diff --git a/CHANGES.md b/CHANGES.md index 464ab1b..bd2d751 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -13,7 +13,7 @@ Swift-Pfade relativ zu `filius-ipad/ios/FiliusPad/TopologyEditor/` (Stand | `src/model/link.ts`, `src/model/graph.ts` | `Model/TopologyLink.swift`, `Model/TopologyGraph.swift` | übertragen, bisher nur die Daten (Abfragen folgen mit dem Editor) | | `src/model/documentation.ts` | `Model/TopologyDocumentation.swift` | übertragen; FNV-Kennung mit BigInt, gegen die IDs aus dem Swift-Import geprüft | | `src/runtime/config.ts` | `State/TopologyEditorState.swift` (Laufzeit-Konfigurationen, WLAN eines Rechners, DHCP, Portweiterleitung, Remote Link ohne LAN-Transport, Programme und ihre Konfiguration, Firewall, DNS-Einträge aus `State/TopologyDNSResolver.swift`, E-Mail-Konten und -Nachrichten aus `State/TopologyEmail.swift`); dazu Echo-Server- und Client-Konfiguration, die Swift nicht speichert | übertragen; Java-Beschriftungen der Oberfläche weggelassen | -| `src/runtime/engine.ts` | `State/TopologyNetworkRuntimeEngine.swift` Z. ~313–3585, ~4472–5187 (UDP), ~4753–4850 | übertragen: Warteschlange, Uhr, Ethernet, Switch, ARP, IPv4, ICMP, Routing, Firewall, UDP-Sockets (binden, freie Ports nach Javas Zufall, senden samt Broadcast, zustellen, empfangen mit Wartezeit, schließen), TCP (Z. ~5187–5913: Server- und Client-Sockets, Handschlag mit Ergebnis, Segmente zu 1460 Byte bis zum PSH, höchstens drei Versuche, Abbau über alle Java-Zustände samt `TIME_WAIT`; seit F2.3c nach Javas `TCPSocket` an Java-Filius gemessen: je Versuch und für `TIME_WAIT` 3 RTT nach der Geschwindigkeit (8250 ms bei 90 %, Swift fest 7500 bzw. 2500 ms), der Zeitablauf zählt ab der Übergabe des Segments, vor ARP; ein Segment beendet `TIME_WAIT`; die Gegenseite schließt beim FIN von selbst; nicht bestätigte Daten schließen mit FIN statt sofort; der angenommene Socket hat die Startnummer des Listeners, der Listener eine neue. seit F2.3e wie Java: SYN+ACK und FIN gehen nie ein zweites Mal hinaus; der Server gibt einen Handschlag nach 3 RTT auf und schließt mit FIN; nach dem FIN wartet ein Socket höchstens fünfmal 3 RTT, jedes Segment beendet eine Wartezeit, dann CLOSED (Java lässt den Zustand stehen). Abweichend von Java: drei SYN statt einem, weil Javas Wiederholungsschleife nach dem ersten Zeitablauf abbricht, und ein wiederholtes SYN in `SYN_RCVD` bekommt das SYN+ACK noch einmal, statt den Socket zu schließen), DHCP (Z. ~5913–6694: Server mit festen Zuordnungen, Adressbereich, Angeboten, Leases und Sperrliste; Client seit F2.3b nach Javas `DHCPClient` neu gebaut und an Java-Filius gemessen: je Versuch eine Nachricht, eine Antwort, die nicht passt, wird gelesen und verworfen; die ARP-Prüfung wartet eine RTT, eine Antwort für die Adresse beendet sie sofort, dann DECLINE; nach einem Zeitablauf wiederholt der Zustand seine Nachricht, nach dem fünften nimmt der Client eine Link-Local-Adresse `169.254.1.x/16` (ARP-Probe, ARP-Reply an alle) und gibt keine alte Adresse zurück; Swift sendete doppelt, wartete nicht auf ARP und kehrte nach zehn Versuchen zur alten Adresse zurück. Abweichend von Java: Nach fünf belegten Link-Local-Adressen gibt der Client auf (Java sucht endlos), und ein ARP-Paket für eine andere Adresse beendet die Prüfung nicht. Seit F2.3d befördert ein Kabel einen Frame nach dem anderen wie Javas `SimplexVerbindung` (ein Frame wartet im Ausgangspuffer, bis der vorige angekommen ist, und erscheint im Protokoll, wenn er losgeht); Swift schickt alle zugleich, die Option `swiftCables` behält das für den Swift-Vergleich. Die RTT der DHCP-Zeiten (Warten, Angebote, Sperrliste) folgt wie in Java der Geschwindigkeit (50 Kabel, 2750 ms bei 90 %); Swift rechnet fest mit 2500 ms. ARP seit F2.4b nach Javas `holeARPTabellenEintrag`, an Java-Filius gemessen: eine Auflösung fragt, wartet eine RTT, fragt ein zweites Mal und gibt nach einer weiteren RTT auf; dann „Host unreachable" beim Absender selbst oder vom Router zurück (bei ICMP nur für Echo-Anfragen); ein wartender Absender wacht nach den übrigen Ereignissen desselben Zeitpunkts auf; der Ping wartet danach eine RTT auf die Antwort. Swift schickt in der Ereignisverarbeitung beide Anfragen zugleich und lässt das Paket ohne Ende warten, wenn die Adresse irgendwo im Netz vorkommt (Wissen, das kein Knoten hat), und blockiert direkte Aufrufe ohne Wartezeit; die Option `swiftArp` behält das für den Swift-Vergleich. Seit F2.4b-2 kehrt ein Senden wie in Java sofort zurück, die Frames reisen, während die Uhr läuft (Swift: der Aufruf kehrt erst zurück, wenn alle Frames angekommen sind; die Option `swiftSends` behält das für den Swift-Vergleich), und UDP und TCP senden über Javas Transport-Thread je Knoten und Protokoll: ein Segment nach dem anderen; solange IP auf ARP wartet, blockiert das nächste `senden`. Wartende Absender kommen in der Reihenfolge an die Reihe, in der sie kamen (Javas Sperre überlässt das dem Zufall). Seit F2.4b-3 geht jedes ankommende Paket wie in Java durch den IP-Thread (UDP, TCP) oder den ICMP-Thread (ICMP) seines Knotens: zustellen, Echo-Reply, weiterleiten, eins nach dem anderen; solange ARP wartet, warten die folgenden. Abweichend von Java weckt eine ARP-Antwort alle, die auf die Adresse warten (Javas `notify` weckt einen beliebigen). DNS seit F2.4a nach Javas `DNSServer`/`Resolver`, an Java-Filius gemessen: Server auf Port 53 mit Einträgen aus dem Modell (die Antwort wiederholt die Frage nicht, RCODE immer 0, ein Verweis mit NS und A im Antwortteil), iterativer Resolver mit 5 RTT je Anfrage, der nur die Server behält, an die er verwiesen wurde; seit F2.4c auf den Ereignissen statt blockierend und mit rekursivem Server nach `DNSServer.answerWithRemoteData` (Nameserver der Zone, dann der eigene DNS-Server, sonst Verweis), abweichend von Java fragt er sich nie selbst (Java endlos). Gateway-NAT seit F2.6 (Z. ~3585–3900) nach Javas `filius.software.nat`, an Java-Filius gemessen: die Übersetzung vor dem IP-Thread (wie Javas NAT-Threads zwischen Karte und Ethernet), ausgehend WAN-Adresse und der Port des Eintrags (ICMP behält die Kennung), eingehend nach Gegenstelle, Port und Protokoll, sonst nach der Portweiterleitung (legt einen dynamischen Eintrag an), ein Ping an die WAN-Adresse beantwortet der Heimrouter, Pakete von außen an das LAN verschwinden, beide Seiten durch die Firewall des Heimrouters, ausgehend TTL 1 bekommt „Zeit überschritten“; dynamische Einträge verfallen nach 300 s mal Javas Verzögerungsfaktor (Swift fest 300 s), aufgefrischt nur eingehend, seit 01.10.2026 genau in diesem Alter (Java findet sie erst bei seiner sekündlichen Prüfung, bis zu 1 s später; so auch der Switch: Javas `checkSAT` prüft jede Sekunde, der Kern verfällt genau zur Lernzeit); der Heimrouter leitet weiter wie ein Router. Abweichend von Java: ein LAN-Endpunkt bekommt für jede neue Gegenstelle einen Eintrag auf demselben WAN-Port (Java behält nur den für die erste, die Antworten weiterer bleiben am Heimrouter hängen). RIP seit F2.5a (Z. ~4700–5090) nach Javas `filius.software.rip`, seit F2.5b an Java-Filius gemessen (die Pause in Javas `float`-Rechnung): eine Route mit 0 Hops je eigenem Netz, die nie verfällt; der erste Beacon nach einer Sekunde, dann alle 25,2–35,2 s aus einem Zufall je Router (Java: ein ungesetzter `Random` je Router; der Kern setzt ihn aus Szenario und Router-ID, `ripSeed`; Swift: ein Zufall für alle); eine Nachricht je Schnittstelle ohne die Routen über sie (Split Horizon); eine neue Route oder mehr Hops vom selben Router senden sofort; eine gelernte Route wird genau nach ihren 75 s auf 16 gesetzt und sofort gemeldet (Java erst beim nächsten eigenen Beacon, bis zu gut 30 s später; Swift bei jedem Ereignis; seit 01.10.2026, vorher wie Java); Nachrichten von jedem Quellport (Swift: nur 521); ein RIP-Router leitet nur nach seiner Tabelle weiter, wenige Hops vor langer Maske. `receiveUdp` kehrt wie Javas `empfangen` zurück, sobald ein Datagramm da ist. Seit der Abnahme F2 nach Javas `ARPThread`: ein Eintrag entsteht nur aus einer Anfrage nach der eigenen Adresse oder aus einer Antwort (Swift: aus jedem Paket; `swiftArp` behält das), ein Paket von der Netzadresse wird verworfen; ein Rechner leitet weiter, wenn seine IP-Weiterleitung an ist (`ipForwardingByNodeId`). Seit F2.8b nach Javas Tabellen gemessen: eine ARP-Anfrage trägt als Ziel-MAC die Broadcast-Adresse (Swift: Nullen; `swiftArp` behält sie), eine ICMP-Fehlermeldung Identifier und Sequenznummer 0 (RFC 792, Java; Swift kopiert die des Echos, ein Ping erkennt die Meldung am eingebetteten Echo), und „Host nicht erreichbar“ vom Router trägt das Paket, wie er es weitergeleitet hat (TTL gesenkt). Die Broadcast-Adresse schreibt sie immer groß (Java in der Antwort an 0.0.0.0 klein). Den Mitschnitt je Karte (`capture.ts`) schreibt sie seit F2.8a dort, wo Java ihn schreibt: beim Abgang auf das Kabel und bei der Ankunft an der Karte. Seit F3.4a läuft die Befehlszeile mit (`terminal`, auf den Dateien des Knotens). Seit F3.4b nach Javas `ICMP`/`ICMPThread`, an Java-Filius gemessen: ein Echo im Programm-Thread (`icmpEchoSteps`: Warteschlange leeren, senden mit ARP-Wartezeit, eine RTT auf die erste ICMP-Nachricht warten, gleich welche), ein ICMP-Paket an den Broadcast eines eigenen Netzes geht mit TTL 1 an alle und wird von dort beantwortet, einer für ein fremdes Netz verworfen; Javas Routenwahl (`routeRow`), die ARP-Tabelle mit Javas Broadcast-Zeile (`arpTable`, `removeArpEntry`, `resetArpTable`), DNS im Programm-Thread mit Antwort- und Autoritätsteil (`resolveDnsSteps`), ein UDP-Socket weiß, dass er ohne Gegenstelle lauscht (`listening`); ein Rechner nimmt Pakete an 127.0.0.1 an. Eine ARP-Wartezeit endet wie Javas `wait` nach allem, was zur selben Zeit sonst geschieht (eine Antwort zur selben Millisekunde zählt noch). Seit F3.4c die Uhrzeit eines Frames (`wallTime`) für `tcpdump`. Abweichend von Java: eine Echo-Antwort kommt von der gefragten Adresse (RFC 792; Java antwortet von 127.0.0.1, wenn die eigene Adresse gefragt war, und von der nahen Karte, wenn die ferne eines Routers gefragt war), und „Netz nicht erreichbar“ vom Router trägt wie „Host nicht erreichbar“ das Paket, wie er es weitergeleitet hätte, mit Absender (Java bettet ein halb gebautes ohne Absender ein). Seit F3.3b läuft das E-Mail-Programm mit (`emailClient`), seine gesendeten und abgeholten Mails stehen im Schnappschuss (`emailClientsByNodeId`); ein Programm-Thread kann MX nachschlagen (`resolveDnsMailServerSteps`). Seit F3.3a läuft der E-Mail-Server mit (`emailServer`); was er annimmt oder löscht, steht im Schnappschuss (`emailServersByNodeId`), aus dem es zurück ins Projekt geht; die Uhrzeit für seine Benachrichtigungen kommt aus der Option `wallClock`. Seit F3.2c ändert die Seite `konfig` der Router und Heimrouter die Firewall zur Laufzeit; die Änderung steht im Schnappschuss (`firewallConfiguration`), aus dem sie zurück ins Projekt geht. Seit F3.2b starten Router und Heimrouter ihren Webserver auf Port 80 mit Javas Seiten (Javas Server lauscht wegen eines Wettlaufs in `setAktiv` manchmal nie, der Kern immer; `swiftRouters` lässt ihn für den Swift-Vergleich weg), die Firewall führt ein Protokoll je Knoten (Regeltreffer bei TCP und UDP, verworfenes ICMP), das wie Javas Protokollseite einen Neustart überlebt, eine RIP-Route kennt die öffentliche Adresse des meldenden Routers (`hopPublicIp`), und TCP zählt Sequenznummern und Segmentgröße wie Java in Zeichen (UTF-16-Einheiten) statt in Bytes, ohne ein Zeichenpaar zu zerreißen; Bytes, die kein Text sind, zählen als Bytes. Seit F3.2a schließt ein Programm wie Javas `schliessen()` nur auf Bitte (`requestTcpClose`): Das FIN geht zur selben Zeit, nach dem, was der Programm-Thread noch tut. Seit F3.1 laufen Verbinden, Senden, Empfangen und Annehmen auch als Schritte eines Programm-Threads (`connectTcpSteps`, `sendTcpSteps`, `receiveTcpSteps`, `acceptTcpSteps`, `resolveHostSteps`); die blockierenden Aufrufe sind nur noch eine Hülle darum. Abweichend von Java: Ein Verbindungsaufbau ohne Route scheitert sofort (Javas Socket-Thread stirbt an der `RouteNotFoundException`, `verbinden` wartet ewig), eine Nachricht, die vor dem Schließen ankam, wird noch ausgegeben (Java verwirft sie), und Senden unterscheidet wie Java „nicht verbunden", „unterbrochen" und „Zeitüberschreitung". WLAN seit F2.7 an Java-Filius gemessen: zur Laufzeit ist ein Funkkabel ein Kabel wie jedes andere, und eine SSID verbindet nichts (nach ihr legt nur Javas Editor das Funkkabel, `JHostKonfiguration.updateWifiConnection`); Swifts Verbindung über die SSID zur Laufzeit, auch ohne Kabel (`wirelessAssociations`), nicht übernommen. Klasse statt Werttyp. Noch nicht übertragen (wirft `NotPortedError`): Remote Link | +| `src/runtime/engine.ts` | `State/TopologyNetworkRuntimeEngine.swift` Z. ~313–3585, ~4472–5187 (UDP), ~4753–4850 | übertragen: Warteschlange, Uhr, Ethernet, Switch, ARP, IPv4, ICMP, Routing, Firewall, UDP-Sockets (binden, freie Ports nach Javas Zufall, senden samt Broadcast, zustellen, empfangen mit Wartezeit, schließen), TCP (Z. ~5187–5913: Server- und Client-Sockets, Handschlag mit Ergebnis, Segmente zu 1460 Byte bis zum PSH, höchstens drei Versuche, Abbau über alle Java-Zustände samt `TIME_WAIT`; seit F2.3c nach Javas `TCPSocket` an Java-Filius gemessen: je Versuch und für `TIME_WAIT` 3 RTT nach der Geschwindigkeit (8250 ms bei 90 %, Swift fest 7500 bzw. 2500 ms), der Zeitablauf zählt ab der Übergabe des Segments, vor ARP; ein Segment beendet `TIME_WAIT`; die Gegenseite schließt beim FIN von selbst; nicht bestätigte Daten schließen mit FIN statt sofort; der angenommene Socket hat die Startnummer des Listeners, der Listener eine neue. seit F2.3e wie Java: SYN+ACK und FIN gehen nie ein zweites Mal hinaus; der Server gibt einen Handschlag nach 3 RTT auf und schließt mit FIN; nach dem FIN wartet ein Socket höchstens fünfmal 3 RTT, jedes Segment beendet eine Wartezeit, dann CLOSED (Java lässt den Zustand stehen). Abweichend von Java: drei SYN statt einem, weil Javas Wiederholungsschleife nach dem ersten Zeitablauf abbricht, und ein wiederholtes SYN in `SYN_RCVD` bekommt das SYN+ACK noch einmal, statt den Socket zu schließen), DHCP (Z. ~5913–6694: Server mit festen Zuordnungen, Adressbereich, Angeboten, Leases und Sperrliste; Client seit F2.3b nach Javas `DHCPClient` neu gebaut und an Java-Filius gemessen: je Versuch eine Nachricht, eine Antwort, die nicht passt, wird gelesen und verworfen; die ARP-Prüfung wartet eine RTT, eine Antwort für die Adresse beendet sie sofort, dann DECLINE; nach einem Zeitablauf wiederholt der Zustand seine Nachricht, nach dem fünften nimmt der Client eine Link-Local-Adresse `169.254.1.x/16` (ARP-Probe, ARP-Reply an alle) und gibt keine alte Adresse zurück; Swift sendete doppelt, wartete nicht auf ARP und kehrte nach zehn Versuchen zur alten Adresse zurück. Abweichend von Java: Nach fünf belegten Link-Local-Adressen gibt der Client auf (Java sucht endlos), und ein ARP-Paket für eine andere Adresse beendet die Prüfung nicht. Seit F2.3d befördert ein Kabel einen Frame nach dem anderen wie Javas `SimplexVerbindung` (ein Frame wartet im Ausgangspuffer, bis der vorige angekommen ist, und erscheint im Protokoll, wenn er losgeht); Swift schickt alle zugleich, die Option `swiftCables` behält das für den Swift-Vergleich. Die RTT der DHCP-Zeiten (Warten, Angebote, Sperrliste) folgt wie in Java der Geschwindigkeit (50 Kabel, 2750 ms bei 90 %); Swift rechnet fest mit 2500 ms. ARP seit F2.4b nach Javas `holeARPTabellenEintrag`, an Java-Filius gemessen: eine Auflösung fragt, wartet eine RTT, fragt ein zweites Mal und gibt nach einer weiteren RTT auf; dann „Host unreachable" beim Absender selbst oder vom Router zurück (bei ICMP nur für Echo-Anfragen); ein wartender Absender wacht nach den übrigen Ereignissen desselben Zeitpunkts auf; der Ping wartet danach eine RTT auf die Antwort. Swift schickt in der Ereignisverarbeitung beide Anfragen zugleich und lässt das Paket ohne Ende warten, wenn die Adresse irgendwo im Netz vorkommt (Wissen, das kein Knoten hat), und blockiert direkte Aufrufe ohne Wartezeit; die Option `swiftArp` behält das für den Swift-Vergleich. Seit F2.4b-2 kehrt ein Senden wie in Java sofort zurück, die Frames reisen, während die Uhr läuft (Swift: der Aufruf kehrt erst zurück, wenn alle Frames angekommen sind; die Option `swiftSends` behält das für den Swift-Vergleich), und UDP und TCP senden über Javas Transport-Thread je Knoten und Protokoll: ein Segment nach dem anderen; solange IP auf ARP wartet, blockiert das nächste `senden`. Wartende Absender kommen in der Reihenfolge an die Reihe, in der sie kamen (Javas Sperre überlässt das dem Zufall). Seit F2.4b-3 geht jedes ankommende Paket wie in Java durch den IP-Thread (UDP, TCP) oder den ICMP-Thread (ICMP) seines Knotens: zustellen, Echo-Reply, weiterleiten, eins nach dem anderen; solange ARP wartet, warten die folgenden. Abweichend von Java weckt eine ARP-Antwort alle, die auf die Adresse warten (Javas `notify` weckt einen beliebigen). DNS seit F2.4a nach Javas `DNSServer`/`Resolver`, an Java-Filius gemessen: Server auf Port 53 mit Einträgen aus dem Modell (die Antwort wiederholt die Frage nicht, RCODE immer 0, ein Verweis mit NS und A im Antwortteil), iterativer Resolver mit 5 RTT je Anfrage, der nur die Server behält, an die er verwiesen wurde; seit F2.4c auf den Ereignissen statt blockierend und mit rekursivem Server nach `DNSServer.answerWithRemoteData` (Nameserver der Zone, dann der eigene DNS-Server, sonst Verweis), abweichend von Java fragt er sich nie selbst (Java endlos). Gateway-NAT seit F2.6 (Z. ~3585–3900) nach Javas `filius.software.nat`, an Java-Filius gemessen: die Übersetzung vor dem IP-Thread (wie Javas NAT-Threads zwischen Karte und Ethernet), ausgehend WAN-Adresse und der Port des Eintrags (ICMP behält die Kennung), eingehend nach Gegenstelle, Port und Protokoll, sonst nach der Portweiterleitung (legt einen dynamischen Eintrag an), ein Ping an die WAN-Adresse beantwortet der Heimrouter, Pakete von außen an das LAN verschwinden, beide Seiten durch die Firewall des Heimrouters, ausgehend TTL 1 bekommt „Zeit überschritten“; dynamische Einträge verfallen nach 300 s mal Javas Verzögerungsfaktor (Swift fest 300 s), aufgefrischt nur eingehend, seit 01.10.2026 genau in diesem Alter (Java findet sie erst bei seiner sekündlichen Prüfung, bis zu 1 s später; so auch der Switch: Javas `checkSAT` prüft jede Sekunde, der Kern verfällt genau zur Lernzeit); der Heimrouter leitet weiter wie ein Router. Abweichend von Java: ein LAN-Endpunkt bekommt für jede neue Gegenstelle einen Eintrag auf demselben WAN-Port (Java behält nur den für die erste, die Antworten weiterer bleiben am Heimrouter hängen). RIP seit F2.5a (Z. ~4700–5090) nach Javas `filius.software.rip`, seit F2.5b an Java-Filius gemessen (die Pause in Javas `float`-Rechnung): eine Route mit 0 Hops je eigenem Netz, die nie verfällt; der erste Beacon nach einer Sekunde, dann alle 25,2–35,2 s aus einem Zufall je Router (Java: ein ungesetzter `Random` je Router; der Kern setzt ihn aus Szenario und Router-ID, `ripSeed`; Swift: ein Zufall für alle); eine Nachricht je Schnittstelle ohne die Routen über sie (Split Horizon); eine neue Route oder mehr Hops vom selben Router senden sofort; eine gelernte Route wird genau nach ihren 75 s auf 16 gesetzt und sofort gemeldet (Java erst beim nächsten eigenen Beacon, bis zu gut 30 s später; Swift bei jedem Ereignis; seit 01.10.2026, vorher wie Java); Nachrichten von jedem Quellport (Swift: nur 521); ein RIP-Router leitet nur nach seiner Tabelle weiter, wenige Hops vor langer Maske. `receiveUdp` kehrt wie Javas `empfangen` zurück, sobald ein Datagramm da ist. Seit der Abnahme F2 nach Javas `ARPThread`: ein Eintrag entsteht nur aus einer Anfrage nach der eigenen Adresse oder aus einer Antwort (Swift: aus jedem Paket; `swiftArp` behält das), ein Paket von der Netzadresse wird verworfen; ein Rechner leitet weiter, wenn seine IP-Weiterleitung an ist (`ipForwardingByNodeId`). Seit F2.8b nach Javas Tabellen gemessen: eine ARP-Anfrage trägt als Ziel-MAC die Broadcast-Adresse (Swift: Nullen; `swiftArp` behält sie), eine ICMP-Fehlermeldung Identifier und Sequenznummer 0 (RFC 792, Java; Swift kopiert die des Echos, ein Ping erkennt die Meldung am eingebetteten Echo), und „Host nicht erreichbar“ vom Router trägt das Paket, wie er es weitergeleitet hat (TTL gesenkt). Die Broadcast-Adresse schreibt sie immer groß (Java in der Antwort an 0.0.0.0 klein). Den Mitschnitt je Karte (`capture.ts`) schreibt sie seit F2.8a dort, wo Java ihn schreibt: beim Abgang auf das Kabel und bei der Ankunft an der Karte. Seit F3.4a läuft die Befehlszeile mit (`terminal`, auf den Dateien des Knotens). Seit F3.4b nach Javas `ICMP`/`ICMPThread`, an Java-Filius gemessen: ein Echo im Programm-Thread (`icmpEchoSteps`: Warteschlange leeren, senden mit ARP-Wartezeit, eine RTT auf die erste ICMP-Nachricht warten, gleich welche), ein ICMP-Paket an den Broadcast eines eigenen Netzes geht mit TTL 1 an alle und wird von dort beantwortet, einer für ein fremdes Netz verworfen; Javas Routenwahl (`routeRow`), die ARP-Tabelle mit Javas Broadcast-Zeile (`arpTable`, `removeArpEntry`, `resetArpTable`), DNS im Programm-Thread mit Antwort- und Autoritätsteil (`resolveDnsSteps`), ein UDP-Socket weiß, dass er ohne Gegenstelle lauscht (`listening`); ein Rechner nimmt Pakete an 127.0.0.1 an. Eine ARP-Wartezeit endet wie Javas `wait` nach allem, was zur selben Zeit sonst geschieht (eine Antwort zur selben Millisekunde zählt noch). Seit F3.4c die Uhrzeit eines Frames (`wallTime`) für `tcpdump`. Seit F3.5a schreibt der Mailserver seine Kontendatei `/mailserver/konten.txt` beim Start und bei jeder Änderung seiner Konten in die Dateien des Knotens (Java schreibt die Benachrichtigung an einen lokalen Absender erst beim nächsten Speichern hinein). Abweichend von Java: eine Echo-Antwort kommt von der gefragten Adresse (RFC 792; Java antwortet von 127.0.0.1, wenn die eigene Adresse gefragt war, und von der nahen Karte, wenn die ferne eines Routers gefragt war), und „Netz nicht erreichbar“ vom Router trägt wie „Host nicht erreichbar“ das Paket, wie er es weitergeleitet hätte, mit Absender (Java bettet ein halb gebautes ohne Absender ein). Seit F3.3b läuft das E-Mail-Programm mit (`emailClient`), seine gesendeten und abgeholten Mails stehen im Schnappschuss (`emailClientsByNodeId`); ein Programm-Thread kann MX nachschlagen (`resolveDnsMailServerSteps`). Seit F3.3a läuft der E-Mail-Server mit (`emailServer`); was er annimmt oder löscht, steht im Schnappschuss (`emailServersByNodeId`), aus dem es zurück ins Projekt geht; die Uhrzeit für seine Benachrichtigungen kommt aus der Option `wallClock`. Seit F3.2c ändert die Seite `konfig` der Router und Heimrouter die Firewall zur Laufzeit; die Änderung steht im Schnappschuss (`firewallConfiguration`), aus dem sie zurück ins Projekt geht. Seit F3.2b starten Router und Heimrouter ihren Webserver auf Port 80 mit Javas Seiten (Javas Server lauscht wegen eines Wettlaufs in `setAktiv` manchmal nie, der Kern