + "8", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "192.168.0.20:64754", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.001" + ], + [ + "8", + "192.168.0.20:64754", + "192.168.0.30:110", + "POP3", + "Anwendung", + "USER anna" + ], + [ + "9", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "192.168.0.30:110", + "192.168.0.20:64754", + "TCP", + "Transport", + "SEQ: 1.000.022, ACK: 5.000.010" + ], + [ + "10", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "192.168.0.30:110", + "192.168.0.20:64754", + "TCP", + "Transport", + "SEQ: 1.000.022" + ], + [ + "10", + "192.168.0.30:110", + "192.168.0.20:64754", + "POP3", + "Anwendung", + "+OK enter password" + ], + [ + "11", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "192.168.0.20:64754", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.010, ACK: 1.000.040" + ], + [ + "12", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "192.168.0.20:64754", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.010" + ], + [ + "12", + "192.168.0.20:64754", + "192.168.0.30:110", + "POP3", + "Anwendung", + "PASS falsch" + ], + [ + "13", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "192.168.0.30:110", + "192.168.0.20:64754", + "TCP", + "Transport", + "SEQ: 1.000.040, ACK: 5.000.021" + ], + [ + "14", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "192.168.0.30:110", + "192.168.0.20:64754", + "TCP", + "Transport", + "SEQ: 1.000.040" + ], + [ + "14", + "192.168.0.30:110", + "192.168.0.20:64754", + "POP3", + "Anwendung", + "-ERR user or password wrong" + ], + [ + "15", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "192.168.0.20:64754", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.021, ACK: 1.000.067" + ], + [ + "16", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "192.168.0.20:64754", + "192.168.0.30:110", + "TCP", + "Transport", + "FIN, SEQ: 5.000.021" + ], + [ + "17", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "192.168.0.30:110", + "192.168.0.20:64754", + "TCP", + "Transport", + "SEQ: 1.000.067, ACK: 5.000.022" + ], + [ + "18", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "192.168.0.30:110", + "192.168.0.20:64754", + "TCP", + "Transport", + "FIN, SEQ: 1.000.067" + ], + [ + "19", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "192.168.0.20:64754", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.022, ACK: 1.000.068" + ] + ], + "00000000-0000-0000-0000-000000000202": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ] + ], + "00000000-0000-0000-0000-000000000203": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "2", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "192.168.0.20:64754", + "192.168.0.30:110", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000" + ], + [ + "4", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "192.168.0.30:110", + "192.168.0.20:64754", + "TCP", + "Transport", + "SYN, SEQ: 1.000.000, ACK: 5.000.001" + ], + [ + "5", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "192.168.0.20:64754", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 1.000.001" + ], + [ + "6", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "192.168.0.30:110", + "192.168.0.20:64754", + "TCP", + "Transport", + "SEQ: 1.000.001" + ], + [ + "6", + "192.168.0.30:110", + "192.168.0.20:64754", + "POP3", + "Anwendung", + "+OK POP3 server ready" + ], + [ + "7", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "192.168.0.20:64754", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 1.000.022" + ], + [ + "8", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "192.168.0.20:64754", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.001" + ], + [ + "8", + "192.168.0.20:64754", + "192.168.0.30:110", + "POP3", + "Anwendung", + "USER anna" + ], + [ + "9", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "192.168.0.30:110", + "192.168.0.20:64754", + "TCP", + "Transport", + "SEQ: 1.000.022, ACK: 5.000.010" + ], + [ + "10", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "192.168.0.30:110", + "192.168.0.20:64754", + "TCP", + "Transport", + "SEQ: 1.000.022" + ], + [ + "10", + "192.168.0.30:110", + "192.168.0.20:64754", + "POP3", + "Anwendung", + "+OK enter password" + ], + [ + "11", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "192.168.0.20:64754", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.010, ACK: 1.000.040" + ], + [ + "12", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "192.168.0.20:64754", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.010" + ], + [ + "12", + "192.168.0.20:64754", + "192.168.0.30:110", + "POP3", + "Anwendung", + "PASS falsch" + ], + [ + "13", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "192.168.0.30:110", + "192.168.0.20:64754", + "TCP", + "Transport", + "SEQ: 1.000.040, ACK: 5.000.021" + ], + [ + "14", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "192.168.0.30:110", + "192.168.0.20:64754", + "TCP", + "Transport", + "SEQ: 1.000.040" + ], + [ + "14", + "192.168.0.30:110", + "192.168.0.20:64754", + "POP3", + "Anwendung", + "-ERR user or password wrong" + ], + [ + "15", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "192.168.0.20:64754", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.021, ACK: 1.000.067" + ], + [ + "16", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "192.168.0.20:64754", + "192.168.0.30:110", + "TCP", + "Transport", + "FIN, SEQ: 5.000.021" + ], + [ + "17", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "192.168.0.30:110", + "192.168.0.20:64754", + "TCP", + "Transport", + "SEQ: 1.000.067, ACK: 5.000.022" + ], + [ + "18", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "192.168.0.30:110", + "192.168.0.20:64754", + "TCP", + "Transport", + "FIN, SEQ: 1.000.067" + ], + [ + "19", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "192.168.0.20:64754", + "192.168.0.30:110", + "TCP", + "Transport", + "SEQ: 5.000.022, ACK: 1.000.068" + ] + ], + "00000000-0000-0000-0000-000000000204": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ] + ] + }, + "layeredRows": { + "00000000-0000-0000-0000-000000000201": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "2", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "64754", + "110", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000" + ], + [ + "4", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "110", + "64754", + "TCP", + "Transport", + "SYN, SEQ: 1.000.000, ACK: 5.000.001" + ], + [ + "5", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "64754", + "110", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 1.000.001" + ], + [ + "6", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "110", + "64754", + "TCP", + "Transport", + "SEQ: 1.000.001" + ], + [ + "6", + null, + null, + "POP3", + "Anwendung", + "+OK POP3 server ready" + ], + [ + "7", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "64754", + "110", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 1.000.022" + ], + [ + "8", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "64754", + "110", + "TCP", + "Transport", + "SEQ: 5.000.001" + ], + [ + "8", + null, + null, + "POP3", + "Anwendung", + "USER anna" + ], + [ + "9", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "110", + "64754", + "TCP", + "Transport", + "SEQ: 1.000.022, ACK: 5.000.010" + ], + [ + "10", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "110", + "64754", + "TCP", + "Transport", + "SEQ: 1.000.022" + ], + [ + "10", + null, + null, + "POP3", + "Anwendung", + "+OK enter password" + ], + [ + "11", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "64754", + "110", + "TCP", + "Transport", + "SEQ: 5.000.010, ACK: 1.000.040" + ], + [ + "12", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "64754", + "110", + "TCP", + "Transport", + "SEQ: 5.000.010" + ], + [ + "12", + null, + null, + "POP3", + "Anwendung", + "PASS falsch" + ], + [ + "13", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "110", + "64754", + "TCP", + "Transport", + "SEQ: 1.000.040, ACK: 5.000.021" + ], + [ + "14", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "110", + "64754", + "TCP", + "Transport", + "SEQ: 1.000.040" + ], + [ + "14", + null, + null, + "POP3", + "Anwendung", + "-ERR user or password wrong" + ], + [ + "15", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "64754", + "110", + "TCP", + "Transport", + "SEQ: 5.000.021, ACK: 1.000.067" + ], + [ + "16", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "64754", + "110", + "TCP", + "Transport", + "FIN, SEQ: 5.000.021" + ], + [ + "17", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "110", + "64754", + "TCP", + "Transport", + "SEQ: 1.000.067, ACK: 5.000.022" + ], + [ + "18", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "110", + "64754", + "TCP", + "Transport", + "FIN, SEQ: 1.000.067" + ], + [ + "19", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "64754", + "110", + "TCP", + "Transport", + "SEQ: 5.000.022, ACK: 1.000.068" + ] + ], + "00000000-0000-0000-0000-000000000202": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ] + ], + "00000000-0000-0000-0000-000000000203": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "2", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "64754", + "110", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000" + ], + [ + "4", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "110", + "64754", + "TCP", + "Transport", + "SYN, SEQ: 1.000.000, ACK: 5.000.001" + ], + [ + "5", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "64754", + "110", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 1.000.001" + ], + [ + "6", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "110", + "64754", + "TCP", + "Transport", + "SEQ: 1.000.001" + ], + [ + "6", + null, + null, + "POP3", + "Anwendung", + "+OK POP3 server ready" + ], + [ + "7", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "64754", + "110", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 1.000.022" + ], + [ + "8", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "64754", + "110", + "TCP", + "Transport", + "SEQ: 5.000.001" + ], + [ + "8", + null, + null, + "POP3", + "Anwendung", + "USER anna" + ], + [ + "9", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "110", + "64754", + "TCP", + "Transport", + "SEQ: 1.000.022, ACK: 5.000.010" + ], + [ + "10", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "110", + "64754", + "TCP", + "Transport", + "SEQ: 1.000.022" + ], + [ + "10", + null, + null, + "POP3", + "Anwendung", + "+OK enter password" + ], + [ + "11", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "64754", + "110", + "TCP", + "Transport", + "SEQ: 5.000.010, ACK: 1.000.040" + ], + [ + "12", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "64754", + "110", + "TCP", + "Transport", + "SEQ: 5.000.010" + ], + [ + "12", + null, + null, + "POP3", + "Anwendung", + "PASS falsch" + ], + [ + "13", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "110", + "64754", + "TCP", + "Transport", + "SEQ: 1.000.040, ACK: 5.000.021" + ], + [ + "14", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "110", + "64754", + "TCP", + "Transport", + "SEQ: 1.000.040" + ], + [ + "14", + null, + null, + "POP3", + "Anwendung", + "-ERR user or password wrong" + ], + [ + "15", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "64754", + "110", + "TCP", + "Transport", + "SEQ: 5.000.021, ACK: 1.000.067" + ], + [ + "16", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "64754", + "110", + "TCP", + "Transport", + "FIN, SEQ: 5.000.021" + ], + [ + "17", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "110", + "64754", + "TCP", + "Transport", + "SEQ: 1.000.067, ACK: 5.000.022" + ], + [ + "18", + "02:00:00:00:02:13", + "02:00:00:00:02:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "110", + "64754", + "TCP", + "Transport", + "FIN, SEQ: 1.000.067" + ], + [ + "19", + "02:00:00:00:02:11", + "02:00:00:00:02:13", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "64754", + "110", + "TCP", + "Transport", + "SEQ: 5.000.022, ACK: 1.000.068" + ] + ], + "00000000-0000-0000-0000-000000000204": [ + [ + "1", + "02:00:00:00:02:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ] + ] + }, + "events": [ + [ + 211, + "client", + "null" + ], + [ + 214, + "server", + "null" + ], + [ + 218, + "otherServer", + "null" + ], + [ + 500, + "client", + "call emailsAbholenEmails" + ], + [ + 1118, + "server", + "----" + ], + [ + 1118, + "server", + "192.168.0.20> +OK POP3 server ready" + ], + [ + 1398, + "server", + "192.168.0.20< USER anna" + ], + [ + 1401, + "server", + "192.168.0.20> +OK enter password" + ], + [ + 1732, + "server", + "192.168.0.20< PASS falsch" + ], + [ + 1733, + "server", + "192.168.0.20> -ERR user or password wrong" + ], + [ + 1900, + "client", + "java.lang.Exception: -ERR user or password wrong" + ], + [ + 1900, + "client", + "null" + ] + ], + "inbox": [], + "sent": [], + "accounts": [ + [ + "anna", + [ + [ + "From: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile", + "true", + "false" + ], + [ + "From: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?", + "true", + "false" + ] + ] + ], + [ + "bob", + [] + ] + ], + "otherAccounts": [ + [ + "carla", + [] + ] + ] +} diff --git a/packages/core/test/scenarios/email-java-pop3.java.json b/packages/core/test/scenarios/email-java-pop3.java.json index 6d87aca..e9bc68d 100644 --- a/packages/core/test/scenarios/email-java-pop3.java.json +++ b/packages/core/test/scenarios/email-java-pop3.java.json @@ -10,7 +10,7 @@ "targetIp": "192.168.0.30" }, { - "time": 751, + "time": 752, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "arp": 2, @@ -18,13 +18,13 @@ "targetIp": "192.168.0.20" }, { - "time": 753, + "time": 754, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "S", @@ -32,27 +32,27 @@ "acknowledgement": 0 }, { - "time": 980, + "time": 981, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": null, "tcpFlags": "SA", "sequence": 1000000, "acknowledgement": 3000001 }, { - "time": 980, + "time": 981, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -60,27 +60,27 @@ "acknowledgement": 1000001 }, { - "time": 1237, + "time": 1227, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": "+OK POP3 server ready", "tcpFlags": "P", "sequence": 1000001, "acknowledgement": 0 }, { - "time": 1237, + "time": 1228, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -88,13 +88,13 @@ "acknowledgement": 1000022 }, { - "time": 3000, + "time": 3001, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": "USER anna", "tcpFlags": "P", @@ -102,14 +102,14 @@ "acknowledgement": 0 }, { - "time": 3223, + "time": 3224, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": null, "tcpFlags": "A", "sequence": 1000022, @@ -123,7 +123,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": "+OK enter password", "tcpFlags": "P", "sequence": 1000022, @@ -136,7 +136,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -150,7 +150,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": "PASS geheim", "tcpFlags": "P", @@ -165,7 +165,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": null, "tcpFlags": "A", "sequence": 1000040, @@ -179,7 +179,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": "+OK Mailbox locked and ready", "tcpFlags": "P", "sequence": 1000040, @@ -192,7 +192,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -206,7 +206,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": "STAT", "tcpFlags": "P", @@ -221,21 +221,21 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": null, "tcpFlags": "A", "sequence": 1000068, "acknowledgement": 3000025 }, { - "time": 6278, + "time": 6279, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": "+OK 2 169", "tcpFlags": "P", "sequence": 1000068, @@ -248,7 +248,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -256,13 +256,13 @@ "acknowledgement": 1000077 }, { - "time": 7501, + "time": 7500, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": "LIST", "tcpFlags": "P", @@ -277,7 +277,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": null, "tcpFlags": "A", "sequence": 1000077, @@ -291,20 +291,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": "+OK 2 169\n0 80\n1 89\n", "tcpFlags": "P", "sequence": 1000077, "acknowledgement": 0 }, { - "time": 7778, + "time": 7779, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -318,7 +318,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": "RETR 0", "tcpFlags": "P", @@ -333,7 +333,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": null, "tcpFlags": "A", "sequence": 1000097, @@ -347,7 +347,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": "+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile", "tcpFlags": "P", "sequence": 1000097, @@ -360,7 +360,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -374,7 +374,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": "RETR 1", "tcpFlags": "P", @@ -389,7 +389,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": null, "tcpFlags": "A", "sequence": 1000219, @@ -403,7 +403,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": "+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?", "tcpFlags": "P", "sequence": 1000219, @@ -416,7 +416,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -430,7 +430,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": "DELE 0", "tcpFlags": "P", @@ -445,7 +445,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": null, "tcpFlags": "A", "sequence": 1000371, @@ -459,7 +459,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": "+OK message marked for delete", "tcpFlags": "P", "sequence": 1000371, @@ -472,7 +472,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -486,7 +486,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": "DELE 1", "tcpFlags": "P", @@ -501,7 +501,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": null, "tcpFlags": "A", "sequence": 1000400, @@ -515,7 +515,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": "+OK message marked for delete", "tcpFlags": "P", "sequence": 1000400, @@ -528,7 +528,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -542,7 +542,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": "QUIT", "tcpFlags": "P", @@ -557,7 +557,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": null, "tcpFlags": "A", "sequence": 1000429, @@ -571,7 +571,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": "+OK", "tcpFlags": "P", "sequence": 1000429, @@ -584,7 +584,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -599,20 +599,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": null, "tcpFlags": "F", "sequence": 1000432, "acknowledgement": 0 }, { - "time": 15501, + "time": 15500, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -620,13 +620,13 @@ "acknowledgement": 1000433 }, { - "time": 15556, + "time": 15557, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "F", @@ -634,14 +634,14 @@ "acknowledgement": 0 }, { - "time": 15778, + "time": 15779, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": null, "tcpFlags": "A", "sequence": 1000433, @@ -654,7 +654,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 63726, + "sourcePort": 55115, "destinationPort": 110, "payload": null, "tcpFlags": "S", @@ -669,7 +669,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 63726, + "destinationPort": 55115, "payload": null, "tcpFlags": "SA", "sequence": 4000000, @@ -682,7 +682,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 63726, + "sourcePort": 55115, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -690,27 +690,27 @@ "acknowledgement": 4000001 }, { - "time": 17971, + "time": 17963, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 63726, + "destinationPort": 55115, "payload": "+OK POP3 server ready", "tcpFlags": "P", "sequence": 4000001, "acknowledgement": 0 }, { - "time": 17972, + "time": 17963, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 63726, + "sourcePort": 55115, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -724,7 +724,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 63726, + "sourcePort": 55115, "destinationPort": 110, "payload": "USER anna", "tcpFlags": "P", @@ -739,7 +739,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 63726, + "destinationPort": 55115, "payload": null, "tcpFlags": "A", "sequence": 4000022, @@ -753,7 +753,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 63726, + "destinationPort": 55115, "payload": "+OK enter password", "tcpFlags": "P", "sequence": 4000022, @@ -766,7 +766,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 63726, + "sourcePort": 55115, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -780,7 +780,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 63726, + "sourcePort": 55115, "destinationPort": 110, "payload": "PASS geheim", "tcpFlags": "P", @@ -795,7 +795,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 63726, + "destinationPort": 55115, "payload": null, "tcpFlags": "A", "sequence": 4000040, @@ -809,20 +809,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 63726, + "destinationPort": 55115, "payload": "+OK Mailbox locked and ready", "tcpFlags": "P", "sequence": 4000040, "acknowledgement": 0 }, { - "time": 21778, + "time": 21777, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 63726, + "sourcePort": 55115, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -836,7 +836,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 63726, + "sourcePort": 55115, "destinationPort": 110, "payload": "STAT", "tcpFlags": "P", @@ -851,7 +851,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 63726, + "destinationPort": 55115, "payload": null, "tcpFlags": "A", "sequence": 4000068, @@ -865,20 +865,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 63726, + "destinationPort": 55115, "payload": "+OK 0 0", "tcpFlags": "P", "sequence": 4000068, "acknowledgement": 0 }, { - "time": 23279, + "time": 23278, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 63726, + "sourcePort": 55115, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -892,7 +892,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 63726, + "sourcePort": 55115, "destinationPort": 110, "payload": "QUIT", "tcpFlags": "P", @@ -907,34 +907,34 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 63726, + "destinationPort": 55115, "payload": null, "tcpFlags": "A", "sequence": 4000075, "acknowledgement": 5000029 }, { - "time": 24777, + "time": 24779, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 63726, + "destinationPort": 55115, "payload": "+OK", "tcpFlags": "P", "sequence": 4000075, "acknowledgement": 0 }, { - "time": 24777, + "time": 24779, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 63726, + "sourcePort": 55115, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -942,27 +942,27 @@ "acknowledgement": 4000078 }, { - "time": 24999, + "time": 25001, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 63726, + "destinationPort": 55115, "payload": null, "tcpFlags": "F", "sequence": 4000078, "acknowledgement": 0 }, { - "time": 24999, + "time": 25001, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 63726, + "sourcePort": 55115, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -970,13 +970,13 @@ "acknowledgement": 4000079 }, { - "time": 25055, + "time": 25056, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 63726, + "sourcePort": 55115, "destinationPort": 110, "payload": null, "tcpFlags": "F", @@ -984,14 +984,14 @@ "acknowledgement": 0 }, { - "time": 25276, + "time": 25278, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 63726, + "destinationPort": 55115, "payload": null, "tcpFlags": "A", "sequence": 4000079, @@ -1000,7 +1000,7 @@ ], "00000000-0000-0000-0000-000000000202": [ { - "time": 638, + "time": 639, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, @@ -1010,7 +1010,7 @@ ], "00000000-0000-0000-0000-000000000203": [ { - "time": 638, + "time": 639, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, @@ -1018,7 +1018,7 @@ "targetIp": "192.168.0.30" }, { - "time": 639, + "time": 640, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "arp": 2, @@ -1026,13 +1026,13 @@ "targetIp": "192.168.0.20" }, { - "time": 866, + "time": 867, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "S", @@ -1040,27 +1040,27 @@ "acknowledgement": 0 }, { - "time": 868, + "time": 869, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": null, "tcpFlags": "SA", "sequence": 1000000, "acknowledgement": 3000001 }, { - "time": 1091, + "time": 1093, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1068,27 +1068,27 @@ "acknowledgement": 1000001 }, { - "time": 1126, + "time": 1116, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": "+OK POP3 server ready", "tcpFlags": "P", "sequence": 1000001, "acknowledgement": 0 }, { - "time": 1348, + "time": 1339, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1102,7 +1102,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": "USER anna", "tcpFlags": "P", @@ -1117,7 +1117,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": null, "tcpFlags": "A", "sequence": 1000022, @@ -1131,7 +1131,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": "+OK enter password", "tcpFlags": "P", "sequence": 1000022, @@ -1144,7 +1144,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1158,7 +1158,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": "PASS geheim", "tcpFlags": "P", @@ -1173,7 +1173,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": null, "tcpFlags": "A", "sequence": 1000040, @@ -1187,7 +1187,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": "+OK Mailbox locked and ready", "tcpFlags": "P", "sequence": 1000040, @@ -1200,7 +1200,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1214,7 +1214,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": "STAT", "tcpFlags": "P", @@ -1229,7 +1229,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": null, "tcpFlags": "A", "sequence": 1000068, @@ -1243,7 +1243,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": "+OK 2 169", "tcpFlags": "P", "sequence": 1000068, @@ -1256,7 +1256,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1264,13 +1264,13 @@ "acknowledgement": 1000077 }, { - "time": 7612, + "time": 7611, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": "LIST", "tcpFlags": "P", @@ -1285,7 +1285,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": null, "tcpFlags": "A", "sequence": 1000077, @@ -1299,7 +1299,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": "+OK 2 169\n0 80\n1 89\n", "tcpFlags": "P", "sequence": 1000077, @@ -1312,7 +1312,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1326,7 +1326,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": "RETR 0", "tcpFlags": "P", @@ -1341,7 +1341,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": null, "tcpFlags": "A", "sequence": 1000097, @@ -1355,7 +1355,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": "+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile", "tcpFlags": "P", "sequence": 1000097, @@ -1368,7 +1368,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1382,7 +1382,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": "RETR 1", "tcpFlags": "P", @@ -1390,14 +1390,14 @@ "acknowledgement": 0 }, { - "time": 10612, + "time": 10611, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": null, "tcpFlags": "A", "sequence": 1000219, @@ -1411,7 +1411,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": "+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?", "tcpFlags": "P", "sequence": 1000219, @@ -1424,7 +1424,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1438,7 +1438,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": "DELE 0", "tcpFlags": "P", @@ -1453,7 +1453,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": null, "tcpFlags": "A", "sequence": 1000371, @@ -1467,20 +1467,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": "+OK message marked for delete", "tcpFlags": "P", "sequence": 1000371, "acknowledgement": 0 }, { - "time": 12388, + "time": 12389, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1494,7 +1494,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": "DELE 1", "tcpFlags": "P", @@ -1509,7 +1509,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": null, "tcpFlags": "A", "sequence": 1000400, @@ -1523,7 +1523,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": "+OK message marked for delete", "tcpFlags": "P", "sequence": 1000400, @@ -1536,7 +1536,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1550,7 +1550,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": "QUIT", "tcpFlags": "P", @@ -1558,14 +1558,14 @@ "acknowledgement": 0 }, { - "time": 15111, + "time": 15112, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": null, "tcpFlags": "A", "sequence": 1000429, @@ -1579,7 +1579,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": "+OK", "tcpFlags": "P", "sequence": 1000429, @@ -1592,7 +1592,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1600,27 +1600,27 @@ "acknowledgement": 1000432 }, { - "time": 15390, + "time": 15389, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": null, "tcpFlags": "F", "sequence": 1000432, "acknowledgement": 0 }, { - "time": 15611, + "time": 15613, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1628,13 +1628,13 @@ "acknowledgement": 1000433 }, { - "time": 15667, + "time": 15668, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65526, + "sourcePort": 65415, "destinationPort": 110, "payload": null, "tcpFlags": "F", @@ -1642,14 +1642,14 @@ "acknowledgement": 0 }, { - "time": 15667, + "time": 15668, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65526, + "destinationPort": 65415, "payload": null, "tcpFlags": "A", "sequence": 1000433, @@ -1662,7 +1662,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 63726, + "sourcePort": 55115, "destinationPort": 110, "payload": null, "tcpFlags": "S", @@ -1677,7 +1677,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 63726, + "destinationPort": 55115, "payload": null, "tcpFlags": "SA", "sequence": 4000000, @@ -1690,7 +1690,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 63726, + "sourcePort": 55115, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1698,27 +1698,27 @@ "acknowledgement": 4000001 }, { - "time": 17860, + "time": 17852, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 63726, + "destinationPort": 55115, "payload": "+OK POP3 server ready", "tcpFlags": "P", "sequence": 4000001, "acknowledgement": 0 }, { - "time": 18082, + "time": 18074, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 63726, + "sourcePort": 55115, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1732,7 +1732,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 63726, + "sourcePort": 55115, "destinationPort": 110, "payload": "USER anna", "tcpFlags": "P", @@ -1747,7 +1747,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 63726, + "destinationPort": 55115, "payload": null, "tcpFlags": "A", "sequence": 4000022, @@ -1761,7 +1761,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 63726, + "destinationPort": 55115, "payload": "+OK enter password", "tcpFlags": "P", "sequence": 4000022, @@ -1774,7 +1774,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 63726, + "sourcePort": 55115, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1788,7 +1788,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 63726, + "sourcePort": 55115, "destinationPort": 110, "payload": "PASS geheim", "tcpFlags": "P", @@ -1803,7 +1803,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 63726, + "destinationPort": 55115, "payload": null, "tcpFlags": "A", "sequence": 4000040, @@ -1817,7 +1817,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 63726, + "destinationPort": 55115, "payload": "+OK Mailbox locked and ready", "tcpFlags": "P", "sequence": 4000040, @@ -1830,7 +1830,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 63726, + "sourcePort": 55115, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1844,7 +1844,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 63726, + "sourcePort": 55115, "destinationPort": 110, "payload": "STAT", "tcpFlags": "P", @@ -1852,14 +1852,14 @@ "acknowledgement": 0 }, { - "time": 23112, + "time": 23111, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 63726, + "destinationPort": 55115, "payload": null, "tcpFlags": "A", "sequence": 4000068, @@ -1873,7 +1873,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 63726, + "destinationPort": 55115, "payload": "+OK 0 0", "tcpFlags": "P", "sequence": 4000068, @@ -1886,7 +1886,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 63726, + "sourcePort": 55115, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1900,7 +1900,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 63726, + "sourcePort": 55115, "destinationPort": 110, "payload": "QUIT", "tcpFlags": "P", @@ -1908,41 +1908,41 @@ "acknowledgement": 0 }, { - "time": 24611, + "time": 24612, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 63726, + "destinationPort": 55115, "payload": null, "tcpFlags": "A", "sequence": 4000075, "acknowledgement": 5000029 }, { - "time": 24666, + "time": 24667, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 63726, + "destinationPort": 55115, "payload": "+OK", "tcpFlags": "P", "sequence": 4000075, "acknowledgement": 0 }, { - "time": 24888, + "time": 24890, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 63726, + "sourcePort": 55115, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1950,27 +1950,27 @@ "acknowledgement": 4000078 }, { - "time": 24888, + "time": 24890, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 63726, + "destinationPort": 55115, "payload": null, "tcpFlags": "F", "sequence": 4000078, "acknowledgement": 0 }, { - "time": 25110, + "time": 25112, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 63726, + "sourcePort": 55115, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1978,13 +1978,13 @@ "acknowledgement": 4000079 }, { - "time": 25165, + "time": 25167, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 63726, + "sourcePort": 55115, "destinationPort": 110, "payload": null, "tcpFlags": "F", @@ -1992,14 +1992,14 @@ "acknowledgement": 0 }, { - "time": 25165, + "time": 25167, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 63726, + "destinationPort": 55115, "payload": null, "tcpFlags": "A", "sequence": 4000079, @@ -2008,7 +2008,7 @@ ], "00000000-0000-0000-0000-000000000204": [ { - "time": 638, + "time": 639, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, @@ -2069,7 +2069,7 @@ ], [ "3", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -2094,7 +2094,7 @@ [ "4", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 3.000.001" @@ -2117,7 +2117,7 @@ ], [ "5", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -2142,7 +2142,7 @@ [ "6", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.001" @@ -2150,7 +2150,7 @@ [ "6", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "POP3", "Anwendung", "+OK POP3 server ready" @@ -2173,7 +2173,7 @@ ], [ "7", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -2197,7 +2197,7 @@ ], [ "8", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -2205,7 +2205,7 @@ ], [ "8", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "POP3", "Anwendung", @@ -2230,7 +2230,7 @@ [ "9", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.022, ACK: 3.000.010" @@ -2254,7 +2254,7 @@ [ "10", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.022" @@ -2262,7 +2262,7 @@ [ "10", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "POP3", "Anwendung", "+OK enter password" @@ -2285,7 +2285,7 @@ ], [ "11", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -2309,7 +2309,7 @@ ], [ "12", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -2317,7 +2317,7 @@ ], [ "12", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "POP3", "Anwendung", @@ -2342,7 +2342,7 @@ [ "13", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.040, ACK: 3.000.021" @@ -2366,7 +2366,7 @@ [ "14", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.040" @@ -2374,7 +2374,7 @@ [ "14", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "POP3", "Anwendung", "+OK Mailbox locked and ready" @@ -2397,7 +2397,7 @@ ], [ "15", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -2421,7 +2421,7 @@ ], [ "16", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -2429,7 +2429,7 @@ ], [ "16", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "", "Anwendung", @@ -2454,7 +2454,7 @@ [ "17", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.068, ACK: 3.000.025" @@ -2478,7 +2478,7 @@ [ "18", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.068" @@ -2486,7 +2486,7 @@ [ "18", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "POP3", "Anwendung", "+OK 2 169" @@ -2509,7 +2509,7 @@ ], [ "19", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -2533,7 +2533,7 @@ ], [ "20", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -2541,7 +2541,7 @@ ], [ "20", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "", "Anwendung", @@ -2566,7 +2566,7 @@ [ "21", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.077, ACK: 3.000.029" @@ -2590,7 +2590,7 @@ [ "22", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.077" @@ -2598,7 +2598,7 @@ [ "22", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "POP3", "Anwendung", "+OK 2 169\n0 80\n1 89\n" @@ -2621,7 +2621,7 @@ ], [ "23", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -2645,7 +2645,7 @@ ], [ "24", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -2653,7 +2653,7 @@ ], [ "24", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "POP3", "Anwendung", @@ -2678,7 +2678,7 @@ [ "25", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.097, ACK: 3.000.035" @@ -2702,7 +2702,7 @@ [ "26", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.097" @@ -2710,7 +2710,7 @@ [ "26", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "POP3", "Anwendung", "+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile" @@ -2733,7 +2733,7 @@ ], [ "27", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -2757,7 +2757,7 @@ ], [ "28", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -2765,7 +2765,7 @@ ], [ "28", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "POP3", "Anwendung", @@ -2790,7 +2790,7 @@ [ "29", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.219, ACK: 3.000.041" @@ -2814,7 +2814,7 @@ [ "30", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.219" @@ -2822,7 +2822,7 @@ [ "30", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "POP3", "Anwendung", "+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?" @@ -2845,7 +2845,7 @@ ], [ "31", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -2869,7 +2869,7 @@ ], [ "32", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -2877,7 +2877,7 @@ ], [ "32", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "POP3", "Anwendung", @@ -2902,7 +2902,7 @@ [ "33", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.371, ACK: 3.000.047" @@ -2926,7 +2926,7 @@ [ "34", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.371" @@ -2934,7 +2934,7 @@ [ "34", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "POP3", "Anwendung", "+OK message marked for delete" @@ -2957,7 +2957,7 @@ ], [ "35", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -2981,7 +2981,7 @@ ], [ "36", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -2989,7 +2989,7 @@ ], [ "36", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "POP3", "Anwendung", @@ -3014,7 +3014,7 @@ [ "37", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.400, ACK: 3.000.053" @@ -3038,7 +3038,7 @@ [ "38", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.400" @@ -3046,7 +3046,7 @@ [ "38", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "POP3", "Anwendung", "+OK message marked for delete" @@ -3069,7 +3069,7 @@ ], [ "39", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -3093,7 +3093,7 @@ ], [ "40", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -3101,7 +3101,7 @@ ], [ "40", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "POP3", "Anwendung", @@ -3126,7 +3126,7 @@ [ "41", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.429, ACK: 3.000.057" @@ -3150,7 +3150,7 @@ [ "42", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.429" @@ -3158,7 +3158,7 @@ [ "42", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "POP3", "Anwendung", "+OK" @@ -3181,7 +3181,7 @@ ], [ "43", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -3206,7 +3206,7 @@ [ "44", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "FIN, SEQ: 1.000.432" @@ -3229,7 +3229,7 @@ ], [ "45", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -3253,7 +3253,7 @@ ], [ "46", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -3278,7 +3278,7 @@ [ "47", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.433, ACK: 3.000.058" @@ -3301,7 +3301,7 @@ ], [ "48", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "TCP", "Transport", @@ -3326,7 +3326,7 @@ [ "49", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "TCP", "Transport", "SYN, SEQ: 4.000.000, ACK: 5.000.001" @@ -3349,7 +3349,7 @@ ], [ "50", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "TCP", "Transport", @@ -3374,7 +3374,7 @@ [ "51", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "TCP", "Transport", "SEQ: 4.000.001" @@ -3382,7 +3382,7 @@ [ "51", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "POP3", "Anwendung", "+OK POP3 server ready" @@ -3405,7 +3405,7 @@ ], [ "52", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "TCP", "Transport", @@ -3429,7 +3429,7 @@ ], [ "53", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "TCP", "Transport", @@ -3437,7 +3437,7 @@ ], [ "53", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "POP3", "Anwendung", @@ -3462,7 +3462,7 @@ [ "54", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "TCP", "Transport", "SEQ: 4.000.022, ACK: 5.000.010" @@ -3486,7 +3486,7 @@ [ "55", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "TCP", "Transport", "SEQ: 4.000.022" @@ -3494,7 +3494,7 @@ [ "55", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "POP3", "Anwendung", "+OK enter password" @@ -3517,7 +3517,7 @@ ], [ "56", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "TCP", "Transport", @@ -3541,7 +3541,7 @@ ], [ "57", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "TCP", "Transport", @@ -3549,7 +3549,7 @@ ], [ "57", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "POP3", "Anwendung", @@ -3574,7 +3574,7 @@ [ "58", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "TCP", "Transport", "SEQ: 4.000.040, ACK: 5.000.021" @@ -3598,7 +3598,7 @@ [ "59", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "TCP", "Transport", "SEQ: 4.000.040" @@ -3606,7 +3606,7 @@ [ "59", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "POP3", "Anwendung", "+OK Mailbox locked and ready" @@ -3629,7 +3629,7 @@ ], [ "60", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "TCP", "Transport", @@ -3653,7 +3653,7 @@ ], [ "61", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "TCP", "Transport", @@ -3661,7 +3661,7 @@ ], [ "61", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "", "Anwendung", @@ -3686,7 +3686,7 @@ [ "62", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "TCP", "Transport", "SEQ: 4.000.068, ACK: 5.000.025" @@ -3710,7 +3710,7 @@ [ "63", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "TCP", "Transport", "SEQ: 4.000.068" @@ -3718,7 +3718,7 @@ [ "63", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "POP3", "Anwendung", "+OK 0 0" @@ -3741,7 +3741,7 @@ ], [ "64", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "TCP", "Transport", @@ -3765,7 +3765,7 @@ ], [ "65", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "TCP", "Transport", @@ -3773,7 +3773,7 @@ ], [ "65", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "POP3", "Anwendung", @@ -3798,7 +3798,7 @@ [ "66", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "TCP", "Transport", "SEQ: 4.000.075, ACK: 5.000.029" @@ -3822,7 +3822,7 @@ [ "67", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "TCP", "Transport", "SEQ: 4.000.075" @@ -3830,7 +3830,7 @@ [ "67", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "POP3", "Anwendung", "+OK" @@ -3853,7 +3853,7 @@ ], [ "68", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "TCP", "Transport", @@ -3878,7 +3878,7 @@ [ "69", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "TCP", "Transport", "FIN, SEQ: 4.000.078" @@ -3901,7 +3901,7 @@ ], [ "70", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "TCP", "Transport", @@ -3925,7 +3925,7 @@ ], [ "71", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "TCP", "Transport", @@ -3950,7 +3950,7 @@ [ "72", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "TCP", "Transport", "SEQ: 4.000.079, ACK: 5.000.030" @@ -4025,7 +4025,7 @@ ], [ "3", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -4050,7 +4050,7 @@ [ "4", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 3.000.001" @@ -4073,7 +4073,7 @@ ], [ "5", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -4098,7 +4098,7 @@ [ "6", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.001" @@ -4106,7 +4106,7 @@ [ "6", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "POP3", "Anwendung", "+OK POP3 server ready" @@ -4129,7 +4129,7 @@ ], [ "7", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -4153,7 +4153,7 @@ ], [ "8", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -4161,7 +4161,7 @@ ], [ "8", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "POP3", "Anwendung", @@ -4186,7 +4186,7 @@ [ "9", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.022, ACK: 3.000.010" @@ -4210,7 +4210,7 @@ [ "10", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.022" @@ -4218,7 +4218,7 @@ [ "10", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "POP3", "Anwendung", "+OK enter password" @@ -4241,7 +4241,7 @@ ], [ "11", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -4265,7 +4265,7 @@ ], [ "12", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -4273,7 +4273,7 @@ ], [ "12", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "POP3", "Anwendung", @@ -4298,7 +4298,7 @@ [ "13", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.040, ACK: 3.000.021" @@ -4322,7 +4322,7 @@ [ "14", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.040" @@ -4330,7 +4330,7 @@ [ "14", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "POP3", "Anwendung", "+OK Mailbox locked and ready" @@ -4353,7 +4353,7 @@ ], [ "15", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -4377,7 +4377,7 @@ ], [ "16", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -4385,7 +4385,7 @@ ], [ "16", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "", "Anwendung", @@ -4410,7 +4410,7 @@ [ "17", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.068, ACK: 3.000.025" @@ -4434,7 +4434,7 @@ [ "18", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.068" @@ -4442,7 +4442,7 @@ [ "18", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "POP3", "Anwendung", "+OK 2 169" @@ -4465,7 +4465,7 @@ ], [ "19", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -4489,7 +4489,7 @@ ], [ "20", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -4497,7 +4497,7 @@ ], [ "20", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "", "Anwendung", @@ -4522,7 +4522,7 @@ [ "21", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.077, ACK: 3.000.029" @@ -4546,7 +4546,7 @@ [ "22", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.077" @@ -4554,7 +4554,7 @@ [ "22", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "POP3", "Anwendung", "+OK 2 169\n0 80\n1 89\n" @@ -4577,7 +4577,7 @@ ], [ "23", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -4601,7 +4601,7 @@ ], [ "24", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -4609,7 +4609,7 @@ ], [ "24", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "POP3", "Anwendung", @@ -4634,7 +4634,7 @@ [ "25", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.097, ACK: 3.000.035" @@ -4658,7 +4658,7 @@ [ "26", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.097" @@ -4666,7 +4666,7 @@ [ "26", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "POP3", "Anwendung", "+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile" @@ -4689,7 +4689,7 @@ ], [ "27", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -4713,7 +4713,7 @@ ], [ "28", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -4721,7 +4721,7 @@ ], [ "28", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "POP3", "Anwendung", @@ -4746,7 +4746,7 @@ [ "29", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.219, ACK: 3.000.041" @@ -4770,7 +4770,7 @@ [ "30", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.219" @@ -4778,7 +4778,7 @@ [ "30", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "POP3", "Anwendung", "+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?" @@ -4801,7 +4801,7 @@ ], [ "31", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -4825,7 +4825,7 @@ ], [ "32", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -4833,7 +4833,7 @@ ], [ "32", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "POP3", "Anwendung", @@ -4858,7 +4858,7 @@ [ "33", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.371, ACK: 3.000.047" @@ -4882,7 +4882,7 @@ [ "34", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.371" @@ -4890,7 +4890,7 @@ [ "34", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "POP3", "Anwendung", "+OK message marked for delete" @@ -4913,7 +4913,7 @@ ], [ "35", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -4937,7 +4937,7 @@ ], [ "36", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -4945,7 +4945,7 @@ ], [ "36", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "POP3", "Anwendung", @@ -4970,7 +4970,7 @@ [ "37", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.400, ACK: 3.000.053" @@ -4994,7 +4994,7 @@ [ "38", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.400" @@ -5002,7 +5002,7 @@ [ "38", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "POP3", "Anwendung", "+OK message marked for delete" @@ -5025,7 +5025,7 @@ ], [ "39", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -5049,7 +5049,7 @@ ], [ "40", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -5057,7 +5057,7 @@ ], [ "40", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "POP3", "Anwendung", @@ -5082,7 +5082,7 @@ [ "41", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.429, ACK: 3.000.057" @@ -5106,7 +5106,7 @@ [ "42", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.429" @@ -5114,7 +5114,7 @@ [ "42", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "POP3", "Anwendung", "+OK" @@ -5137,7 +5137,7 @@ ], [ "43", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -5162,7 +5162,7 @@ [ "44", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "FIN, SEQ: 1.000.432" @@ -5185,7 +5185,7 @@ ], [ "45", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -5209,7 +5209,7 @@ ], [ "46", - "192.168.0.20:65526", + "192.168.0.20:65415", "192.168.0.30:110", "TCP", "Transport", @@ -5234,7 +5234,7 @@ [ "47", "192.168.0.30:110", - "192.168.0.20:65526", + "192.168.0.20:65415", "TCP", "Transport", "SEQ: 1.000.433, ACK: 3.000.058" @@ -5257,7 +5257,7 @@ ], [ "48", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "TCP", "Transport", @@ -5282,7 +5282,7 @@ [ "49", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "TCP", "Transport", "SYN, SEQ: 4.000.000, ACK: 5.000.001" @@ -5305,7 +5305,7 @@ ], [ "50", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "TCP", "Transport", @@ -5330,7 +5330,7 @@ [ "51", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "TCP", "Transport", "SEQ: 4.000.001" @@ -5338,7 +5338,7 @@ [ "51", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "POP3", "Anwendung", "+OK POP3 server ready" @@ -5361,7 +5361,7 @@ ], [ "52", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "TCP", "Transport", @@ -5385,7 +5385,7 @@ ], [ "53", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "TCP", "Transport", @@ -5393,7 +5393,7 @@ ], [ "53", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "POP3", "Anwendung", @@ -5418,7 +5418,7 @@ [ "54", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "TCP", "Transport", "SEQ: 4.000.022, ACK: 5.000.010" @@ -5442,7 +5442,7 @@ [ "55", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "TCP", "Transport", "SEQ: 4.000.022" @@ -5450,7 +5450,7 @@ [ "55", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "POP3", "Anwendung", "+OK enter password" @@ -5473,7 +5473,7 @@ ], [ "56", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "TCP", "Transport", @@ -5497,7 +5497,7 @@ ], [ "57", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "TCP", "Transport", @@ -5505,7 +5505,7 @@ ], [ "57", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "POP3", "Anwendung", @@ -5530,7 +5530,7 @@ [ "58", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "TCP", "Transport", "SEQ: 4.000.040, ACK: 5.000.021" @@ -5554,7 +5554,7 @@ [ "59", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "TCP", "Transport", "SEQ: 4.000.040" @@ -5562,7 +5562,7 @@ [ "59", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "POP3", "Anwendung", "+OK Mailbox locked and ready" @@ -5585,7 +5585,7 @@ ], [ "60", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "TCP", "Transport", @@ -5609,7 +5609,7 @@ ], [ "61", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "TCP", "Transport", @@ -5617,7 +5617,7 @@ ], [ "61", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "", "Anwendung", @@ -5642,7 +5642,7 @@ [ "62", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "TCP", "Transport", "SEQ: 4.000.068, ACK: 5.000.025" @@ -5666,7 +5666,7 @@ [ "63", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "TCP", "Transport", "SEQ: 4.000.068" @@ -5674,7 +5674,7 @@ [ "63", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "POP3", "Anwendung", "+OK 0 0" @@ -5697,7 +5697,7 @@ ], [ "64", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "TCP", "Transport", @@ -5721,7 +5721,7 @@ ], [ "65", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "TCP", "Transport", @@ -5729,7 +5729,7 @@ ], [ "65", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "POP3", "Anwendung", @@ -5754,7 +5754,7 @@ [ "66", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "TCP", "Transport", "SEQ: 4.000.075, ACK: 5.000.029" @@ -5778,7 +5778,7 @@ [ "67", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "TCP", "Transport", "SEQ: 4.000.075" @@ -5786,7 +5786,7 @@ [ "67", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "POP3", "Anwendung", "+OK" @@ -5809,7 +5809,7 @@ ], [ "68", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "TCP", "Transport", @@ -5834,7 +5834,7 @@ [ "69", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "TCP", "Transport", "FIN, SEQ: 4.000.078" @@ -5857,7 +5857,7 @@ ], [ "70", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "TCP", "Transport", @@ -5881,7 +5881,7 @@ ], [ "71", - "192.168.0.20:63726", + "192.168.0.20:55115", "192.168.0.30:110", "TCP", "Transport", @@ -5906,7 +5906,7 @@ [ "72", "192.168.0.30:110", - "192.168.0.20:63726", + "192.168.0.20:55115", "TCP", "Transport", "SEQ: 4.000.079, ACK: 5.000.030" @@ -5983,7 +5983,7 @@ ], [ "3", - "65526", + "65415", "110", "TCP", "Transport", @@ -6008,7 +6008,7 @@ [ "4", "110", - "65526", + "65415", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 3.000.001" @@ -6031,7 +6031,7 @@ ], [ "5", - "65526", + "65415", "110", "TCP", "Transport", @@ -6056,7 +6056,7 @@ [ "6", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.001" @@ -6087,7 +6087,7 @@ ], [ "7", - "65526", + "65415", "110", "TCP", "Transport", @@ -6111,7 +6111,7 @@ ], [ "8", - "65526", + "65415", "110", "TCP", "Transport", @@ -6144,7 +6144,7 @@ [ "9", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.022, ACK: 3.000.010" @@ -6168,7 +6168,7 @@ [ "10", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.022" @@ -6199,7 +6199,7 @@ ], [ "11", - "65526", + "65415", "110", "TCP", "Transport", @@ -6223,7 +6223,7 @@ ], [ "12", - "65526", + "65415", "110", "TCP", "Transport", @@ -6256,7 +6256,7 @@ [ "13", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.040, ACK: 3.000.021" @@ -6280,7 +6280,7 @@ [ "14", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.040" @@ -6311,7 +6311,7 @@ ], [ "15", - "65526", + "65415", "110", "TCP", "Transport", @@ -6335,7 +6335,7 @@ ], [ "16", - "65526", + "65415", "110", "TCP", "Transport", @@ -6368,7 +6368,7 @@ [ "17", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.068, ACK: 3.000.025" @@ -6392,7 +6392,7 @@ [ "18", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.068" @@ -6423,7 +6423,7 @@ ], [ "19", - "65526", + "65415", "110", "TCP", "Transport", @@ -6447,7 +6447,7 @@ ], [ "20", - "65526", + "65415", "110", "TCP", "Transport", @@ -6480,7 +6480,7 @@ [ "21", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.077, ACK: 3.000.029" @@ -6504,7 +6504,7 @@ [ "22", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.077" @@ -6535,7 +6535,7 @@ ], [ "23", - "65526", + "65415", "110", "TCP", "Transport", @@ -6559,7 +6559,7 @@ ], [ "24", - "65526", + "65415", "110", "TCP", "Transport", @@ -6592,7 +6592,7 @@ [ "25", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.097, ACK: 3.000.035" @@ -6616,7 +6616,7 @@ [ "26", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.097" @@ -6647,7 +6647,7 @@ ], [ "27", - "65526", + "65415", "110", "TCP", "Transport", @@ -6671,7 +6671,7 @@ ], [ "28", - "65526", + "65415", "110", "TCP", "Transport", @@ -6704,7 +6704,7 @@ [ "29", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.219, ACK: 3.000.041" @@ -6728,7 +6728,7 @@ [ "30", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.219" @@ -6759,7 +6759,7 @@ ], [ "31", - "65526", + "65415", "110", "TCP", "Transport", @@ -6783,7 +6783,7 @@ ], [ "32", - "65526", + "65415", "110", "TCP", "Transport", @@ -6816,7 +6816,7 @@ [ "33", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.371, ACK: 3.000.047" @@ -6840,7 +6840,7 @@ [ "34", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.371" @@ -6871,7 +6871,7 @@ ], [ "35", - "65526", + "65415", "110", "TCP", "Transport", @@ -6895,7 +6895,7 @@ ], [ "36", - "65526", + "65415", "110", "TCP", "Transport", @@ -6928,7 +6928,7 @@ [ "37", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.400, ACK: 3.000.053" @@ -6952,7 +6952,7 @@ [ "38", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.400" @@ -6983,7 +6983,7 @@ ], [ "39", - "65526", + "65415", "110", "TCP", "Transport", @@ -7007,7 +7007,7 @@ ], [ "40", - "65526", + "65415", "110", "TCP", "Transport", @@ -7040,7 +7040,7 @@ [ "41", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.429, ACK: 3.000.057" @@ -7064,7 +7064,7 @@ [ "42", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.429" @@ -7095,7 +7095,7 @@ ], [ "43", - "65526", + "65415", "110", "TCP", "Transport", @@ -7120,7 +7120,7 @@ [ "44", "110", - "65526", + "65415", "TCP", "Transport", "FIN, SEQ: 1.000.432" @@ -7143,7 +7143,7 @@ ], [ "45", - "65526", + "65415", "110", "TCP", "Transport", @@ -7167,7 +7167,7 @@ ], [ "46", - "65526", + "65415", "110", "TCP", "Transport", @@ -7192,7 +7192,7 @@ [ "47", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.433, ACK: 3.000.058" @@ -7215,7 +7215,7 @@ ], [ "48", - "63726", + "55115", "110", "TCP", "Transport", @@ -7240,7 +7240,7 @@ [ "49", "110", - "63726", + "55115", "TCP", "Transport", "SYN, SEQ: 4.000.000, ACK: 5.000.001" @@ -7263,7 +7263,7 @@ ], [ "50", - "63726", + "55115", "110", "TCP", "Transport", @@ -7288,7 +7288,7 @@ [ "51", "110", - "63726", + "55115", "TCP", "Transport", "SEQ: 4.000.001" @@ -7319,7 +7319,7 @@ ], [ "52", - "63726", + "55115", "110", "TCP", "Transport", @@ -7343,7 +7343,7 @@ ], [ "53", - "63726", + "55115", "110", "TCP", "Transport", @@ -7376,7 +7376,7 @@ [ "54", "110", - "63726", + "55115", "TCP", "Transport", "SEQ: 4.000.022, ACK: 5.000.010" @@ -7400,7 +7400,7 @@ [ "55", "110", - "63726", + "55115", "TCP", "Transport", "SEQ: 4.000.022" @@ -7431,7 +7431,7 @@ ], [ "56", - "63726", + "55115", "110", "TCP", "Transport", @@ -7455,7 +7455,7 @@ ], [ "57", - "63726", + "55115", "110", "TCP", "Transport", @@ -7488,7 +7488,7 @@ [ "58", "110", - "63726", + "55115", "TCP", "Transport", "SEQ: 4.000.040, ACK: 5.000.021" @@ -7512,7 +7512,7 @@ [ "59", "110", - "63726", + "55115", "TCP", "Transport", "SEQ: 4.000.040" @@ -7543,7 +7543,7 @@ ], [ "60", - "63726", + "55115", "110", "TCP", "Transport", @@ -7567,7 +7567,7 @@ ], [ "61", - "63726", + "55115", "110", "TCP", "Transport", @@ -7600,7 +7600,7 @@ [ "62", "110", - "63726", + "55115", "TCP", "Transport", "SEQ: 4.000.068, ACK: 5.000.025" @@ -7624,7 +7624,7 @@ [ "63", "110", - "63726", + "55115", "TCP", "Transport", "SEQ: 4.000.068" @@ -7655,7 +7655,7 @@ ], [ "64", - "63726", + "55115", "110", "TCP", "Transport", @@ -7679,7 +7679,7 @@ ], [ "65", - "63726", + "55115", "110", "TCP", "Transport", @@ -7712,7 +7712,7 @@ [ "66", "110", - "63726", + "55115", "TCP", "Transport", "SEQ: 4.000.075, ACK: 5.000.029" @@ -7736,7 +7736,7 @@ [ "67", "110", - "63726", + "55115", "TCP", "Transport", "SEQ: 4.000.075" @@ -7767,7 +7767,7 @@ ], [ "68", - "63726", + "55115", "110", "TCP", "Transport", @@ -7792,7 +7792,7 @@ [ "69", "110", - "63726", + "55115", "TCP", "Transport", "FIN, SEQ: 4.000.078" @@ -7815,7 +7815,7 @@ ], [ "70", - "63726", + "55115", "110", "TCP", "Transport", @@ -7839,7 +7839,7 @@ ], [ "71", - "63726", + "55115", "110", "TCP", "Transport", @@ -7864,7 +7864,7 @@ [ "72", "110", - "63726", + "55115", "TCP", "Transport", "SEQ: 4.000.079, ACK: 5.000.030" @@ -7939,7 +7939,7 @@ ], [ "3", - "65526", + "65415", "110", "TCP", "Transport", @@ -7964,7 +7964,7 @@ [ "4", "110", - "65526", + "65415", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 3.000.001" @@ -7987,7 +7987,7 @@ ], [ "5", - "65526", + "65415", "110", "TCP", "Transport", @@ -8012,7 +8012,7 @@ [ "6", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.001" @@ -8043,7 +8043,7 @@ ], [ "7", - "65526", + "65415", "110", "TCP", "Transport", @@ -8067,7 +8067,7 @@ ], [ "8", - "65526", + "65415", "110", "TCP", "Transport", @@ -8100,7 +8100,7 @@ [ "9", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.022, ACK: 3.000.010" @@ -8124,7 +8124,7 @@ [ "10", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.022" @@ -8155,7 +8155,7 @@ ], [ "11", - "65526", + "65415", "110", "TCP", "Transport", @@ -8179,7 +8179,7 @@ ], [ "12", - "65526", + "65415", "110", "TCP", "Transport", @@ -8212,7 +8212,7 @@ [ "13", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.040, ACK: 3.000.021" @@ -8236,7 +8236,7 @@ [ "14", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.040" @@ -8267,7 +8267,7 @@ ], [ "15", - "65526", + "65415", "110", "TCP", "Transport", @@ -8291,7 +8291,7 @@ ], [ "16", - "65526", + "65415", "110", "TCP", "Transport", @@ -8324,7 +8324,7 @@ [ "17", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.068, ACK: 3.000.025" @@ -8348,7 +8348,7 @@ [ "18", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.068" @@ -8379,7 +8379,7 @@ ], [ "19", - "65526", + "65415", "110", "TCP", "Transport", @@ -8403,7 +8403,7 @@ ], [ "20", - "65526", + "65415", "110", "TCP", "Transport", @@ -8436,7 +8436,7 @@ [ "21", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.077, ACK: 3.000.029" @@ -8460,7 +8460,7 @@ [ "22", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.077" @@ -8491,7 +8491,7 @@ ], [ "23", - "65526", + "65415", "110", "TCP", "Transport", @@ -8515,7 +8515,7 @@ ], [ "24", - "65526", + "65415", "110", "TCP", "Transport", @@ -8548,7 +8548,7 @@ [ "25", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.097, ACK: 3.000.035" @@ -8572,7 +8572,7 @@ [ "26", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.097" @@ -8603,7 +8603,7 @@ ], [ "27", - "65526", + "65415", "110", "TCP", "Transport", @@ -8627,7 +8627,7 @@ ], [ "28", - "65526", + "65415", "110", "TCP", "Transport", @@ -8660,7 +8660,7 @@ [ "29", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.219, ACK: 3.000.041" @@ -8684,7 +8684,7 @@ [ "30", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.219" @@ -8715,7 +8715,7 @@ ], [ "31", - "65526", + "65415", "110", "TCP", "Transport", @@ -8739,7 +8739,7 @@ ], [ "32", - "65526", + "65415", "110", "TCP", "Transport", @@ -8772,7 +8772,7 @@ [ "33", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.371, ACK: 3.000.047" @@ -8796,7 +8796,7 @@ [ "34", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.371" @@ -8827,7 +8827,7 @@ ], [ "35", - "65526", + "65415", "110", "TCP", "Transport", @@ -8851,7 +8851,7 @@ ], [ "36", - "65526", + "65415", "110", "TCP", "Transport", @@ -8884,7 +8884,7 @@ [ "37", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.400, ACK: 3.000.053" @@ -8908,7 +8908,7 @@ [ "38", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.400" @@ -8939,7 +8939,7 @@ ], [ "39", - "65526", + "65415", "110", "TCP", "Transport", @@ -8963,7 +8963,7 @@ ], [ "40", - "65526", + "65415", "110", "TCP", "Transport", @@ -8996,7 +8996,7 @@ [ "41", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.429, ACK: 3.000.057" @@ -9020,7 +9020,7 @@ [ "42", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.429" @@ -9051,7 +9051,7 @@ ], [ "43", - "65526", + "65415", "110", "TCP", "Transport", @@ -9076,7 +9076,7 @@ [ "44", "110", - "65526", + "65415", "TCP", "Transport", "FIN, SEQ: 1.000.432" @@ -9099,7 +9099,7 @@ ], [ "45", - "65526", + "65415", "110", "TCP", "Transport", @@ -9123,7 +9123,7 @@ ], [ "46", - "65526", + "65415", "110", "TCP", "Transport", @@ -9148,7 +9148,7 @@ [ "47", "110", - "65526", + "65415", "TCP", "Transport", "SEQ: 1.000.433, ACK: 3.000.058" @@ -9171,7 +9171,7 @@ ], [ "48", - "63726", + "55115", "110", "TCP", "Transport", @@ -9196,7 +9196,7 @@ [ "49", "110", - "63726", + "55115", "TCP", "Transport", "SYN, SEQ: 4.000.000, ACK: 5.000.001" @@ -9219,7 +9219,7 @@ ], [ "50", - "63726", + "55115", "110", "TCP", "Transport", @@ -9244,7 +9244,7 @@ [ "51", "110", - "63726", + "55115", "TCP", "Transport", "SEQ: 4.000.001" @@ -9275,7 +9275,7 @@ ], [ "52", - "63726", + "55115", "110", "TCP", "Transport", @@ -9299,7 +9299,7 @@ ], [ "53", - "63726", + "55115", "110", "TCP", "Transport", @@ -9332,7 +9332,7 @@ [ "54", "110", - "63726", + "55115", "TCP", "Transport", "SEQ: 4.000.022, ACK: 5.000.010" @@ -9356,7 +9356,7 @@ [ "55", "110", - "63726", + "55115", "TCP", "Transport", "SEQ: 4.000.022" @@ -9387,7 +9387,7 @@ ], [ "56", - "63726", + "55115", "110", "TCP", "Transport", @@ -9411,7 +9411,7 @@ ], [ "57", - "63726", + "55115", "110", "TCP", "Transport", @@ -9444,7 +9444,7 @@ [ "58", "110", - "63726", + "55115", "TCP", "Transport", "SEQ: 4.000.040, ACK: 5.000.021" @@ -9468,7 +9468,7 @@ [ "59", "110", - "63726", + "55115", "TCP", "Transport", "SEQ: 4.000.040" @@ -9499,7 +9499,7 @@ ], [ "60", - "63726", + "55115", "110", "TCP", "Transport", @@ -9523,7 +9523,7 @@ ], [ "61", - "63726", + "55115", "110", "TCP", "Transport", @@ -9556,7 +9556,7 @@ [ "62", "110", - "63726", + "55115", "TCP", "Transport", "SEQ: 4.000.068, ACK: 5.000.025" @@ -9580,7 +9580,7 @@ [ "63", "110", - "63726", + "55115", "TCP", "Transport", "SEQ: 4.000.068" @@ -9611,7 +9611,7 @@ ], [ "64", - "63726", + "55115", "110", "TCP", "Transport", @@ -9635,7 +9635,7 @@ ], [ "65", - "63726", + "55115", "110", "TCP", "Transport", @@ -9668,7 +9668,7 @@ [ "66", "110", - "63726", + "55115", "TCP", "Transport", "SEQ: 4.000.075, ACK: 5.000.029" @@ -9692,7 +9692,7 @@ [ "67", "110", - "63726", + "55115", "TCP", "Transport", "SEQ: 4.000.075" @@ -9723,7 +9723,7 @@ ], [ "68", - "63726", + "55115", "110", "TCP", "Transport", @@ -9748,7 +9748,7 @@ [ "69", "110", - "63726", + "55115", "TCP", "Transport", "FIN, SEQ: 4.000.078" @@ -9771,7 +9771,7 @@ ], [ "70", - "63726", + "55115", "110", "TCP", "Transport", @@ -9795,7 +9795,7 @@ ], [ "71", - "63726", + "55115", "110", "TCP", "Transport", @@ -9820,7 +9820,7 @@ [ "72", "110", - "63726", + "55115", "TCP", "Transport", "SEQ: 4.000.079, ACK: 5.000.030" @@ -9847,17 +9847,17 @@ }, "events": [ [ - 219, + 210, "client", "null" ], [ - 220, + 210, "server", "null" ], [ - 501, + 500, "client", "call verbinden 110" ], @@ -9867,17 +9867,17 @@ "Verbindung hergestellt" ], [ - 1125, + 1116, "server", "----" ], [ - 1125, + 1116, "server", "192.168.0.20> +OK POP3 server ready" ], [ - 1237, + 1228, "client", ">>+OK POP3 server ready" ], @@ -9887,7 +9887,7 @@ "call senden USER anna" ], [ - 3112, + 3113, "server", "192.168.0.20< USER anna" ], @@ -9902,7 +9902,7 @@ "<>+OK enter password" ], @@ -9947,7 +9947,7 @@ "192.168.0.20> +OK 2 169" ], [ - 6223, + 6224, "client", "<>+OK 2 169\n0 80\n1 89\n" ], @@ -9992,7 +9992,7 @@ "192.168.0.20< RETR 0" ], [ - 9112, + 9113, "server", "192.168.0.20> +OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile" ], @@ -10087,7 +10087,7 @@ "call senden QUIT" ], [ - 15111, + 15112, "server", "192.168.0.20< QUIT" ], @@ -10112,12 +10112,12 @@ ">>+OK" ], [ - 15501, + 15500, "client", "Socket zu 192.168.0.30:110 getrennt" ], [ - 17500, + 17501, "client", "call verbinden 110" ], @@ -10127,17 +10127,17 @@ "Verbindung hergestellt" ], [ - 17860, + 17852, "server", "----" ], [ - 17860, + 17852, "server", "192.168.0.20> +OK POP3 server ready" ], [ - 17971, + 17963, "client", ">>+OK POP3 server ready" ], @@ -10187,7 +10187,7 @@ "<>+OK Mailbox locked and ready" ], @@ -10202,12 +10202,12 @@ "192.168.0.20< STAT" ], [ - 23112, + 23111, "server", "192.168.0.20> +OK 0 0" ], [ - 23223, + 23222, "client", "< +OK" ], [ - 24722, + 24723, "client", "<>+OK" ], [ - 24999, + 25001, "client", "Socket zu 192.168.0.30:110 getrennt" ] diff --git a/packages/core/test/scenarios/email-java-pop3Errors.java.json b/packages/core/test/scenarios/email-java-pop3Errors.java.json index 03eb66b..5b30937 100644 --- a/packages/core/test/scenarios/email-java-pop3Errors.java.json +++ b/packages/core/test/scenarios/email-java-pop3Errors.java.json @@ -2,7 +2,7 @@ "frames": { "00000000-0000-0000-0000-000000000201": [ { - "time": 519, + "time": 517, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, @@ -18,13 +18,13 @@ "targetIp": "192.168.0.20" }, { - "time": 756, + "time": 755, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "S", @@ -39,7 +39,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": null, "tcpFlags": "SA", "sequence": 1000000, @@ -52,7 +52,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -67,20 +67,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": "+OK POP3 server ready", "tcpFlags": "P", "sequence": 1000001, "acknowledgement": 0 }, { - "time": 1229, + "time": 1228, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -94,7 +94,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": "NOOP", "tcpFlags": "P", @@ -109,7 +109,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": null, "tcpFlags": "A", "sequence": 1000022, @@ -123,7 +123,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": "-ERR unknown command", "tcpFlags": "P", "sequence": 1000022, @@ -136,7 +136,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -150,7 +150,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": "USER niemand", "tcpFlags": "P", @@ -165,21 +165,21 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": null, "tcpFlags": "A", "sequence": 1000042, "acknowledgement": 3000017 }, { - "time": 4778, + "time": 4779, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": "-ERR user or password wrong", "tcpFlags": "P", "sequence": 1000042, @@ -192,7 +192,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -200,13 +200,13 @@ "acknowledgement": 1000069 }, { - "time": 6000, + "time": 6001, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": "PASS x", "tcpFlags": "P", @@ -221,21 +221,21 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": null, "tcpFlags": "A", "sequence": 1000069, "acknowledgement": 3000023 }, { - "time": 6278, + "time": 6279, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": "-ERR Please enter PASS", "tcpFlags": "P", "sequence": 1000069, @@ -248,7 +248,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -262,7 +262,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": "USER anna", "tcpFlags": "P", @@ -277,21 +277,21 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": null, "tcpFlags": "A", "sequence": 1000091, "acknowledgement": 3000032 }, { - "time": 7779, + "time": 7778, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": "+OK enter password", "tcpFlags": "P", "sequence": 1000091, @@ -304,7 +304,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -312,13 +312,13 @@ "acknowledgement": 1000109 }, { - "time": 9001, + "time": 9000, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": "PASS falsch", "tcpFlags": "P", @@ -333,34 +333,34 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": null, "tcpFlags": "A", "sequence": 1000109, "acknowledgement": 3000043 }, { - "time": 9279, + "time": 