immer; `swiftRouters` lässt ihn für den Swift-Vergleich weg), die Firewall führt ein Protokoll je Knoten (Regeltreffer bei TCP und UDP, verworfenes ICMP), das wie Javas Protokollseite einen Neustart überlebt, eine RIP-Route kennt die öffentliche Adresse des meldenden Routers (`hopPublicIp`), und TCP zählt Sequenznummern und Segmentgröße wie Java in Zeichen (UTF-16-Einheiten) statt in Bytes, ohne ein Zeichenpaar zu zerreißen; Bytes, die kein Text sind, zählen als Bytes. Seit F3.2a schließt ein Programm wie Javas `schliessen()` nur auf Bitte (`requestTcpClose`): Das FIN geht zur selben Zeit, nach dem, was der Programm-Thread noch tut. Seit F3.1 laufen Verbinden, Senden, Empfangen und Annehmen auch als Schritte eines Programm-Threads (`connectTcpSteps`, `sendTcpSteps`, `receiveTcpSteps`, `acceptTcpSteps`, `resolveHostSteps`); die blockierenden Aufrufe sind nur noch eine Hülle darum. Abweichend von Java: Ein Verbindungsaufbau ohne Route scheitert sofort (Javas Socket-Thread stirbt an der `RouteNotFoundException`, `verbinden` wartet ewig), eine Nachricht, die vor dem Schließen ankam, wird noch ausgegeben (Java verwirft sie), und Senden unterscheidet wie Java „nicht verbunden", „unterbrochen" und „Zeitüberschreitung". WLAN seit F2.7 an Java-Filius gemessen: zur Laufzeit ist ein Funkkabel ein Kabel wie jedes andere, und eine SSID verbindet nichts (nach ihr legt nur Javas Editor das Funkkabel, `JHostKonfiguration.updateWifiConnection`); Swifts Verbindung über die SSID zur Laufzeit, auch ohne Kabel (`wirelessAssociations`), nicht übernommen. Klasse statt Werttyp. Noch nicht übertragen (wirft `NotPortedError`): Remote Link | | `src/runtime/threads.ts` | Javas Threads der Programme (`Anwendung extends Thread`, `ServerMitarbeiter`) | neu (F3.1): ein Programm-Thread als Generator, der liefert, worauf er wartet (Bedingung, Zeit oder beides); die Engine setzt nach jedem Ereignis fort, wessen Warten vorbei ist, in der Reihenfolge, in der die Threads begannen; nichts blockiert die Engine. Abweichend von Java: ein Thread wacht sofort, wenn seine Bedingung gilt (Java sieht oft nur alle 100 ms nach) | | `src/runtime/apps/program.ts` | Java `filius.software.Anwendung` | neu (F3.1): die Zeilen im Fenster eines Programms (strukturiert, damit der Editor sie übersetzt) und der Befehls-Thread (`ausfuehren`) | | `src/runtime/apps/server.ts` | Java `ServerAnwendung`, `ServerMitarbeiter` | neu (F3.2a, aus `echo.ts` herausgelöst): was jeder Server teilt — ein Thread nimmt Verbindungen an, solange er eingeschaltet ist, je Verbindung einer beantwortet jede Nachricht; ausgeschaltet schließt er Socket und Verbindungen; Port belegt → er schaltet sich aus; seit F3.3a kann ein Server das Gespräch einer Verbindung selbst führen (`converse`: Begrüßung, keine oder mehrere Antworten, Schließen) | @@ -23,6 +23,7 @@ Swift-Pfade relativ zu `filius-ipad/ios/FiliusPad/TopologyEditor/` (Stand | `src/runtime/http.ts` | Java `HTTPNachricht`, Spring `UriUtils.encodePath`/`decode`, `java.net.URLDecoder` | neu nach Java (F3.2a): Anfragen und Antworten in Javas Textform, Javas Statustexte, Pfade kodiert wie `UriUtils`; seit F3.2c `javaUrlDecode` für Formulardaten wie `URLDecoder.decode` (UTF-8, `+` als Leerzeichen, scheitert, wo Java wirft) | | `src/util/javaBase64.ts` | Java `filius.rahmenprogramm.Base64` (iHarder) | aus `packages/fls` (`exportProject.ts`) in den Kern gezogen (F3.2a), dazu der Leser, der Leerraum überspringt | | `src/runtime/email.ts` | Java `filius.software.email.Email`, `AddressEntry`, `EmailUtils` | neu nach Java (F3.3a): Mails in Javas Textform (From, To, Cc, Subject, Date Received, Leerzeile, Text; kein Bcc), Adressen „Name “, Javas Größe einer Mail für POP3. Abweichend von Java: der Kopf endet an seiner Leerzeile, ein unbekanntes Feld wird übergangen (Java beendet dort den Kopf und liest die folgenden Felder als Text), eine Zeile ohne Feld beginnt den Text (Java verwirft sie) | +| `src/runtime/emailAccountsFile.ts` | Java `EmailServer.listeBenutzerkontenZuString` | neu (F3.5a): die Kontendatei des Mailservers aus seinen Konten, aus `packages/fls` (Export) hierher verschoben, damit Export und Laufzeit dasselbe schreiben; Javas Fehler wie dort nicht übernommen | | `src/runtime/apps/emailServer.ts` | Java `EmailServer`, `SMTPServer`, `SMTPMitarbeiter`, `POP3Server`, `POP3Mitarbeiter`, `EmailKonto` | neu nach Java (F3.3a): Konten einer Domain, SMTP auf Port 25 speichert Mails an eigene Konten (wie Java neu gelesen) und schickt bei unbekannten Empfängern eine Benachrichtigung an einen Absender der Domain, POP3 auf Port 110 gibt Mails ab 0 nummeriert aus; beide zusammen ein- und ausgeschaltet, POP3 zuerst; SMTP-Antworten in der Sprache des Projekts; Fensterzeilen wie Java. An Java-Filius gemessen (`EmailRun`, `MailCases`). Abweichend von Java: nach einer Mail ist der Umschlag neu (Java antwortet dem nächsten Befehl 503 und behält Absender, Empfänger und Text); ein Befehl, den der Zustand nicht nimmt, bekommt 503 (Java schweigt), HELO beginnt neu; in DATA ist alles Text, auch `quit`; die Domain gilt in jeder Schreibweise; ein Empfänger ohne `@` ist unbekannt, ein leerer Absender bekommt keine Benachrichtigung (Java wirft), eine Benachrichtigung an eine Mail ohne From geht an den Absender des Umschlags (Java: `To: null`); POP3: eine Mail lässt sich mehrmals abrufen, eine fehlende Mail, `LIST` ohne Mails und falsche Argumente geben `-ERR` (Java: leere Mail, leere Antwort, Abbruch), `LIST n` listet die eine Mail, Nummern bleiben nach `DELE` (Javas `LIST` zählt neu), vor der Anmeldung `-ERR unknown command`, `QUIT` immer `+OK`. Seit F3.3b leitet der Server Mails an fremde Domains per MX weiter (in seinem eigenen Thread, je Weiterleitung ein neuer SMTP-Client) und schickt eine Benachrichtigung an einen fremden Absender mit leerem Absender an dessen Domain. Noch nicht: die Kontodatei `/mailserver/konten.txt` zur Laufzeit | | `src/runtime/apps/emailClient.ts` | Java `EmailAnwendung`, `SMTPClient`, `POP3Client`, das Senden aus `GUIApplicationEmailAnwendungWindow` | neu nach Java (F3.3b): das E-Mail-Programm sendet eine Mail an den SMTP-Server seines Kontos, eine Verbindung je Empfänger (An, Cc, Bcc), und holt die Mails seines Kontos vom POP3-Server (jede abgerufen, dann gelöscht); die Prüfungen des Fensters (kein Konto, Adresse, die Javas Muster nicht nimmt, kein Empfänger); Meldungen wie Javas Beobachter (Verbindung, versendet, getrennt, Ausnahmen); der SMTP-Client dient auch dem Server zum Weiterleiten. An Java-Filius gemessen (`EmailClientRun`). Abweichend von Java: der SMTP-Port des Kontos gilt (Java verbindet immer zu 25); drei SYN statt einem | | `src/runtime/apps/terminal.ts`, `src/runtime/apps/terminalTexts.ts` | Java `filius.software.lokal.Terminal`, die Eingabe aus `GUIApplicationTerminalWindow`, die Texte `sw_terminal_*` und `terminal_msg*` des Bündels | neu nach Java (F3.4a): die Befehlszeile mit Javas Zerlegung der Eingabe, Verteilung nach dem Befehlsnamen und den lokalen Befehlen `ls`/`dir`, `cd`, `pwd`, `mkdir`, `touch`, `cp`/`copy`, `mv`/`move`, `rm`/`del`, `cat`/`type`, `test`, `help`, `ipconfig`, `route`; Texte in der Sprache des Projekts, aus dem von Java geladenen Bündel erzeugt. An Java-Filius gemessen (`TerminalCases`). Abweichend von Java: die Größe einer Textdatei sind ihre Zeichen (Java dekodiert Base64); ein fehlender Ordner ist für `ls` „nicht vorhanden“, `ls /` nennt die Wurzel; `cd` auf eine Datei, `touch`/`mkdir` in fehlenden Ordnern und `cp` auf einen Ordnernamen scheitern; `..` bleibt an der Wurzel; `rm` und `mv` nehmen absolute Pfade absolut, die Wurzel ist nicht löschbar, nach dem Löschen des Arbeitsordners gilt der nächste verbliebene darüber; `mv` auf die Datei selbst benennt sie um. Seit F3.4b die Netzbefehle `ping` (Strg+C über `interrupt`), `host`, `nslookup`, `arp` und `netstat`, mit Javas Laufmarken; ein unbekannter Befehl wird wie bei Java sofort gemeldet, auch während ein anderer läuft; seit F3.4c `traceroute` und `tcpdump` (`arpsend` nicht gebaut, der Befehl ist unbekannt); an Java-Filius gemessen (`TerminalRun`). Abweichend von Java: `ping` nennt den Host, wo Java seinen ersten Parameter nennt (`-b` in der Statistik), und nimmt vor dem Host nur `-b` (Java nimmt jedes Wort und pingt einen Broadcast); `arp` und `netstat` listen in der Reihenfolge des Lernens bzw. Anlegens (Java: Reihenfolge einer `HashMap`); `netstat` zeigt von einem UDP-Server nur den lauschenden Socket (Java auch einen für jede je beantwortete Adresse, nie geschlossen); `traceroute` sagt sein Fazit vor der Endmarke (Java danach, wo sein Fenster keinen Text mehr zeigt) und nennt ein Ziel beim 20. Sprung erreicht (Java: nicht erreicht); `tcpdump` meldet jeden Frame sofort (Java schaut alle 100 ms) | @@ -55,7 +56,7 @@ Swift-Pfade relativ zu `filius-ipad/ios/FiliusPad/TopologyEditor/` (Stand | `test/firewallSettings.test.ts`, `test/firewall-settings.cases.txt`, `test/firewall-settings.{de,en}.java.json` | — | neu (F3.2c): 25 Fälle der Seite `konfig` gegen Java-Filius (`KonfigCases`), je Schritt Seite und Firewall, Deutsch und Englisch, darunter die Formulardaten, wie Javas Browserfenster (Swing) sie schickt; zehn benannte Java-Fehler (`JAVA_BUGS`), die erwartete Seite jeweils aus einem Java-Lauf mit demselben Zustand; dazu `javaUrlDecode` | | `test/web.test.ts` | — | neu (F3.2a): HTTP-Form, Pfadkodierung, Base64, Adresszeile, Bildersuche; am Server 400/501 (seit F3.2c auch für `get` und `Post`), Durchgriff, Ordner, Inhaltsarten, Binärdateien, virtuelle Hosts (fünf Zeilen, Schalter ohne Datei); am Browser Seite und Bilder, Link ohne Host, nur HTML sucht Bilder, keine Adresse, keine Antwort | | `test/emailServer.test.ts`, `test/email-server.cases.txt`, `test/email-server.{de,en}.java.json`, `test/mailAccounts.ts` | — | neu (F3.3a): 26 Fälle der SMTP- und POP3-Gespräche gegen Java-Filius (`MailCases`), je Nachricht Antworten, Fensterzeilen, Schließen und Konten, Deutsch und Englisch; 18 Fälle mit benannten Java-Fehlern (`JAVA_BUGS`); dazu Adressen, Mailtext und Größe, und im Kern: Ein- und Ausschalten, Postfächer im Schnappschuss und über einen Neustart, Datum der Benachrichtigung je Sprache | -| `test/emailJava.test.ts`, `test/scenarios/mail-lan.scenario.json`, `test/scenarios/email-java-*.java.json` | — | neu (F3.3a): vier Abläufe mit dem E-Mail-Server gegen Java-Filius (`EmailRun`): SMTP, SMTP mit Fehlern und Benachrichtigung, POP3 zweimal angemeldet, POP3-Anmeldefehler; je Karte Frames, Zeiten, Tabellen, die Fensterzeilen von Server und Client und die Konten am Ende (das Datum der Benachrichtigung als Platzhalter) | +| `test/emailJava.test.ts`, `test/scenarios/mail-lan.scenario.json`, `test/scenarios/email-java-*.java.json` | — | neu (F3.3a): vier Abläufe mit dem E-Mail-Server gegen Java-Filius (`EmailRun`): SMTP, SMTP mit Fehlern und Benachrichtigung, POP3 zweimal angemeldet, POP3-Anmeldefehler; je Karte Frames, Zeiten, Tabellen, die Fensterzeilen von Server und Client und die Konten am Ende (das Datum der Benachrichtigung als Platzhalter); seit F3.5a auch die Kontendatei am Ende, wie Java die Konten schreibt (und wo Javas hinterlassene Datei hinterherhinkt) | | `test/emailClientJava.test.ts`, `test/scenarios/email-client-java-*.java.json` | — | neu (F3.3b): sechs Abläufe mit dem E-Mail-Programm und zwei Servern gegen Java-Filius (`EmailClientRun`): senden mit Weiterleitung, abholen, Server per Name und Benachrichtigungen von beiden Servern, falsches Passwort, kein Server, unbekannter Servername; je Karte Frames, Zeiten, Tabellen, die Meldungen von Programm und Servern, Posteingang, Gesendete und Konten am Ende; Javas 100-ms-Blick kostet je Verbindung (und je DNS-Antwort, auf die es so wartet) eine Periode Toleranz; ein benannter Java-Fehler (nur ein SYN); bei `byName` die Startnummern ohne die Million (Thread-Wettlauf in Java) | | `test/emailClient.test.ts` | — | neu (F3.3b): was das Fenster ablehnt, Bcc, der SMTP-Port des Kontos, eine ungültige Kontoadresse, eine Verbindung, die beim Warten endet, eine Mail ohne Absender aus dem Modell, die Ordner im Schnappschuss | | `test/terminal.test.ts`, `test/terminal.cases.txt`, `test/terminal.{de,en}.java.json` | — | neu (F3.4a): 16 Fälle der Befehlszeile gegen Java-Filius (`TerminalCases`), je Zeile die Handlung des Fensters, was das Programm sagt, Arbeitsordner und alle Dateien, Deutsch und Englisch; Javas Größe von Textdateien überall als Java-Fehler korrigiert, dazu acht Fälle mit benannten Java-Fehlern (`JAVA_BUGS`); ein Bild bleibt beim Kopieren ein Bild; jeder Text der Tabelle ist wörtlich Javas | diff --git a/packages/core/src/index.ts b/packages/core/src/index.ts index a48623a..a3cd098 100644 --- a/packages/core/src/index.ts +++ b/packages/core/src/index.ts @@ -29,6 +29,7 @@ export * from './runtime/apps/emailClient.js'; export * from './runtime/apps/terminal.js'; export * from './runtime/apps/terminalTexts.js'; export * from './runtime/email.js'; +export * from './runtime/emailAccountsFile.js'; export * from './runtime/http.js'; export * from './util/equal.js'; export * from './util/javaBase64.js'; diff --git a/packages/core/src/runtime/emailAccountsFile.ts b/packages/core/src/runtime/emailAccountsFile.ts new file mode 100644 index 0000000..192374a --- /dev/null +++ b/packages/core/src/runtime/emailAccountsFile.ts @@ -0,0 +1,66 @@ +// The e-mail server's account file, /mailserver/konten.txt, as Java writes +// it (EmailServer.listeBenutzerkontenZuString): Java's server reads it at +// every simulation start and writes it when its accounts change. Written by +// the server at run time and by the project export (packages/fls), from the +// accounts the model keeps. Java's errors are not copied: a field is written +// empty where Java writes "null" (a message's date, which Java never sets), +// and a character a field cannot carry in the format (a separator, a line +// break) becomes a space, with a warning. + +import type { EmailAddress, EmailServerAccount } from './config.js'; + +export const EMAIL_SERVER_ACCOUNTS_FILE = '/mailserver/konten.txt'; + +/** A field's characters the format cannot carry, each a space, with a warning. */ +export function accountFileField(value: string, forbidden: RegExp, what: string, warn: (message: string) => void): string { + if (!forbidden.test(value)) return value; + warn(`${what} holds a character Java's account file cannot carry, written there with a space`); + return value.replace(new RegExp(forbidden.source, 'g'), ' '); +} + +/** + * EmailServer.listeBenutzerkontenZuString: per account a line of user, + * domain, password, last and first name, then its messages, each "#" and + * seven fields joined by "$" — the text with Java's escapes + * (replaceSpecialChar, then line breaks as "|"), the others unescaped. + */ +export function serverAccountsFileText(domain: string, accounts: readonly EmailServerAccount[], warn: (message: string) => void = () => {}): string { + const where = (what: string) => `${EMAIL_SERVER_ACCOUNTS_FILE}: ${what}`; + const plain = (value: string, what: string) => accountFileField(value, /[;#$\r\n]/, where(what), warn); + const address = (entry: EmailAddress, what: string) => { + const name = entry.name === null ? null : accountFileField(entry.name, /[;#$,<>\r\n]/, where(what), warn); + const mail = entry.mailAddress === null ? null : accountFileField(entry.mailAddress, /[;#$,<>\r\n]/, where(what), warn); + if (name === null) return mail === null ? '' : `<${mail}>`; + return mail === null ? name : `${name} <${mail}>`; + }; + const addresses = (entries: readonly EmailAddress[], what: string) => entries.map((entry) => address(entry, what)).join(','); + const escapedText = (text: string) => + text.replace(/\$/g, '&&00036&&').replace(/;/g, '&&00059&&').replace(/\|/g, '&&00124&&').replace(/#/g, '&&00035&&').replace(/\n/g, '|'); + return accounts + .map((account) => { + const messages = account.mailbox + .map( + (message) => + '#' + + [ + address(message.from, 'a sender'), + addresses(message.to, 'a recipient'), + addresses(message.cc, 'a recipient'), + addresses(message.bcc, 'a recipient'), + message.receivedAtMilliseconds === undefined ? '' : String(message.receivedAtMilliseconds), + plain(message.subject, 'a subject'), + accountFileField(escapedText(message.body), /\r$/, where('a text'), warn), + ].join('$'), + ) + .join(''); + return [ + plain(account.username, 'a user name'), + domain, + plain(account.password, 'a password'), + plain(account.lastName, 'a last name'), + plain(account.firstName, 'a first name'), + messages, + ].join(';') + '\n'; + }) + .join(''); +} diff --git a/packages/core/src/runtime/engine.ts b/packages/core/src/runtime/engine.ts index 6a39318..8d7a2bf 100644 --- a/packages/core/src/runtime/engine.ts +++ b/packages/core/src/runtime/engine.ts @@ -121,7 +121,8 @@ import { EmailServer } from './apps/emailServer.js'; import { Terminal } from './apps/terminal.js'; import { firewallLogPage, forwardingTablePage, ripTablePage, routerIndexPage } from './apps/routerPages.js'; import { applyFirewallSettings, firewallSettingsPage } from './apps/firewallSettings.js'; -import { VirtualFileSystem } from '../model/virtualFileSystem.js'; +import { parentPath, VirtualFileSystem } from '../model/virtualFileSystem.js'; +import { EMAIL_SERVER_ACCOUNTS_FILE, serverAccountsFileText } from './emailAccountsFile.js'; import { PRODUCTION_TRACE_RETENTION, type HeaderField, @@ -1181,6 +1182,33 @@ export class NetworkRuntimeEngine { if (server === undefined) return; servers.set(nodeId, { ...server, accounts }); this.stateValue.topologySnapshot = withSnapshot(this.stateValue.topologySnapshot, { emailServersByNodeId: servers }); + this.writeEmailServerAccountsFile(nodeId, server.domain, accounts); + } + + /** + * The server's account file (EmailServer.kontenSpeichern), written from its + * accounts at its start and whenever they change. Java makes it empty at + * its start when it is missing (and reads it), and writes it when an + * account is made or removed, after a POP3 command, after an SMTP mail was + * taken and when it stops — but before the notice to a local sender, which + * its file shows only at the next write. + */ + private writeEmailServerAccountsFile(nodeId: Id, domain: string, accounts: readonly EmailServerAccount[]): void { + const files = this.nodeFiles(nodeId); + const directory = parentPath(EMAIL_SERVER_ACCOUNTS_FILE); + if (!files.contains(directory)) files.createDirectory(directory, true); + files.writeTextFile(EMAIL_SERVER_ACCOUNTS_FILE, serverAccountsFileText(domain, accounts)); + } + + /** The node's files; a node without any gets an empty file system, kept in the snapshot. */ + private nodeFiles(nodeId: Id): VirtualFileSystem { + const existing = this.stateValue.topologySnapshot.fileSystemsByNodeId.get(nodeId); + if (existing !== undefined) return existing; + const files = new VirtualFileSystem(); + this.stateValue.topologySnapshot = withSnapshot(this.stateValue.topologySnapshot, { + fileSystemsByNodeId: new Map([...this.stateValue.topologySnapshot.fileSystemsByNodeId, [nodeId, files]]), + }); + return files; } /** @@ -1220,18 +1248,9 @@ export class NetworkRuntimeEngine { this.wallClock, ), ); + this.writeEmailServerAccountsFile(nodeId, emailServer.domain, emailServer.accounts); } - if (snapshot.terminalNodeIds.has(node.id)) { - let files = snapshot.fileSystemsByNodeId.get(node.id); - if (files === undefined) { - // A node without files gets an empty file system, kept in the snapshot. - files = new VirtualFileSystem(); - this.stateValue.topologySnapshot = withSnapshot(this.stateValue.topologySnapshot, { - fileSystemsByNodeId: new Map([...this.stateValue.topologySnapshot.fileSystemsByNodeId, [node.id, files]]), - }); - } - this.terminalsByNodeId.set(node.id, new Terminal(this, node.id, files)); - } + if (snapshot.terminalNodeIds.has(node.id)) this.terminalsByNodeId.set(node.id, new Terminal(this, node.id, this.nodeFiles(node.id))); const emailClient = snapshot.emailClientsByNodeId.get(node.id); if (emailClient !== undefined) { const nodeId = node.id; diff --git a/packages/core/test/emailJava.test.ts b/packages/core/test/emailJava.test.ts index 6c7043a..f7cf582 100644 --- a/packages/core/test/emailJava.test.ts +++ b/packages/core/test/emailJava.test.ts @@ -14,7 +14,7 @@ import { readFileSync } from 'node:fs'; import { dirname, join } from 'node:path'; import { fileURLToPath } from 'node:url'; import { describe, expect, it } from 'vitest'; -import { formatMail, withSnapshot, type LogLine, type NetworkRuntimeEngine } from '../src/index.js'; +import { EMAIL_SERVER_ACCOUNTS_FILE, formatMail, withSnapshot, type LogLine, type NetworkRuntimeEngine } from '../src/index.js'; import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, watchedEngine, withClientPortText, type JavaFrame, type JavaTables } from './javaRun.js'; import { MAIL_ACCOUNTS } from './mailAccounts.js'; import { clientText, emailServerText, isPolled, POLL_MILLISECONDS } from './programLines.js'; @@ -32,6 +32,9 @@ interface JavaRun extends JavaTables { events: [number, Program, string][]; /** Each account's name and its messages: Email.toString, new, marked for deletion. */ accounts: [string, ...[string, string, string][]][]; + /** The account file as Java left it, and as Java writes the accounts it ended with (kontenSpeichern). */ + file: string; + savedFile: string; } type Act = (engine: NetworkRuntimeEngine) => void; @@ -155,6 +158,23 @@ describe('the e-mail server as Java FILIUS runs it', () => { ...account.mailbox.map((entry) => [withoutDate(formatMail(entry.mail)), String(entry.isNew), String(entry.isMarkedForDeletion)]), ]); expect(accounts).toEqual(java.accounts.map(([username, ...mails]) => [username, ...mails.map(([text, isNew, deleted]) => [withoutDate(text), isNew, deleted])])); + + // The account file at the end: as Java writes those accounts (kontenSpeichern), the engine at every change. + const file = snapshotFiles(engine).textFile(EMAIL_SERVER_ACCOUNTS_FILE); + expect(fileWithoutDate(file), 'account file').toBe(fileWithoutDate(java.savedFile)); + expect(fileWithoutDate(java.file) === fileWithoutDate(java.savedFile), "Java's file as it left it is up to date").toBe(!STALE_FILE.has(name)); }); } }); + +/** + * Where Java left its account file behind its accounts: smtpErrors, the + * notice to the local sender (SMTPMitarbeiter saves the accounts before it + * sends the notice); the engine writes the file at every change. + */ +const STALE_FILE = new Set(['smtpErrors']); + +/** A notice's date in the account file, where its line breaks are "|". */ +const fileWithoutDate = (text: string) => text.replace(/\|Date: [^|]*\|/g, '|Date: |'); + +const snapshotFiles = (engine: NetworkRuntimeEngine) => engine.state.topologySnapshot.fileSystemsByNodeId.get(SERVER)!; diff --git a/packages/core/test/emailServer.test.ts b/packages/core/test/emailServer.test.ts index cf6ed00..a5635a3 100644 --- a/packages/core/test/emailServer.test.ts +++ b/packages/core/test/emailServer.test.ts @@ -11,6 +11,9 @@ import { fileURLToPath } from 'node:url'; import { describe, expect, it } from 'vitest'; import { addressEntry, + EMAIL_SERVER_ACCOUNTS_FILE, + serverAccountsFileText, + VirtualFileSystem, deviceConfiguration, NetworkRuntimeEngine, topologySnapshot, @@ -362,6 +365,15 @@ describe('the e-mail server in the engine', () => { expect(talk(engine, 110, 'QUIT')).toEqual(['+OK POP3 server ready', '+OK']); }); + it('writes its account file from its accounts when it starts, over one that says otherwise', () => { + const files = new VirtualFileSystem(); + files.createDirectory('/mailserver'); + files.writeTextFile(EMAIL_SERVER_ACCOUNTS_FILE, 'alt;filius.de;alt;Alt;Alt;\n'); + const engine = new NetworkRuntimeEngine(14); + engine.handle({ type: 'start', snapshot: topologySnapshot({ ...mailNetwork(), fileSystemsByNodeId: new Map([[SERVER, files]]) }), seed: 14, initialTimeMilliseconds: 0 }); + expect(files.textFile(EMAIL_SERVER_ACCOUNTS_FILE)).toBe(serverAccountsFileText('filius.de', MAIL_ACCOUNTS)); + }); + it('keeps its mailboxes in the snapshot: a mail taken, a mail deleted; a new start begins from there', () => { const engine = new NetworkRuntimeEngine(14); engine.handle({ type: 'start', snapshot: topologySnapshot({ ...mailNetwork(), language: 'en' }), seed: 14, initialTimeMilliseconds: 0 }); diff --git a/packages/core/test/scenarios/email-java-pop3.java.json b/packages/core/test/scenarios/email-java-pop3.java.json index e9bc68d..4da3d30 100644 --- a/packages/core/test/scenarios/email-java-pop3.java.json +++ b/packages/core/test/scenarios/email-java-pop3.java.json @@ -2,7 +2,7 @@ "frames": { "00000000-0000-0000-0000-000000000201": [ { - "time": 517, + "time": 519, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, @@ -10,7 +10,7 @@ "targetIp": "192.168.0.30" }, { - "time": 752, + "time": 759, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "arp": 2, @@ -18,13 +18,13 @@ "targetIp": "192.168.0.20" }, { - "time": 754, + "time": 761, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "S", @@ -32,27 +32,27 @@ "acknowledgement": 0 }, { - "time": 981, + "time": 988, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": null, "tcpFlags": "SA", "sequence": 1000000, "acknowledgement": 3000001 }, { - "time": 981, + "time": 989, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -60,14 +60,14 @@ "acknowledgement": 1000001 }, { - "time": 1227, + "time": 1228, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": "+OK POP3 server ready", "tcpFlags": "P", "sequence": 1000001, @@ -80,7 +80,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -94,7 +94,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": "USER anna", "tcpFlags": "P", @@ -109,7 +109,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": null, "tcpFlags": "A", "sequence": 1000022, @@ -123,20 +123,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": "+OK enter password", "tcpFlags": "P", "sequence": 1000022, "acknowledgement": 0 }, { - "time": 3280, + "time": 3279, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -150,7 +150,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": "PASS geheim", "tcpFlags": "P", @@ -165,21 +165,21 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": null, "tcpFlags": "A", "sequence": 1000040, "acknowledgement": 3000021 }, { - "time": 4779, + "time": 4778, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": "+OK Mailbox locked and ready", "tcpFlags": "P", "sequence": 1000040, @@ -192,7 +192,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -200,13 +200,13 @@ "acknowledgement": 1000068 }, { - "time": 6001, + "time": 6000, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": "STAT", "tcpFlags": "P", @@ -221,7 +221,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": null, "tcpFlags": "A", "sequence": 1000068, @@ -235,7 +235,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": "+OK 2 169", "tcpFlags": "P", "sequence": 1000068, @@ -248,7 +248,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -256,13 +256,13 @@ "acknowledgement": 1000077 }, { - "time": 7500, + "time": 7501, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": "LIST", "tcpFlags": "P", @@ -277,21 +277,21 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": null, "tcpFlags": "A", "sequence": 1000077, "acknowledgement": 3000029 }, { - "time": 7778, + "time": 7779, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": "+OK 2 169\n0 80\n1 89\n", "tcpFlags": "P", "sequence": 1000077, @@ -304,7 +304,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -312,13 +312,13 @@ "acknowledgement": 1000097 }, { - "time": 9000, + "time": 9001, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": "RETR 0", "tcpFlags": "P", @@ -326,41 +326,41 @@ "acknowledgement": 0 }, { - "time": 9223, + "time": 9224, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": null, "tcpFlags": "A", "sequence": 1000097, "acknowledgement": 3000035 }, { - "time": 9278, + "time": 9279, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": "+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile", "tcpFlags": "P", "sequence": 1000097, "acknowledgement": 0 }, { - "time": 9278, + "time": 9280, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -374,7 +374,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": "RETR 1", "tcpFlags": "P", @@ -382,14 +382,14 @@ "acknowledgement": 0 }, { - "time": 10722, + "time": 10723, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": null, "tcpFlags": "A", "sequence": 1000219, @@ -403,20 +403,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": "+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?", "tcpFlags": "P", "sequence": 1000219, "acknowledgement": 0 }, { - "time": 10778, + "time": 10779, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -430,7 +430,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": "DELE 0", "tcpFlags": "P", @@ -445,21 +445,21 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": null, "tcpFlags": "A", "sequence": 1000371, "acknowledgement": 3000047 }, { - "time": 12277, + "time": 12278, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": "+OK message marked for delete", "tcpFlags": "P", "sequence": 1000371, @@ -472,7 +472,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -480,13 +480,13 @@ "acknowledgement": 1000400 }, { - "time": 13501, + "time": 13500, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": "DELE 1", "tcpFlags": "P", @@ -494,28 +494,28 @@ "acknowledgement": 0 }, { - "time": 13723, + "time": 13722, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": null, "tcpFlags": "A", "sequence": 1000400, "acknowledgement": 3000053 }, { - "time": 13778, + "time": 13777, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": "+OK message marked for delete", "tcpFlags": "P", "sequence": 1000400, @@ -528,7 +528,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -542,7 +542,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": "QUIT", "tcpFlags": "P", @@ -557,7 +557,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": null, "tcpFlags": "A", "sequence": 1000429, @@ -571,7 +571,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": "+OK", "tcpFlags": "P", "sequence": 1000429, @@ -584,7 +584,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -599,7 +599,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": null, "tcpFlags": "F", "sequence": 1000432, @@ -612,7 +612,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -620,13 +620,13 @@ "acknowledgement": 1000433 }, { - "time": 15557, + "time": 15556, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "F", @@ -634,14 +634,14 @@ "acknowledgement": 0 }, { - "time": 15779, + "time": 15777, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": null, "tcpFlags": "A", "sequence": 1000433, @@ -654,7 +654,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 55115, + "sourcePort": 54688, "destinationPort": 110, "payload": null, "tcpFlags": "S", @@ -669,7 +669,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 55115, + "destinationPort": 54688, "payload": null, "tcpFlags": "SA", "sequence": 4000000, @@ -682,7 +682,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 55115, + "sourcePort": 54688, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -690,27 +690,27 @@ "acknowledgement": 4000001 }, { - "time": 17963, + "time": 17962, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 55115, + "destinationPort": 54688, "payload": "+OK POP3 server ready", "tcpFlags": "P", "sequence": 4000001, "acknowledgement": 0 }, { - "time": 17963, + "time": 17962, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 55115, + "sourcePort": 54688, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -724,7 +724,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 55115, + "sourcePort": 54688, "destinationPort": 110, "payload": "USER anna", "tcpFlags": "P", @@ -739,7 +739,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 55115, + "destinationPort": 54688, "payload": null, "tcpFlags": "A", "sequence": 4000022, @@ -753,7 +753,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 55115, + "destinationPort": 54688, "payload": "+OK enter password", "tcpFlags": "P", "sequence": 4000022, @@ -766,7 +766,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 55115, + "sourcePort": 54688, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -780,7 +780,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 55115, + "sourcePort": 54688, "destinationPort": 110, "payload": "PASS geheim", "tcpFlags": "P", @@ -795,7 +795,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 55115, + "destinationPort": 54688, "payload": null, "tcpFlags": "A", "sequence": 4000040, @@ -809,20 +809,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 55115, + "destinationPort": 54688, "payload": "+OK Mailbox locked and ready", "tcpFlags": "P", "sequence": 4000040, "acknowledgement": 0 }, { - "time": 21777, + "time": 21778, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 55115, + "sourcePort": 54688, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -830,13 +830,13 @@ "acknowledgement": 4000068 }, { - "time": 23000, + "time": 23001, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 55115, + "sourcePort": 54688, "destinationPort": 110, "payload": "STAT", "tcpFlags": "P", @@ -851,7 +851,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 55115, + "destinationPort": 54688, "payload": null, "tcpFlags": "A", "sequence": 4000068, @@ -865,20 +865,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 55115, + "destinationPort": 54688, "payload": "+OK 0 0", "tcpFlags": "P", "sequence": 4000068, "acknowledgement": 0 }, { - "time": 23278, + "time": 23279, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 55115, + "sourcePort": 54688, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -892,7 +892,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 55115, + "sourcePort": 54688, "destinationPort": 110, "payload": "QUIT", "tcpFlags": "P", @@ -907,34 +907,34 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 55115, + "destinationPort": 54688, "payload": null, "tcpFlags": "A", "sequence": 4000075, "acknowledgement": 5000029 }, { - "time": 24779, + "time": 24777, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 55115, + "destinationPort": 54688, "payload": "+OK", "tcpFlags": "P", "sequence": 4000075, "acknowledgement": 0 }, { - "time": 24779, + "time": 24777, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 55115, + "sourcePort": 54688, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -942,27 +942,27 @@ "acknowledgement": 4000078 }, { - "time": 25001, + "time": 24999, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 55115, + "destinationPort": 54688, "payload": null, "tcpFlags": "F", "sequence": 4000078, "acknowledgement": 0 }, { - "time": 25001, + "time": 24999, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 55115, + "sourcePort": 54688, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -970,13 +970,13 @@ "acknowledgement": 4000079 }, { - "time": 25056, + "time": 25054, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 55115, + "sourcePort": 54688, "destinationPort": 110, "payload": null, "tcpFlags": "F", @@ -984,14 +984,14 @@ "acknowledgement": 0 }, { - "time": 25278, + "time": 25276, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 55115, + "destinationPort": 54688, "payload": null, "tcpFlags": "A", "sequence": 4000079, @@ -1000,7 +1000,7 @@ ], "00000000-0000-0000-0000-000000000202": [ { - "time": 639, + "time": 643, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, @@ -1010,7 +1010,7 @@ ], "00000000-0000-0000-0000-000000000203": [ { - "time": 639, + "time": 644, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, @@ -1018,7 +1018,7 @@ "targetIp": "192.168.0.30" }, { - "time": 640, + "time": 647, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "arp": 2, @@ -1026,13 +1026,13 @@ "targetIp": "192.168.0.20" }, { - "time": 867, + "time": 875, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "S", @@ -1040,27 +1040,27 @@ "acknowledgement": 0 }, { - "time": 869, + "time": 877, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": null, "tcpFlags": "SA", "sequence": 1000000, "acknowledgement": 3000001 }, { - "time": 1093, + "time": 1100, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1068,14 +1068,14 @@ "acknowledgement": 1000001 }, { - "time": 1116, + "time": 1117, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": "+OK POP3 server ready", "tcpFlags": "P", "sequence": 1000001, @@ -1088,7 +1088,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1102,7 +1102,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": "USER anna", "tcpFlags": "P", @@ -1117,7 +1117,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": null, "tcpFlags": "A", "sequence": 1000022, @@ -1131,7 +1131,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": "+OK enter password", "tcpFlags": "P", "sequence": 1000022, @@ -1144,7 +1144,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1152,13 +1152,13 @@ "acknowledgement": 1000040 }, { - "time": 4612, + "time": 4611, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": "PASS geheim", "tcpFlags": "P", @@ -1173,7 +1173,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": null, "tcpFlags": "A", "sequence": 1000040, @@ -1187,7 +1187,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": "+OK Mailbox locked and ready", "tcpFlags": "P", "sequence": 1000040, @@ -1200,7 +1200,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1214,7 +1214,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": "STAT", "tcpFlags": "P", @@ -1229,7 +1229,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": null, "tcpFlags": "A", "sequence": 1000068, @@ -1243,7 +1243,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": "+OK 2 169", "tcpFlags": "P", "sequence": 1000068, @@ -1256,7 +1256,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1264,13 +1264,13 @@ "acknowledgement": 1000077 }, { - "time": 7611, + "time": 7612, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": "LIST", "tcpFlags": "P", @@ -1285,21 +1285,21 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": null, "tcpFlags": "A", "sequence": 1000077, "acknowledgement": 3000029 }, { - "time": 7667, + "time": 7668, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": "+OK 2 169\n0 80\n1 89\n", "tcpFlags": "P", "sequence": 1000077, @@ -1312,7 +1312,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1320,13 +1320,13 @@ "acknowledgement": 1000097 }, { - "time": 9111, + "time": 9112, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": "RETR 0", "tcpFlags": "P", @@ -1341,34 +1341,34 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": null, "tcpFlags": "A", "sequence": 1000097, "acknowledgement": 3000035 }, { - "time": 9167, + "time": 9168, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": "+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile", "tcpFlags": "P", "sequence": 1000097, "acknowledgement": 0 }, { - "time": 9389, + "time": 9391, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1382,7 +1382,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": "RETR 1", "tcpFlags": "P", @@ -1390,14 +1390,14 @@ "acknowledgement": 0 }, { - "time": 10611, + "time": 10612, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": null, "tcpFlags": "A", "sequence": 1000219, @@ -1411,20 +1411,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": "+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?", "tcpFlags": "P", "sequence": 1000219, "acknowledgement": 0 }, { - "time": 10889, + "time": 10890, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1438,7 +1438,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": "DELE 0", "tcpFlags": "P", @@ -1453,7 +1453,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": null, "tcpFlags": "A", "sequence": 1000371, @@ -1467,7 +1467,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": "+OK message marked for delete", "tcpFlags": "P", "sequence": 1000371, @@ -1480,7 +1480,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1488,13 +1488,13 @@ "acknowledgement": 1000400 }, { - "time": 13612, + "time": 13611, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": "DELE 1", "tcpFlags": "P", @@ -1502,28 +1502,28 @@ "acknowledgement": 0 }, { - "time": 13612, + "time": 13611, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": null, "tcpFlags": "A", "sequence": 1000400, "acknowledgement": 3000053 }, { - "time": 13667, + "time": 13666, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": "+OK message marked for delete", "tcpFlags": "P", "sequence": 1000400, @@ -1536,7 +1536,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1550,7 +1550,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": "QUIT", "tcpFlags": "P", @@ -1565,7 +1565,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": null, "tcpFlags": "A", "sequence": 1000429, @@ -1579,7 +1579,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": "+OK", "tcpFlags": "P", "sequence": 1000429, @@ -1592,7 +1592,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1607,20 +1607,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": null, "tcpFlags": "F", "sequence": 1000432, "acknowledgement": 0 }, { - "time": 15613, + "time": 15611, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1628,13 +1628,13 @@ "acknowledgement": 1000433 }, { - "time": 15668, + "time": 15666, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 65415, + "sourcePort": 55976, "destinationPort": 110, "payload": null, "tcpFlags": "F", @@ -1642,14 +1642,14 @@ "acknowledgement": 0 }, { - "time": 15668, + "time": 15666, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 65415, + "destinationPort": 55976, "payload": null, "tcpFlags": "A", "sequence": 1000433, @@ -1662,7 +1662,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 55115, + "sourcePort": 54688, "destinationPort": 110, "payload": null, "tcpFlags": "S", @@ -1677,7 +1677,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 55115, + "destinationPort": 54688, "payload": null, "tcpFlags": "SA", "sequence": 4000000, @@ -1690,7 +1690,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 55115, + "sourcePort": 54688, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1698,27 +1698,27 @@ "acknowledgement": 4000001 }, { - "time": 17852, + "time": 17851, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 55115, + "destinationPort": 54688, "payload": "+OK POP3 server ready", "tcpFlags": "P", "sequence": 4000001, "acknowledgement": 0 }, { - "time": 18074, + "time": 18073, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 55115, + "sourcePort": 54688, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1732,7 +1732,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 55115, + "sourcePort": 54688, "destinationPort": 110, "payload": "USER anna", "tcpFlags": "P", @@ -1747,7 +1747,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 55115, + "destinationPort": 54688, "payload": null, "tcpFlags": "A", "sequence": 4000022, @@ -1761,7 +1761,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 55115, + "destinationPort": 54688, "payload": "+OK enter password", "tcpFlags": "P", "sequence": 4000022, @@ -1774,7 +1774,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 55115, + "sourcePort": 54688, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1788,7 +1788,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 55115, + "sourcePort": 54688, "destinationPort": 110, "payload": "PASS geheim", "tcpFlags": "P", @@ -1803,7 +1803,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 55115, + "destinationPort": 54688, "payload": null, "tcpFlags": "A", "sequence": 4000040, @@ -1817,7 +1817,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 55115, + "destinationPort": 54688, "payload": "+OK Mailbox locked and ready", "tcpFlags": "P", "sequence": 4000040, @@ -1830,7 +1830,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 55115, + "sourcePort": 54688, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1844,7 +1844,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 55115, + "sourcePort": 54688, "destinationPort": 110, "payload": "STAT", "tcpFlags": "P", @@ -1852,14 +1852,14 @@ "acknowledgement": 0 }, { - "time": 23111, + "time": 23112, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 55115, + "destinationPort": 54688, "payload": null, "tcpFlags": "A", "sequence": 4000068, @@ -1873,7 +1873,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 55115, + "destinationPort": 54688, "payload": "+OK 0 0", "tcpFlags": "P", "sequence": 4000068, @@ -1886,7 +1886,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 55115, + "sourcePort": 54688, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1900,7 +1900,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 55115, + "sourcePort": 54688, "destinationPort": 110, "payload": "QUIT", "tcpFlags": "P", @@ -1908,41 +1908,41 @@ "acknowledgement": 0 }, { - "time": 24612, + "time": 24611, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 55115, + "destinationPort": 54688, "payload": null, "tcpFlags": "A", "sequence": 4000075, "acknowledgement": 5000029 }, { - "time": 24667, + "time": 24666, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 55115, + "destinationPort": 54688, "payload": "+OK", "tcpFlags": "P", "sequence": 4000075, "acknowledgement": 0 }, { - "time": 24890, + "time": 24888, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 55115, + "sourcePort": 54688, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1950,27 +1950,27 @@ "acknowledgement": 4000078 }, { - "time": 24890, + "time": 24888, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 55115, + "destinationPort": 54688, "payload": null, "tcpFlags": "F", "sequence": 4000078, "acknowledgement": 0 }, { - "time": 25112, + "time": 25110, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 55115, + "sourcePort": 54688, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1978,13 +1978,13 @@ "acknowledgement": 4000079 }, { - "time": 25167, + "time": 25165, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 55115, + "sourcePort": 54688, "destinationPort": 110, "payload": null, "tcpFlags": "F", @@ -1992,14 +1992,14 @@ "acknowledgement": 0 }, { - "time": 25167, + "time": 25165, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 