9278, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": "-ERR user or password wrong", "tcpFlags": "P", "sequence": 1000109, "acknowledgement": 0 }, { - "time": 9279, + "time": 9278, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -368,13 +368,13 @@ "acknowledgement": 1000136 }, { - "time": 10501, + "time": 10500, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": "PASS geheim", "tcpFlags": "P", @@ -389,7 +389,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": null, "tcpFlags": "A", "sequence": 1000136, @@ -403,20 +403,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": "+OK Mailbox locked and ready", "tcpFlags": "P", "sequence": 1000136, "acknowledgement": 0 }, { - "time": 10779, + "time": 10778, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -424,13 +424,13 @@ "acknowledgement": 1000164 }, { - "time": 12001, + "time": 12000, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": "NOOP", "tcpFlags": "P", @@ -445,7 +445,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": null, "tcpFlags": "A", "sequence": 1000164, @@ -459,20 +459,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": "+OK", "tcpFlags": "P", "sequence": 1000164, "acknowledgement": 0 }, { - "time": 12278, + "time": 12279, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -486,7 +486,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": "USER bob", "tcpFlags": "P", @@ -501,7 +501,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": null, "tcpFlags": "A", "sequence": 1000167, @@ -515,7 +515,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": "-ERR Please enter USER", "tcpFlags": "P", "sequence": 1000167, @@ -528,7 +528,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -542,7 +542,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": "QUIT", "tcpFlags": "P", @@ -550,14 +550,14 @@ "acknowledgement": 0 }, { - "time": 15223, + "time": 15222, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": null, "tcpFlags": "A", "sequence": 1000189, @@ -571,7 +571,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": "+OK", "tcpFlags": "P", "sequence": 1000189, @@ -584,7 +584,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -599,7 +599,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": null, "tcpFlags": "F", "sequence": 1000192, @@ -612,7 +612,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -626,7 +626,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "F", @@ -641,7 +641,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": null, "tcpFlags": "A", "sequence": 1000193, @@ -668,7 +668,7 @@ "targetIp": "192.168.0.30" }, { - "time": 642, + "time": 641, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "arp": 2, @@ -682,7 +682,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "S", @@ -697,7 +697,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": null, "tcpFlags": "SA", "sequence": 1000000, @@ -710,7 +710,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -725,7 +725,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": "+OK POP3 server ready", "tcpFlags": "P", "sequence": 1000001, @@ -738,7 +738,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -752,7 +752,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": "NOOP", "tcpFlags": "P", @@ -767,7 +767,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": null, "tcpFlags": "A", "sequence": 1000022, @@ -781,7 +781,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": "-ERR unknown command", "tcpFlags": "P", "sequence": 1000022, @@ -794,7 +794,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -802,13 +802,13 @@ "acknowledgement": 1000042 }, { - "time": 4611, + "time": 4612, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": "USER niemand", "tcpFlags": "P", @@ -823,21 +823,21 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": null, "tcpFlags": "A", "sequence": 1000042, "acknowledgement": 3000017 }, { - "time": 4667, + "time": 4668, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": "-ERR user or password wrong", "tcpFlags": "P", "sequence": 1000042, @@ -850,7 +850,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -858,13 +858,13 @@ "acknowledgement": 1000069 }, { - "time": 6111, + "time": 6112, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": "PASS x", "tcpFlags": "P", @@ -879,21 +879,21 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": null, "tcpFlags": "A", "sequence": 1000069, "acknowledgement": 3000023 }, { - "time": 6167, + "time": 6168, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": "-ERR Please enter PASS", "tcpFlags": "P", "sequence": 1000069, @@ -906,7 +906,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -914,13 +914,13 @@ "acknowledgement": 1000091 }, { - "time": 7612, + "time": 7611, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": "USER anna", "tcpFlags": "P", @@ -935,34 +935,34 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": null, "tcpFlags": "A", "sequence": 1000091, "acknowledgement": 3000032 }, { - "time": 7668, + "time": 7667, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": "+OK enter password", "tcpFlags": "P", "sequence": 1000091, "acknowledgement": 0 }, { - "time": 7890, + "time": 7889, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -970,13 +970,13 @@ "acknowledgement": 1000109 }, { - "time": 9112, + "time": 9111, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": "PASS falsch", "tcpFlags": "P", @@ -991,21 +991,21 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": null, "tcpFlags": "A", "sequence": 1000109, "acknowledgement": 3000043 }, { - "time": 9168, + "time": 9167, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": "-ERR user or password wrong", "tcpFlags": "P", "sequence": 1000109, @@ -1018,7 +1018,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1026,13 +1026,13 @@ "acknowledgement": 1000136 }, { - "time": 10612, + "time": 10611, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": "PASS geheim", "tcpFlags": "P", @@ -1047,21 +1047,21 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": null, "tcpFlags": "A", "sequence": 1000136, "acknowledgement": 3000054 }, { - "time": 10668, + "time": 10667, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": "+OK Mailbox locked and ready", "tcpFlags": "P", "sequence": 1000136, @@ -1074,7 +1074,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1088,7 +1088,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": "NOOP", "tcpFlags": "P", @@ -1103,7 +1103,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": null, "tcpFlags": "A", "sequence": 1000164, @@ -1117,7 +1117,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": "+OK", "tcpFlags": "P", "sequence": 1000164, @@ -1130,7 +1130,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1144,7 +1144,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": "USER bob", "tcpFlags": "P", @@ -1159,7 +1159,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": null, "tcpFlags": "A", "sequence": 1000167, @@ -1173,7 +1173,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": "-ERR Please enter USER", "tcpFlags": "P", "sequence": 1000167, @@ -1186,7 +1186,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1194,13 +1194,13 @@ "acknowledgement": 1000189 }, { - "time": 15112, + "time": 15111, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": "QUIT", "tcpFlags": "P", @@ -1215,7 +1215,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": null, "tcpFlags": "A", "sequence": 1000189, @@ -1229,7 +1229,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": "+OK", "tcpFlags": "P", "sequence": 1000189, @@ -1242,7 +1242,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1257,7 +1257,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": null, "tcpFlags": "F", "sequence": 1000192, @@ -1270,7 +1270,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1284,7 +1284,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 58845, + "sourcePort": 49374, "destinationPort": 110, "payload": null, "tcpFlags": "F", @@ -1299,7 +1299,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 58845, + "destinationPort": 49374, "payload": null, "tcpFlags": "A", "sequence": 1000193, @@ -1369,7 +1369,7 @@ ], [ "3", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -1394,7 +1394,7 @@ [ "4", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 3.000.001" @@ -1417,7 +1417,7 @@ ], [ "5", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -1442,7 +1442,7 @@ [ "6", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.001" @@ -1450,7 +1450,7 @@ [ "6", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "POP3", "Anwendung", "+OK POP3 server ready" @@ -1473,7 +1473,7 @@ ], [ "7", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -1497,7 +1497,7 @@ ], [ "8", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -1505,7 +1505,7 @@ ], [ "8", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "POP3", "Anwendung", @@ -1530,7 +1530,7 @@ [ "9", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.022, ACK: 3.000.005" @@ -1554,7 +1554,7 @@ [ "10", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.022" @@ -1562,7 +1562,7 @@ [ "10", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "POP3", "Anwendung", "-ERR unknown command" @@ -1585,7 +1585,7 @@ ], [ "11", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -1609,7 +1609,7 @@ ], [ "12", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -1617,7 +1617,7 @@ ], [ "12", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "POP3", "Anwendung", @@ -1642,7 +1642,7 @@ [ "13", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.042, ACK: 3.000.017" @@ -1666,7 +1666,7 @@ [ "14", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.042" @@ -1674,7 +1674,7 @@ [ "14", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "POP3", "Anwendung", "-ERR user or password wrong" @@ -1697,7 +1697,7 @@ ], [ "15", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -1721,7 +1721,7 @@ ], [ "16", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -1729,7 +1729,7 @@ ], [ "16", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "POP3", "Anwendung", @@ -1754,7 +1754,7 @@ [ "17", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.069, ACK: 3.000.023" @@ -1778,7 +1778,7 @@ [ "18", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.069" @@ -1786,7 +1786,7 @@ [ "18", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "POP3", "Anwendung", "-ERR Please enter PASS" @@ -1809,7 +1809,7 @@ ], [ "19", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -1833,7 +1833,7 @@ ], [ "20", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -1841,7 +1841,7 @@ ], [ "20", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "POP3", "Anwendung", @@ -1866,7 +1866,7 @@ [ "21", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.091, ACK: 3.000.032" @@ -1890,7 +1890,7 @@ [ "22", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.091" @@ -1898,7 +1898,7 @@ [ "22", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "POP3", "Anwendung", "+OK enter password" @@ -1921,7 +1921,7 @@ ], [ "23", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -1945,7 +1945,7 @@ ], [ "24", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -1953,7 +1953,7 @@ ], [ "24", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "POP3", "Anwendung", @@ -1978,7 +1978,7 @@ [ "25", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.109, ACK: 3.000.043" @@ -2002,7 +2002,7 @@ [ "26", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.109" @@ -2010,7 +2010,7 @@ [ "26", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "POP3", "Anwendung", "-ERR user or password wrong" @@ -2033,7 +2033,7 @@ ], [ "27", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -2057,7 +2057,7 @@ ], [ "28", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -2065,7 +2065,7 @@ ], [ "28", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "POP3", "Anwendung", @@ -2090,7 +2090,7 @@ [ "29", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.136, ACK: 3.000.054" @@ -2114,7 +2114,7 @@ [ "30", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.136" @@ -2122,7 +2122,7 @@ [ "30", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "POP3", "Anwendung", "+OK Mailbox locked and ready" @@ -2145,7 +2145,7 @@ ], [ "31", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -2169,7 +2169,7 @@ ], [ "32", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -2177,7 +2177,7 @@ ], [ "32", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "POP3", "Anwendung", @@ -2202,7 +2202,7 @@ [ "33", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.164, ACK: 3.000.058" @@ -2226,7 +2226,7 @@ [ "34", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.164" @@ -2234,7 +2234,7 @@ [ "34", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "POP3", "Anwendung", "+OK" @@ -2257,7 +2257,7 @@ ], [ "35", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -2281,7 +2281,7 @@ ], [ "36", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -2289,7 +2289,7 @@ ], [ "36", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "POP3", "Anwendung", @@ -2314,7 +2314,7 @@ [ "37", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.167, ACK: 3.000.066" @@ -2338,7 +2338,7 @@ [ "38", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.167" @@ -2346,7 +2346,7 @@ [ "38", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "POP3", "Anwendung", "-ERR Please enter USER" @@ -2369,7 +2369,7 @@ ], [ "39", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -2393,7 +2393,7 @@ ], [ "40", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -2401,7 +2401,7 @@ ], [ "40", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "POP3", "Anwendung", @@ -2426,7 +2426,7 @@ [ "41", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.189, ACK: 3.000.070" @@ -2450,7 +2450,7 @@ [ "42", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.189" @@ -2458,7 +2458,7 @@ [ "42", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "POP3", "Anwendung", "+OK" @@ -2481,7 +2481,7 @@ ], [ "43", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -2506,7 +2506,7 @@ [ "44", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "FIN, SEQ: 1.000.192" @@ -2529,7 +2529,7 @@ ], [ "45", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -2553,7 +2553,7 @@ ], [ "46", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -2578,7 +2578,7 @@ [ "47", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.193, ACK: 3.000.071" @@ -2653,7 +2653,7 @@ ], [ "3", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -2678,7 +2678,7 @@ [ "4", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 3.000.001" @@ -2701,7 +2701,7 @@ ], [ "5", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -2726,7 +2726,7 @@ [ "6", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.001" @@ -2734,7 +2734,7 @@ [ "6", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "POP3", "Anwendung", "+OK POP3 server ready" @@ -2757,7 +2757,7 @@ ], [ "7", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -2781,7 +2781,7 @@ ], [ "8", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -2789,7 +2789,7 @@ ], [ "8", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "POP3", "Anwendung", @@ -2814,7 +2814,7 @@ [ "9", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.022, ACK: 3.000.005" @@ -2838,7 +2838,7 @@ [ "10", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.022" @@ -2846,7 +2846,7 @@ [ "10", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "POP3", "Anwendung", "-ERR unknown command" @@ -2869,7 +2869,7 @@ ], [ "11", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -2893,7 +2893,7 @@ ], [ "12", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -2901,7 +2901,7 @@ ], [ "12", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "POP3", "Anwendung", @@ -2926,7 +2926,7 @@ [ "13", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.042, ACK: 3.000.017" @@ -2950,7 +2950,7 @@ [ "14", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.042" @@ -2958,7 +2958,7 @@ [ "14", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "POP3", "Anwendung", "-ERR user or password wrong" @@ -2981,7 +2981,7 @@ ], [ "15", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -3005,7 +3005,7 @@ ], [ "16", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -3013,7 +3013,7 @@ ], [ "16", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "POP3", "Anwendung", @@ -3038,7 +3038,7 @@ [ "17", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.069, ACK: 3.000.023" @@ -3062,7 +3062,7 @@ [ "18", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.069" @@ -3070,7 +3070,7 @@ [ "18", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "POP3", "Anwendung", "-ERR Please enter PASS" @@ -3093,7 +3093,7 @@ ], [ "19", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -3117,7 +3117,7 @@ ], [ "20", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -3125,7 +3125,7 @@ ], [ "20", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "POP3", "Anwendung", @@ -3150,7 +3150,7 @@ [ "21", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.091, ACK: 3.000.032" @@ -3174,7 +3174,7 @@ [ "22", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.091" @@ -3182,7 +3182,7 @@ [ "22", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "POP3", "Anwendung", "+OK enter password" @@ -3205,7 +3205,7 @@ ], [ "23", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -3229,7 +3229,7 @@ ], [ "24", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -3237,7 +3237,7 @@ ], [ "24", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "POP3", "Anwendung", @@ -3262,7 +3262,7 @@ [ "25", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.109, ACK: 3.000.043" @@ -3286,7 +3286,7 @@ [ "26", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.109" @@ -3294,7 +3294,7 @@ [ "26", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "POP3", "Anwendung", "-ERR user or password wrong" @@ -3317,7 +3317,7 @@ ], [ "27", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -3341,7 +3341,7 @@ ], [ "28", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -3349,7 +3349,7 @@ ], [ "28", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "POP3", "Anwendung", @@ -3374,7 +3374,7 @@ [ "29", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.136, ACK: 3.000.054" @@ -3398,7 +3398,7 @@ [ "30", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.136" @@ -3406,7 +3406,7 @@ [ "30", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "POP3", "Anwendung", "+OK Mailbox locked and ready" @@ -3429,7 +3429,7 @@ ], [ "31", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -3453,7 +3453,7 @@ ], [ "32", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -3461,7 +3461,7 @@ ], [ "32", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "POP3", "Anwendung", @@ -3486,7 +3486,7 @@ [ "33", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.164, ACK: 3.000.058" @@ -3510,7 +3510,7 @@ [ "34", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.164" @@ -3518,7 +3518,7 @@ [ "34", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "POP3", "Anwendung", "+OK" @@ -3541,7 +3541,7 @@ ], [ "35", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -3565,7 +3565,7 @@ ], [ "36", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -3573,7 +3573,7 @@ ], [ "36", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "POP3", "Anwendung", @@ -3598,7 +3598,7 @@ [ "37", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.167, ACK: 3.000.066" @@ -3622,7 +3622,7 @@ [ "38", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.167" @@ -3630,7 +3630,7 @@ [ "38", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "POP3", "Anwendung", "-ERR Please enter USER" @@ -3653,7 +3653,7 @@ ], [ "39", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -3677,7 +3677,7 @@ ], [ "40", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -3685,7 +3685,7 @@ ], [ "40", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "POP3", "Anwendung", @@ -3710,7 +3710,7 @@ [ "41", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.189, ACK: 3.000.070" @@ -3734,7 +3734,7 @@ [ "42", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.189" @@ -3742,7 +3742,7 @@ [ "42", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "POP3", "Anwendung", "+OK" @@ -3765,7 +3765,7 @@ ], [ "43", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -3790,7 +3790,7 @@ [ "44", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "FIN, SEQ: 1.000.192" @@ -3813,7 +3813,7 @@ ], [ "45", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -3837,7 +3837,7 @@ ], [ "46", - "192.168.0.20:58845", + "192.168.0.20:49374", "192.168.0.30:110", "TCP", "Transport", @@ -3862,7 +3862,7 @@ [ "47", "192.168.0.30:110", - "192.168.0.20:58845", + "192.168.0.20:49374", "TCP", "Transport", "SEQ: 1.000.193, ACK: 3.000.071" @@ -3939,7 +3939,7 @@ ], [ "3", - "58845", + "49374", "110", "TCP", "Transport", @@ -3964,7 +3964,7 @@ [ "4", "110", - "58845", + "49374", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 3.000.001" @@ -3987,7 +3987,7 @@ ], [ "5", - "58845", + "49374", "110", "TCP", "Transport", @@ -4012,7 +4012,7 @@ [ "6", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.001" @@ -4043,7 +4043,7 @@ ], [ "7", - "58845", + "49374", "110", "TCP", "Transport", @@ -4067,7 +4067,7 @@ ], [ "8", - "58845", + "49374", "110", "TCP", "Transport", @@ -4100,7 +4100,7 @@ [ "9", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.022, ACK: 3.000.005" @@ -4124,7 +4124,7 @@ [ "10", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.022" @@ -4155,7 +4155,7 @@ ], [ "11", - "58845", + "49374", "110", "TCP", "Transport", @@ -4179,7 +4179,7 @@ ], [ "12", - "58845", + "49374", "110", "TCP", "Transport", @@ -4212,7 +4212,7 @@ [ "13", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.042, ACK: 3.000.017" @@ -4236,7 +4236,7 @@ [ "14", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.042" @@ -4267,7 +4267,7 @@ ], [ "15", - "58845", + "49374", "110", "TCP", "Transport", @@ -4291,7 +4291,7 @@ ], [ "16", - "58845", + "49374", "110", "TCP", "Transport", @@ -4324,7 +4324,7 @@ [ "17", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.069, ACK: 3.000.023" @@ -4348,7 +4348,7 @@ [ "18", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.069" @@ -4379,7 +4379,7 @@ ], [ "19", - "58845", + "49374", "110", "TCP", "Transport", @@ -4403,7 +4403,7 @@ ], [ "20", - "58845", + "49374", "110", "TCP", "Transport", @@ -4436,7 +4436,7 @@ [ "21", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.091, ACK: 3.000.032" @@ -4460,7 +4460,7 @@ [ "22", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.091" @@ -4491,7 +4491,7 @@ ], [ "23", - "58845", + "49374", "110", "TCP", "Transport", @@ -4515,7 +4515,7 @@ ], [ "24", - "58845", + "49374", "110", "TCP", "Transport", @@ -4548,7 +4548,7 @@ [ "25", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.109, ACK: 3.000.043" @@ -4572,7 +4572,7 @@ [ "26", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.109" @@ -4603,7 +4603,7 @@ ], [ "27", - "58845", + "49374", "110", "TCP", "Transport", @@ -4627,7 +4627,7 @@ ], [ "28", - "58845", + "49374", "110", "TCP", "Transport", @@ -4660,7 +4660,7 @@ [ "29", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.136, ACK: 3.000.054" @@ -4684,7 +4684,7 @@ [ "30", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.136" @@ -4715,7 +4715,7 @@ ], [ "31", - "58845", + "49374", "110", "TCP", "Transport", @@ -4739,7 +4739,7 @@ ], [ "32", - "58845", + "49374", "110", "TCP", "Transport", @@ -4772,7 +4772,7 @@ [ "33", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.164, ACK: 3.000.058" @@ -4796,7 +4796,7 @@ [ "34", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.164" @@ -4827,7 +4827,7 @@ ], [ "35", - "58845", + "49374", "110", "TCP", "Transport", @@ -4851,7 +4851,7 @@ ], [ "36", - "58845", + "49374", "110", "TCP", "Transport", @@ -4884,7 +4884,7 @@ [ "37", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.167, ACK: 3.000.066" @@ -4908,7 +4908,7 @@ [ "38", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.167" @@ -4939,7 +4939,7 @@ ], [ "39", - "58845", + "49374", "110", "TCP", "Transport", @@ -4963,7 +4963,7 @@ ], [ "40", - "58845", + "49374", "110", "TCP", "Transport", @@ -4996,7 +4996,7 @@ [ "41", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.189, ACK: 3.000.070" @@ -5020,7 +5020,7 @@ [ "42", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.189" @@ -5051,7 +5051,7 @@ ], [ "43", - "58845", + "49374", "110", "TCP", "Transport", @@ -5076,7 +5076,7 @@ [ "44", "110", - "58845", + "49374", "TCP", "Transport", "FIN, SEQ: 1.000.192" @@ -5099,7 +5099,7 @@ ], [ "45", - "58845", + "49374", "110", "TCP", "Transport", @@ -5123,7 +5123,7 @@ ], [ "46", - "58845", + "49374", "110", "TCP", "Transport", @@ -5148,7 +5148,7 @@ [ "47", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.193, ACK: 3.000.071" @@ -5223,7 +5223,7 @@ ], [ "3", - "58845", + "49374", "110", "TCP", "Transport", @@ -5248,7 +5248,7 @@ [ "4", "110", - "58845", + "49374", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 3.000.001" @@ -5271,7 +5271,7 @@ ], [ "5", - "58845", + "49374", "110", "TCP", "Transport", @@ -5296,7 +5296,7 @@ [ "6", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.001" @@ -5327,7 +5327,7 @@ ], [ "7", - "58845", + "49374", "110", "TCP", "Transport", @@ -5351,7 +5351,7 @@ ], [ "8", - "58845", + "49374", "110", "TCP", "Transport", @@ -5384,7 +5384,7 @@ [ "9", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.022, ACK: 3.000.005" @@ -5408,7 +5408,7 @@ [ "10", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.022" @@ -5439,7 +5439,7 @@ ], [ "11", - "58845", + "49374", "110", "TCP", "Transport", @@ -5463,7 +5463,7 @@ ], [ "12", - "58845", + "49374", "110", "TCP", "Transport", @@ -5496,7 +5496,7 @@ [ "13", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.042, ACK: 3.000.017" @@ -5520,7 +5520,7 @@ [ "14", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.042" @@ -5551,7 +5551,7 @@ ], [ "15", - "58845", + "49374", "110", "TCP", "Transport", @@ -5575,7 +5575,7 @@ ], [ "16", - "58845", + "49374", "110", "TCP", "Transport", @@ -5608,7 +5608,7 @@ [ "17", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.069, ACK: 3.000.023" @@ -5632,7 +5632,7 @@ [ "18", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.069" @@ -5663,7 +5663,7 @@ ], [ "19", - "58845", + "49374", "110", "TCP", "Transport", @@ -5687,7 +5687,7 @@ ], [ "20", - "58845", + "49374", "110", "TCP", "Transport", @@ -5720,7 +5720,7 @@ [ "21", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.091, ACK: 3.000.032" @@ -5744,7 +5744,7 @@ [ "22", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.091" @@ -5775,7 +5775,7 @@ ], [ "23", - "58845", + "49374", "110", "TCP", "Transport", @@ -5799,7 +5799,7 @@ ], [ "24", - "58845", + "49374", "110", "TCP", "Transport", @@ -5832,7 +5832,7 @@ [ "25", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.109, ACK: 3.000.043" @@ -5856,7 +5856,7 @@ [ "26", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.109" @@ -5887,7 +5887,7 @@ ], [ "27", - "58845", + "49374", "110", "TCP", "Transport", @@ -5911,7 +5911,7 @@ ], [ "28", - "58845", + "49374", "110", "TCP", "Transport", @@ -5944,7 +5944,7 @@ [ "29", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.136, ACK: 3.000.054" @@ -5968,7 +5968,7 @@ [ "30", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.136" @@ -5999,7 +5999,7 @@ ], [ "31", - "58845", + "49374", "110", "TCP", "Transport", @@ -6023,7 +6023,7 @@ ], [ "32", - "58845", + "49374", "110", "TCP", "Transport", @@ -6056,7 +6056,7 @@ [ "33", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.164, ACK: 3.000.058" @@ -6080,7 +6080,7 @@ [ "34", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.164" @@ -6111,7 +6111,7 @@ ], [ "35", - "58845", + "49374", "110", "TCP", "Transport", @@ -6135,7 +6135,7 @@ ], [ "36", - "58845", + "49374", "110", "TCP", "Transport", @@ -6168,7 +6168,7 @@ [ "37", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.167, ACK: 3.000.066" @@ -6192,7 +6192,7 @@ [ "38", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.167" @@ -6223,7 +6223,7 @@ ], [ "39", - "58845", + "49374", "110", "TCP", "Transport", @@ -6247,7 +6247,7 @@ ], [ "40", - "58845", + "49374", "110", "TCP", "Transport", @@ -6280,7 +6280,7 @@ [ "41", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.189, ACK: 3.000.070" @@ -6304,7 +6304,7 @@ [ "42", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.189" @@ -6335,7 +6335,7 @@ ], [ "43", - "58845", + "49374", "110", "TCP", "Transport", @@ -6360,7 +6360,7 @@ [ "44", "110", - "58845", + "49374", "TCP", "Transport", "FIN, SEQ: 1.000.192" @@ -6383,7 +6383,7 @@ ], [ "45", - "58845", + "49374", "110", "TCP", "Transport", @@ -6407,7 +6407,7 @@ ], [ "46", - "58845", + "49374", "110", "TCP", "Transport", @@ -6432,7 +6432,7 @@ [ "47", "110", - "58845", + "49374", "TCP", "Transport", "SEQ: 1.000.193, ACK: 3.000.071" @@ -6474,7 +6474,7 @@ "call verbinden 110" ], [ - 1005, + 1004, "client", "Verbindung hergestellt" ], @@ -6489,7 +6489,7 @@ "192.168.0.20> +OK POP3 server ready" ], [ - 1229, + 1228, "client", ">>+OK POP3 server ready" ], @@ -6499,7 +6499,7 @@ "call senden NOOP" ], [ - 3113, + 3112, "server", "192.168.0.20< NOOP" ], @@ -6514,7 +6514,7 @@ "<>-ERR unknown command" ], @@ -6544,7 +6544,7 @@ ">>-ERR user or password wrong" ], [ - 6000, + 6001, "client", "call senden PASS x" ], @@ -6559,12 +6559,12 @@ "192.168.0.20> -ERR Please enter PASS" ], [ - 6223, + 6224, "client", "<>-ERR Please enter PASS" ], @@ -6574,12 +6574,12 @@ "call senden USER anna" ], [ - 7612, + 7611, "server", "192.168.0.20< USER anna" ], [ - 7617, + 7616, "server", "192.168.0.20> +OK enter password" ], @@ -6589,7 +6589,7 @@ "<>+OK enter password" ], @@ -6604,7 +6604,7 @@ "192.168.0.20< PASS falsch" ], [ - 9113, + 9112, "server", "192.168.0.20> -ERR user or password wrong" ], @@ -6614,7 +6614,7 @@ "<>-ERR user or password wrong" ], @@ -6639,7 +6639,7 @@ "<>+OK Mailbox locked and ready" ], diff --git a/packages/core/test/scenarios/email-java-smtp.java.json b/packages/core/test/scenarios/email-java-smtp.java.json index ef305b9..5a590f4 100644 --- a/packages/core/test/scenarios/email-java-smtp.java.json +++ b/packages/core/test/scenarios/email-java-smtp.java.json @@ -2,7 +2,7 @@ "frames": { "00000000-0000-0000-0000-000000000201": [ { - "time": 520, + "time": 517, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, @@ -10,7 +10,7 @@ "targetIp": "192.168.0.30" }, { - "time": 756, + "time": 752, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "arp": 2, @@ -18,13 +18,13 @@ "targetIp": "192.168.0.20" }, { - "time": 758, + "time": 755, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": null, "tcpFlags": "S", @@ -32,27 +32,27 @@ "acknowledgement": 0 }, { - "time": 986, + "time": 983, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": null, "tcpFlags": "SA", "sequence": 2000000, "acknowledgement": 3000001 }, { - "time": 986, + "time": 983, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -60,27 +60,27 @@ "acknowledgement": 2000001 }, { - "time": 1228, + "time": 1230, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": "220 Willkommen bei filius.de", "tcpFlags": "P", "sequence": 2000001, "acknowledgement": 0 }, { - "time": 1229, + "time": 1230, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -88,13 +88,13 @@ "acknowledgement": 2000029 }, { - "time": 3001, + "time": 3000, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": "HELO 192.168.0.20", "tcpFlags": "P", @@ -109,7 +109,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": null, "tcpFlags": "A", "sequence": 2000029, @@ -123,7 +123,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": "250 Hello 192.168.0.20", "tcpFlags": "P", "sequence": 2000029, @@ -136,7 +136,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -150,7 +150,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": "MAIL FROM: ", "tcpFlags": "P", @@ -165,7 +165,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": null, "tcpFlags": "A", "sequence": 2000051, @@ -179,7 +179,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": "250 Sender OK", "tcpFlags": "P", "sequence": 2000051, @@ -192,7 +192,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -200,13 +200,13 @@ "acknowledgement": 2000064 }, { - "time": 6001, + "time": 6000, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": "RCPT TO:", "tcpFlags": "P", @@ -221,21 +221,21 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": null, "tcpFlags": "A", "sequence": 2000064, "acknowledgement": 3000068 }, { - "time": 6279, + "time": 6278, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": "250 Recipient OK", "tcpFlags": "P", "sequence": 2000064, @@ -248,7 +248,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -262,7 +262,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": "DATA", "tcpFlags": "P", @@ -270,14 +270,14 @@ "acknowledgement": 0 }, { - "time": 7722, + "time": 7723, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": null, "tcpFlags": "A", "sequence": 2000080, @@ -291,20 +291,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": "354 End data with .", "tcpFlags": "P", "sequence": 2000080, "acknowledgement": 0 }, { - "time": 7778, + "time": 7779, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -318,7 +318,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": "From: Bob Beispiel \nTo: \nSubject: Gruß\n\nHallo Anna,\nwie geht's?\u000d\n.\u000d\n", "tcpFlags": "P", @@ -326,14 +326,14 @@ "acknowledgement": 0 }, { - "time": 9222, + "time": 9223, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": null, "tcpFlags": "A", "sequence": 2000115, @@ -347,20 +347,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": "250 Mail queued for delivery", "tcpFlags": "P", "sequence": 2000115, "acknowledgement": 0 }, { - "time": 9278, + "time": 9279, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -374,7 +374,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": "QUIT", "tcpFlags": "P", @@ -389,7 +389,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": null, "tcpFlags": "A", "sequence": 2000143, @@ -403,7 +403,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": "221 Server beendet Verbindung.", "tcpFlags": "P", "sequence": 2000143, @@ -416,7 +416,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -424,27 +424,27 @@ "acknowledgement": 2000173 }, { - "time": 11000, + "time": 11001, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": null, "tcpFlags": "F", "sequence": 2000173, "acknowledgement": 0 }, { - "time": 11000, + "time": 11001, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -452,13 +452,13 @@ "acknowledgement": 2000174 }, { - "time": 11056, + "time": 11057, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": null, "tcpFlags": "F", @@ -473,7 +473,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": null, "tcpFlags": "A", "sequence": 2000174, @@ -482,7 +482,7 @@ ], "00000000-0000-0000-0000-000000000202": [ { - "time": 643, + "time": 640, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, @@ -492,7 +492,7 @@ ], "00000000-0000-0000-0000-000000000203": [ { - "time": 643, + "time": 640, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, @@ -500,7 +500,7 @@ "targetIp": "192.168.0.30" }, { - "time": 644, + "time": 641, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "arp": 2, @@ -508,13 +508,13 @@ "targetIp": "192.168.0.20" }, { - "time": 872, + "time": 869, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": null, "tcpFlags": "S", @@ -522,27 +522,27 @@ "acknowledgement": 0 }, { - "time": 874, + "time": 871, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": null, "tcpFlags": "SA", "sequence": 2000000, "acknowledgement": 3000001 }, { - "time": 1097, + "time": 1094, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -550,27 +550,27 @@ "acknowledgement": 2000001 }, { - "time": 1117, + "time": 1118, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": "220 Willkommen bei filius.de", "tcpFlags": "P", "sequence": 2000001, "acknowledgement": 0 }, { - "time": 1340, + "time": 1341, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -578,13 +578,13 @@ "acknowledgement": 2000029 }, { - "time": 3112, + "time": 3111, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": "HELO 192.168.0.20", "tcpFlags": "P", @@ -599,7 +599,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": null, "tcpFlags": "A", "sequence": 2000029, @@ -613,20 +613,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": "250 Hello 192.168.0.20", "tcpFlags": "P", "sequence": 2000029, "acknowledgement": 0 }, { - "time": 3391, + "time": 3390, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -640,7 +640,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": "MAIL FROM: ", "tcpFlags": "P", @@ -655,7 +655,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": null, "tcpFlags": "A", "sequence": 2000051, @@ -669,7 +669,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": "250 Sender OK", "tcpFlags": "P", "sequence": 2000051, @@ -682,7 +682,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -690,13 +690,13 @@ "acknowledgement": 2000064 }, { - "time": 6112, + "time": 6111, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": "RCPT TO:", "tcpFlags": "P", @@ -711,21 +711,21 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": null, "tcpFlags": "A", "sequence": 2000064, "acknowledgement": 3000068 }, { - "time": 6168, + "time": 6167, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": "250 Recipient OK", "tcpFlags": "P", "sequence": 2000064, @@ -738,7 +738,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -752,7 +752,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": "DATA", "tcpFlags": "P", @@ -760,14 +760,14 @@ "acknowledgement": 0 }, { - "time": 7611, + "time": 7612, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": null, "tcpFlags": "A", "sequence": 2000080, @@ -781,20 +781,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": "354 End data with .", "tcpFlags": "P", "sequence": 2000080, "acknowledgement": 0 }, { - "time": 7889, + "time": 7890, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -808,7 +808,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": "From: Bob Beispiel \nTo: \nSubject: Gruß\n\nHallo Anna,\nwie geht's?\u000d\n.\u000d\n", "tcpFlags": "P", @@ -823,7 +823,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": null, "tcpFlags": "A", "sequence": 2000115, @@ -837,20 +837,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": "250 Mail queued for delivery", "tcpFlags": "P", "sequence": 2000115, "acknowledgement": 0 }, { - "time": 9389, + "time": 9390, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -864,7 +864,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": "QUIT", "tcpFlags": "P", @@ -872,14 +872,14 @@ "acknowledgement": 0 }, { - "time": 10611, + "time": 10612, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": null, "tcpFlags": "A", "sequence": 2000143, @@ -893,7 +893,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": "221 Server beendet Verbindung.", "tcpFlags": "P", "sequence": 2000143, @@ -906,7 +906,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -921,20 +921,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": null, "tcpFlags": "F", "sequence": 2000173, "acknowledgement": 0 }, { - "time": 11111, + "time": 11112, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -948,7 +948,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 56648, + "sourcePort": 52469, "destinationPort": 25, "payload": null, "tcpFlags": "F", @@ -956,14 +956,14 @@ "acknowledgement": 0 }, { - "time": 11167, + "time": 11168, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 56648, + "destinationPort": 52469, "payload": null, "tcpFlags": "A", "sequence": 2000174, @@ -972,7 +972,7 @@ ], "00000000-0000-0000-0000-000000000204": [ { - "time": 643, + "time": 640, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, @@ -1033,7 +1033,7 @@ ], [ "3", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -1058,7 +1058,7 @@ [ "4", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SYN, SEQ: 2.000.000, ACK: 3.000.001" @@ -1081,7 +1081,7 @@ ], [ "5", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -1106,7 +1106,7 @@ [ "6", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.001" @@ -1114,7 +1114,7 @@ [ "6", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "SMTP", "Anwendung", "220 Willkommen bei filius.de" @@ -1137,7 +1137,7 @@ ], [ "7", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -1161,7 +1161,7 @@ ], [ "8", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -1169,7 +1169,7 @@ ], [ "8", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "SMTP", "Anwendung", @@ -1194,7 +1194,7 @@ [ "9", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.029, ACK: 3.000.018" @@ -1218,7 +1218,7 @@ [ "10", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.029" @@ -1226,7 +1226,7 @@ [ "10", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "SMTP", "Anwendung", "250 Hello 192.168.0.20" @@ -1249,7 +1249,7 @@ ], [ "11", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -1273,7 +1273,7 @@ ], [ "12", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -1281,7 +1281,7 @@ ], [ "12", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "SMTP", "Anwendung", @@ -1306,7 +1306,7 @@ [ "13", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.051, ACK: 3.000.044" @@ -1330,7 +1330,7 @@ [ "14", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.051" @@ -1338,7 +1338,7 @@ [ "14", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "SMTP", "Anwendung", "250 Sender OK" @@ -1361,7 +1361,7 @@ ], [ "15", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -1385,7 +1385,7 @@ ], [ "16", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -1393,7 +1393,7 @@ ], [ "16", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "SMTP", "Anwendung", @@ -1418,7 +1418,7 @@ [ "17", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.064, ACK: 3.000.068" @@ -1442,7 +1442,7 @@ [ "18", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.064" @@ -1450,7 +1450,7 @@ [ "18", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "SMTP", "Anwendung", "250 Recipient OK" @@ -1473,7 +1473,7 @@ ], [ "19", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -1497,7 +1497,7 @@ ], [ "20", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -1505,7 +1505,7 @@ ], [ "20", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "SMTP", "Anwendung", @@ -1530,7 +1530,7 @@ [ "21", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.080, ACK: 3.000.072" @@ -1554,7 +1554,7 @@ [ "22", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.080" @@ -1562,7 +1562,7 @@ [ "22", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "SMTP", "Anwendung", "354 End data with ." @@ -1585,7 +1585,7 @@ ], [ "23", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -1609,7 +1609,7 @@ ], [ "24", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -1617,7 +1617,7 @@ ], [ "24", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "SMTP", "Anwendung", @@ -1642,7 +1642,7 @@ [ "25", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.115, ACK: 3.000.171" @@ -1666,7 +1666,7 @@ [ "26", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.115" @@ -1674,7 +1674,7 @@ [ "26", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "SMTP", "Anwendung", "250 Mail queued for delivery" @@ -1697,7 +1697,7 @@ ], [ "27", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -1721,7 +1721,7 @@ ], [ "28", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -1729,7 +1729,7 @@ ], [ "28", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "SMTP", "Anwendung", @@ -1754,7 +1754,7 @@ [ "29", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.143, ACK: 3.000.175" @@ -1778,7 +1778,7 @@ [ "30", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.143" @@ -1786,7 +1786,7 @@ [ "30", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "SMTP", "Anwendung", "221 Server beendet Verbindung." @@ -1809,7 +1809,7 @@ ], [ "31", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -1834,7 +1834,7 @@ [ "32", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "FIN, SEQ: 2.000.173" @@ -1857,7 +1857,7 @@ ], [ "33", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -1881,7 +1881,7 @@ ], [ "34", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -1906,7 +1906,7 @@ [ "35", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.174, ACK: 3.000.176" @@ -1981,7 +1981,7 @@ ], [ "3", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -2006,7 +2006,7 @@ [ "4", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SYN, SEQ: 2.000.000, ACK: 3.000.001" @@ -2029,7 +2029,7 @@ ], [ "5", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -2054,7 +2054,7 @@ [ "6", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.001" @@ -2062,7 +2062,7 @@ [ "6", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "SMTP", "Anwendung", "220 Willkommen bei filius.de" @@ -2085,7 +2085,7 @@ ], [ "7", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -2109,7 +2109,7 @@ ], [ "8", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -2117,7 +2117,7 @@ ], [ "8", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2142,7 +2142,7 @@ [ "9", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.029, ACK: 3.000.018" @@ -2166,7 +2166,7 @@ [ "10", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.029" @@ -2174,7 +2174,7 @@ [ "10", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "SMTP", "Anwendung", "250 Hello 192.168.0.20" @@ -2197,7 +2197,7 @@ ], [ "11", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -2221,7 +2221,7 @@ ], [ "12", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -2229,7 +2229,7 @@ ], [ "12", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2254,7 +2254,7 @@ [ "13", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.051, ACK: 3.000.044" @@ -2278,7 +2278,7 @@ [ "14", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.051" @@ -2286,7 +2286,7 @@ [ "14", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "SMTP", "Anwendung", "250 Sender OK" @@ -2309,7 +2309,7 @@ ], [ "15", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -2333,7 +2333,7 @@ ], [ "16", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -2341,7 +2341,7 @@ ], [ "16", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2366,7 +2366,7 @@ [ "17", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.064, ACK: 3.000.068" @@ -2390,7 +2390,7 @@ [ "18", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.064" @@ -2398,7 +2398,7 @@ [ "18", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "SMTP", "Anwendung", "250 Recipient OK" @@ -2421,7 +2421,7 @@ ], [ "19", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -2445,7 +2445,7 @@ ], [ "20", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -2453,7 +2453,7 @@ ], [ "20", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2478,7 +2478,7 @@ [ "21", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.080, ACK: 3.000.072" @@ -2502,7 +2502,7 @@ [ "22", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.080" @@ -2510,7 +2510,7 @@ [ "22", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "SMTP", "Anwendung", "354 End data with ." @@ -2533,7 +2533,7 @@ ], [ "23", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -2557,7 +2557,7 @@ ], [ "24", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -2565,7 +2565,7 @@ ], [ "24", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2590,7 +2590,7 @@ [ "25", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.115, ACK: 3.000.171" @@ -2614,7 +2614,7 @@ [ "26", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.115" @@ -2622,7 +2622,7 @@ [ "26", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "SMTP", "Anwendung", "250 Mail queued for delivery" @@ -2645,7 +2645,7 @@ ], [ "27", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -2669,7 +2669,7 @@ ], [ "28", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -2677,7 +2677,7 @@ ], [ "28", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2702,7 +2702,7 @@ [ "29", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.143, ACK: 3.000.175" @@ -2726,7 +2726,7 @@ [ "30", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.143" @@ -2734,7 +2734,7 @@ [ "30", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "SMTP", "Anwendung", "221 Server beendet Verbindung." @@ -2757,7 +2757,7 @@ ], [ "31", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -2782,7 +2782,7 @@ [ "32", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "FIN, SEQ: 2.000.173" @@ -2805,7 +2805,7 @@ ], [ "33", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -2829,7 +2829,7 @@ ], [ "34", - "192.168.0.20:56648", + "192.168.0.20:52469", "192.168.0.30:25", "TCP", "Transport", @@ -2854,7 +2854,7 @@ [ "35", "192.168.0.30:25", - "192.168.0.20:56648", + "192.168.0.20:52469", "TCP", "Transport", "SEQ: 2.000.174, ACK: 3.000.176" @@ -2931,7 +2931,7 @@ ], [ "3", - "56648", + "52469", "25", "TCP", "Transport", @@ -2956,7 +2956,7 @@ [ "4", "25", - "56648", + "52469", "TCP", "Transport", "SYN, SEQ: 2.000.000, ACK: 3.000.001" @@ -2979,7 +2979,7 @@ ], [ "5", - "56648", + "52469", "25", "TCP", "Transport", @@ -3004,7 +3004,7 @@ [ "6", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.001" @@ -3035,7 +3035,7 @@ ], [ "7", - "56648", + "52469", "25", "TCP", "Transport", @@ -3059,7 +3059,7 @@ ], [ "8", - "56648", + "52469", "25", "TCP", "Transport", @@ -3092,7 +3092,7 @@ [ "9", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.029, ACK: 3.000.018" @@ -3116,7 +3116,7 @@ [ "10", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.029" @@ -3147,7 +3147,7 @@ ], [ "11", - "56648", + "52469", "25", "TCP", "Transport", @@ -3171,7 +3171,7 @@ ], [ "12", - "56648", + "52469", "25", "TCP", "Transport", @@ -3204,7 +3204,7 @@ [ "13", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.051, ACK: 3.000.044" @@ -3228,7 +3228,7 @@ [ "14", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.051" @@ -3259,7 +3259,7 @@ ], [ "15", - "56648", + "52469", "25", "TCP", "Transport", @@ -3283,7 +3283,7 @@ ], [ "16", - "56648", + "52469", "25", "TCP", "Transport", @@ -3316,7 +3316,7 @@ [ "17", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.064, ACK: 3.000.068" @@ -3340,7 +3340,7 @@ [ "18", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.064" @@ -3371,7 +3371,7 @@ ], [ "19", - "56648", + "52469", "25", "TCP", "Transport", @@ -3395,7 +3395,7 @@ ], [ "20", - "56648", + "52469", "25", "TCP", "Transport", @@ -3428,7 +3428,7 @@ [ "21", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.080, ACK: 3.000.072" @@ -3452,7 +3452,7 @@ [ "22", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.080" @@ -3483,7 +3483,7 @@ ], [ "23", - "56648", + "52469", "25", "TCP", "Transport", @@ -3507,7 +3507,7 @@ ], [ "24", - "56648", + "52469", "25", "TCP", "Transport", @@ -3540,7 +3540,7 @@ [ "25", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.115, ACK: 3.000.171" @@ -3564,7 +3564,7 @@ [ "26", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.115" @@ -3595,7 +3595,7 @@ ], [ "27", - "56648", + "52469", "25", "TCP", "Transport", @@ -3619,7 +3619,7 @@ ], [ "28", - "56648", + "52469", "25", "TCP", "Transport", @@ -3652,7 +3652,7 @@ [ "29", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.143, ACK: 3.000.175" @@ -3676,7 +3676,7 @@ [ "30", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.143" @@ -3707,7 +3707,7 @@ ], [ "31", - "56648", + "52469", "25", "TCP", "Transport", @@ -3732,7 +3732,7 @@ [ "32", "25", - "56648", + "52469", "TCP", "Transport", "FIN, SEQ: 2.000.173" @@ -3755,7 +3755,7 @@ ], [ "33", - "56648", + "52469", "25", "TCP", "Transport", @@ -3779,7 +3779,7 @@ ], [ "34", - "56648", + "52469", "25", "TCP", "Transport", @@ -3804,7 +3804,7 @@ [ "35", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.174, ACK: 3.000.176" @@ -3879,7 +3879,7 @@ ], [ "3", - "56648", + "52469", "25", "TCP", "Transport", @@ -3904,7 +3904,7 @@ [ "4", "25", - "56648", + "52469", "TCP", "Transport", "SYN, SEQ: 2.000.000, ACK: 3.000.001" @@ -3927,7 +3927,7 @@ ], [ "5", - "56648", + "52469", "25", "TCP", "Transport", @@ -3952,7 +3952,7 @@ [ "6", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.001" @@ -3983,7 +3983,7 @@ ], [ "7", - "56648", + "52469", "25", "TCP", "Transport", @@ -4007,7 +4007,7 @@ ], [ "8", - "56648", + "52469", "25", "TCP", "Transport", @@ -4040,7 +4040,7 @@ [ "9", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.029, ACK: 3.000.018" @@ -4064,7 +4064,7 @@ [ "10", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.029" @@ -4095,7 +4095,7 @@ ], [ "11", - "56648", + "52469", "25", "TCP", "Transport", @@ -4119,7 +4119,7 @@ ], [ "12", - "56648", + "52469", "25", "TCP", "Transport", @@ -4152,7 +4152,7 @@ [ "13", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.051, ACK: 3.000.044" @@ -4176,7 +4176,7 @@ [ "14", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.051" @@ -4207,7 +4207,7 @@ ], [ "15", - "56648", + "52469", "25", "TCP", "Transport", @@ -4231,7 +4231,7 @@ ], [ "16", - "56648", + "52469", "25", "TCP", "Transport", @@ -4264,7 +4264,7 @@ [ "17", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.064, ACK: 3.000.068" @@ -4288,7 +4288,7 @@ [ "18", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.064" @@ -4319,7 +4319,7 @@ ], [ "19", - "56648", + "52469", "25", "TCP", "Transport", @@ -4343,7 +4343,7 @@ ], [ "20", - "56648", + "52469", "25", "TCP", "Transport", @@ -4376,7 +4376,7 @@ [ "21", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.080, ACK: 3.000.072" @@ -4400,7 +4400,7 @@ [ "22", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.080" @@ -4431,7 +4431,7 @@ ], [ "23", - "56648", + "52469", "25", "TCP", "Transport", @@ -4455,7 +4455,7 @@ ], [ "24", - "56648", + "52469", "25", "TCP", "Transport", @@ -4488,7 +4488,7 @@ [ "25", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.115, ACK: 3.000.171" @@ -4512,7 +4512,7 @@ [ "26", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.115" @@ -4543,7 +4543,7 @@ ], [ "27", - "56648", + "52469", "25", "TCP", "Transport", @@ -4567,7 +4567,7 @@ ], [ "28", - "56648", + "52469", "25", "TCP", "Transport", @@ -4600,7 +4600,7 @@ [ "29", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.143, ACK: 3.000.175" @@ -4624,7 +4624,7 @@ [ "30", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.143" @@ -4655,7 +4655,7 @@ ], [ "31", - "56648", + "52469", "25", "TCP", "Transport", @@ -4680,7 +4680,7 @@ [ "32", "25", - "56648", + "52469", "TCP", "Transport", "FIN, SEQ: 2.000.173" @@ -4703,7 +4703,7 @@ ], [ "33", - "56648", + "52469", "25", "TCP", "Transport", @@ -4727,7 +4727,7 @@ ], [ "34", - "56648", + "52469", "25", "TCP", "Transport", @@ -4752,7 +4752,7 @@ [ "35", "25", - "56648", + "52469", "TCP", "Transport", "SEQ: 2.000.174, ACK: 3.000.176" @@ -4789,7 +4789,7 @@ "null" ], [ - 501, + 500, "client", "call verbinden 25" ], @@ -4799,17 +4799,17 @@ "Verbindung hergestellt" ], [ - 1116, + 1118, "server", "----" ], [ - 1229, + 1230, "client", ">>220 Willkommen bei filius.de" ], [ - 1340, + 1341, "server", "192.168.0.20> 220 Willkommen bei filius.de" ], @@ -4849,7 +4849,7 @@ "192.168.0.20< MAIL FROM: " ], [ - 4723, + 4724, "client", "<" ], @@ -4874,17 +4874,17 @@ "192.168.0.20< RCPT TO:" ], [ - 6224, + 6223, "client", "<" ], [ - 6279, + 6278, "client", ">>250 Recipient OK" ], [ - 6391, + 6390, "server", "192.168.0.20> 250 Recipient OK" ], @@ -4929,12 +4929,12 @@ "<\nTo: \nSubject: Gruß\n\nHallo Anna,\nwie geht's?\u000d\n.\u000d\n" ], [ - 9278, + 9279, "client", ">>250 Mail queued for delivery" ], [ - 9389, + 9390, "server", "192.168.0.20> 250 Mail queued for delivery" ], @@ -4969,7 +4969,7 @@ "192.168.0.20> 221 Server beendet Verbindung." ], [ - 11000, + 11001, "client", "Socket zu 192.168.0.30:25 getrennt" ] diff --git a/packages/core/test/scenarios/email-java-smtpErrors.java.json b/packages/core/test/scenarios/email-java-smtpErrors.java.json index 9e6a92b..3a6309f 100644 --- a/packages/core/test/scenarios/email-java-smtpErrors.java.json +++ b/packages/core/test/scenarios/email-java-smtpErrors.java.json @@ -10,7 +10,7 @@ "targetIp": "192.168.0.30" }, { - "time": 755, + "time": 750, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "arp": 2, @@ -18,13 +18,13 @@ "targetIp": "192.168.0.20" }, { - "time": 757, + "time": 753, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "S", @@ -32,27 +32,27 @@ "acknowledgement": 0 }, { - "time": 984, + "time": 980, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "SA", "sequence": 2000000, "acknowledgement": 3000001 }, { - "time": 985, + "time": 980, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -60,14 +60,14 @@ "acknowledgement": 2000001 }, { - "time": 1231, + "time": 1230, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": "220 Willkommen bei filius.de", "tcpFlags": "P", "sequence": 2000001, @@ -80,7 +80,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -94,7 +94,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": "NOOP", "tcpFlags": "P", @@ -109,7 +109,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "A", "sequence": 2000029, @@ -123,20 +123,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": "250 OK", "tcpFlags": "P", "sequence": 2000029, "acknowledgement": 0 }, { - "time": 3280, + "time": 3279, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -150,7 +150,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": "EHLO", "tcpFlags": "P", @@ -165,7 +165,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "A", "sequence": 2000035, @@ -179,7 +179,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": "250 Hello ", "tcpFlags": "P", "sequence": 2000035, @@ -192,7 +192,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -200,13 +200,13 @@ "acknowledgement": 2000045 }, { - "time": 6001, + "time": 6000, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": "DATA", "tcpFlags": "P", @@ -221,21 +221,21 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "A", "sequence": 2000045, "acknowledgement": 3000013 }, { - "time": 6279, + "time": 6278, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": "503 Falsche Reihenfolge der Kommandos.", "tcpFlags": "P", "sequence": 2000045, @@ -248,7 +248,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -256,13 +256,13 @@ "acknowledgement": 2000083 }, { - "time": 7501, + "time": 7500, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": "MAIL FROM: bob@filius.de", "tcpFlags": "P", @@ -277,7 +277,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "A", "sequence": 2000083, @@ -291,7 +291,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": "501 Syntax-Fehler - Parameter oder Argument falsch.", "tcpFlags": "P", "sequence": 2000083, @@ -304,7 +304,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -312,13 +312,13 @@ "acknowledgement": 2000134 }, { - "time": 9001, + "time": 9000, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": "RCPT TO:", "tcpFlags": "P", @@ -333,7 +333,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "A", "sequence": 2000134, @@ -347,7 +347,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": "250 Recipient OK", "tcpFlags": "P", "sequence": 2000134, @@ -360,7 +360,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -374,7 +374,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": "DATA", "tcpFlags": "P", @@ -389,7 +389,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "A", "sequence": 2000150, @@ -403,7 +403,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": "503 Falsche Reihenfolge der Kommandos.", "tcpFlags": "P", "sequence": 2000150, @@ -416,7 +416,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -430,7 +430,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": "MAIL FROM:", "tcpFlags": "P", @@ -445,7 +445,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "A", "sequence": 2000188, @@ -459,7 +459,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": "250 Sender OK", "tcpFlags": "P", "sequence": 2000188, @@ -472,7 +472,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -486,7 +486,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": "RCPT TO: anna", "tcpFlags": "P", @@ -501,7 +501,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "A", "sequence": 2000201, @@ -515,7 +515,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": "501 Syntax-Fehler - Parameter oder Argument falsch.", "tcpFlags": "P", "sequence": 2000201, @@ -528,7 +528,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -542,7 +542,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": "NOOP", "tcpFlags": "P", @@ -550,14 +550,14 @@ "acknowledgement": 0 }, { - "time": 15222, + "time": 15223, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "A", "sequence": 2000252, @@ -571,7 +571,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": "250 OK", "tcpFlags": "P", "sequence": 2000252, @@ -584,7 +584,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -598,7 +598,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": "DATA", "tcpFlags": "P", @@ -613,34 +613,34 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "A", "sequence": 2000258, "acknowledgement": 3000114 }, { - "time": 16777, + "time": 16778, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": "354 End data with .", "tcpFlags": "P", "sequence": 2000258, "acknowledgement": 0 }, { - "time": 16777, + "time": 16778, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -648,13 +648,13 @@ "acknowledgement": 2000293 }, { - "time": 18000, + "time": 18001, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": "From: \nTo: \nSubject: Wer?\n\nIst da jemand?\n.\n", "tcpFlags": "P", @@ -662,14 +662,14 @@ "acknowledgement": 0 }, { - "time": 18222, + "time": 18223, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "A", "sequence": 2000293, @@ -683,7 +683,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": "250 Mail queued for delivery", "tcpFlags": "P", "sequence": 2000293, @@ -696,7 +696,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -704,13 +704,13 @@ "acknowledgement": 2000321 }, { - "time": 19501, + "time": 19500, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": "QUIT", "tcpFlags": "P", @@ -718,41 +718,41 @@ "acknowledgement": 0 }, { - "time": 19723, + "time": 19722, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "A", "sequence": 2000321, "acknowledgement": 3000196 }, { - "time": 19779, + "time": 19777, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": "221 Server beendet Verbindung.", "tcpFlags": "P", "sequence": 2000321, "acknowledgement": 0 }, { - "time": 19779, + "time": 19778, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -760,27 +760,27 @@ "acknowledgement": 2000351 }, { - "time": 20001, + "time": 20000, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "F", "sequence": 2000351, "acknowledgement": 0 }, { - "time": 20001, + "time": 20000, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -788,13 +788,13 @@ "acknowledgement": 2000352 }, { - "time": 20057, + "time": 20055, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "F", @@ -802,14 +802,14 @@ "acknowledgement": 0 }, { - "time": 20278, + "time": 20277, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "A", "sequence": 2000352, @@ -818,7 +818,7 @@ ], "00000000-0000-0000-0000-000000000202": [ { - "time": 642, + "time": 638, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, @@ -828,7 +828,7 @@ ], "00000000-0000-0000-0000-000000000203": [ { - "time": 642, + "time": 638, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, @@ -836,7 +836,7 @@ "targetIp": "192.168.0.30" }, { - "time": 644, + "time": 639, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "arp": 2, @@ -844,13 +844,13 @@ "targetIp": "192.168.0.20" }, { - "time": 871, + "time": 867, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "S", @@ -858,27 +858,27 @@ "acknowledgement": 0 }, { - "time": 873, + "time": 869, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "SA", "sequence": 2000000, "acknowledgement": 3000001 }, { - "time": 1096, + "time": 1092, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -893,7 +893,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": "220 Willkommen bei filius.de", "tcpFlags": "P", "sequence": 2000001, @@ -906,7 +906,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -920,7 +920,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": "NOOP", "tcpFlags": "P", @@ -928,14 +928,14 @@ "acknowledgement": 0 }, { - "time": 3113, + "time": 3112, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "A", "sequence": 2000029, @@ -949,7 +949,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": "250 OK", "tcpFlags": "P", "sequence": 2000029, @@ -962,7 +962,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -970,13 +970,13 @@ "acknowledgement": 2000035 }, { - "time": 4612, + "time": 4611, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": "EHLO", "tcpFlags": "P", @@ -991,7 +991,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "A", "sequence": 2000035, @@ -1005,7 +1005,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": "250 Hello ", "tcpFlags": "P", "sequence": 2000035, @@ -1018,7 +1018,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -1032,7 +1032,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": "DATA", "tcpFlags": "P", @@ -1047,21 +1047,21 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "A", "sequence": 2000045, "acknowledgement": 3000013 }, { - "time": 6168, + "time": 6167, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": "503 Falsche Reihenfolge der Kommandos.", "tcpFlags": "P", "sequence": 2000045, @@ -1074,7 +1074,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -1088,7 +1088,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": "MAIL FROM: bob@filius.de", "tcpFlags": "P", @@ -1103,21 +1103,21 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "A", "sequence": 2000083, "acknowledgement": 3000037 }, { - "time": 7668, + "time": 7667, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": "501 Syntax-Fehler - Parameter oder Argument falsch.", "tcpFlags": "P", "sequence": 2000083, @@ -1130,7 +1130,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -1138,13 +1138,13 @@ "acknowledgement": 2000134 }, { - "time": 9112, + "time": 9111, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": "RCPT TO:", "tcpFlags": "P", @@ -1159,7 +1159,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "A", "sequence": 2000134, @@ -1173,7 +1173,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": "250 Recipient OK", "tcpFlags": "P", "sequence": 2000134, @@ -1186,7 +1186,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -1200,7 +1200,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": "DATA", "tcpFlags": "P", @@ -1215,7 +1215,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "A", "sequence": 2000150, @@ -1229,7 +1229,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": "503 Falsche Reihenfolge der Kommandos.", "tcpFlags": "P", "sequence": 2000150, @@ -1242,7 +1242,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -1256,7 +1256,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": "MAIL FROM:", "tcpFlags": "P", @@ -1264,14 +1264,14 @@ "acknowledgement": 0 }, { - "time": 12112, + "time": 12111, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "A", "sequence": 2000188, @@ -1285,20 +1285,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": "250 Sender OK", "tcpFlags": "P", "sequence": 2000188, "acknowledgement": 0 }, { - "time": 12389, + "time": 12388, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -1312,7 +1312,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": "RCPT TO: anna", "tcpFlags": "P", @@ -1327,7 +1327,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "A", "sequence": 2000201, @@ -1341,7 +1341,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": "501 Syntax-Fehler - Parameter oder Argument falsch.", "tcpFlags": "P", "sequence": 2000201, @@ -1354,7 +1354,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -1368,7 +1368,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": "NOOP", "tcpFlags": "P", @@ -1383,7 +1383,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "A", "sequence": 2000252, @@ -1397,7 +1397,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": "250 OK", "tcpFlags": "P", "sequence": 2000252, @@ -1410,7 +1410,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -1424,7 +1424,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": "DATA", "tcpFlags": "P", @@ -1439,34 +1439,34 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "A", "sequence": 2000258, "acknowledgement": 3000114 }, { - "time": 16666, + "time": 16667, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": "354 End data with .", "tcpFlags": "P", "sequence": 2000258, "acknowledgement": 0 }, { - "time": 16888, + "time": 16889, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -1474,13 +1474,13 @@ "acknowledgement": 2000293 }, { - "time": 18111, + "time": 18112, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": "From: \nTo: \nSubject: Wer?\n\nIst da jemand?\n.\n", "tcpFlags": "P", @@ -1495,7 +1495,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "A", "sequence": 2000293, @@ -1509,20 +1509,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": "250 Mail queued for delivery", "tcpFlags": "P", "sequence": 2000293, "acknowledgement": 0 }, { - "time": 18388, + "time": 18389, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -1530,13 +1530,13 @@ "acknowledgement": 2000321 }, { - "time": 19612, + "time": 19611, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": "QUIT", "tcpFlags": "P", @@ -1544,41 +1544,41 @@ "acknowledgement": 0 }, { - "time": 19612, + "time": 19611, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "A", "sequence": 2000321, "acknowledgement": 3000196 }, { - "time": 19668, + "time": 19667, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": "221 Server beendet Verbindung.", "tcpFlags": "P", "sequence": 2000321, "acknowledgement": 0 }, { - "time": 19890, + "time": 19888, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -1586,27 +1586,27 @@ "acknowledgement": 2000351 }, { - "time": 19890, + "time": 19889, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "F", "sequence": 2000351, "acknowledgement": 0 }, { - "time": 20112, + "time": 20110, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -1614,13 +1614,13 @@ "acknowledgement": 2000352 }, { - "time": 20167, + "time": 20166, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 57477, + "sourcePort": 53178, "destinationPort": 25, "payload": null, "tcpFlags": "F", @@ -1628,14 +1628,14 @@ "acknowledgement": 0 }, { - "time": 20167, + "time": 20166, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 57477, + "destinationPort": 53178, "payload": null, "tcpFlags": "A", "sequence": 2000352, @@ -1644,7 +1644,7 @@ ], "00000000-0000-0000-0000-000000000204": [ { - "time": 643, + "time": 638, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, @@ -1705,7 +1705,7 @@ ], [ "3", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -1730,7 +1730,7 @@ [ "4", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SYN, SEQ: 2.000.000, ACK: 3.000.001" @@ -1753,7 +1753,7 @@ ], [ "5", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -1778,7 +1778,7 @@ [ "6", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.001" @@ -1786,7 +1786,7 @@ [ "6", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "SMTP", "Anwendung", "220 Willkommen bei filius.de" @@ -1809,7 +1809,7 @@ ], [ "7", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -1833,7 +1833,7 @@ ], [ "8", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -1841,7 +1841,7 @@ ], [ "8", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "SMTP", "Anwendung", @@ -1866,7 +1866,7 @@ [ "9", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.029, ACK: 3.000.005" @@ -1890,7 +1890,7 @@ [ "10", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.029" @@ -1898,7 +1898,7 @@ [ "10", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "SMTP", "Anwendung", "250 OK" @@ -1921,7 +1921,7 @@ ], [ "11", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -1945,7 +1945,7 @@ ], [ "12", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -1953,7 +1953,7 @@ ], [ "12", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "SMTP", "Anwendung", @@ -1978,7 +1978,7 @@ [ "13", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.035, ACK: 3.000.009" @@ -2002,7 +2002,7 @@ [ "14", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.035" @@ -2010,7 +2010,7 @@ [ "14", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "SMTP", "Anwendung", "250 Hello " @@ -2033,7 +2033,7 @@ ], [ "15", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -2057,7 +2057,7 @@ ], [ "16", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -2065,7 +2065,7 @@ ], [ "16", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2090,7 +2090,7 @@ [ "17", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.045, ACK: 3.000.013" @@ -2114,7 +2114,7 @@ [ "18", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.045" @@ -2122,7 +2122,7 @@ [ "18", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "SMTP", "Anwendung", "503 Falsche Reihenfolge der Kommandos." @@ -2145,7 +2145,7 @@ ], [ "19", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -2169,7 +2169,7 @@ ], [ "20", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -2177,7 +2177,7 @@ ], [ "20", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2202,7 +2202,7 @@ [ "21", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.083, ACK: 3.000.037" @@ -2226,7 +2226,7 @@ [ "22", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.083" @@ -2234,7 +2234,7 @@ [ "22", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "SMTP", "Anwendung", "501 Syntax-Fehler - Parameter oder Argument falsch." @@ -2257,7 +2257,7 @@ ], [ "23", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -2281,7 +2281,7 @@ ], [ "24", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -2289,7 +2289,7 @@ ], [ "24", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2314,7 +2314,7 @@ [ "25", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.134, ACK: 3.000.064" @@ -2338,7 +2338,7 @@ [ "26", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.134" @@ -2346,7 +2346,7 @@ [ "26", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "SMTP", "Anwendung", "250 Recipient OK" @@ -2369,7 +2369,7 @@ ], [ "27", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -2393,7 +2393,7 @@ ], [ "28", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -2401,7 +2401,7 @@ ], [ "28", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2426,7 +2426,7 @@ [ "29", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.150, ACK: 3.000.068" @@ -2450,7 +2450,7 @@ [ "30", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.150" @@ -2458,7 +2458,7 @@ [ "30", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "SMTP", "Anwendung", "503 Falsche Reihenfolge der Kommandos." @@ -2481,7 +2481,7 @@ ], [ "31", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -2505,7 +2505,7 @@ ], [ "32", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -2513,7 +2513,7 @@ ], [ "32", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2538,7 +2538,7 @@ [ "33", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.188, ACK: 3.000.093" @@ -2562,7 +2562,7 @@ [ "34", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.188" @@ -2570,7 +2570,7 @@ [ "34", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "SMTP", "Anwendung", "250 Sender OK" @@ -2593,7 +2593,7 @@ ], [ "35", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -2617,7 +2617,7 @@ ], [ "36", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -2625,7 +2625,7 @@ ], [ "36", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2650,7 +2650,7 @@ [ "37", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.201, ACK: 3.000.106" @@ -2674,7 +2674,7 @@ [ "38", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.201" @@ -2682,7 +2682,7 @@ [ "38", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "SMTP", "Anwendung", "501 Syntax-Fehler - Parameter oder Argument falsch." @@ -2705,7 +2705,7 @@ ], [ "39", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -2729,7 +2729,7 @@ ], [ "40", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -2737,7 +2737,7 @@ ], [ "40", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2762,7 +2762,7 @@ [ "41", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.252, ACK: 3.000.110" @@ -2786,7 +2786,7 @@ [ "42", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.252" @@ -2794,7 +2794,7 @@ [ "42", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "SMTP", "Anwendung", "250 OK" @@ -2817,7 +2817,7 @@ ], [ "43", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -2841,7 +2841,7 @@ ], [ "44", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -2849,7 +2849,7 @@ ], [ "44", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2874,7 +2874,7 @@ [ "45", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.258, ACK: 3.000.114" @@ -2898,7 +2898,7 @@ [ "46", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.258" @@ -2906,7 +2906,7 @@ [ "46", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "SMTP", "Anwendung", "354 End data with ." @@ -2929,7 +2929,7 @@ ], [ "47", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -2953,7 +2953,7 @@ ], [ "48", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -2961,7 +2961,7 @@ ], [ "48", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2986,7 +2986,7 @@ [ "49", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.293, ACK: 3.000.192" @@ -3010,7 +3010,7 @@ [ "50", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.293" @@ -3018,7 +3018,7 @@ [ "50", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "SMTP", "Anwendung", "250 Mail queued for delivery" @@ -3041,7 +3041,7 @@ ], [ "51", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -3065,7 +3065,7 @@ ], [ "52", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -3073,7 +3073,7 @@ ], [ "52", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "SMTP", "Anwendung", @@ -3098,7 +3098,7 @@ [ "53", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.321, ACK: 3.000.196" @@ -3122,7 +3122,7 @@ [ "54", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.321" @@ -3130,7 +3130,7 @@ [ "54", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "SMTP", "Anwendung", "221 Server beendet Verbindung." @@ -3153,7 +3153,7 @@ ], [ "55", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -3178,7 +3178,7 @@ [ "56", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "FIN, SEQ: 2.000.351" @@ -3201,7 +3201,7 @@ ], [ "57", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -3225,7 +3225,7 @@ ], [ "58", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -3250,7 +3250,7 @@ [ "59", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.352, ACK: 3.000.197" @@ -3325,7 +3325,7 @@ ], [ "3", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -3350,7 +3350,7 @@ [ "4", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SYN, SEQ: 2.000.000, ACK: 3.000.001" @@ -3373,7 +3373,7 @@ ], [ "5", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -3398,7 +3398,7 @@ [ "6", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.001" @@ -3406,7 +3406,7 @@ [ "6", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "SMTP", "Anwendung", "220 Willkommen bei filius.de" @@ -3429,7 +3429,7 @@ ], [ "7", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -3453,7 +3453,7 @@ ], [ "8", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -3461,7 +3461,7 @@ ], [ "8", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "SMTP", "Anwendung", @@ -3486,7 +3486,7 @@ [ "9", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.029, ACK: 3.000.005" @@ -3510,7 +3510,7 @@ [ "10", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.029" @@ -3518,7 +3518,7 @@ [ "10", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "SMTP", "Anwendung", "250 OK" @@ -3541,7 +3541,7 @@ ], [ "11", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -3565,7 +3565,7 @@ ], [ "12", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -3573,7 +3573,7 @@ ], [ "12", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "SMTP", "Anwendung", @@ -3598,7 +3598,7 @@ [ "13", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.035, ACK: 3.000.009" @@ -3622,7 +3622,7 @@ [ "14", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.035" @@ -3630,7 +3630,7 @@ [ "14", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "SMTP", "Anwendung", "250 Hello " @@ -3653,7 +3653,7 @@ ], [ "15", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -3677,7 +3677,7 @@ ], [ "16", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -3685,7 +3685,7 @@ ], [ "16", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "SMTP", "Anwendung", @@ -3710,7 +3710,7 @@ [ "17", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.045, ACK: 3.000.013" @@ -3734,7 +3734,7 @@ [ "18", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.045" @@ -3742,7 +3742,7 @@ [ "18", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "SMTP", "Anwendung", "503 Falsche Reihenfolge der Kommandos." @@ -3765,7 +3765,7 @@ ], [ "19", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -3789,7 +3789,7 @@ ], [ "20", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -3797,7 +3797,7 @@ ], [ "20", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "SMTP", "Anwendung", @@ -3822,7 +3822,7 @@ [ "21", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.083, ACK: 3.000.037" @@ -3846,7 +3846,7 @@ [ "22", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.083" @@ -3854,7 +3854,7 @@ [ "22", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "SMTP", "Anwendung", "501 Syntax-Fehler - Parameter oder Argument falsch." @@ -3877,7 +3877,7 @@ ], [ "23", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -3901,7 +3901,7 @@ ], [ "24", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -3909,7 +3909,7 @@ ], [ "24", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "SMTP", "Anwendung", @@ -3934,7 +3934,7 @@ [ "25", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.134, ACK: 3.000.064" @@ -3958,7 +3958,7 @@ [ "26", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.134" @@ -3966,7 +3966,7 @@ [ "26", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "SMTP", "Anwendung", "250 Recipient OK" @@ -3989,7 +3989,7 @@ ], [ "27", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -4013,7 +4013,7 @@ ], [ "28", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -4021,7 +4021,7 @@ ], [ "28", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "SMTP", "Anwendung", @@ -4046,7 +4046,7 @@ [ "29", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.150, ACK: 3.000.068" @@ -4070,7 +4070,7 @@ [ "30", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.150" @@ -4078,7 +4078,7 @@ [ "30", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "SMTP", "Anwendung", "503 Falsche Reihenfolge der Kommandos." @@ -4101,7 +4101,7 @@ ], [ "31", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -4125,7 +4125,7 @@ ], [ "32", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -4133,7 +4133,7 @@ ], [ "32", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "SMTP", "Anwendung", @@ -4158,7 +4158,7 @@ [ "33", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.188, ACK: 3.000.093" @@ -4182,7 +4182,7 @@ [ "34", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.188" @@ -4190,7 +4190,7 @@ [ "34", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "SMTP", "Anwendung", "250 Sender OK" @@ -4213,7 +4213,7 @@ ], [ "35", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -4237,7 +4237,7 @@ ], [ "36", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -4245,7 +4245,7 @@ ], [ "36", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "SMTP", "Anwendung", @@ -4270,7 +4270,7 @@ [ "37", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.201, ACK: 3.000.106" @@ -4294,7 +4294,7 @@ [ "38", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.201" @@ -4302,7 +4302,7 @@ [ "38", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "SMTP", "Anwendung", "501 Syntax-Fehler - Parameter oder Argument falsch." @@ -4325,7 +4325,7 @@ ], [ "39", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -4349,7 +4349,7 @@ ], [ "40", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -4357,7 +4357,7 @@ ], [ "40", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "SMTP", "Anwendung", @@ -4382,7 +4382,7 @@ [ "41", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.252, ACK: 3.000.110" @@ -4406,7 +4406,7 @@ [ "42", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.252" @@ -4414,7 +4414,7 @@ [ "42", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "SMTP", "Anwendung", "250 OK" @@ -4437,7 +4437,7 @@ ], [ "43", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -4461,7 +4461,7 @@ ], [ "44", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -4469,7 +4469,7 @@ ], [ "44", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "SMTP", "Anwendung", @@ -4494,7 +4494,7 @@ [ "45", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.258, ACK: 3.000.114" @@ -4518,7 +4518,7 @@ [ "46", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.258" @@ -4526,7 +4526,7 @@ [ "46", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "SMTP", "Anwendung", "354 End data with ." @@ -4549,7 +4549,7 @@ ], [ "47", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -4573,7 +4573,7 @@ ], [ "48", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -4581,7 +4581,7 @@ ], [ "48", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "SMTP", "Anwendung", @@ -4606,7 +4606,7 @@ [ "49", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.293, ACK: 3.000.192" @@ -4630,7 +4630,7 @@ [ "50", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.293" @@ -4638,7 +4638,7 @@ [ "50", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "SMTP", "Anwendung", "250 Mail queued for delivery" @@ -4661,7 +4661,7 @@ ], [ "51", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -4685,7 +4685,7 @@ ], [ "52", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -4693,7 +4693,7 @@ ], [ "52", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "SMTP", "Anwendung", @@ -4718,7 +4718,7 @@ [ "53", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.321, ACK: 3.000.196" @@ -4742,7 +4742,7 @@ [ "54", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.321" @@ -4750,7 +4750,7 @@ [ "54", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "SMTP", "Anwendung", "221 Server beendet Verbindung." @@ -4773,7 +4773,7 @@ ], [ "55", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -4798,7 +4798,7 @@ [ "56", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "FIN, SEQ: 2.000.351" @@ -4821,7 +4821,7 @@ ], [ "57", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -4845,7 +4845,7 @@ ], [ "58", - "192.168.0.20:57477", + "192.168.0.20:53178", "192.168.0.30:25", "TCP", "Transport", @@ -4870,7 +4870,7 @@ [ "59", "192.168.0.30:25", - "192.168.0.20:57477", + "192.168.0.20:53178", "TCP", "Transport", "SEQ: 2.000.352, ACK: 3.000.197" @@ -4947,7 +4947,7 @@ ], [ "3", - "57477", + "53178", "25", "TCP", "Transport", @@ -4972,7 +4972,7 @@ [ "4", "25", - "57477", + "53178", "TCP", "Transport", "SYN, SEQ: 2.000.000, ACK: 3.000.001" @@ -4995,7 +4995,7 @@ ], [ "5", - "57477", + "53178", "25", "TCP", "Transport", @@ -5020,7 +5020,7 @@ [ "6", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.001" @@ -5051,7 +5051,7 @@ ], [ "7", - "57477", + "53178", "25", "TCP", "Transport", @@ -5075,7 +5075,7 @@ ], [ "8", - "57477", + "53178", "25", "TCP", "Transport", @@ -5108,7 +5108,7 @@ [ "9", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.029, ACK: 3.000.005" @@ -5132,7 +5132,7 @@ [ "10", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.029" @@ -5163,7 +5163,7 @@ ], [ "11", - "57477", + "53178", "25", "TCP", "Transport", @@ -5187,7 +5187,7 @@ ], [ "12", - "57477", + "53178", "25", "TCP", "Transport", @@ -5220,7 +5220,7 @@ [ "13", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.035, ACK: 3.000.009" @@ -5244,7 +5244,7 @@ [ "14", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.035" @@ -5275,7 +5275,7 @@ ], [ "15", - "57477", + "53178", "25", "TCP", "Transport", @@ -5299,7 +5299,7 @@ ], [ "16", - "57477", + "53178", "25", "TCP", "Transport", @@ -5332,7 +5332,7 @@ [ "17", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.045, ACK: 3.000.013" @@ -5356,7 +5356,7 @@ [ "18", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.045" @@ -5387,7 +5387,7 @@ ], [ "19", - "57477", + "53178", "25", "TCP", "Transport", @@ -5411,7 +5411,7 @@ ], [ "20", - "57477", + "53178", "25", "TCP", "Transport", @@ -5444,7 +5444,7 @@ [ "21", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.083, ACK: 3.000.037" @@ -5468,7 +5468,7 @@ [ "22", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.083" @@ -5499,7 +5499,7 @@ ], [ "23", - "57477", + "53178", "25", "TCP", "Transport", @@ -5523,7 +5523,7 @@ ], [ "24", - "57477", + "53178", "25", "TCP", "Transport", @@ -5556,7 +5556,7 @@ [ "25", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.134, ACK: 3.000.064" @@ -5580,7 +5580,7 @@ [ "26", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.134" @@ -5611,7 +5611,7 @@ ], [ "27", - "57477", + "53178", "25", "TCP", "Transport", @@ -5635,7 +5635,7 @@ ], [ "28", - "57477", + "53178", "25", "TCP", "Transport", @@ -5668,7 +5668,7 @@ [ "29", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.150, ACK: 3.000.068" @@ -5692,7 +5692,7 @@ [ "30", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.150" @@ -5723,7 +5723,7 @@ ], [ "31", - "57477", + "53178", "25", "TCP", "Transport", @@ -5747,7 +5747,7 @@ ], [ "32", - "57477", + "53178", "25", "TCP", "Transport", @@ -5780,7 +5780,7 @@ [ "33", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.188, ACK: 3.000.093" @@ -5804,7 +5804,7 @@ [ "34", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.188" @@ -5835,7 +5835,7 @@ ], [ "35", - "57477", + "53178", "25", "TCP", "Transport", @@ -5859,7 +5859,7 @@ ], [ "36", - "57477", + "53178", "25", "TCP", "Transport", @@ -5892,7 +5892,7 @@ [ "37", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.201, ACK: 3.000.106" @@ -5916,7 +5916,7 @@ [ "38", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.201" @@ -5947,7 +5947,7 @@ ], [ "39", - "57477", + "53178", "25", "TCP", "Transport", @@ -5971,7 +5971,7 @@ ], [ "40", - "57477", + "53178", "25", "TCP", "Transport", @@ -6004,7 +6004,7 @@ [ "41", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.252, ACK: 3.000.110" @@ -6028,7 +6028,7 @@ [ "42", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.252" @@ -6059,7 +6059,7 @@ ], [ "43", - "57477", + "53178", "25", "TCP", "Transport", @@ -6083,7 +6083,7 @@ ], [ "44", - "57477", + "53178", "25", "TCP", "Transport", @@ -6116,7 +6116,7 @@ [ "45", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.258, ACK: 3.000.114" @@ -6140,7 +6140,7 @@ [ "46", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.258" @@ -6171,7 +6171,7 @@ ], [ "47", - "57477", + "53178", "25", "TCP", "Transport", @@ -6195,7 +6195,7 @@ ], [ "48", - "57477", + "53178", "25", "TCP", "Transport", @@ -6228,7 +6228,7 @@ [ "49", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.293, ACK: 3.000.192" @@ -6252,7 +6252,7 @@ [ "50", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.293" @@ -6283,7 +6283,7 @@ ], [ "51", - "57477", + "53178", "25", "TCP", "Transport", @@ -6307,7 +6307,7 @@ ], [ "52", - "57477", + "53178", "25", "TCP", "Transport", @@ -6340,7 +6340,7 @@ [ "53", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.321, ACK: 3.000.196" @@ -6364,7 +6364,7 @@ [ "54", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.321" @@ -6395,7 +6395,7 @@ ], [ "55", - "57477", + "53178", "25", "TCP", "Transport", @@ -6420,7 +6420,7 @@ [ "56", "25", - "57477", + "53178", "TCP", "Transport", "FIN, SEQ: 2.000.351" @@ -6443,7 +6443,7 @@ ], [ "57", - "57477", + "53178", "25", "TCP", "Transport", @@ -6467,7 +6467,7 @@ ], [ "58", - "57477", + "53178", "25", "TCP", "Transport", @@ -6492,7 +6492,7 @@ [ "59", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.352, ACK: 3.000.197" @@ -6567,7 +6567,7 @@ ], [ "3", - "57477", + "53178", "25", "TCP", "Transport", @@ -6592,7 +6592,7 @@ [ "4", "25", - "57477", + "53178", "TCP", "Transport", "SYN, SEQ: 2.000.000, ACK: 3.000.001" @@ -6615,7 +6615,7 @@ ], [ "5", - "57477", + "53178", "25", "TCP", "Transport", @@ -6640,7 +6640,7 @@ [ "6", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.001" @@ -6671,7 +6671,7 @@ ], [ "7", - "57477", + "53178", "25", "TCP", "Transport", @@ -6695,7 +6695,7 @@ ], [ "8", - "57477", + "53178", "25", "TCP", "Transport", @@ -6728,7 +6728,7 @@ [ "9", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.029, ACK: 3.000.005" @@ -6752,7 +6752,7 @@ [ "10", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.029" @@ -6783,7 +6783,7 @@ ], [ "11", - "57477", + "53178", "25", "TCP", "Transport", @@ -6807,7 +6807,7 @@ ], [ "12", - "57477", + "53178", "25", "TCP", "Transport", @@ -6840,7 +6840,7 @@ [ "13", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.035, ACK: 3.000.009" @@ -6864,7 +6864,7 @@ [ "14", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.035" @@ -6895,7 +6895,7 @@ ], [ "15", - "57477", + "53178", "25", "TCP", "Transport", @@ -6919,7 +6919,7 @@ ], [ "16", - "57477", + "53178", "25", "TCP", "Transport", @@ -6952,7 +6952,7 @@ [ "17", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.045, ACK: 3.000.013" @@ -6976,7 +6976,7 @@ [ "18", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.045" @@ -7007,7 +7007,7 @@ ], [ "19", - "57477", + "53178", "25", "TCP", "Transport", @@ -7031,7 +7031,7 @@ ], [ "20", - "57477", + "53178", "25", "TCP", "Transport", @@ -7064,7 +7064,7 @@ [ "21", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.083, ACK: 3.000.037" @@ -7088,7 +7088,7 @@ [ "22", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.083" @@ -7119,7 +7119,7 @@ ], [ "23", - "57477", + "53178", "25", "TCP", "Transport", @@ -7143,7 +7143,7 @@ ], [ "24", - "57477", + "53178", "25", "TCP", "Transport", @@ -7176,7 +7176,7 @@ [ "25", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.134, ACK: 3.000.064" @@ -7200,7 +7200,7 @@ [ "26", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.134" @@ -7231,7 +7231,7 @@ ], [ "27", - "57477", + "53178", "25", "TCP", "Transport", @@ -7255,7 +7255,7 @@ ], [ "28", - "57477", + "53178", "25", "TCP", "Transport", @@ -7288,7 +7288,7 @@ [ "29", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.150, ACK: 3.000.068" @@ -7312,7 +7312,7 @@ [ "30", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.150" @@ -7343,7 +7343,7 @@ ], [ "31", - "57477", + "53178", "25", "TCP", "Transport", @@ -7367,7 +7367,7 @@ ], [ "32", - "57477", + "53178", "25", "TCP", "Transport", @@ -7400,7 +7400,7 @@ [ "33", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.188, ACK: 3.000.093" @@ -7424,7 +7424,7 @@ [ "34", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.188" @@ -7455,7 +7455,7 @@ ], [ "35", - "57477", + "53178", "25", "TCP", "Transport", @@ -7479,7 +7479,7 @@ ], [ "36", - "57477", + "53178", "25", "TCP", "Transport", @@ -7512,7 +7512,7 @@ [ "37", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.201, ACK: 3.000.106" @@ -7536,7 +7536,7 @@ [ "38", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.201" @@ -7567,7 +7567,7 @@ ], [ "39", - "57477", + "53178", "25", "TCP", "Transport", @@ -7591,7 +7591,7 @@ ], [ "40", - "57477", + "53178", "25", "TCP", "Transport", @@ -7624,7 +7624,7 @@ [ "41", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.252, ACK: 3.000.110" @@ -7648,7 +7648,7 @@ [ "42", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.252" @@ -7679,7 +7679,7 @@ ], [ "43", - "57477", + "53178", "25", "TCP", "Transport", @@ -7703,7 +7703,7 @@ ], [ "44", - "57477", + "53178", "25", "TCP", "Transport", @@ -7736,7 +7736,7 @@ [ "45", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.258, ACK: 3.000.114" @@ -7760,7 +7760,7 @@ [ "46", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.258" @@ -7791,7 +7791,7 @@ ], [ "47", - "57477", + "53178", "25", "TCP", "Transport", @@ -7815,7 +7815,7 @@ ], [ "48", - "57477", + "53178", "25", "TCP", "Transport", @@ -7848,7 +7848,7 @@ [ "49", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.293, ACK: 3.000.192" @@ -7872,7 +7872,7 @@ [ "50", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.293" @@ -7903,7 +7903,7 @@ ], [ "51", - "57477", + "53178", "25", "TCP", "Transport", @@ -7927,7 +7927,7 @@ ], [ "52", - "57477", + "53178", "25", "TCP", "Transport", @@ -7960,7 +7960,7 @@ [ "53", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.321, ACK: 3.000.196" @@ -7984,7 +7984,7 @@ [ "54", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.321" @@ -8015,7 +8015,7 @@ ], [ "55", - "57477", + "53178", "25", "TCP", "Transport", @@ -8040,7 +8040,7 @@ [ "56", "25", - "57477", + "53178", "TCP", "Transport", "FIN, SEQ: 2.000.351" @@ -8063,7 +8063,7 @@ ], [ "57", - "57477", + "53178", "25", "TCP", "Transport", @@ -8087,7 +8087,7 @@ ], [ "58", - "57477", + "53178", "25", "TCP", "Transport", @@ -8112,7 +8112,7 @@ [ "59", "25", - "57477", + "53178", "TCP", "Transport", "SEQ: 2.000.352, ACK: 3.000.197" @@ -8139,7 +8139,7 @@ }, "events": [ [ - 213, + 212, "client", "null" ], @@ -8159,27 +8159,27 @@ "Verbindung hergestellt" ], [ - 1119, + 1118, "server", "----" ], [ - 1231, + 1230, "client", ">>220 Willkommen bei filius.de" ], [ - 1343, + 1342, "server", "192.168.0.20> 220 Willkommen bei filius.de" ], [ - 3001, + 3000, "client", "call senden NOOP" ], [ - 3113, + 3112, "server", "192.168.0.20< NOOP" ], @@ -8189,7 +8189,7 @@ "<>250 OK" ], @@ -8369,7 +8369,7 @@ ">>501 Syntax-Fehler - Parameter oder Argument falsch." ], [ - 13889, + 13890, "server", "192.168.0.20> 501 Syntax-Fehler - Parameter oder Argument falsch." ], @@ -8414,12 +8414,12 @@ "<>354 End data with ." ], [ - 16888, + 16889, "server", "192.168.0.20> 354 End data with ." ], @@ -8429,12 +8429,12 @@ "call senden From: \nTo: \nSubject: Wer?