55115, + "destinationPort": 54688, "payload": null, "tcpFlags": "A", "sequence": 4000079, @@ -2008,7 +2008,7 @@ ], "00000000-0000-0000-0000-000000000204": [ { - "time": 639, + "time": 643, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, @@ -2069,7 +2069,7 @@ ], [ "3", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -2094,7 +2094,7 @@ [ "4", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 3.000.001" @@ -2117,7 +2117,7 @@ ], [ "5", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -2142,7 +2142,7 @@ [ "6", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.001" @@ -2150,7 +2150,7 @@ [ "6", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "POP3", "Anwendung", "+OK POP3 server ready" @@ -2173,7 +2173,7 @@ ], [ "7", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -2197,7 +2197,7 @@ ], [ "8", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -2205,7 +2205,7 @@ ], [ "8", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "POP3", "Anwendung", @@ -2230,7 +2230,7 @@ [ "9", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.022, ACK: 3.000.010" @@ -2254,7 +2254,7 @@ [ "10", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.022" @@ -2262,7 +2262,7 @@ [ "10", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "POP3", "Anwendung", "+OK enter password" @@ -2285,7 +2285,7 @@ ], [ "11", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -2309,7 +2309,7 @@ ], [ "12", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -2317,7 +2317,7 @@ ], [ "12", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "POP3", "Anwendung", @@ -2342,7 +2342,7 @@ [ "13", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.040, ACK: 3.000.021" @@ -2366,7 +2366,7 @@ [ "14", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.040" @@ -2374,7 +2374,7 @@ [ "14", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "POP3", "Anwendung", "+OK Mailbox locked and ready" @@ -2397,7 +2397,7 @@ ], [ "15", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -2421,7 +2421,7 @@ ], [ "16", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -2429,7 +2429,7 @@ ], [ "16", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "", "Anwendung", @@ -2454,7 +2454,7 @@ [ "17", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.068, ACK: 3.000.025" @@ -2478,7 +2478,7 @@ [ "18", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.068" @@ -2486,7 +2486,7 @@ [ "18", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "POP3", "Anwendung", "+OK 2 169" @@ -2509,7 +2509,7 @@ ], [ "19", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -2533,7 +2533,7 @@ ], [ "20", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -2541,7 +2541,7 @@ ], [ "20", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "", "Anwendung", @@ -2566,7 +2566,7 @@ [ "21", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.077, ACK: 3.000.029" @@ -2590,7 +2590,7 @@ [ "22", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.077" @@ -2598,7 +2598,7 @@ [ "22", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "POP3", "Anwendung", "+OK 2 169\n0 80\n1 89\n" @@ -2621,7 +2621,7 @@ ], [ "23", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -2645,7 +2645,7 @@ ], [ "24", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -2653,7 +2653,7 @@ ], [ "24", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "POP3", "Anwendung", @@ -2678,7 +2678,7 @@ [ "25", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.097, ACK: 3.000.035" @@ -2702,7 +2702,7 @@ [ "26", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.097" @@ -2710,7 +2710,7 @@ [ "26", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "POP3", "Anwendung", "+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile" @@ -2733,7 +2733,7 @@ ], [ "27", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -2757,7 +2757,7 @@ ], [ "28", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -2765,7 +2765,7 @@ ], [ "28", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "POP3", "Anwendung", @@ -2790,7 +2790,7 @@ [ "29", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.219, ACK: 3.000.041" @@ -2814,7 +2814,7 @@ [ "30", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.219" @@ -2822,7 +2822,7 @@ [ "30", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "POP3", "Anwendung", "+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?" @@ -2845,7 +2845,7 @@ ], [ "31", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -2869,7 +2869,7 @@ ], [ "32", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -2877,7 +2877,7 @@ ], [ "32", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "POP3", "Anwendung", @@ -2902,7 +2902,7 @@ [ "33", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.371, ACK: 3.000.047" @@ -2926,7 +2926,7 @@ [ "34", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.371" @@ -2934,7 +2934,7 @@ [ "34", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "POP3", "Anwendung", "+OK message marked for delete" @@ -2957,7 +2957,7 @@ ], [ "35", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -2981,7 +2981,7 @@ ], [ "36", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -2989,7 +2989,7 @@ ], [ "36", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "POP3", "Anwendung", @@ -3014,7 +3014,7 @@ [ "37", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.400, ACK: 3.000.053" @@ -3038,7 +3038,7 @@ [ "38", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.400" @@ -3046,7 +3046,7 @@ [ "38", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "POP3", "Anwendung", "+OK message marked for delete" @@ -3069,7 +3069,7 @@ ], [ "39", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -3093,7 +3093,7 @@ ], [ "40", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -3101,7 +3101,7 @@ ], [ "40", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "POP3", "Anwendung", @@ -3126,7 +3126,7 @@ [ "41", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.429, ACK: 3.000.057" @@ -3150,7 +3150,7 @@ [ "42", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.429" @@ -3158,7 +3158,7 @@ [ "42", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "POP3", "Anwendung", "+OK" @@ -3181,7 +3181,7 @@ ], [ "43", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -3206,7 +3206,7 @@ [ "44", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "FIN, SEQ: 1.000.432" @@ -3229,7 +3229,7 @@ ], [ "45", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -3253,7 +3253,7 @@ ], [ "46", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -3278,7 +3278,7 @@ [ "47", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.433, ACK: 3.000.058" @@ -3301,7 +3301,7 @@ ], [ "48", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "TCP", "Transport", @@ -3326,7 +3326,7 @@ [ "49", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "TCP", "Transport", "SYN, SEQ: 4.000.000, ACK: 5.000.001" @@ -3349,7 +3349,7 @@ ], [ "50", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "TCP", "Transport", @@ -3374,7 +3374,7 @@ [ "51", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "TCP", "Transport", "SEQ: 4.000.001" @@ -3382,7 +3382,7 @@ [ "51", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "POP3", "Anwendung", "+OK POP3 server ready" @@ -3405,7 +3405,7 @@ ], [ "52", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "TCP", "Transport", @@ -3429,7 +3429,7 @@ ], [ "53", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "TCP", "Transport", @@ -3437,7 +3437,7 @@ ], [ "53", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "POP3", "Anwendung", @@ -3462,7 +3462,7 @@ [ "54", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "TCP", "Transport", "SEQ: 4.000.022, ACK: 5.000.010" @@ -3486,7 +3486,7 @@ [ "55", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "TCP", "Transport", "SEQ: 4.000.022" @@ -3494,7 +3494,7 @@ [ "55", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "POP3", "Anwendung", "+OK enter password" @@ -3517,7 +3517,7 @@ ], [ "56", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "TCP", "Transport", @@ -3541,7 +3541,7 @@ ], [ "57", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "TCP", "Transport", @@ -3549,7 +3549,7 @@ ], [ "57", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "POP3", "Anwendung", @@ -3574,7 +3574,7 @@ [ "58", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "TCP", "Transport", "SEQ: 4.000.040, ACK: 5.000.021" @@ -3598,7 +3598,7 @@ [ "59", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "TCP", "Transport", "SEQ: 4.000.040" @@ -3606,7 +3606,7 @@ [ "59", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "POP3", "Anwendung", "+OK Mailbox locked and ready" @@ -3629,7 +3629,7 @@ ], [ "60", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "TCP", "Transport", @@ -3653,7 +3653,7 @@ ], [ "61", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "TCP", "Transport", @@ -3661,7 +3661,7 @@ ], [ "61", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "", "Anwendung", @@ -3686,7 +3686,7 @@ [ "62", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "TCP", "Transport", "SEQ: 4.000.068, ACK: 5.000.025" @@ -3710,7 +3710,7 @@ [ "63", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "TCP", "Transport", "SEQ: 4.000.068" @@ -3718,7 +3718,7 @@ [ "63", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "POP3", "Anwendung", "+OK 0 0" @@ -3741,7 +3741,7 @@ ], [ "64", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "TCP", "Transport", @@ -3765,7 +3765,7 @@ ], [ "65", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "TCP", "Transport", @@ -3773,7 +3773,7 @@ ], [ "65", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "POP3", "Anwendung", @@ -3798,7 +3798,7 @@ [ "66", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "TCP", "Transport", "SEQ: 4.000.075, ACK: 5.000.029" @@ -3822,7 +3822,7 @@ [ "67", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "TCP", "Transport", "SEQ: 4.000.075" @@ -3830,7 +3830,7 @@ [ "67", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "POP3", "Anwendung", "+OK" @@ -3853,7 +3853,7 @@ ], [ "68", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "TCP", "Transport", @@ -3878,7 +3878,7 @@ [ "69", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "TCP", "Transport", "FIN, SEQ: 4.000.078" @@ -3901,7 +3901,7 @@ ], [ "70", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "TCP", "Transport", @@ -3925,7 +3925,7 @@ ], [ "71", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "TCP", "Transport", @@ -3950,7 +3950,7 @@ [ "72", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "TCP", "Transport", "SEQ: 4.000.079, ACK: 5.000.030" @@ -4025,7 +4025,7 @@ ], [ "3", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -4050,7 +4050,7 @@ [ "4", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 3.000.001" @@ -4073,7 +4073,7 @@ ], [ "5", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -4098,7 +4098,7 @@ [ "6", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.001" @@ -4106,7 +4106,7 @@ [ "6", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "POP3", "Anwendung", "+OK POP3 server ready" @@ -4129,7 +4129,7 @@ ], [ "7", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -4153,7 +4153,7 @@ ], [ "8", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -4161,7 +4161,7 @@ ], [ "8", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "POP3", "Anwendung", @@ -4186,7 +4186,7 @@ [ "9", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.022, ACK: 3.000.010" @@ -4210,7 +4210,7 @@ [ "10", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.022" @@ -4218,7 +4218,7 @@ [ "10", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "POP3", "Anwendung", "+OK enter password" @@ -4241,7 +4241,7 @@ ], [ "11", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -4265,7 +4265,7 @@ ], [ "12", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -4273,7 +4273,7 @@ ], [ "12", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "POP3", "Anwendung", @@ -4298,7 +4298,7 @@ [ "13", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.040, ACK: 3.000.021" @@ -4322,7 +4322,7 @@ [ "14", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.040" @@ -4330,7 +4330,7 @@ [ "14", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "POP3", "Anwendung", "+OK Mailbox locked and ready" @@ -4353,7 +4353,7 @@ ], [ "15", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -4377,7 +4377,7 @@ ], [ "16", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -4385,7 +4385,7 @@ ], [ "16", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "", "Anwendung", @@ -4410,7 +4410,7 @@ [ "17", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.068, ACK: 3.000.025" @@ -4434,7 +4434,7 @@ [ "18", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.068" @@ -4442,7 +4442,7 @@ [ "18", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "POP3", "Anwendung", "+OK 2 169" @@ -4465,7 +4465,7 @@ ], [ "19", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -4489,7 +4489,7 @@ ], [ "20", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -4497,7 +4497,7 @@ ], [ "20", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "", "Anwendung", @@ -4522,7 +4522,7 @@ [ "21", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.077, ACK: 3.000.029" @@ -4546,7 +4546,7 @@ [ "22", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.077" @@ -4554,7 +4554,7 @@ [ "22", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "POP3", "Anwendung", "+OK 2 169\n0 80\n1 89\n" @@ -4577,7 +4577,7 @@ ], [ "23", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -4601,7 +4601,7 @@ ], [ "24", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -4609,7 +4609,7 @@ ], [ "24", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "POP3", "Anwendung", @@ -4634,7 +4634,7 @@ [ "25", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.097, ACK: 3.000.035" @@ -4658,7 +4658,7 @@ [ "26", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.097" @@ -4666,7 +4666,7 @@ [ "26", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "POP3", "Anwendung", "+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile" @@ -4689,7 +4689,7 @@ ], [ "27", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -4713,7 +4713,7 @@ ], [ "28", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -4721,7 +4721,7 @@ ], [ "28", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "POP3", "Anwendung", @@ -4746,7 +4746,7 @@ [ "29", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.219, ACK: 3.000.041" @@ -4770,7 +4770,7 @@ [ "30", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.219" @@ -4778,7 +4778,7 @@ [ "30", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "POP3", "Anwendung", "+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?" @@ -4801,7 +4801,7 @@ ], [ "31", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -4825,7 +4825,7 @@ ], [ "32", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -4833,7 +4833,7 @@ ], [ "32", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "POP3", "Anwendung", @@ -4858,7 +4858,7 @@ [ "33", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.371, ACK: 3.000.047" @@ -4882,7 +4882,7 @@ [ "34", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.371" @@ -4890,7 +4890,7 @@ [ "34", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "POP3", "Anwendung", "+OK message marked for delete" @@ -4913,7 +4913,7 @@ ], [ "35", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -4937,7 +4937,7 @@ ], [ "36", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -4945,7 +4945,7 @@ ], [ "36", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "POP3", "Anwendung", @@ -4970,7 +4970,7 @@ [ "37", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.400, ACK: 3.000.053" @@ -4994,7 +4994,7 @@ [ "38", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.400" @@ -5002,7 +5002,7 @@ [ "38", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "POP3", "Anwendung", "+OK message marked for delete" @@ -5025,7 +5025,7 @@ ], [ "39", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -5049,7 +5049,7 @@ ], [ "40", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -5057,7 +5057,7 @@ ], [ "40", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "POP3", "Anwendung", @@ -5082,7 +5082,7 @@ [ "41", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.429, ACK: 3.000.057" @@ -5106,7 +5106,7 @@ [ "42", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.429" @@ -5114,7 +5114,7 @@ [ "42", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "POP3", "Anwendung", "+OK" @@ -5137,7 +5137,7 @@ ], [ "43", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -5162,7 +5162,7 @@ [ "44", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "FIN, SEQ: 1.000.432" @@ -5185,7 +5185,7 @@ ], [ "45", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -5209,7 +5209,7 @@ ], [ "46", - "192.168.0.20:65415", + "192.168.0.20:55976", "192.168.0.30:110", "TCP", "Transport", @@ -5234,7 +5234,7 @@ [ "47", "192.168.0.30:110", - "192.168.0.20:65415", + "192.168.0.20:55976", "TCP", "Transport", "SEQ: 1.000.433, ACK: 3.000.058" @@ -5257,7 +5257,7 @@ ], [ "48", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "TCP", "Transport", @@ -5282,7 +5282,7 @@ [ "49", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "TCP", "Transport", "SYN, SEQ: 4.000.000, ACK: 5.000.001" @@ -5305,7 +5305,7 @@ ], [ "50", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "TCP", "Transport", @@ -5330,7 +5330,7 @@ [ "51", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "TCP", "Transport", "SEQ: 4.000.001" @@ -5338,7 +5338,7 @@ [ "51", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "POP3", "Anwendung", "+OK POP3 server ready" @@ -5361,7 +5361,7 @@ ], [ "52", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "TCP", "Transport", @@ -5385,7 +5385,7 @@ ], [ "53", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "TCP", "Transport", @@ -5393,7 +5393,7 @@ ], [ "53", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "POP3", "Anwendung", @@ -5418,7 +5418,7 @@ [ "54", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "TCP", "Transport", "SEQ: 4.000.022, ACK: 5.000.010" @@ -5442,7 +5442,7 @@ [ "55", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "TCP", "Transport", "SEQ: 4.000.022" @@ -5450,7 +5450,7 @@ [ "55", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "POP3", "Anwendung", "+OK enter password" @@ -5473,7 +5473,7 @@ ], [ "56", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "TCP", "Transport", @@ -5497,7 +5497,7 @@ ], [ "57", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "TCP", "Transport", @@ -5505,7 +5505,7 @@ ], [ "57", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "POP3", "Anwendung", @@ -5530,7 +5530,7 @@ [ "58", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "TCP", "Transport", "SEQ: 4.000.040, ACK: 5.000.021" @@ -5554,7 +5554,7 @@ [ "59", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "TCP", "Transport", "SEQ: 4.000.040" @@ -5562,7 +5562,7 @@ [ "59", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "POP3", "Anwendung", "+OK Mailbox locked and ready" @@ -5585,7 +5585,7 @@ ], [ "60", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "TCP", "Transport", @@ -5609,7 +5609,7 @@ ], [ "61", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "TCP", "Transport", @@ -5617,7 +5617,7 @@ ], [ "61", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "", "Anwendung", @@ -5642,7 +5642,7 @@ [ "62", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "TCP", "Transport", "SEQ: 4.000.068, ACK: 5.000.025" @@ -5666,7 +5666,7 @@ [ "63", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "TCP", "Transport", "SEQ: 4.000.068" @@ -5674,7 +5674,7 @@ [ "63", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "POP3", "Anwendung", "+OK 0 0" @@ -5697,7 +5697,7 @@ ], [ "64", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "TCP", "Transport", @@ -5721,7 +5721,7 @@ ], [ "65", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "TCP", "Transport", @@ -5729,7 +5729,7 @@ ], [ "65", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "POP3", "Anwendung", @@ -5754,7 +5754,7 @@ [ "66", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "TCP", "Transport", "SEQ: 4.000.075, ACK: 5.000.029" @@ -5778,7 +5778,7 @@ [ "67", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "TCP", "Transport", "SEQ: 4.000.075" @@ -5786,7 +5786,7 @@ [ "67", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "POP3", "Anwendung", "+OK" @@ -5809,7 +5809,7 @@ ], [ "68", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "TCP", "Transport", @@ -5834,7 +5834,7 @@ [ "69", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "TCP", "Transport", "FIN, SEQ: 4.000.078" @@ -5857,7 +5857,7 @@ ], [ "70", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "TCP", "Transport", @@ -5881,7 +5881,7 @@ ], [ "71", - "192.168.0.20:55115", + "192.168.0.20:54688", "192.168.0.30:110", "TCP", "Transport", @@ -5906,7 +5906,7 @@ [ "72", "192.168.0.30:110", - "192.168.0.20:55115", + "192.168.0.20:54688", "TCP", "Transport", "SEQ: 4.000.079, ACK: 5.000.030" @@ -5983,7 +5983,7 @@ ], [ "3", - "65415", + "55976", "110", "TCP", "Transport", @@ -6008,7 +6008,7 @@ [ "4", "110", - "65415", + "55976", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 3.000.001" @@ -6031,7 +6031,7 @@ ], [ "5", - "65415", + "55976", "110", "TCP", "Transport", @@ -6056,7 +6056,7 @@ [ "6", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.001" @@ -6087,7 +6087,7 @@ ], [ "7", - "65415", + "55976", "110", "TCP", "Transport", @@ -6111,7 +6111,7 @@ ], [ "8", - "65415", + "55976", "110", "TCP", "Transport", @@ -6144,7 +6144,7 @@ [ "9", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.022, ACK: 3.000.010" @@ -6168,7 +6168,7 @@ [ "10", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.022" @@ -6199,7 +6199,7 @@ ], [ "11", - "65415", + "55976", "110", "TCP", "Transport", @@ -6223,7 +6223,7 @@ ], [ "12", - "65415", + "55976", "110", "TCP", "Transport", @@ -6256,7 +6256,7 @@ [ "13", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.040, ACK: 3.000.021" @@ -6280,7 +6280,7 @@ [ "14", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.040" @@ -6311,7 +6311,7 @@ ], [ "15", - "65415", + "55976", "110", "TCP", "Transport", @@ -6335,7 +6335,7 @@ ], [ "16", - "65415", + "55976", "110", "TCP", "Transport", @@ -6368,7 +6368,7 @@ [ "17", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.068, ACK: 3.000.025" @@ -6392,7 +6392,7 @@ [ "18", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.068" @@ -6423,7 +6423,7 @@ ], [ "19", - "65415", + "55976", "110", "TCP", "Transport", @@ -6447,7 +6447,7 @@ ], [ "20", - "65415", + "55976", "110", "TCP", "Transport", @@ -6480,7 +6480,7 @@ [ "21", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.077, ACK: 3.000.029" @@ -6504,7 +6504,7 @@ [ "22", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.077" @@ -6535,7 +6535,7 @@ ], [ "23", - "65415", + "55976", "110", "TCP", "Transport", @@ -6559,7 +6559,7 @@ ], [ "24", - "65415", + "55976", "110", "TCP", "Transport", @@ -6592,7 +6592,7 @@ [ "25", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.097, ACK: 3.000.035" @@ -6616,7 +6616,7 @@ [ "26", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.097" @@ -6647,7 +6647,7 @@ ], [ "27", - "65415", + "55976", "110", "TCP", "Transport", @@ -6671,7 +6671,7 @@ ], [ "28", - "65415", + "55976", "110", "TCP", "Transport", @@ -6704,7 +6704,7 @@ [ "29", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.219, ACK: 3.000.041" @@ -6728,7 +6728,7 @@ [ "30", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.219" @@ -6759,7 +6759,7 @@ ], [ "31", - "65415", + "55976", "110", "TCP", "Transport", @@ -6783,7 +6783,7 @@ ], [ "32", - "65415", + "55976", "110", "TCP", "Transport", @@ -6816,7 +6816,7 @@ [ "33", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.371, ACK: 3.000.047" @@ -6840,7 +6840,7 @@ [ "34", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.371" @@ -6871,7 +6871,7 @@ ], [ "35", - "65415", + "55976", "110", "TCP", "Transport", @@ -6895,7 +6895,7 @@ ], [ "36", - "65415", + "55976", "110", "TCP", "Transport", @@ -6928,7 +6928,7 @@ [ "37", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.400, ACK: 3.000.053" @@ -6952,7 +6952,7 @@ [ "38", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.400" @@ -6983,7 +6983,7 @@ ], [ "39", - "65415", + "55976", "110", "TCP", "Transport", @@ -7007,7 +7007,7 @@ ], [ "40", - "65415", + "55976", "110", "TCP", "Transport", @@ -7040,7 +7040,7 @@ [ "41", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.429, ACK: 3.000.057" @@ -7064,7 +7064,7 @@ [ "42", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.429" @@ -7095,7 +7095,7 @@ ], [ "43", - "65415", + "55976", "110", "TCP", "Transport", @@ -7120,7 +7120,7 @@ [ "44", "110", - "65415", + "55976", "TCP", "Transport", "FIN, SEQ: 1.000.432" @@ -7143,7 +7143,7 @@ ], [ "45", - "65415", + "55976", "110", "TCP", "Transport", @@ -7167,7 +7167,7 @@ ], [ "46", - "65415", + "55976", "110", "TCP", "Transport", @@ -7192,7 +7192,7 @@ [ "47", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.433, ACK: 3.000.058" @@ -7215,7 +7215,7 @@ ], [ "48", - "55115", + "54688", "110", "TCP", "Transport", @@ -7240,7 +7240,7 @@ [ "49", "110", - "55115", + "54688", "TCP", "Transport", "SYN, SEQ: 4.000.000, ACK: 5.000.001" @@ -7263,7 +7263,7 @@ ], [ "50", - "55115", + "54688", "110", "TCP", "Transport", @@ -7288,7 +7288,7 @@ [ "51", "110", - "55115", + "54688", "TCP", "Transport", "SEQ: 4.000.001" @@ -7319,7 +7319,7 @@ ], [ "52", - "55115", + "54688", "110", "TCP", "Transport", @@ -7343,7 +7343,7 @@ ], [ "53", - "55115", + "54688", "110", "TCP", "Transport", @@ -7376,7 +7376,7 @@ [ "54", "110", - "55115", + "54688", "TCP", "Transport", "SEQ: 4.000.022, ACK: 5.000.010" @@ -7400,7 +7400,7 @@ [ "55", "110", - "55115", + "54688", "TCP", "Transport", "SEQ: 4.000.022" @@ -7431,7 +7431,7 @@ ], [ "56", - "55115", + "54688", "110", "TCP", "Transport", @@ -7455,7 +7455,7 @@ ], [ "57", - "55115", + "54688", "110", "TCP", "Transport", @@ -7488,7 +7488,7 @@ [ "58", "110", - "55115", + "54688", "TCP", "Transport", "SEQ: 4.000.040, ACK: 5.000.021" @@ -7512,7 +7512,7 @@ [ "59", "110", - "55115", + "54688", "TCP", "Transport", "SEQ: 4.000.040" @@ -7543,7 +7543,7 @@ ], [ "60", - "55115", + "54688", "110", "TCP", "Transport", @@ -7567,7 +7567,7 @@ ], [ "61", - "55115", + "54688", "110", "TCP", "Transport", @@ -7600,7 +7600,7 @@ [ "62", "110", - "55115", + "54688", "TCP", "Transport", "SEQ: 4.000.068, ACK: 5.000.025" @@ -7624,7 +7624,7 @@ [ "63", "110", - "55115", + "54688", "TCP", "Transport", "SEQ: 4.000.068" @@ -7655,7 +7655,7 @@ ], [ "64", - "55115", + "54688", "110", "TCP", "Transport", @@ -7679,7 +7679,7 @@ ], [ "65", - "55115", + "54688", "110", "TCP", "Transport", @@ -7712,7 +7712,7 @@ [ "66", "110", - "55115", + "54688", "TCP", "Transport", "SEQ: 4.000.075, ACK: 5.000.029" @@ -7736,7 +7736,7 @@ [ "67", "110", - "55115", + "54688", "TCP", "Transport", "SEQ: 4.000.075" @@ -7767,7 +7767,7 @@ ], [ "68", - "55115", + "54688", "110", "TCP", "Transport", @@ -7792,7 +7792,7 @@ [ "69", "110", - "55115", + "54688", "TCP", "Transport", "FIN, SEQ: 4.000.078" @@ -7815,7 +7815,7 @@ ], [ "70", - "55115", + "54688", "110", "TCP", "Transport", @@ -7839,7 +7839,7 @@ ], [ "71", - "55115", + "54688", "110", "TCP", "Transport", @@ -7864,7 +7864,7 @@ [ "72", "110", - "55115", + "54688", "TCP", "Transport", "SEQ: 4.000.079, ACK: 5.000.030" @@ -7939,7 +7939,7 @@ ], [ "3", - "65415", + "55976", "110", "TCP", "Transport", @@ -7964,7 +7964,7 @@ [ "4", "110", - "65415", + "55976", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 3.000.001" @@ -7987,7 +7987,7 @@ ], [ "5", - "65415", + "55976", "110", "TCP", "Transport", @@ -8012,7 +8012,7 @@ [ "6", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.001" @@ -8043,7 +8043,7 @@ ], [ "7", - "65415", + "55976", "110", "TCP", "Transport", @@ -8067,7 +8067,7 @@ ], [ "8", - "65415", + "55976", "110", "TCP", "Transport", @@ -8100,7 +8100,7 @@ [ "9", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.022, ACK: 3.000.010" @@ -8124,7 +8124,7 @@ [ "10", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.022" @@ -8155,7 +8155,7 @@ ], [ "11", - "65415", + "55976", "110", "TCP", "Transport", @@ -8179,7 +8179,7 @@ ], [ "12", - "65415", + "55976", "110", "TCP", "Transport", @@ -8212,7 +8212,7 @@ [ "13", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.040, ACK: 3.000.021" @@ -8236,7 +8236,7 @@ [ "14", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.040" @@ -8267,7 +8267,7 @@ ], [ "15", - "65415", + "55976", "110", "TCP", "Transport", @@ -8291,7 +8291,7 @@ ], [ "16", - "65415", + "55976", "110", "TCP", "Transport", @@ -8324,7 +8324,7 @@ [ "17", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.068, ACK: 3.000.025" @@ -8348,7 +8348,7 @@ [ "18", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.068" @@ -8379,7 +8379,7 @@ ], [ "19", - "65415", + "55976", "110", "TCP", "Transport", @@ -8403,7 +8403,7 @@ ], [ "20", - "65415", + "55976", "110", "TCP", "Transport", @@ -8436,7 +8436,7 @@ [ "21", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.077, ACK: 3.000.029" @@ -8460,7 +8460,7 @@ [ "22", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.077" @@ -8491,7 +8491,7 @@ ], [ "23", - "65415", + "55976", "110", "TCP", "Transport", @@ -8515,7 +8515,7 @@ ], [ "24", - "65415", + "55976", "110", "TCP", "Transport", @@ -8548,7 +8548,7 @@ [ "25", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.097, ACK: 3.000.035" @@ -8572,7 +8572,7 @@ [ "26", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.097" @@ -8603,7 +8603,7 @@ ], [ "27", - "65415", + "55976", "110", "TCP", "Transport", @@ -8627,7 +8627,7 @@ ], [ "28", - "65415", + "55976", "110", "TCP", "Transport", @@ -8660,7 +8660,7 @@ [ "29", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.219, ACK: 3.000.041" @@ -8684,7 +8684,7 @@ [ "30", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.219" @@ -8715,7 +8715,7 @@ ], [ "31", - "65415", + "55976", "110", "TCP", "Transport", @@ -8739,7 +8739,7 @@ ], [ "32", - "65415", + "55976", "110", "TCP", "Transport", @@ -8772,7 +8772,7 @@ [ "33", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.371, ACK: 3.000.047" @@ -8796,7 +8796,7 @@ [ "34", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.371" @@ -8827,7 +8827,7 @@ ], [ "35", - "65415", + "55976", "110", "TCP", "Transport", @@ -8851,7 +8851,7 @@ ], [ "36", - "65415", + "55976", "110", "TCP", "Transport", @@ -8884,7 +8884,7 @@ [ "37", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.400, ACK: 3.000.053" @@ -8908,7 +8908,7 @@ [ "38", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.400" @@ -8939,7 +8939,7 @@ ], [ "39", - "65415", + "55976", "110", "TCP", "Transport", @@ -8963,7 +8963,7 @@ ], [ "40", - "65415", + "55976", "110", "TCP", "Transport", @@ -8996,7 +8996,7 @@ [ "41", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.429, ACK: 3.000.057" @@ -9020,7 +9020,7 @@ [ "42", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.429" @@ -9051,7 +9051,7 @@ ], [ "43", - "65415", + "55976", "110", "TCP", "Transport", @@ -9076,7 +9076,7 @@ [ "44", "110", - "65415", + "55976", "TCP", "Transport", "FIN, SEQ: 1.000.432" @@ -9099,7 +9099,7 @@ ], [ "45", - "65415", + "55976", "110", "TCP", "Transport", @@ -9123,7 +9123,7 @@ ], [ "46", - "65415", + "55976", "110", "TCP", "Transport", @@ -9148,7 +9148,7 @@ [ "47", "110", - "65415", + "55976", "TCP", "Transport", "SEQ: 1.000.433, ACK: 3.000.058" @@ -9171,7 +9171,7 @@ ], [ "48", - "55115", + "54688", "110", "TCP", "Transport", @@ -9196,7 +9196,7 @@ [ "49", "110", - "55115", + "54688", "TCP", "Transport", "SYN, SEQ: 4.000.000, ACK: 5.000.001" @@ -9219,7 +9219,7 @@ ], [ "50", - "55115", + "54688", "110", "TCP", "Transport", @@ -9244,7 +9244,7 @@ [ "51", "110", - "55115", + "54688", "TCP", "Transport", "SEQ: 4.000.001" @@ -9275,7 +9275,7 @@ ], [ "52", - "55115", + "54688", "110", "TCP", "Transport", @@ -9299,7 +9299,7 @@ ], [ "53", - "55115", + "54688", "110", "TCP", "Transport", @@ -9332,7 +9332,7 @@ [ "54", "110", - "55115", + "54688", "TCP", "Transport", "SEQ: 4.000.022, ACK: 5.000.010" @@ -9356,7 +9356,7 @@ [ "55", "110", - "55115", + "54688", "TCP", "Transport", "SEQ: 4.000.022" @@ -9387,7 +9387,7 @@ ], [ "56", - "55115", + "54688", "110", "TCP", "Transport", @@ -9411,7 +9411,7 @@ ], [ "57", - "55115", + "54688", "110", "TCP", "Transport", @@ -9444,7 +9444,7 @@ [ "58", "110", - "55115", + "54688", "TCP", "Transport", "SEQ: 4.000.040, ACK: 5.000.021" @@ -9468,7 +9468,7 @@ [ "59", "110", - "55115", + "54688", "TCP", "Transport", "SEQ: 4.000.040" @@ -9499,7 +9499,7 @@ ], [ "60", - "55115", + "54688", "110", "TCP", "Transport", @@ -9523,7 +9523,7 @@ ], [ "61", - "55115", + "54688", "110", "TCP", "Transport", @@ -9556,7 +9556,7 @@ [ "62", "110", - "55115", + "54688", "TCP", "Transport", "SEQ: 4.000.068, ACK: 5.000.025" @@ -9580,7 +9580,7 @@ [ "63", "110", - "55115", + "54688", "TCP", "Transport", "SEQ: 4.000.068" @@ -9611,7 +9611,7 @@ ], [ "64", - "55115", + "54688", "110", "TCP", "Transport", @@ -9635,7 +9635,7 @@ ], [ "65", - "55115", + "54688", "110", "TCP", "Transport", @@ -9668,7 +9668,7 @@ [ "66", "110", - "55115", + "54688", "TCP", "Transport", "SEQ: 4.000.075, ACK: 5.000.029" @@ -9692,7 +9692,7 @@ [ "67", "110", - "55115", + "54688", "TCP", "Transport", "SEQ: 4.000.075" @@ -9723,7 +9723,7 @@ ], [ "68", - "55115", + "54688", "110", "TCP", "Transport", @@ -9748,7 +9748,7 @@ [ "69", "110", - "55115", + "54688", "TCP", "Transport", "FIN, SEQ: 4.000.078" @@ -9771,7 +9771,7 @@ ], [ "70", - "55115", + "54688", "110", "TCP", "Transport", @@ -9795,7 +9795,7 @@ ], [ "71", - "55115", + "54688", "110", "TCP", "Transport", @@ -9820,7 +9820,7 @@ [ "72", "110", - "55115", + "54688", "TCP", "Transport", "SEQ: 4.000.079, ACK: 5.000.030" @@ -9847,7 +9847,7 @@ }, "events": [ [ - 210, + 209, "client", "null" ], @@ -9857,12 +9857,12 @@ "null" ], [ - 500, + 501, "client", "call verbinden 110" ], [ - 1004, + 1005, "client", "Verbindung hergestellt" ], @@ -9942,12 +9942,12 @@ "192.168.0.20< STAT" ], [ - 6114, + 6113, "server", "192.168.0.20> +OK 2 169" ], [ - 6224, + 6223, "client", "<>+OK 2 169" ], [ - 7500, + 7501, "client", "call senden LIST" ], @@ -9967,7 +9967,7 @@ "192.168.0.20< LIST" ], [ - 7612, + 7613, "server", "192.168.0.20> +OK 2 169\n0 80\n1 89\n" ], @@ -9982,7 +9982,7 @@ ">>+OK 2 169\n0 80\n1 89\n" ], [ - 9000, + 9001, "client", "call senden RETR 0" ], @@ -9997,12 +9997,12 @@ "192.168.0.20> +OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile" ], [ - 9223, + 9224, "client", "<>+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile" ], @@ -10012,7 +10012,7 @@ "call senden RETR 1" ], [ - 10611, + 10612, "server", "192.168.0.20< RETR 1" ], @@ -10027,7 +10027,7 @@ "<>+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?" ], @@ -10047,7 +10047,7 @@ "192.168.0.20> +OK message marked for delete" ], [ - 12222, + 12223, "client", "< +OK message marked for delete" ], [ - 13723, + 13722, "client", "< +OK POP3 server ready" ], [ - 17963, + 17962, "client", ">>+OK POP3 server ready" ], @@ -10197,22 +10197,22 @@ "call senden STAT" ], [ - 23111, + 23112, "server", "192.168.0.20< STAT" ], [ - 23111, + 23112, "server", "192.168.0.20> +OK 0 0" ], [ - 23222, + 23223, "client", "<>+OK 0 0" ], @@ -10222,32 +10222,32 @@ "call senden QUIT" ], [ - 24612, + 24611, "server", "192.168.0.20< QUIT" ], [ - 24612, + 24611, "server", "null" ], [ - 24612, + 24611, "server", "192.168.0.20> +OK" ], [ - 24723, + 24722, "client", "<>+OK" ], [ - 25001, + 24999, "client", "Socket zu 192.168.0.30:110 getrennt" ] @@ -10260,5 +10260,6 @@ "bob" ] ], - "file": "anna;filius.de;geheim;Muster;Anna;\nbob;filius.de;passwort;Beispiel;Bob;\n" + "file": "anna;filius.de;geheim;Muster;Anna;\nbob;filius.de;passwort;Beispiel;Bob;\n", + "savedFile": "anna;filius.de;geheim;Muster;Anna;\nbob;filius.de;passwort;Beispiel;Bob;\n" } diff --git a/packages/core/test/scenarios/email-java-pop3Errors.java.json b/packages/core/test/scenarios/email-java-pop3Errors.java.json index 5b30937..f4534f4 100644 --- a/packages/core/test/scenarios/email-java-pop3Errors.java.json +++ b/packages/core/test/scenarios/email-java-pop3Errors.java.json @@ -2,7 +2,7 @@ "frames": { "00000000-0000-0000-0000-000000000201": [ { - "time": 517, + "time": 520, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, @@ -10,7 +10,7 @@ "targetIp": "192.168.0.30" }, { - "time": 753, + "time": 756, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "arp": 2, @@ -18,13 +18,13 @@ "targetIp": "192.168.0.20" }, { - "time": 755, + "time": 758, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "S", @@ -32,27 +32,27 @@ "acknowledgement": 0 }, { - "time": 982, + "time": 985, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": null, "tcpFlags": "SA", "sequence": 1000000, "acknowledgement": 3000001 }, { - "time": 982, + "time": 986, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -60,27 +60,27 @@ "acknowledgement": 1000001 }, { - "time": 1228, + "time": 1231, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": "+OK POP3 server ready", "tcpFlags": "P", "sequence": 1000001, "acknowledgement": 0 }, { - "time": 1228, + "time": 1232, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -94,7 +94,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": "NOOP", "tcpFlags": "P", @@ -102,14 +102,14 @@ "acknowledgement": 0 }, { - "time": 3224, + "time": 3223, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": null, "tcpFlags": "A", "sequence": 1000022, @@ -123,20 +123,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": "-ERR unknown command", "tcpFlags": "P", "sequence": 1000022, "acknowledgement": 0 }, { - "time": 3280, + "time": 3279, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -150,7 +150,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": "USER niemand", "tcpFlags": "P", @@ -165,7 +165,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": null, "tcpFlags": "A", "sequence": 1000042, @@ -179,7 +179,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": "-ERR user or password wrong", "tcpFlags": "P", "sequence": 1000042, @@ -192,7 +192,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -200,13 +200,13 @@ "acknowledgement": 1000069 }, { - "time": 6001, + "time": 6000, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": "PASS x", "tcpFlags": "P", @@ -221,7 +221,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": null, "tcpFlags": "A", "sequence": 1000069, @@ -235,20 +235,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": "-ERR Please enter PASS", "tcpFlags": "P", "sequence": 1000069, "acknowledgement": 0 }, { - "time": 6279, + "time": 6280, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -262,7 +262,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": "USER anna", "tcpFlags": "P", @@ -270,14 +270,14 @@ "acknowledgement": 0 }, { - "time": 7723, + "time": 7722, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": null, "tcpFlags": "A", "sequence": 1000091, @@ -291,20 +291,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": "+OK enter password", "tcpFlags": "P", "sequence": 1000091, "acknowledgement": 0 }, { - "time": 7779, + "time": 7778, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -318,7 +318,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": "PASS falsch", "tcpFlags": "P", @@ -333,7 +333,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": null, "tcpFlags": "A", "sequence": 1000109, @@ -347,7 +347,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": "-ERR user or password wrong", "tcpFlags": "P", "sequence": 1000109, @@ -360,7 +360,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -374,7 +374,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": "PASS geheim", "tcpFlags": "P", @@ -382,14 +382,14 @@ "acknowledgement": 0 }, { - "time": 10723, + "time": 10722, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": null, "tcpFlags": "A", "sequence": 1000136, @@ -403,7 +403,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": "+OK Mailbox locked and ready", "tcpFlags": "P", "sequence": 1000136, @@ -416,7 +416,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -424,13 +424,13 @@ "acknowledgement": 1000164 }, { - "time": 12000, + "time": 12001, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": "NOOP", "tcpFlags": "P", @@ -445,7 +445,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": null, "tcpFlags": "A", "sequence": 1000164, @@ -459,7 +459,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": "+OK", "tcpFlags": "P", "sequence": 1000164, @@ -472,7 +472,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -486,7 +486,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": "USER bob", "tcpFlags": "P", @@ -494,28 +494,28 @@ "acknowledgement": 0 }, { - "time": 13722, + "time": 13723, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": null, "tcpFlags": "A", "sequence": 1000167, "acknowledgement": 3000066 }, { - "time": 13777, + "time": 13778, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": "-ERR Please enter USER", "tcpFlags": "P", "sequence": 1000167, @@ -528,7 +528,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -536,13 +536,13 @@ "acknowledgement": 1000189 }, { - "time": 15001, + "time": 15000, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": "QUIT", "tcpFlags": "P", @@ -557,7 +557,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": null, "tcpFlags": "A", "sequence": 1000189, @@ -571,7 +571,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": "+OK", "tcpFlags": "P", "sequence": 1000189, @@ -584,7 +584,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -592,27 +592,27 @@ "acknowledgement": 1000192 }, { - "time": 15501, + "time": 15500, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": null, "tcpFlags": "F", "sequence": 1000192, "acknowledgement": 0 }, { - "time": 15501, + "time": 15500, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -626,7 +626,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "F", @@ -641,7 +641,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": null, "tcpFlags": "A", "sequence": 1000193, @@ -650,7 +650,7 @@ ], "00000000-0000-0000-0000-000000000202": [ { - "time": 640, + "time": 643, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, @@ -660,7 +660,7 @@ ], "00000000-0000-0000-0000-000000000203": [ { - "time": 640, + "time": 643, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, @@ -668,7 +668,7 @@ "targetIp": "192.168.0.30" }, { - "time": 641, + "time": 644, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "arp": 2, @@ -676,13 +676,13 @@ "targetIp": "192.168.0.20" }, { - "time": 869, + "time": 872, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "S", @@ -690,27 +690,27 @@ "acknowledgement": 0 }, { - "time": 871, + "time": 874, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": null, "tcpFlags": "SA", "sequence": 1000000, "acknowledgement": 3000001 }, { - "time": 1094, + "time": 1097, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -718,27 +718,27 @@ "acknowledgement": 1000001 }, { - "time": 1117, + "time": 1120, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": "+OK POP3 server ready", "tcpFlags": "P", "sequence": 1000001, "acknowledgement": 0 }, { - "time": 1340, + "time": 1343, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -752,7 +752,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": "NOOP", "tcpFlags": "P", @@ -767,7 +767,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": null, "tcpFlags": "A", "sequence": 1000022, @@ -781,7 +781,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": "-ERR unknown command", "tcpFlags": "P", "sequence": 1000022, @@ -794,7 +794,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -802,13 +802,13 @@ "acknowledgement": 1000042 }, { - "time": 4612, + "time": 4611, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": "USER niemand", "tcpFlags": "P", @@ -823,21 +823,21 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": null, "tcpFlags": "A", "sequence": 1000042, "acknowledgement": 3000017 }, { - "time": 4668, + "time": 4667, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": "-ERR user or password wrong", "tcpFlags": "P", "sequence": 1000042, @@ -850,7 +850,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -864,7 +864,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": "PASS x", "tcpFlags": "P", @@ -879,7 +879,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": null, "tcpFlags": "A", "sequence": 1000069, @@ -893,20 +893,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": "-ERR Please enter PASS", "tcpFlags": "P", "sequence": 1000069, "acknowledgement": 0 }, { - "time": 6390, + "time": 6391, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -920,7 +920,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": "USER anna", "tcpFlags": "P", @@ -928,14 +928,14 @@ "acknowledgement": 0 }, { - "time": 7612, + "time": 7611, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": null, "tcpFlags": "A", "sequence": 1000091, @@ -949,7 +949,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": "+OK enter password", "tcpFlags": "P", "sequence": 1000091, @@ -962,7 +962,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -976,7 +976,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": "PASS falsch", "tcpFlags": "P", @@ -991,7 +991,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": null, "tcpFlags": "A", "sequence": 1000109, @@ -1005,7 +1005,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": "-ERR user or password wrong", "tcpFlags": "P", "sequence": 1000109, @@ -1018,7 +1018,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1032,7 +1032,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": "PASS geheim", "tcpFlags": "P", @@ -1040,14 +1040,14 @@ "acknowledgement": 0 }, { - "time": 10612, + "time": 10611, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": null, "tcpFlags": "A", "sequence": 1000136, @@ -1061,7 +1061,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": "+OK Mailbox locked and ready", "tcpFlags": "P", "sequence": 1000136, @@ -1074,7 +1074,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1082,13 +1082,13 @@ "acknowledgement": 1000164 }, { - "time": 12111, + "time": 12112, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": "NOOP", "tcpFlags": "P", @@ -1103,21 +1103,21 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": null, "tcpFlags": "A", "sequence": 1000164, "acknowledgement": 3000058 }, { - "time": 12167, + "time": 12168, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": "+OK", "tcpFlags": "P", "sequence": 