\n\nIst da jemand?\n.\n" ], [ - 18111, + 18112, "server", "192.168.0.20< From: \nTo: \nSubject: Wer?\n\nIst da jemand?\n.\n" ], [ - 18222, + 18223, "client", "<\nTo: \nSubject: Wer?\n\nIst da jemand?\n.\n" ], @@ -8449,37 +8449,37 @@ "192.168.0.20> 250 Mail queued for delivery" ], [ - 18393, + 18395, "server", "E-Mail für bob im Postfach gespeichert." ], [ - 19501, + 19500, "client", "call senden QUIT" ], [ - 19612, + 19611, "server", "192.168.0.20< QUIT" ], [ - 19723, + 19722, "client", "<>221 Server beendet Verbindung." ], [ - 19890, + 19889, "server", "192.168.0.20> 221 Server beendet Verbindung." ], [ - 20001, + 20000, "client", "Socket zu 192.168.0.30:25 getrennt" ] @@ -8501,7 +8501,7 @@ [ "bob", [ - "From: \nTo: \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@filius.de\n\nDate: 10/1/26, 6:38 PM\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: \nTo: \nSubject: Wer?\n\nIst da jemand?", + "From: \nTo: \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@filius.de\n\nDate: 01.10.26, 19:28\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: \nTo: \nSubject: Wer?\n\nIst da jemand?", "true", "false" ] diff --git a/packages/core/test/scenarios/mail-lan.scenario.json b/packages/core/test/scenarios/mail-lan.scenario.json index 3922644..fe40655 100644 --- a/packages/core/test/scenarios/mail-lan.scenario.json +++ b/packages/core/test/scenarios/mail-lan.scenario.json @@ -106,11 +106,13 @@ }, "00000000-0000-0000-0000-000000000203": { "ip": "192.168.0.30", - "mask": "255.255.255.0" + "mask": "255.255.255.0", + "dns": "192.168.0.10" }, "00000000-0000-0000-0000-000000000204": { "ip": "192.168.0.31", - "mask": "255.255.255.0" + "mask": "255.255.255.0", + "dns": "192.168.0.10" } }, "dnsServers": { @@ -119,7 +121,11 @@ "www.filius.de A 192.168.0.30", "seite.filius.de A 192.168.0.30", "andere.filius.de A 192.168.0.30", - "leer.filius.de A 192.168.0.31" + "leer.filius.de A 192.168.0.31", + "filius.de MX mail.filius.de", + "mail.filius.de A 192.168.0.30", + "andere.de MX mail.andere.de", + "mail.andere.de A 192.168.0.31" ] } } diff --git a/packages/fls/src/projectSnapshot.ts b/packages/fls/src/projectSnapshot.ts index db3b8fe..4f4a551 100644 --- a/packages/fls/src/projectSnapshot.ts +++ b/packages/fls/src/projectSnapshot.ts @@ -12,8 +12,9 @@ // Back the other way: what the simulation changes that Java keeps in the // project (its objects are the project's), so a project saved after it holds // it. That is a router's or home router's firewall, set on its page konfig, -// and an e-mail server's mailboxes (Java writes them into -// /mailserver/konten.txt at once). +// an e-mail server's mailboxes (Java writes them into +// /mailserver/konten.txt at once), and an e-mail program's inbox and sent +// mails. import { portSnapshot, topologySnapshot, type DnsServerConfiguration, type EchoServerSnapshot, type EmailServerSnapshot, type Id, type WebServerSnapshot, type TopologySnapshot } from '@mdg-filius/core'; import type { ImportedProject } from './importProject.js'; @@ -36,6 +37,7 @@ export function projectSnapshot(project: ImportedProject): TopologySnapshot { if (project.installedPrograms.get(nodeId)?.has('emailServer') !== true) continue; emailServers.set(nodeId, { domain: configuration.domain, accounts: configuration.accounts, isActive: project.activePrograms.get(nodeId)?.has('emailServer') === true }); } + const emailClients = new Map([...project.emailClientConfigurations].filter(([nodeId]) => project.installedPrograms.get(nodeId)?.has('emailClient') === true)); const webBrowsers = new Set([...project.installedPrograms].filter(([, programs]) => programs.has('webBrowser')).map(([nodeId]) => nodeId)); return topologySnapshot({ nodes: project.graph.nodes.map((node) => ({ @@ -60,13 +62,15 @@ export function projectSnapshot(project: ImportedProject): TopologySnapshot { webServersByNodeId: webServers, webBrowserNodeIds: webBrowsers, emailServersByNodeId: emailServers, + emailClientsByNodeId: emailClients, fileSystemsByNodeId: project.virtualFileSystems, }); } /** * The project with what the simulation changed that Java keeps, as the run's - * snapshot holds it: the firewalls, and the e-mail servers' mailboxes. + * snapshot holds it: the firewalls, the e-mail servers' mailboxes, and the + * e-mail programs' inboxes and sent mails. */ export function projectWithSimulationChanges(project: ImportedProject, snapshot: TopologySnapshot): ImportedProject { const emailServers = new Map(project.emailServerConfigurations); @@ -76,5 +80,14 @@ export function projectWithSimulationChanges(project: ImportedProject, snapshot: const messages = server.accounts.reduce((count, account) => count + account.mailbox.length, 0); emailServers.set(nodeId, { ...configuration, accounts: server.accounts, nextMessageID: messages + 1 }); } - return { ...project, firewallConfigurationsByNodeId: new Map(snapshot.firewallConfigurationsByNodeId), emailServerConfigurations: emailServers }; + const emailClients = new Map(project.emailClientConfigurations); + for (const [nodeId, client] of snapshot.emailClientsByNodeId) { + if (emailClients.has(nodeId)) emailClients.set(nodeId, client); + } + return { + ...project, + firewallConfigurationsByNodeId: new Map(snapshot.firewallConfigurationsByNodeId), + emailServerConfigurations: emailServers, + emailClientConfigurations: emailClients, + }; } diff --git a/packages/fls/test/importProject.test.ts b/packages/fls/test/importProject.test.ts index 787c4f0..eec3ba3 100644 --- a/packages/fls/test/importProject.test.ts +++ b/packages/fls/test/importProject.test.ts @@ -836,6 +836,27 @@ describe('importProject rules', () => { expect(second!.mailbox).toMatchObject([{ from: { name: null, mailAddress: 'rechner1@filius.de' }, to: [{ name: null, mailAddress: 'rechner2@filius.de' }], subject: 'Hallo', body: 'Gespeichert?\n' }]); }); + it('keeps what the e-mail programs sent and fetched in the project saved after the run (projectWithSimulationChanges)', () => { + const project = openProjectArchive(new Uint8Array(readFileSync(join(corpusRoot, 'java-examples/email_komplett.fls'))), counter()); + const node = (name: string) => project.graph.nodes.find((each) => each.displayName === name)!.id; + const [sender, receiver] = [node('Rechner 1'), node('Rechner 3')]; + const withoutProgram = { ...project, installedPrograms: new Map([...project.installedPrograms].map(([id, programs]) => [id, id === sender ? new Set() : programs])) }; + expect(projectSnapshot(withoutProgram).emailClientsByNodeId.has(sender)).toBe(false); + const engine = new NetworkRuntimeEngine(14); + engine.handle({ type: 'start', snapshot: projectSnapshot(project), seed: 14, initialTimeMilliseconds: 0 }); + expect(engine.emailClient(sender)!.send({ to: 'rechner3@senior.de', cc: '', bcc: '', subject: 'Gruß', text: 'Über den MX' })).toBeUndefined(); + engine.handle({ type: 'advance', toMilliseconds: 20_000 }); + expect(engine.emailClient(receiver)!.fetch()).toBe(true); + engine.handle({ type: 'advance', toMilliseconds: 30_000 }); + + const reopened = openProjectArchive(saveProjectArchive(projectWithSimulationChanges(project, engine.state.topologySnapshot)).archive, counter()); + const client = (name: string) => reopened.emailClientConfigurations.get(reopened.graph.nodes.find((each) => each.displayName === name)!.id)!; + const mail = { from: { name: 'Rechner 1', mailAddress: 'rechner1@filius.de' }, to: [{ name: null, mailAddress: 'rechner3@senior.de' }], subject: 'Gruß' }; + expect(client('Rechner 1').sent).toMatchObject([{ ...mail, body: 'Über den MX', isSent: true }]); + expect(client('Rechner 3').inbox).toMatchObject([{ ...mail, body: 'Über den MX\n', isSent: false }]); + expect(client('Rechner 3').account).toEqual(project.emailClientConfigurations.get(receiver)!.account); + }); + it("keeps a node's IP forwarding where it differs from its kind's: a host that forwards, a router that does not", () => { const system = (ipForwardingEnabled: boolean) => ({ manualRoutes: [], ipForwardingEnabled }); const project = importProject( diff --git a/scripts/code_language_allow.txt b/scripts/code_language_allow.txt index cc74aad..0432eff 100644 --- a/scripts/code_language_allow.txt +++ b/scripts/code_language_allow.txt @@ -81,7 +81,8 @@ packages/core/src/runtime/apps/routerPages.ts::titel packages/core/test/routerWebJava.test.ts::titel # konfig: the path of Java's firewall settings plug-in (FirewallWebKonfig); the stories that use it are named after it, as in RouterWebRun. packages/core/test/routerWebJava.test.ts::konfig -# Java FILIUS's e-mail classes and message keys (SMTPMitarbeiter, POP3Mitarbeiter, sw_smtpmitarbeiter_msg12 …), +# Java FILIUS's e-mail classes and message keys (SMTPMitarbeiter, POP3Mitarbeiter, sw_smtpmitarbeiter_msg12, sw_smtpclient_msg1 …), # cited where the core's e-mail server says which of Java's classes and lines it stands for. packages/core/src/runtime/apps/emailServer.ts::smtpmitarbeiter packages/core/src/runtime/apps/emailServer.ts::pop3mitarbeiter +packages/core/src/runtime/apps/emailClient.ts::smtpclient diff --git a/tools/java-oracle/README.md b/tools/java-oracle/README.md index 3bbbf51..0c03641 100644 --- a/tools/java-oracle/README.md +++ b/tools/java-oracle/README.md @@ -725,3 +725,42 @@ Gemessen (01.10.2026): Verbindung endet; nach `DELE` nummeriert `LIST` neu, `RETR` nicht. * Die Größe in `STAT` und `LIST` ist Javas eigene: die Länge von Text, Absender, Betreff, Empfängerliste (`[a, b]`) und Datum. + +## E-Mail-Programm (F3.3b) + +`EmailClientRun` lässt Javas E-Mail-Programm (`EmailAnwendung`) auf +`mail-lan` mit zwei Servern arbeiten: `filius.de` auf .30 (die Konten von +`EmailRun`), `andere.de` auf .31 (carla); der DNS-Server kennt die MX beider +Domains, und beide Server fragen ihn. Das Konto ist annas; eine Mail entsteht +wie im Fenster (Absender „Anna Muster “, die Adressen der +Felder) und geht an den SMTP-Server des Kontos, Abholen fragt den +POP3-Server. Aufgezeichnet werden die Frames, was Programm und Server ihren +Fenstern sagen, und am Ende Posteingang, Gesendete und die Konten beider +Server. Alle Mail-Orakel laufen seitdem in einer JVM mit dem Gebietsschema +der Sprache (`-Duser.language=de -Duser.country=DE`, für die englischen Fälle +en_GB): die Benachrichtigung trägt das Datum aus `DateFormat`, dessen Länge +jede spätere Sequenznummer verschiebt. + +Gemessen (01.10.2026): + +* Das Programm baut für jeden Empfänger (An, Cc, Bcc) eine eigene Verbindung + zum SMTP-Server des Kontos auf, immer an Port 25 (der SMTP-Port des + Kontos wird nicht gelesen). Ein Name als Server wird bei jeder Verbindung + neu aufgelöst; die DNS-Anfrage geht noch vor dem FIN der letzten + Verbindung, das SYN der neuen danach. +* Der Server schickt Mails an fremde Domains in seinem eigenen Thread + weiter: MX nachschlagen, dann ein neuer SMTP-Client je Weiterleitung. Ohne + MX bekommt der Absender der eigenen Domain eine Benachrichtigung; ist der + Absender fremd, schickt der Server sie mit leerem Absender (`MAIL FROM: + <>`) an dessen Domain, nachgeschlagen im Mitarbeiter-Thread, der dafür + wartet. +* Abholen: `USER`, `PASS`, `STAT`, `LIST`, dann je Mail `RETR` und `DELE`, + `QUIT`. Eine Antwort, die nicht passt, kommt als Ausnahme ins Fenster + (`java.lang.Exception: -ERR user or password wrong`), ein + Verbindungsfehler ebenso (`TimeOutException`). +* Ohne Server schickt der Client nur ein SYN (bekannter Java-Fehler aus + `TcpRun`); ein unbekannter Servername kommt als + `VerbindungsException: Ziel konnte nicht bestimmt werden!`. +* Wer von zwei fast gleichzeitig gebauten Sockets die nächste + TCP-Startnummer zieht, entscheidet der Thread-Takt (Programm und + Weiterleitung des Servers, wenige Millisekunden auseinander). diff --git a/tools/java-oracle/run.sh b/tools/java-oracle/run.sh index 5da2799..4743e28 100755 --- a/tools/java-oracle/run.sh +++ b/tools/java-oracle/run.sh @@ -21,7 +21,7 @@ if [ ! -f "$upstream/target/filius.jar" ]; then fi classpath="$upstream/target/filius.jar:$upstream/target/lib/*" mkdir -p "$here/.build" -javac -encoding UTF-8 -d "$here/.build" -cp "$classpath" "$here/src/FlsOracle.java" "$here/src/GetterDefaults.java" "$here/src/IpCheckCases.java" "$here/src/DnsHostsCases.java" "$here/src/EmailFileCases.java" "$here/src/BeansDump.java" "$here/src/Base64Cases.java" "$here/src/ScenarioNetwork.java" "$here/src/DhcpRun.java" "$here/src/TcpRun.java" "$here/src/DnsRun.java" "$here/src/ArpRun.java" "$here/src/RipRun.java" "$here/src/NatRun.java" "$here/src/WlanRun.java" "$here/src/ExampleRun.java" "$here/src/EchoRun.java" "$here/src/WebRun.java" "$here/src/RouterWebRun.java" "$here/src/KonfigCases.java" "$here/src/EmailRun.java" "$here/src/MailCases.java" +javac -encoding UTF-8 -d "$here/.build" -cp "$classpath" "$here/src/FlsOracle.java" "$here/src/GetterDefaults.java" "$here/src/IpCheckCases.java" "$here/src/DnsHostsCases.java" "$here/src/EmailFileCases.java" "$here/src/BeansDump.java" "$here/src/Base64Cases.java" "$here/src/ScenarioNetwork.java" "$here/src/DhcpRun.java" "$here/src/TcpRun.java" "$here/src/DnsRun.java" "$here/src/ArpRun.java" "$here/src/RipRun.java" "$here/src/NatRun.java" "$here/src/WlanRun.java" "$here/src/ExampleRun.java" "$here/src/EchoRun.java" "$here/src/WebRun.java" "$here/src/RouterWebRun.java" "$here/src/KonfigCases.java" "$here/src/EmailRun.java" "$here/src/MailCases.java" "$here/src/EmailClientRun.java" # FILIUS writes its settings below $HOME; keep them out of the real one. mkdir -p "$here/.build/home" # Removed first: a crashed run must not leave the previous result standing. @@ -248,20 +248,31 @@ for language in de en; do done # The e-mail server as Java FILIUS runs it (EmailRun on mail-lan), and its -# SMTP and POP3 workers fed without a network, in both languages (MailCases). +# SMTP and POP3 workers fed without a network, in both languages (MailCases); +# the e-mail program with two servers (EmailClientRun). The JVM runs in the +# language's locale: a server's notice carries DateFormat's date in it. +german="-Duser.language=de -Duser.country=DE" for run in smtp:16000 smtpErrors:25000 pop3:36000 pop3Errors:20000; do story="${run%%:*}" output="$root/packages/core/test/scenarios/email-java-$story.java.json" rm -f "$output" - HOME="$here/.build/home" xvfb-run -a java -cp "$classpath:$here/.build" EmailRun \ + HOME="$here/.build/home" xvfb-run -a java $german -cp "$classpath:$here/.build" EmailRun \ "$root/packages/core/test/scenarios/mail-lan.scenario.json" "$story" "${run##*:}" "$output" 2>&1 | grep -v 'logback\|^$' || true test -s "$output" done -for language in de en; do - output="$root/packages/core/test/email-server.$language.java.json" +for language in de:DE en:GB; do + output="$root/packages/core/test/email-server.${language%%:*}.java.json" rm -f "$output" - HOME="$here/.build/home" xvfb-run -a java -cp "$classpath:$here/.build" MailCases "$language" \ - "$root/packages/core/test/email-server.cases.txt" "$output" 2>&1 | grep -v 'logback\|^$' || true + HOME="$here/.build/home" xvfb-run -a java -Duser.language="${language%%:*}" -Duser.country="${language##*:}" -cp "$classpath:$here/.build" \ + MailCases "${language%%:*}" "$root/packages/core/test/email-server.cases.txt" "$output" 2>&1 | grep -v 'logback\|^$' || true + test -s "$output" +done +for run in send:15000 fetch:10000 byName:35000 wrongPass:8000 noServer:15000 unknownHost:15000; do + story="${run%%:*}" + output="$root/packages/core/test/scenarios/email-client-java-$story.java.json" + rm -f "$output" + HOME="$here/.build/home" xvfb-run -a java $german -cp "$classpath:$here/.build" EmailClientRun \ + "$root/packages/core/test/scenarios/mail-lan.scenario.json" "$story" "${run##*:}" "$output" 2>&1 | grep -v 'logback\|^$\|^\s*at ' || true test -s "$output" done diff --git a/tools/java-oracle/src/EmailClientRun.java b/tools/java-oracle/src/EmailClientRun.java new file mode 100644 index 0000000..9bcdad3 --- /dev/null +++ b/tools/java-oracle/src/EmailClientRun.java @@ -0,0 +1,171 @@ +// Runs a story of FILIUS' e-mail program (EmailAnwendung with its SMTPClient +// and POP3Client) with two e-mail servers on mail-lan in Java FILIUS and +// records what really happens: every frame each card saw, everything the +// program and each server told their windows, and at the end the program's +// inbox and sent mails and each server's accounts (each mail as +// Email.toString, new, marked for deletion). +// +// EmailClientRun +// +// mail-lan: the program on 192.168.0.20 (DNS server .10), the server of +// filius.de on .30 (EmailRun's accounts), the server of andere.de on .31 +// (carla, without mail); the DNS server knows both domains' MX. The +// program's account is anna's (anna@filius.de, password geheim); a mail is +// made as the program's window makes it (sender "Anna Muster +// ", the fields' addresses) and sent to the account's SMTP +// server; fetching asks the account's POP3 server. +// send to bob@filius.de, cc carla@andere.de (the server sends it on) +// fetch anna's two mails +// byName the account's servers as mail.filius.de; to +// niemand@andere.de (andere.de's server tells anna), after +// 12 s to jemand@nirgendwo.de (no MX: filius.de's server tells +// anna), after 25 s fetch +// wrongPass fetch with a wrong password +// noServer send with the DNS server's address as SMTP server +// unknownHost send with a name the DNS server does not know as SMTP server + +import filius.software.email.Email; +import filius.software.email.EmailAnwendung; +import filius.software.email.EmailKonto; +import filius.software.email.EmailServer; +import filius.software.email.EmailUtils; +import filius.software.system.Datei; + +import java.util.ArrayList; +import java.util.List; + +public class EmailClientRun { + static final String CLIENT = "00000000-0000-0000-0000-000000000201"; + static final String SERVER = "00000000-0000-0000-0000-000000000203"; + static final String OTHER_SERVER = "00000000-0000-0000-0000-000000000204"; + + static ScenarioNetwork network; + static final List events = new ArrayList<>(); + + static synchronized void event(String who, String what) { + events.add(new Object[] { System.currentTimeMillis() - network.start, who, what }); + } + + static void sleepUntil(long milliseconds) throws InterruptedException { + long rest = network.start + milliseconds - System.currentTimeMillis(); + if (rest > 0) Thread.sleep(rest); + } + + static EmailServer server(String node, String domain, String accounts) { + network.system(node).installApp("filius.software.email.EmailServer", false); + EmailServer server = (EmailServer) network.system(node).holeSoftware("filius.software.email.EmailServer"); + network.system(node).getDateisystem().speicherDatei("/mailserver", new Datei("konten.txt", "txt", accounts)); + server.setMailDomain(domain); + server.setAktiv(true); + return server; + } + + /** GUIApplicationEmailAnwendungWindow's send button: the mail made from the fields, sent to the account's SMTP server. */ + static void send(EmailAnwendung program, EmailKonto account, String to, String cc, String bcc, String subject, String text) { + event("client", "call versendeEmail " + to + " | " + cc + " | " + bcc); + Email mail = new Email(); + mail.setAbsender(account.getVorname() + (!account.getNachname().isEmpty() ? (" " + account.getNachname()) : "") + " <" + + account.getEmailAdresse() + ">"); + mail.setEmpfaenger(EmailUtils.stringToAddressEntryList(to)); + mail.setCc(EmailUtils.stringToAddressEntryList(cc)); + mail.setBcc(EmailUtils.stringToAddressEntryList(bcc)); + mail.setBetreff(subject); + mail.setText(text); + program.versendeEmail(account.getSmtpserver(), mail, account.getEmailAdresse()); + } + + static void fetch(EmailAnwendung program, EmailKonto account) { + event("client", "call emailsAbholenEmails"); + program.emailsAbholenEmails(account.getBenutzername(), account.getPasswort(), account.getPop3port(), account.getPop3server()); + } + + static void mails(ScenarioNetwork.Json out, List mails) { + out.open('['); + for (Email email : mails) out.open('[').string(email.toString()).string(String.valueOf(email.getNeu())).string(String.valueOf(email.getDelete())).close(']'); + out.close(']'); + } + + static void accounts(ScenarioNetwork.Json out, EmailServer server) { + out.open('['); + for (EmailKonto account : server.getListeBenutzerkonten()) { + out.open('[').string(account.getBenutzername()); + mails(out, account.getNachrichten()); + out.close(']'); + } + out.close(']'); + } + + public static void main(String[] args) throws Exception { + network = ScenarioNetwork.read(args[0]); + String story = args[1]; + long end = Long.parseLong(args[2]); + + EmailServer server = server(SERVER, "filius.de", EmailRun.ACCOUNTS); + EmailServer other = server(OTHER_SERVER, "andere.de", "carla;andere.de;carla;Carla;Carla;\n"); + server.hinzuBeobachter((observable, data) -> event("server", String.valueOf(data))); + other.hinzuBeobachter((observable, data) -> event("otherServer", String.valueOf(data))); + network.system(CLIENT).installApp("filius.software.email.EmailAnwendung", false); + EmailAnwendung program = (EmailAnwendung) network.system(CLIENT).holeSoftware("filius.software.email.EmailAnwendung"); + program.hinzuBeobachter((observable, data) -> event("client", String.valueOf(data))); + EmailKonto account = new EmailKonto(); + account.setBenutzername("anna"); + account.setPasswort(story.equals("wrongPass") ? "falsch" : "geheim"); + account.setVorname("Anna"); + account.setNachname("Muster"); + account.setEmailAdresse("anna@filius.de"); + String host = story.equals("byName") ? "mail.filius.de" + : story.equals("noServer") ? "192.168.0.10" : story.equals("unknownHost") ? "gibtsnicht.filius.de" : "192.168.0.30"; + account.setPop3server(host); + account.setPop3port("110"); + account.setSmtpserver(host); + account.setSmtpport("25"); + program.setzeKonto(account); + network.start(); + sleepUntil(500); + + switch (story) { + case "send": + send(program, account, "bob@filius.de", "Carla ", "", "Treffen", "Hallo zusammen,\nbis morgen!"); + break; + case "fetch": + case "wrongPass": + fetch(program, account); + break; + case "byName": + send(program, account, "niemand@andere.de", "", "", "Hallo?", "Ist da wer?"); + sleepUntil(12000); + send(program, account, "jemand@nirgendwo.de", "", "", "Hallo?", "Ist da wer?"); + sleepUntil(25000); + fetch(program, account); + break; + case "noServer": + case "unknownHost": + send(program, account, "bob@filius.de", "", "", "Ins Leere", "Niemand da"); + break; + default: + throw new IllegalArgumentException("unknown story " + story); + } + sleepUntil(end); + + ScenarioNetwork.Json out = new ScenarioNetwork.Json(); + out.open('{'); + network.writeFrames(out); + synchronized (EmailClientRun.class) { + out.key("events").open('['); + for (Object[] each : events) out.open('[').number((Long) each[0]).string((String) each[1]).string((String) each[2]).close(']'); + out.close(']'); + } + out.key("inbox"); + mails(out, program.getEmpfangeneNachrichten()); + out.key("sent"); + mails(out, program.getGesendeteNachrichten()); + out.key("accounts"); + accounts(out, server); + out.key("otherAccounts"); + accounts(out, other); + out.close('}'); + network.stop(); + ScenarioNetwork.write(args[3], out); + System.exit(0); + } +}