1000164, @@ -1130,7 +1130,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1144,7 +1144,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": "USER bob", "tcpFlags": "P", @@ -1152,14 +1152,14 @@ "acknowledgement": 0 }, { - "time": 13611, + "time": 13612, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": null, "tcpFlags": "A", "sequence": 1000167, @@ -1173,7 +1173,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": "-ERR Please enter USER", "tcpFlags": "P", "sequence": 1000167, @@ -1186,7 +1186,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1200,7 +1200,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": "QUIT", "tcpFlags": "P", @@ -1208,14 +1208,14 @@ "acknowledgement": 0 }, { - "time": 15112, + "time": 15111, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": null, "tcpFlags": "A", "sequence": 1000189, @@ -1229,7 +1229,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": "+OK", "tcpFlags": "P", "sequence": 1000189, @@ -1242,7 +1242,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1250,27 +1250,27 @@ "acknowledgement": 1000192 }, { - "time": 15390, + "time": 15389, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": null, "tcpFlags": "F", "sequence": 1000192, "acknowledgement": 0 }, { - "time": 15612, + "time": 15611, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "A", @@ -1284,7 +1284,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 49374, + "sourcePort": 63459, "destinationPort": 110, "payload": null, "tcpFlags": "F", @@ -1299,7 +1299,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, - "destinationPort": 49374, + "destinationPort": 63459, "payload": null, "tcpFlags": "A", "sequence": 1000193, @@ -1308,7 +1308,7 @@ ], "00000000-0000-0000-0000-000000000204": [ { - "time": 640, + "time": 643, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, @@ -1369,7 +1369,7 @@ ], [ "3", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -1394,7 +1394,7 @@ [ "4", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 3.000.001" @@ -1417,7 +1417,7 @@ ], [ "5", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -1442,7 +1442,7 @@ [ "6", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.001" @@ -1450,7 +1450,7 @@ [ "6", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "POP3", "Anwendung", "+OK POP3 server ready" @@ -1473,7 +1473,7 @@ ], [ "7", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -1497,7 +1497,7 @@ ], [ "8", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -1505,7 +1505,7 @@ ], [ "8", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "POP3", "Anwendung", @@ -1530,7 +1530,7 @@ [ "9", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.022, ACK: 3.000.005" @@ -1554,7 +1554,7 @@ [ "10", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.022" @@ -1562,7 +1562,7 @@ [ "10", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "POP3", "Anwendung", "-ERR unknown command" @@ -1585,7 +1585,7 @@ ], [ "11", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -1609,7 +1609,7 @@ ], [ "12", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -1617,7 +1617,7 @@ ], [ "12", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "POP3", "Anwendung", @@ -1642,7 +1642,7 @@ [ "13", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.042, ACK: 3.000.017" @@ -1666,7 +1666,7 @@ [ "14", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.042" @@ -1674,7 +1674,7 @@ [ "14", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "POP3", "Anwendung", "-ERR user or password wrong" @@ -1697,7 +1697,7 @@ ], [ "15", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -1721,7 +1721,7 @@ ], [ "16", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -1729,7 +1729,7 @@ ], [ "16", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "POP3", "Anwendung", @@ -1754,7 +1754,7 @@ [ "17", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.069, ACK: 3.000.023" @@ -1778,7 +1778,7 @@ [ "18", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.069" @@ -1786,7 +1786,7 @@ [ "18", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "POP3", "Anwendung", "-ERR Please enter PASS" @@ -1809,7 +1809,7 @@ ], [ "19", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -1833,7 +1833,7 @@ ], [ "20", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -1841,7 +1841,7 @@ ], [ "20", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "POP3", "Anwendung", @@ -1866,7 +1866,7 @@ [ "21", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.091, ACK: 3.000.032" @@ -1890,7 +1890,7 @@ [ "22", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.091" @@ -1898,7 +1898,7 @@ [ "22", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "POP3", "Anwendung", "+OK enter password" @@ -1921,7 +1921,7 @@ ], [ "23", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -1945,7 +1945,7 @@ ], [ "24", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -1953,7 +1953,7 @@ ], [ "24", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "POP3", "Anwendung", @@ -1978,7 +1978,7 @@ [ "25", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.109, ACK: 3.000.043" @@ -2002,7 +2002,7 @@ [ "26", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.109" @@ -2010,7 +2010,7 @@ [ "26", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "POP3", "Anwendung", "-ERR user or password wrong" @@ -2033,7 +2033,7 @@ ], [ "27", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -2057,7 +2057,7 @@ ], [ "28", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -2065,7 +2065,7 @@ ], [ "28", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "POP3", "Anwendung", @@ -2090,7 +2090,7 @@ [ "29", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.136, ACK: 3.000.054" @@ -2114,7 +2114,7 @@ [ "30", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.136" @@ -2122,7 +2122,7 @@ [ "30", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "POP3", "Anwendung", "+OK Mailbox locked and ready" @@ -2145,7 +2145,7 @@ ], [ "31", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -2169,7 +2169,7 @@ ], [ "32", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -2177,7 +2177,7 @@ ], [ "32", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "POP3", "Anwendung", @@ -2202,7 +2202,7 @@ [ "33", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.164, ACK: 3.000.058" @@ -2226,7 +2226,7 @@ [ "34", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.164" @@ -2234,7 +2234,7 @@ [ "34", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "POP3", "Anwendung", "+OK" @@ -2257,7 +2257,7 @@ ], [ "35", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -2281,7 +2281,7 @@ ], [ "36", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -2289,7 +2289,7 @@ ], [ "36", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "POP3", "Anwendung", @@ -2314,7 +2314,7 @@ [ "37", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.167, ACK: 3.000.066" @@ -2338,7 +2338,7 @@ [ "38", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.167" @@ -2346,7 +2346,7 @@ [ "38", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "POP3", "Anwendung", "-ERR Please enter USER" @@ -2369,7 +2369,7 @@ ], [ "39", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -2393,7 +2393,7 @@ ], [ "40", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -2401,7 +2401,7 @@ ], [ "40", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "POP3", "Anwendung", @@ -2426,7 +2426,7 @@ [ "41", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.189, ACK: 3.000.070" @@ -2450,7 +2450,7 @@ [ "42", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.189" @@ -2458,7 +2458,7 @@ [ "42", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "POP3", "Anwendung", "+OK" @@ -2481,7 +2481,7 @@ ], [ "43", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -2506,7 +2506,7 @@ [ "44", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "FIN, SEQ: 1.000.192" @@ -2529,7 +2529,7 @@ ], [ "45", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -2553,7 +2553,7 @@ ], [ "46", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -2578,7 +2578,7 @@ [ "47", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.193, ACK: 3.000.071" @@ -2653,7 +2653,7 @@ ], [ "3", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -2678,7 +2678,7 @@ [ "4", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 3.000.001" @@ -2701,7 +2701,7 @@ ], [ "5", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -2726,7 +2726,7 @@ [ "6", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.001" @@ -2734,7 +2734,7 @@ [ "6", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "POP3", "Anwendung", "+OK POP3 server ready" @@ -2757,7 +2757,7 @@ ], [ "7", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -2781,7 +2781,7 @@ ], [ "8", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -2789,7 +2789,7 @@ ], [ "8", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "POP3", "Anwendung", @@ -2814,7 +2814,7 @@ [ "9", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.022, ACK: 3.000.005" @@ -2838,7 +2838,7 @@ [ "10", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.022" @@ -2846,7 +2846,7 @@ [ "10", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "POP3", "Anwendung", "-ERR unknown command" @@ -2869,7 +2869,7 @@ ], [ "11", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -2893,7 +2893,7 @@ ], [ "12", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -2901,7 +2901,7 @@ ], [ "12", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "POP3", "Anwendung", @@ -2926,7 +2926,7 @@ [ "13", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.042, ACK: 3.000.017" @@ -2950,7 +2950,7 @@ [ "14", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.042" @@ -2958,7 +2958,7 @@ [ "14", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "POP3", "Anwendung", "-ERR user or password wrong" @@ -2981,7 +2981,7 @@ ], [ "15", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -3005,7 +3005,7 @@ ], [ "16", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -3013,7 +3013,7 @@ ], [ "16", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "POP3", "Anwendung", @@ -3038,7 +3038,7 @@ [ "17", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.069, ACK: 3.000.023" @@ -3062,7 +3062,7 @@ [ "18", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.069" @@ -3070,7 +3070,7 @@ [ "18", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "POP3", "Anwendung", "-ERR Please enter PASS" @@ -3093,7 +3093,7 @@ ], [ "19", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -3117,7 +3117,7 @@ ], [ "20", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -3125,7 +3125,7 @@ ], [ "20", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "POP3", "Anwendung", @@ -3150,7 +3150,7 @@ [ "21", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.091, ACK: 3.000.032" @@ -3174,7 +3174,7 @@ [ "22", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.091" @@ -3182,7 +3182,7 @@ [ "22", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "POP3", "Anwendung", "+OK enter password" @@ -3205,7 +3205,7 @@ ], [ "23", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -3229,7 +3229,7 @@ ], [ "24", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -3237,7 +3237,7 @@ ], [ "24", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "POP3", "Anwendung", @@ -3262,7 +3262,7 @@ [ "25", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.109, ACK: 3.000.043" @@ -3286,7 +3286,7 @@ [ "26", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.109" @@ -3294,7 +3294,7 @@ [ "26", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "POP3", "Anwendung", "-ERR user or password wrong" @@ -3317,7 +3317,7 @@ ], [ "27", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -3341,7 +3341,7 @@ ], [ "28", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -3349,7 +3349,7 @@ ], [ "28", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "POP3", "Anwendung", @@ -3374,7 +3374,7 @@ [ "29", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.136, ACK: 3.000.054" @@ -3398,7 +3398,7 @@ [ "30", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.136" @@ -3406,7 +3406,7 @@ [ "30", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "POP3", "Anwendung", "+OK Mailbox locked and ready" @@ -3429,7 +3429,7 @@ ], [ "31", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -3453,7 +3453,7 @@ ], [ "32", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -3461,7 +3461,7 @@ ], [ "32", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "POP3", "Anwendung", @@ -3486,7 +3486,7 @@ [ "33", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.164, ACK: 3.000.058" @@ -3510,7 +3510,7 @@ [ "34", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.164" @@ -3518,7 +3518,7 @@ [ "34", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "POP3", "Anwendung", "+OK" @@ -3541,7 +3541,7 @@ ], [ "35", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -3565,7 +3565,7 @@ ], [ "36", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -3573,7 +3573,7 @@ ], [ "36", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "POP3", "Anwendung", @@ -3598,7 +3598,7 @@ [ "37", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.167, ACK: 3.000.066" @@ -3622,7 +3622,7 @@ [ "38", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.167" @@ -3630,7 +3630,7 @@ [ "38", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "POP3", "Anwendung", "-ERR Please enter USER" @@ -3653,7 +3653,7 @@ ], [ "39", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -3677,7 +3677,7 @@ ], [ "40", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -3685,7 +3685,7 @@ ], [ "40", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "POP3", "Anwendung", @@ -3710,7 +3710,7 @@ [ "41", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.189, ACK: 3.000.070" @@ -3734,7 +3734,7 @@ [ "42", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.189" @@ -3742,7 +3742,7 @@ [ "42", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "POP3", "Anwendung", "+OK" @@ -3765,7 +3765,7 @@ ], [ "43", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -3790,7 +3790,7 @@ [ "44", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "FIN, SEQ: 1.000.192" @@ -3813,7 +3813,7 @@ ], [ "45", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -3837,7 +3837,7 @@ ], [ "46", - "192.168.0.20:49374", + "192.168.0.20:63459", "192.168.0.30:110", "TCP", "Transport", @@ -3862,7 +3862,7 @@ [ "47", "192.168.0.30:110", - "192.168.0.20:49374", + "192.168.0.20:63459", "TCP", "Transport", "SEQ: 1.000.193, ACK: 3.000.071" @@ -3939,7 +3939,7 @@ ], [ "3", - "49374", + "63459", "110", "TCP", "Transport", @@ -3964,7 +3964,7 @@ [ "4", "110", - "49374", + "63459", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 3.000.001" @@ -3987,7 +3987,7 @@ ], [ "5", - "49374", + "63459", "110", "TCP", "Transport", @@ -4012,7 +4012,7 @@ [ "6", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.001" @@ -4043,7 +4043,7 @@ ], [ "7", - "49374", + "63459", "110", "TCP", "Transport", @@ -4067,7 +4067,7 @@ ], [ "8", - "49374", + "63459", "110", "TCP", "Transport", @@ -4100,7 +4100,7 @@ [ "9", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.022, ACK: 3.000.005" @@ -4124,7 +4124,7 @@ [ "10", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.022" @@ -4155,7 +4155,7 @@ ], [ "11", - "49374", + "63459", "110", "TCP", "Transport", @@ -4179,7 +4179,7 @@ ], [ "12", - "49374", + "63459", "110", "TCP", "Transport", @@ -4212,7 +4212,7 @@ [ "13", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.042, ACK: 3.000.017" @@ -4236,7 +4236,7 @@ [ "14", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.042" @@ -4267,7 +4267,7 @@ ], [ "15", - "49374", + "63459", "110", "TCP", "Transport", @@ -4291,7 +4291,7 @@ ], [ "16", - "49374", + "63459", "110", "TCP", "Transport", @@ -4324,7 +4324,7 @@ [ "17", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.069, ACK: 3.000.023" @@ -4348,7 +4348,7 @@ [ "18", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.069" @@ -4379,7 +4379,7 @@ ], [ "19", - "49374", + "63459", "110", "TCP", "Transport", @@ -4403,7 +4403,7 @@ ], [ "20", - "49374", + "63459", "110", "TCP", "Transport", @@ -4436,7 +4436,7 @@ [ "21", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.091, ACK: 3.000.032" @@ -4460,7 +4460,7 @@ [ "22", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.091" @@ -4491,7 +4491,7 @@ ], [ "23", - "49374", + "63459", "110", "TCP", "Transport", @@ -4515,7 +4515,7 @@ ], [ "24", - "49374", + "63459", "110", "TCP", "Transport", @@ -4548,7 +4548,7 @@ [ "25", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.109, ACK: 3.000.043" @@ -4572,7 +4572,7 @@ [ "26", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.109" @@ -4603,7 +4603,7 @@ ], [ "27", - "49374", + "63459", "110", "TCP", "Transport", @@ -4627,7 +4627,7 @@ ], [ "28", - "49374", + "63459", "110", "TCP", "Transport", @@ -4660,7 +4660,7 @@ [ "29", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.136, ACK: 3.000.054" @@ -4684,7 +4684,7 @@ [ "30", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.136" @@ -4715,7 +4715,7 @@ ], [ "31", - "49374", + "63459", "110", "TCP", "Transport", @@ -4739,7 +4739,7 @@ ], [ "32", - "49374", + "63459", "110", "TCP", "Transport", @@ -4772,7 +4772,7 @@ [ "33", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.164, ACK: 3.000.058" @@ -4796,7 +4796,7 @@ [ "34", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.164" @@ -4827,7 +4827,7 @@ ], [ "35", - "49374", + "63459", "110", "TCP", "Transport", @@ -4851,7 +4851,7 @@ ], [ "36", - "49374", + "63459", "110", "TCP", "Transport", @@ -4884,7 +4884,7 @@ [ "37", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.167, ACK: 3.000.066" @@ -4908,7 +4908,7 @@ [ "38", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.167" @@ -4939,7 +4939,7 @@ ], [ "39", - "49374", + "63459", "110", "TCP", "Transport", @@ -4963,7 +4963,7 @@ ], [ "40", - "49374", + "63459", "110", "TCP", "Transport", @@ -4996,7 +4996,7 @@ [ "41", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.189, ACK: 3.000.070" @@ -5020,7 +5020,7 @@ [ "42", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.189" @@ -5051,7 +5051,7 @@ ], [ "43", - "49374", + "63459", "110", "TCP", "Transport", @@ -5076,7 +5076,7 @@ [ "44", "110", - "49374", + "63459", "TCP", "Transport", "FIN, SEQ: 1.000.192" @@ -5099,7 +5099,7 @@ ], [ "45", - "49374", + "63459", "110", "TCP", "Transport", @@ -5123,7 +5123,7 @@ ], [ "46", - "49374", + "63459", "110", "TCP", "Transport", @@ -5148,7 +5148,7 @@ [ "47", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.193, ACK: 3.000.071" @@ -5223,7 +5223,7 @@ ], [ "3", - "49374", + "63459", "110", "TCP", "Transport", @@ -5248,7 +5248,7 @@ [ "4", "110", - "49374", + "63459", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 3.000.001" @@ -5271,7 +5271,7 @@ ], [ "5", - "49374", + "63459", "110", "TCP", "Transport", @@ -5296,7 +5296,7 @@ [ "6", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.001" @@ -5327,7 +5327,7 @@ ], [ "7", - "49374", + "63459", "110", "TCP", "Transport", @@ -5351,7 +5351,7 @@ ], [ "8", - "49374", + "63459", "110", "TCP", "Transport", @@ -5384,7 +5384,7 @@ [ "9", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.022, ACK: 3.000.005" @@ -5408,7 +5408,7 @@ [ "10", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.022" @@ -5439,7 +5439,7 @@ ], [ "11", - "49374", + "63459", "110", "TCP", "Transport", @@ -5463,7 +5463,7 @@ ], [ "12", - "49374", + "63459", "110", "TCP", "Transport", @@ -5496,7 +5496,7 @@ [ "13", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.042, ACK: 3.000.017" @@ -5520,7 +5520,7 @@ [ "14", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.042" @@ -5551,7 +5551,7 @@ ], [ "15", - "49374", + "63459", "110", "TCP", "Transport", @@ -5575,7 +5575,7 @@ ], [ "16", - "49374", + "63459", "110", "TCP", "Transport", @@ -5608,7 +5608,7 @@ [ "17", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.069, ACK: 3.000.023" @@ -5632,7 +5632,7 @@ [ "18", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.069" @@ -5663,7 +5663,7 @@ ], [ "19", - "49374", + "63459", "110", "TCP", "Transport", @@ -5687,7 +5687,7 @@ ], [ "20", - "49374", + "63459", "110", "TCP", "Transport", @@ -5720,7 +5720,7 @@ [ "21", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.091, ACK: 3.000.032" @@ -5744,7 +5744,7 @@ [ "22", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.091" @@ -5775,7 +5775,7 @@ ], [ "23", - "49374", + "63459", "110", "TCP", "Transport", @@ -5799,7 +5799,7 @@ ], [ "24", - "49374", + "63459", "110", "TCP", "Transport", @@ -5832,7 +5832,7 @@ [ "25", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.109, ACK: 3.000.043" @@ -5856,7 +5856,7 @@ [ "26", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.109" @@ -5887,7 +5887,7 @@ ], [ "27", - "49374", + "63459", "110", "TCP", "Transport", @@ -5911,7 +5911,7 @@ ], [ "28", - "49374", + "63459", "110", "TCP", "Transport", @@ -5944,7 +5944,7 @@ [ "29", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.136, ACK: 3.000.054" @@ -5968,7 +5968,7 @@ [ "30", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.136" @@ -5999,7 +5999,7 @@ ], [ "31", - "49374", + "63459", "110", "TCP", "Transport", @@ -6023,7 +6023,7 @@ ], [ "32", - "49374", + "63459", "110", "TCP", "Transport", @@ -6056,7 +6056,7 @@ [ "33", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.164, ACK: 3.000.058" @@ -6080,7 +6080,7 @@ [ "34", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.164" @@ -6111,7 +6111,7 @@ ], [ "35", - "49374", + "63459", "110", "TCP", "Transport", @@ -6135,7 +6135,7 @@ ], [ "36", - "49374", + "63459", "110", "TCP", "Transport", @@ -6168,7 +6168,7 @@ [ "37", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.167, ACK: 3.000.066" @@ -6192,7 +6192,7 @@ [ "38", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.167" @@ -6223,7 +6223,7 @@ ], [ "39", - "49374", + "63459", "110", "TCP", "Transport", @@ -6247,7 +6247,7 @@ ], [ "40", - "49374", + "63459", "110", "TCP", "Transport", @@ -6280,7 +6280,7 @@ [ "41", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.189, ACK: 3.000.070" @@ -6304,7 +6304,7 @@ [ "42", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.189" @@ -6335,7 +6335,7 @@ ], [ "43", - "49374", + "63459", "110", "TCP", "Transport", @@ -6360,7 +6360,7 @@ [ "44", "110", - "49374", + "63459", "TCP", "Transport", "FIN, SEQ: 1.000.192" @@ -6383,7 +6383,7 @@ ], [ "45", - "49374", + "63459", "110", "TCP", "Transport", @@ -6407,7 +6407,7 @@ ], [ "46", - "49374", + "63459", "110", "TCP", "Transport", @@ -6432,7 +6432,7 @@ [ "47", "110", - "49374", + "63459", "TCP", "Transport", "SEQ: 1.000.193, ACK: 3.000.071" @@ -6459,12 +6459,12 @@ }, "events": [ [ - 210, + 213, "client", "null" ], [ - 211, + 214, "server", "null" ], @@ -6474,22 +6474,22 @@ "call verbinden 110" ], [ - 1004, + 1005, "client", "Verbindung hergestellt" ], [ - 1116, + 1119, "server", "----" ], [ - 1116, + 1119, "server", "192.168.0.20> +OK POP3 server ready" ], [ - 1228, + 1232, "client", ">>+OK POP3 server ready" ], @@ -6504,7 +6504,7 @@ "192.168.0.20< NOOP" ], [ - 3113, + 3112, "server", "192.168.0.20> -ERR unknown command" ], @@ -6544,7 +6544,7 @@ ">>-ERR user or password wrong" ], [ - 6001, + 6000, "client", "call senden PASS x" ], @@ -6599,7 +6599,7 @@ "call senden PASS falsch" ], [ - 9112, + 9111, "server", "192.168.0.20< PASS falsch" ], @@ -6624,7 +6624,7 @@ "call senden PASS geheim" ], [ - 10612, + 10611, "server", "192.168.0.20< PASS geheim" ], @@ -6634,7 +6634,7 @@ "192.168.0.20> +OK Mailbox locked and ready" ], [ - 10723, + 10722, "client", "<>+OK" ], @@ -6674,7 +6674,7 @@ "call senden USER bob" ], [ - 13611, + 13612, "server", "192.168.0.20< USER bob" ], @@ -6684,7 +6684,7 @@ "192.168.0.20> -ERR Please enter USER" ], [ - 13722, + 13723, "client", "< +OK" ], [ - 15223, + 15222, "client", "<$$$$$Hallo Anna$Erste Zeile|Zweite Zeile#Carla $Anna Muster ,$$$$Termin$Morgen um 10?\nbob;filius.de;passwort;Beispiel;Bob;\n" + "file": "anna;filius.de;geheim;Muster;Anna;#Bob Beispiel $$$$$Hallo Anna$Erste Zeile|Zweite Zeile#Carla $Anna Muster ,$$$$Termin$Morgen um 10?\nbob;filius.de;passwort;Beispiel;Bob;\n", + "savedFile": "anna;filius.de;geheim;Muster;Anna;#Bob Beispiel $$$$$Hallo Anna$Erste Zeile|Zweite Zeile#Carla $Anna Muster ,$$$$Termin$Morgen um 10?\nbob;filius.de;passwort;Beispiel;Bob;\n" } diff --git a/packages/core/test/scenarios/email-java-smtp.java.json b/packages/core/test/scenarios/email-java-smtp.java.json index 5a590f4..633c864 100644 --- a/packages/core/test/scenarios/email-java-smtp.java.json +++ b/packages/core/test/scenarios/email-java-smtp.java.json @@ -10,7 +10,7 @@ "targetIp": "192.168.0.30" }, { - "time": 752, + "time": 754, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "arp": 2, @@ -18,13 +18,13 @@ "targetIp": "192.168.0.20" }, { - "time": 755, + "time": 757, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": null, "tcpFlags": "S", @@ -32,27 +32,27 @@ "acknowledgement": 0 }, { - "time": 983, + "time": 984, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": null, "tcpFlags": "SA", "sequence": 2000000, "acknowledgement": 3000001 }, { - "time": 983, + "time": 984, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -60,27 +60,27 @@ "acknowledgement": 2000001 }, { - "time": 1230, + "time": 1228, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": "220 Willkommen bei filius.de", "tcpFlags": "P", "sequence": 2000001, "acknowledgement": 0 }, { - "time": 1230, + "time": 1228, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -88,13 +88,13 @@ "acknowledgement": 2000029 }, { - "time": 3000, + "time": 3001, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": "HELO 192.168.0.20", "tcpFlags": "P", @@ -102,41 +102,41 @@ "acknowledgement": 0 }, { - "time": 3223, + "time": 3224, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": null, "tcpFlags": "A", "sequence": 2000029, "acknowledgement": 3000018 }, { - "time": 3279, + "time": 3280, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": "250 Hello 192.168.0.20", "tcpFlags": "P", "sequence": 2000029, "acknowledgement": 0 }, { - "time": 3279, + "time": 3280, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -150,7 +150,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": "MAIL FROM: ", "tcpFlags": "P", @@ -158,41 +158,41 @@ "acknowledgement": 0 }, { - "time": 4723, + "time": 4724, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": null, "tcpFlags": "A", "sequence": 2000051, "acknowledgement": 3000044 }, { - "time": 4779, + "time": 4780, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": "250 Sender OK", "tcpFlags": "P", "sequence": 2000051, "acknowledgement": 0 }, { - "time": 4779, + "time": 4780, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -200,13 +200,13 @@ "acknowledgement": 2000064 }, { - "time": 6000, + "time": 6001, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": "RCPT TO:", "tcpFlags": "P", @@ -214,41 +214,41 @@ "acknowledgement": 0 }, { - "time": 6223, + "time": 6224, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": null, "tcpFlags": "A", "sequence": 2000064, "acknowledgement": 3000068 }, { - "time": 6278, + "time": 6279, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": "250 Recipient OK", "tcpFlags": "P", "sequence": 2000064, "acknowledgement": 0 }, { - "time": 6279, + "time": 6280, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -262,7 +262,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": "DATA", "tcpFlags": "P", @@ -277,21 +277,21 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": null, "tcpFlags": "A", "sequence": 2000080, "acknowledgement": 3000072 }, { - "time": 7778, + "time": 7779, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": "354 End data with .", "tcpFlags": "P", "sequence": 2000080, @@ -304,7 +304,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -312,13 +312,13 @@ "acknowledgement": 2000115 }, { - "time": 9000, + "time": 9002, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": "From: Bob Beispiel \nTo: \nSubject: Gruß\n\nHallo Anna,\nwie geht's?\u000d\n.\u000d\n", "tcpFlags": "P", @@ -326,41 +326,41 @@ "acknowledgement": 0 }, { - "time": 9223, + "time": 9229, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": null, "tcpFlags": "A", "sequence": 2000115, "acknowledgement": 3000171 }, { - "time": 9278, + "time": 9285, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": "250 Mail queued for delivery", "tcpFlags": "P", "sequence": 2000115, "acknowledgement": 0 }, { - "time": 9279, + "time": 9285, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -368,13 +368,13 @@ "acknowledgement": 2000143 }, { - "time": 10500, + "time": 10501, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": "QUIT", "tcpFlags": "P", @@ -382,41 +382,41 @@ "acknowledgement": 0 }, { - "time": 10722, + "time": 10723, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": null, "tcpFlags": "A", "sequence": 2000143, "acknowledgement": 3000175 }, { - "time": 10778, + "time": 10779, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": "221 Server beendet Verbindung.", "tcpFlags": "P", "sequence": 2000143, "acknowledgement": 0 }, { - "time": 10778, + "time": 10779, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -431,20 +431,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": null, "tcpFlags": "F", "sequence": 2000173, "acknowledgement": 0 }, { - "time": 11001, + "time": 11002, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -458,7 +458,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": null, "tcpFlags": "F", @@ -466,14 +466,14 @@ "acknowledgement": 0 }, { - "time": 11278, + "time": 11279, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": null, "tcpFlags": "A", "sequence": 2000174, @@ -482,7 +482,7 @@ ], "00000000-0000-0000-0000-000000000202": [ { - "time": 640, + "time": 641, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, @@ -492,7 +492,7 @@ ], "00000000-0000-0000-0000-000000000203": [ { - "time": 640, + "time": 641, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, @@ -500,7 +500,7 @@ "targetIp": "192.168.0.30" }, { - "time": 641, + "time": 643, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "arp": 2, @@ -508,13 +508,13 @@ "targetIp": "192.168.0.20" }, { - "time": 869, + "time": 870, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": null, "tcpFlags": "S", @@ -522,27 +522,27 @@ "acknowledgement": 0 }, { - "time": 871, + "time": 872, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": null, "tcpFlags": "SA", "sequence": 2000000, "acknowledgement": 3000001 }, { - "time": 1094, + "time": 1095, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -550,27 +550,27 @@ "acknowledgement": 2000001 }, { - "time": 1118, + "time": 1116, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": "220 Willkommen bei filius.de", "tcpFlags": "P", "sequence": 2000001, "acknowledgement": 0 }, { - "time": 1341, + "time": 1340, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -578,13 +578,13 @@ "acknowledgement": 2000029 }, { - "time": 3111, + "time": 3113, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": "HELO 192.168.0.20", "tcpFlags": "P", @@ -592,41 +592,41 @@ "acknowledgement": 0 }, { - "time": 3112, + "time": 3113, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": null, "tcpFlags": "A", "sequence": 2000029, "acknowledgement": 3000018 }, { - "time": 3168, + "time": 3169, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": "250 Hello 192.168.0.20", "tcpFlags": "P", "sequence": 2000029, "acknowledgement": 0 }, { - "time": 3390, + "time": 3391, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -640,7 +640,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": "MAIL FROM: ", "tcpFlags": "P", @@ -648,14 +648,14 @@ "acknowledgement": 0 }, { - "time": 4612, + "time": 4613, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": null, "tcpFlags": "A", "sequence": 2000051, @@ -669,20 +669,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": "250 Sender OK", "tcpFlags": "P", "sequence": 2000051, "acknowledgement": 0 }, { - "time": 4890, + "time": 4891, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -690,13 +690,13 @@ "acknowledgement": 2000064 }, { - "time": 6111, + "time": 6112, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": "RCPT TO:", "tcpFlags": "P", @@ -711,34 +711,34 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": null, "tcpFlags": "A", "sequence": 2000064, "acknowledgement": 3000068 }, { - "time": 6167, + "time": 6168, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": "250 Recipient OK", "tcpFlags": "P", "sequence": 2000064, "acknowledgement": 0 }, { - "time": 6390, + "time": 6391, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -746,13 +746,13 @@ "acknowledgement": 2000080 }, { - "time": 7611, + "time": 7612, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": "DATA", "tcpFlags": "P", @@ -767,21 +767,21 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": null, "tcpFlags": "A", "sequence": 2000080, "acknowledgement": 3000072 }, { - "time": 7667, + "time": 7668, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": "354 End data with .", "tcpFlags": "P", "sequence": 2000080, @@ -794,7 +794,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -802,13 +802,13 @@ "acknowledgement": 2000115 }, { - "time": 9111, + "time": 9115, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": "From: Bob Beispiel \nTo: \nSubject: Gruß\n\nHallo Anna,\nwie geht's?\u000d\n.\u000d\n", "tcpFlags": "P", @@ -816,41 +816,41 @@ "acknowledgement": 0 }, { - "time": 9112, + "time": 9118, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": null, "tcpFlags": "A", "sequence": 2000115, "acknowledgement": 3000171 }, { - "time": 9167, + "time": 9173, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": "250 Mail queued for delivery", "tcpFlags": "P", "sequence": 2000115, "acknowledgement": 0 }, { - "time": 9390, + "time": 9396, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -858,13 +858,13 @@ "acknowledgement": 2000143 }, { - "time": 10611, + "time": 10612, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": "QUIT", "tcpFlags": "P", @@ -879,34 +879,34 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": null, "tcpFlags": "A", "sequence": 2000143, "acknowledgement": 3000175 }, { - "time": 10667, + "time": 10668, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": "221 Server beendet Verbindung.", "tcpFlags": "P", "sequence": 2000143, "acknowledgement": 0 }, { - "time": 10889, + "time": 10890, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -914,14 +914,14 @@ "acknowledgement": 2000173 }, { - "time": 10889, + "time": 10890, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": null, "tcpFlags": "F", "sequence": 2000173, @@ -934,7 +934,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -942,13 +942,13 @@ "acknowledgement": 2000174 }, { - "time": 11167, + "time": 11168, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 52469, + "sourcePort": 54191, "destinationPort": 25, "payload": null, "tcpFlags": "F", @@ -963,7 +963,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 52469, + "destinationPort": 54191, "payload": null, "tcpFlags": "A", "sequence": 2000174, @@ -972,7 +972,7 @@ ], "00000000-0000-0000-0000-000000000204": [ { - "time": 640, + "time": 641, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, @@ -1033,7 +1033,7 @@ ], [ "3", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -1058,7 +1058,7 @@ [ "4", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SYN, SEQ: 2.000.000, ACK: 3.000.001" @@ -1081,7 +1081,7 @@ ], [ "5", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -1106,7 +1106,7 @@ [ "6", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.001" @@ -1114,7 +1114,7 @@ [ "6", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "SMTP", "Anwendung", "220 Willkommen bei filius.de" @@ -1137,7 +1137,7 @@ ], [ "7", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -1161,7 +1161,7 @@ ], [ "8", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -1169,7 +1169,7 @@ ], [ "8", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "SMTP", "Anwendung", @@ -1194,7 +1194,7 @@ [ "9", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.029, ACK: 3.000.018" @@ -1218,7 +1218,7 @@ [ "10", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.029" @@ -1226,7 +1226,7 @@ [ "10", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "SMTP", "Anwendung", "250 Hello 192.168.0.20" @@ -1249,7 +1249,7 @@ ], [ "11", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -1273,7 +1273,7 @@ ], [ "12", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -1281,7 +1281,7 @@ ], [ "12", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "SMTP", "Anwendung", @@ -1306,7 +1306,7 @@ [ "13", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.051, ACK: 3.000.044" @@ -1330,7 +1330,7 @@ [ "14", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.051" @@ -1338,7 +1338,7 @@ [ "14", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "SMTP", "Anwendung", "250 Sender OK" @@ -1361,7 +1361,7 @@ ], [ "15", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -1385,7 +1385,7 @@ ], [ "16", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -1393,7 +1393,7 @@ ], [ "16", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "SMTP", "Anwendung", @@ -1418,7 +1418,7 @@ [ "17", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.064, ACK: 3.000.068" @@ -1442,7 +1442,7 @@ [ "18", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.064" @@ -1450,7 +1450,7 @@ [ "18", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "SMTP", "Anwendung", "250 Recipient OK" @@ -1473,7 +1473,7 @@ ], [ "19", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -1497,7 +1497,7 @@ ], [ "20", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -1505,7 +1505,7 @@ ], [ "20", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "SMTP", "Anwendung", @@ -1530,7 +1530,7 @@ [ "21", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.080, ACK: 3.000.072" @@ -1554,7 +1554,7 @@ [ "22", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.080" @@ -1562,7 +1562,7 @@ [ "22", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "SMTP", "Anwendung", "354 End data with ." @@ -1585,7 +1585,7 @@ ], [ "23", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -1609,7 +1609,7 @@ ], [ "24", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -1617,7 +1617,7 @@ ], [ "24", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "SMTP", "Anwendung", @@ -1642,7 +1642,7 @@ [ "25", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.115, ACK: 3.000.171" @@ -1666,7 +1666,7 @@ [ "26", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.115" @@ -1674,7 +1674,7 @@ [ "26", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "SMTP", "Anwendung", "250 Mail queued for delivery" @@ -1697,7 +1697,7 @@ ], [ "27", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -1721,7 +1721,7 @@ ], [ "28", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -1729,7 +1729,7 @@ ], [ "28", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "SMTP", "Anwendung", @@ -1754,7 +1754,7 @@ [ "29", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.143, ACK: 3.000.175" @@ -1778,7 +1778,7 @@ [ "30", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.143" @@ -1786,7 +1786,7 @@ [ "30", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "SMTP", "Anwendung", "221 Server beendet Verbindung." @@ -1809,7 +1809,7 @@ ], [ "31", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -1834,7 +1834,7 @@ [ "32", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "FIN, SEQ: 2.000.173" @@ -1857,7 +1857,7 @@ ], [ "33", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -1881,7 +1881,7 @@ ], [ "34", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -1906,7 +1906,7 @@ [ "35", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.174, ACK: 3.000.176" @@ -1981,7 +1981,7 @@ ], [ "3", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -2006,7 +2006,7 @@ [ "4", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SYN, SEQ: 2.000.000, ACK: 3.000.001" @@ -2029,7 +2029,7 @@ ], [ "5", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -2054,7 +2054,7 @@ [ "6", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.001" @@ -2062,7 +2062,7 @@ [ "6", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "SMTP", "Anwendung", "220 Willkommen bei filius.de" @@ -2085,7 +2085,7 @@ ], [ "7", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -2109,7 +2109,7 @@ ], [ "8", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -2117,7 +2117,7 @@ ], [ "8", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2142,7 +2142,7 @@ [ "9", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.029, ACK: 3.000.018" @@ -2166,7 +2166,7 @@ [ "10", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.029" @@ -2174,7 +2174,7 @@ [ "10", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "SMTP", "Anwendung", "250 Hello 192.168.0.20" @@ -2197,7 +2197,7 @@ ], [ "11", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -2221,7 +2221,7 @@ ], [ "12", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -2229,7 +2229,7 @@ ], [ "12", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2254,7 +2254,7 @@ [ "13", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.051, ACK: 3.000.044" @@ -2278,7 +2278,7 @@ [ "14", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.051" @@ -2286,7 +2286,7 @@ [ "14", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "SMTP", "Anwendung", "250 Sender OK" @@ -2309,7 +2309,7 @@ ], [ "15", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -2333,7 +2333,7 @@ ], [ "16", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -2341,7 +2341,7 @@ ], [ "16", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2366,7 +2366,7 @@ [ "17", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.064, ACK: 3.000.068" @@ -2390,7 +2390,7 @@ [ "18", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.064" @@ -2398,7 +2398,7 @@ [ "18", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "SMTP", "Anwendung", "250 Recipient OK" @@ -2421,7 +2421,7 @@ ], [ "19", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -2445,7 +2445,7 @@ ], [ "20", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -2453,7 +2453,7 @@ ], [ "20", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2478,7 +2478,7 @@ [ "21", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.080, ACK: 3.000.072" @@ -2502,7 +2502,7 @@ [ "22", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.080" @@ -2510,7 +2510,7 @@ [ "22", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "SMTP", "Anwendung", "354 End data with ." @@ -2533,7 +2533,7 @@ ], [ "23", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -2557,7 +2557,7 @@ ], [ "24", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -2565,7 +2565,7 @@ ], [ "24", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2590,7 +2590,7 @@ [ "25", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.115, ACK: 3.000.171" @@ -2614,7 +2614,7 @@ [ "26", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.115" @@ -2622,7 +2622,7 @@ [ "26", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "SMTP", "Anwendung", "250 Mail queued for delivery" @@ -2645,7 +2645,7 @@ ], [ "27", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -2669,7 +2669,7 @@ ], [ "28", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -2677,7 +2677,7 @@ ], [ "28", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2702,7 +2702,7 @@ [ "29", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.143, ACK: 3.000.175" @@ -2726,7 +2726,7 @@ [ "30", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.143" @@ -2734,7 +2734,7 @@ [ "30", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "SMTP", "Anwendung", "221 Server beendet Verbindung." @@ -2757,7 +2757,7 @@ ], [ "31", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -2782,7 +2782,7 @@ [ "32", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "FIN, SEQ: 2.000.173" @@ -2805,7 +2805,7 @@ ], [ "33", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -2829,7 +2829,7 @@ ], [ "34", - "192.168.0.20:52469", + "192.168.0.20:54191", "192.168.0.30:25", "TCP", "Transport", @@ -2854,7 +2854,7 @@ [ "35", "192.168.0.30:25", - "192.168.0.20:52469", + "192.168.0.20:54191", "TCP", "Transport", "SEQ: 2.000.174, ACK: 3.000.176" @@ -2931,7 +2931,7 @@ ], [ "3", - "52469", + "54191", "25", "TCP", "Transport", @@ -2956,7 +2956,7 @@ [ "4", "25", - "52469", + "54191", "TCP", "Transport", "SYN, SEQ: 2.000.000, ACK: 3.000.001" @@ -2979,7 +2979,7 @@ ], [ "5", - "52469", + "54191", "25", "TCP", "Transport", @@ -3004,7 +3004,7 @@ [ "6", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.001" @@ -3035,7 +3035,7 @@ ], [ "7", - "52469", + "54191", "25", "TCP", "Transport", @@ -3059,7 +3059,7 @@ ], [ "8", - "52469", + "54191", "25", "TCP", "Transport", @@ -3092,7 +3092,7 @@ [ "9", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.029, ACK: 3.000.018" @@ -3116,7 +3116,7 @@ [ "10", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.029" @@ -3147,7 +3147,7 @@ ], [ "11", - "52469", + "54191", "25", "TCP", "Transport", @@ -3171,7 +3171,7 @@ ], [ "12", - "52469", + "54191", "25", "TCP", "Transport", @@ -3204,7 +3204,7 @@ [ "13", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.051, ACK: 3.000.044" @@ -3228,7 +3228,7 @@ [ "14", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.051" @@ -3259,7 +3259,7 @@ ], [ "15", - "52469", + "54191", "25", "TCP", "Transport", @@ -3283,7 +3283,7 @@ ], [ "16", - "52469", + "54191", "25", "TCP", "Transport", @@ -3316,7 +3316,7 @@ [ "17", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.064, ACK: 3.000.068" @@ -3340,7 +3340,7 @@ [ "18", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.064" @@ -3371,7 +3371,7 @@ ], [ "19", - "52469", + "54191", "25", "TCP", "Transport", @@ -3395,7 +3395,7 @@ ], [ "20", - "52469", + "54191", "25", "TCP", "Transport", @@ -3428,7 +3428,7 @@ [ "21", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.080, ACK: 3.000.072" @@ -3452,7 +3452,7 @@ [ "22", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.080" @@ -3483,7 +3483,7 @@ ], [ "23", - "52469", + "54191", "25", "TCP", "Transport", @@ -3507,7 +3507,7 @@ ], [ "24", - "52469", + "54191", "25", "TCP", "Transport", @@ -3540,7 +3540,7 @@ [ "25", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.115, ACK: 3.000.171" @@ -3564,7 +3564,7 @@ [ "26", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.115" @@ -3595,7 +3595,7 @@ ], [ "27", - "52469", + "54191", "25", "TCP", "Transport", @@ -3619,7 +3619,7 @@ ], [ "28", - "52469", + "54191", "25", "TCP", "Transport", @@ -3652,7 +3652,7 @@ [ "29", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.143, ACK: 3.000.175" @@ -3676,7 +3676,7 @@ [ "30", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.143" @@ -3707,7 +3707,7 @@ ], [ "31", - "52469", + "54191", "25", "TCP", "Transport", @@ -3732,7 +3732,7 @@ [ "32", "25", - "52469", + "54191", "TCP", "Transport", "FIN, SEQ: 2.000.173" @@ -3755,7 +3755,7 @@ ], [ "33", - "52469", + "54191", "25", "TCP", "Transport", @@ -3779,7 +3779,7 @@ ], [ "34", - "52469", + "54191", "25", "TCP", "Transport", @@ -3804,7 +3804,7 @@ [ "35", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.174, ACK: 3.000.176" @@ -3879,7 +3879,7 @@ ], [ "3", - "52469", + "54191", "25", "TCP", "Transport", @@ -3904,7 +3904,7 @@ [ "4", "25", - "52469", + "54191", "TCP", "Transport", "SYN, SEQ: 2.000.000, ACK: 3.000.001" @@ -3927,7 +3927,7 @@ ], [ "5", - "52469", + "54191", "25", "TCP", "Transport", @@ -3952,7 +3952,7 @@ [ "6", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.001" @@ -3983,7 +3983,7 @@ ], [ "7", - "52469", + "54191", "25", "TCP", "Transport", @@ -4007,7 +4007,7 @@ ], [ "8", - "52469", + "54191", "25", "TCP", "Transport", @@ -4040,7 +4040,7 @@ [ "9", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.029, ACK: 3.000.018" @@ -4064,7 +4064,7 @@ [ "10", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.029" @@ -4095,7 +4095,7 @@ ], [ "11", - "52469", + "54191", "25", "TCP", "Transport", @@ -4119,7 +4119,7 @@ ], [ "12", - "52469", + "54191", "25", "TCP", "Transport", @@ -4152,7 +4152,7 @@ [ "13", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.051, ACK: 3.000.044" @@ -4176,7 +4176,7 @@ [ "14", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.051" @@ -4207,7 +4207,7 @@ ], [ "15", - "52469", + "54191", "25", "TCP", "Transport", @@ -4231,7 +4231,7 @@ ], [ "16", - "52469", + "54191", "25", "TCP", "Transport", @@ -4264,7 +4264,7 @@ [ "17", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.064, ACK: 3.000.068" @@ -4288,7 +4288,7 @@ [ "18", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.064" @@ -4319,7 +4319,7 @@ ], [ "19", - "52469", + "54191", "25", "TCP", "Transport", @@ -4343,7 +4343,7 @@ ], [ "20", - "52469", + "54191", "25", "TCP", "Transport", @@ -4376,7 +4376,7 @@ [ "21", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.080, ACK: 3.000.072" @@ -4400,7 +4400,7 @@ [ "22", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.080" @@ -4431,7 +4431,7 @@ ], [ "23", - "52469", + "54191", "25", "TCP", "Transport", @@ -4455,7 +4455,7 @@ ], [ "24", - "52469", + "54191", "25", "TCP", "Transport", @@ -4488,7 +4488,7 @@ [ "25", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.115, ACK: 3.000.171" @@ -4512,7 +4512,7 @@ [ "26", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.115" @@ -4543,7 +4543,7 @@ ], [ "27", - "52469", + "54191", "25", "TCP", "Transport", @@ -4567,7 +4567,7 @@ ], [ "28", - "52469", + "54191", "25", "TCP", "Transport", @@ -4600,7 +4600,7 @@ [ "29", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.143, ACK: 3.000.175" @@ -4624,7 +4624,7 @@ [ "30", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.143" @@ -4655,7 +4655,7 @@ ], [ "31", - "52469", + "54191", "25", "TCP", "Transport", @@ -4680,7 +4680,7 @@ [ "32", "25", - "52469", + "54191", "TCP", "Transport", "FIN, SEQ: 2.000.173" @@ -4703,7 +4703,7 @@ ], [ "33", - "52469", + "54191", "25", "TCP", "Transport", @@ -4727,7 +4727,7 @@ ], [ "34", - "52469", + "54191", "25", "TCP", "Transport", @@ -4752,7 +4752,7 @@ [ "35", "25", - "52469", + "54191", "TCP", "Transport", "SEQ: 2.000.174, ACK: 3.000.176" @@ -4799,37 +4799,37 @@ "Verbindung hergestellt" ], [ - 1118, + 1116, "server", "----" ], [ - 1230, + 1228, "client", ">>220 Willkommen bei filius.de" ], [ - 1341, + 1340, "server", "192.168.0.20> 220 Willkommen bei filius.de" ], [ - 3000, + 3001, "client", "call senden HELO 192.168.0.20" ], [ - 3112, + 3113, "server", "192.168.0.20< HELO 192.168.0.20" ], [ - 3223, + 3224, "client", "<>250 Hello 192.168.0.20" ], @@ -4844,7 +4844,7 @@ "call senden MAIL FROM: " ], [ - 4612, + 4613, "server", "192.168.0.20< MAIL FROM: " ], @@ -4854,12 +4854,12 @@ "<" ], [ - 4779, + 4780, "client", ">>250 Sender OK" ], [ - 4891, + 4892, "server", "192.168.0.20> 250 Sender OK" ], @@ -4874,17 +4874,17 @@ "192.168.0.20< RCPT TO:" ], [ - 6223, + 6224, "client", "<" ], [ - 6278, + 6280, "client", ">>250 Recipient OK" ], [ - 6390, + 6391, "server", "192.168.0.20> 250 Recipient OK" ], @@ -4894,7 +4894,7 @@ "call senden DATA" ], [ - 7611, + 7612, "server", "192.168.0.20< DATA" ], @@ -4904,7 +4904,7 @@ "<>354 End data with ." ], @@ -4914,32 +4914,32 @@ "192.168.0.20> 354 End data with ." ], [ - 9000, + 9002, "client", "call senden From: Bob Beispiel \nTo: \nSubject: Gruß\n\nHallo Anna,\nwie geht's?\u000d\n.\u000d\n" ], [ - 9112, + 9118, "server", "192.168.0.20< From: Bob Beispiel \nTo: \nSubject: Gruß\n\nHallo Anna,\nwie geht's?\u000d\n.\u000d\n" ], [ - 9223, + 9229, "client", "<\nTo: \nSubject: Gruß\n\nHallo Anna,\nwie geht's?\u000d\n.\u000d\n" ], [ - 9279, + 9285, "client", ">>250 Mail queued for delivery" ], [ - 9390, + 9397, "server", "192.168.0.20> 250 Mail queued for delivery" ], [ - 9390, + 9397, "server", "E-Mail für anna im Postfach gespeichert." ], @@ -4949,7 +4949,7 @@ "call senden QUIT" ], [ - 10611, + 10612, "server", "192.168.0.20< QUIT" ], @@ -4959,17 +4959,17 @@ "<>221 Server beendet Verbindung." ], [ - 10889, + 10890, "server", "192.168.0.20> 221 Server beendet Verbindung." ], [ - 11001, + 11002, "client", "Socket zu 192.168.0.30:25 getrennt" ] @@ -4997,5 +4997,6 @@ "bob" ] ], - "file": "anna;filius.de;geheim;Muster;Anna;#Bob Beispiel $$$$$Hallo Anna$Erste Zeile|Zweite Zeile#Carla $Anna Muster ,$$$$Termin$Morgen um 10?#Bob Beispiel $$$$$Gruß$Hallo Anna,|wie geht's?|\nbob;filius.de;passwort;Beispiel;Bob;\n" + "file": "anna;filius.de;geheim;Muster;Anna;#Bob Beispiel $$$$$Hallo Anna$Erste Zeile|Zweite Zeile#Carla $Anna Muster ,$$$$Termin$Morgen um 10?#Bob Beispiel $$$$$Gruß$Hallo Anna,|wie geht's?|\nbob;filius.de;passwort;Beispiel;Bob;\n", + "savedFile": "anna;filius.de;geheim;Muster;Anna;#Bob Beispiel $$$$$Hallo Anna$Erste Zeile|Zweite Zeile#Carla $Anna Muster ,$$$$Termin$Morgen um 10?#Bob Beispiel $$$$$Gruß$Hallo Anna,|wie geht's?|\nbob;filius.de;passwort;Beispiel;Bob;\n" } diff --git a/packages/core/test/scenarios/email-java-smtpErrors.java.json b/packages/core/test/scenarios/email-java-smtpErrors.java.json index 3a6309f..6475f32 100644 --- a/packages/core/test/scenarios/email-java-smtpErrors.java.json +++ b/packages/core/test/scenarios/email-java-smtpErrors.java.json @@ -10,7 +10,7 @@ "targetIp": "192.168.0.30" }, { - "time": 750, + "time": 755, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "arp": 2, @@ -18,13 +18,13 @@ "targetIp": "192.168.0.20" }, { - "time": 753, + "time": 758, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "S", @@ -32,27 +32,27 @@ "acknowledgement": 0 }, { - "time": 980, + "time": 985, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "SA", "sequence": 2000000, "acknowledgement": 3000001 }, { - "time": 980, + "time": 985, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -60,27 +60,27 @@ "acknowledgement": 2000001 }, { - "time": 1230, + "time": 1232, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": "220 Willkommen bei filius.de", "tcpFlags": "P", "sequence": 2000001, "acknowledgement": 0 }, { - "time": 1231, + "time": 1232, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -88,13 +88,13 @@ "acknowledgement": 2000029 }, { - "time": 3001, + "time": 3000, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": "NOOP", "tcpFlags": "P", @@ -102,14 +102,14 @@ "acknowledgement": 0 }, { - "time": 3224, + "time": 3223, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "A", "sequence": 2000029, @@ -123,7 +123,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": "250 OK", "tcpFlags": "P", "sequence": 2000029, @@ -136,7 +136,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -144,13 +144,13 @@ "acknowledgement": 2000035 }, { - "time": 4500, + "time": 4501, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": "EHLO", "tcpFlags": "P", @@ -158,28 +158,28 @@ "acknowledgement": 0 }, { - "time": 4723, + "time": 4724, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "A", "sequence": 2000035, "acknowledgement": 3000009 }, { - "time": 4778, + "time": 4779, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": "250 Hello ", "tcpFlags": "P", "sequence": 2000035, @@ -192,7 +192,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -206,7 +206,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": "DATA", "tcpFlags": "P", @@ -221,21 +221,21 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "A", "sequence": 2000045, "acknowledgement": 3000013 }, { - "time": 6278, + "time": 6279, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": "503 Falsche Reihenfolge der Kommandos.", "tcpFlags": "P", "sequence": 2000045, @@ -248,7 +248,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -256,13 +256,13 @@ "acknowledgement": 2000083 }, { - "time": 7500, + "time": 7501, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": "MAIL FROM: bob@filius.de", "tcpFlags": "P", @@ -277,7 +277,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "A", "sequence": 2000083, @@ -291,7 +291,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": "501 Syntax-Fehler - Parameter oder Argument falsch.", "tcpFlags": "P", "sequence": 2000083, @@ -304,7 +304,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -312,13 +312,13 @@ "acknowledgement": 2000134 }, { - "time": 9000, + "time": 9001, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": "RCPT TO:", "tcpFlags": "P", @@ -333,21 +333,21 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "A", "sequence": 2000134, "acknowledgement": 3000064 }, { - "time": 9278, + "time": 9279, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": "250 Recipient OK", "tcpFlags": "P", "sequence": 2000134, @@ -360,7 +360,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -374,7 +374,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": "DATA", "tcpFlags": "P", @@ -382,14 +382,14 @@ "acknowledgement": 0 }, { - "time": 10723, + "time": 10722, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "A", "sequence": 2000150, @@ -403,7 +403,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": "503 Falsche Reihenfolge der Kommandos.", "tcpFlags": "P", "sequence": 2000150, @@ -416,7 +416,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -424,13 +424,13 @@ "acknowledgement": 2000188 }, { - "time": 12000, + "time": 12001, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": "MAIL FROM:", "tcpFlags": "P", @@ -438,41 +438,41 @@ "acknowledgement": 0 }, { - "time": 12222, + "time": 12223, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "A", "sequence": 2000188, "acknowledgement": 3000093 }, { - "time": 12277, + "time": 12279, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": "250 Sender OK", "tcpFlags": "P", "sequence": 2000188, "acknowledgement": 0 }, { - "time": 12278, + "time": 12279, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -486,7 +486,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": "RCPT TO: anna", "tcpFlags": "P", @@ -494,14 +494,14 @@ "acknowledgement": 0 }, { - "time": 13723, + "time": 13722, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "A", "sequence": 2000201, @@ -515,7 +515,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": "501 Syntax-Fehler - Parameter oder Argument falsch.", "tcpFlags": "P", "sequence": 2000201, @@ -528,7 +528,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -542,7 +542,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": "NOOP", "tcpFlags": "P", @@ -550,14 +550,14 @@ "acknowledgement": 0 }, { - "time": 15223, + "time": 15222, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "A", "sequence": 2000252, @@ -571,7 +571,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": "250 OK", "tcpFlags": "P", "sequence": 2000252, @@ -584,7 +584,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -598,7 +598,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": "DATA", "tcpFlags": "P", @@ -613,7 +613,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "A", "sequence": 2000258, @@ -627,7 +627,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": "354 End data with .", "tcpFlags": "P", "sequence": 2000258, @@ -640,7 +640,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -654,7 +654,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": "From: \nTo: \nSubject: Wer?\n\nIst da jemand?\n.\n", "tcpFlags": "P", @@ -669,7 +669,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "A", "sequence": 2000293, @@ -683,7 +683,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": "250 Mail queued for delivery", "tcpFlags": "P", "sequence": 2000293, @@ -696,7 +696,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -710,7 +710,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": "QUIT", "tcpFlags": "P", @@ -725,7 +725,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "A", "sequence": 2000321, @@ -739,7 +739,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": "221 Server beendet Verbindung.", "tcpFlags": "P", "sequence": 2000321, @@ -752,7 +752,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -767,7 +767,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "F", "sequence": 2000351, @@ -780,7 +780,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -788,13 +788,13 @@ "acknowledgement": 2000352 }, { - "time": 20055, + "time": 20056, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "F", @@ -809,7 +809,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "A", "sequence": 2000352, @@ -818,7 +818,7 @@ ], "00000000-0000-0000-0000-000000000202": [ { - "time": 638, + "time": 640, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, @@ -828,7 +828,7 @@ ], "00000000-0000-0000-0000-000000000203": [ { - "time": 638, + "time": 640, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, @@ -836,7 +836,7 @@ "targetIp": "192.168.0.30" }, { - "time": 639, + "time": 641, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "arp": 2, @@ -844,13 +844,13 @@ "targetIp": "192.168.0.20" }, { - "time": 867, + "time": 871, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "S", @@ -858,27 +858,27 @@ "acknowledgement": 0 }, { - "time": 869, + "time": 873, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "SA", "sequence": 2000000, "acknowledgement": 3000001 }, { - "time": 1092, + "time": 1097, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -886,27 +886,27 @@ "acknowledgement": 2000001 }, { - "time": 1119, + "time": 1120, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": "220 Willkommen bei filius.de", "tcpFlags": "P", "sequence": 2000001, "acknowledgement": 0 }, { - "time": 1342, + "time": 1343, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -920,7 +920,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": "NOOP", "tcpFlags": "P", @@ -935,7 +935,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "A", "sequence": 2000029, @@ -949,7 +949,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": "250 OK", "tcpFlags": "P", "sequence": 2000029, @@ -962,7 +962,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -970,13 +970,13 @@ "acknowledgement": 2000035 }, { - "time": 4611, + "time": 4612, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": "EHLO", "tcpFlags": "P", @@ -984,41 +984,41 @@ "acknowledgement": 0 }, { - "time": 4612, + "time": 4613, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "A", "sequence": 2000035, "acknowledgement": 3000009 }, { - "time": 4667, + "time": 4668, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": "250 Hello ", "tcpFlags": "P", "sequence": 2000035, "acknowledgement": 0 }, { - "time": 4890, + "time": 4891, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -1026,13 +1026,13 @@ "acknowledgement": 2000045 }, { - "time": 6112, + "time": 6111, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": "DATA", "tcpFlags": "P", @@ -1047,7 +1047,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "A", "sequence": 2000045, @@ -1061,7 +1061,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": "503 Falsche Reihenfolge der Kommandos.", "tcpFlags": "P", "sequence": 2000045, @@ -1074,7 +1074,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -1088,7 +1088,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": "MAIL FROM: bob@filius.de", "tcpFlags": "P", @@ -1103,21 +1103,21 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "A", "sequence": 2000083, "acknowledgement": 3000037 }, { - "time": 7667, + "time": 7668, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": "501 Syntax-Fehler - Parameter oder Argument falsch.", "tcpFlags": "P", "sequence": 2000083, @@ -1130,7 +1130,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -1138,13 +1138,13 @@ "acknowledgement": 2000134 }, { - "time": 9111, + "time": 9112, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": "RCPT TO:", "tcpFlags": "P", @@ -1159,21 +1159,21 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "A", "sequence": 2000134, "acknowledgement": 3000064 }, { - "time": 9167, + "time": 9168, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": "250 Recipient OK", "tcpFlags": "P", "sequence": 2000134, @@ -1186,7 +1186,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -1200,7 +1200,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": "DATA", "tcpFlags": "P", @@ -1208,14 +1208,14 @@ "acknowledgement": 0 }, { - "time": 10612, + "time": 10611, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "A", "sequence": 2000150, @@ -1229,7 +1229,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": "503 Falsche Reihenfolge der Kommandos.", "tcpFlags": "P", "sequence": 2000150, @@ -1242,7 +1242,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -1250,13 +1250,13 @@ "acknowledgement": 2000188 }, { - "time": 12111, + "time": 12112, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": "MAIL FROM:", "tcpFlags": "P", @@ -1264,41 +1264,41 @@ "acknowledgement": 0 }, { - "time": 12111, + "time": 12112, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "A", "sequence": 2000188, "acknowledgement": 3000093 }, { - "time": 12167, + "time": 12168, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": "250 Sender OK", "tcpFlags": "P", "sequence": 2000188, "acknowledgement": 0 }, { - "time": 12388, + "time": 12390, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -1306,13 +1306,13 @@ "acknowledgement": 2000201 }, { - "time": 13612, + "time": 13611, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": "RCPT TO: anna", "tcpFlags": "P", @@ -1327,7 +1327,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "A", "sequence": 2000201, @@ -1341,7 +1341,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": "501 Syntax-Fehler - Parameter oder Argument falsch.", "tcpFlags": "P", "sequence": 2000201, @@ -1354,7 +1354,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -1368,7 +1368,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": "NOOP", "tcpFlags": "P", @@ -1376,14 +1376,14 @@ "acknowledgement": 0 }, { - "time": 15112, + "time": 15111, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "A", "sequence": 2000252, @@ -1397,7 +1397,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": "250 OK", "tcpFlags": "P", "sequence": 2000252, @@ -1410,7 +1410,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -1424,7 +1424,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": "DATA", "tcpFlags": "P", @@ -1439,7 +1439,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "A", "sequence": 2000258, @@ -1453,7 +1453,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": "354 End data with .", "tcpFlags": "P", "sequence": 2000258, @@ -1466,7 +1466,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -1480,7 +1480,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": "From: \nTo: \nSubject: Wer?\n\nIst da jemand?\n.\n", "tcpFlags": "P", @@ -1495,7 +1495,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "A", "sequence": 2000293, @@ -1509,7 +1509,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": "250 Mail queued for delivery", "tcpFlags": "P", "sequence": 2000293, @@ -1522,7 +1522,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -1536,7 +1536,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": "QUIT", "tcpFlags": "P", @@ -1551,7 +1551,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "A", "sequence": 2000321, @@ -1565,7 +1565,7 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": "221 Server beendet Verbindung.", "tcpFlags": "P", "sequence": 2000321, @@ -1578,7 +1578,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -1593,20 +1593,20 @@ "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "F", "sequence": 2000351, "acknowledgement": 0 }, { - "time": 20110, + "time": 20111, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "A", @@ -1620,7 +1620,7 @@ "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, - "sourcePort": 53178, + "sourcePort": 64275, "destinationPort": 25, "payload": null, "tcpFlags": "F", @@ -1628,14 +1628,14 @@ "acknowledgement": 0 }, { - "time": 20166, + "time": 20167, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, - "destinationPort": 53178, + "destinationPort": 64275, "payload": null, "tcpFlags": "A", "sequence": 2000352, @@ -1644,7 +1644,7 @@ ], "00000000-0000-0000-0000-000000000204": [ { - "time": 638, + "time": 641, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, @@ -1705,7 +1705,7 @@ ], [ "3", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -1730,7 +1730,7 @@ [ "4", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SYN, SEQ: 2.000.000, ACK: 3.000.001" @@ -1753,7 +1753,7 @@ ], [ "5", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -1778,7 +1778,7 @@ [ "6", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.001" @@ -1786,7 +1786,7 @@ [ "6", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "SMTP", "Anwendung", "220 Willkommen bei filius.de" @@ -1809,7 +1809,7 @@ ], [ "7", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -1833,7 +1833,7 @@ ], [ "8", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -1841,7 +1841,7 @@ ], [ "8", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "SMTP", "Anwendung", @@ -1866,7 +1866,7 @@ [ "9", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.029, ACK: 3.000.005" @@ -1890,7 +1890,7 @@ [ "10", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.029" @@ -1898,7 +1898,7 @@ [ "10", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "SMTP", "Anwendung", "250 OK" @@ -1921,7 +1921,7 @@ ], [ "11", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -1945,7 +1945,7 @@ ], [ "12", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -1953,7 +1953,7 @@ ], [ "12", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "SMTP", "Anwendung", @@ -1978,7 +1978,7 @@ [ "13", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.035, ACK: 3.000.009" @@ -2002,7 +2002,7 @@ [ "14", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.035" @@ -2010,7 +2010,7 @@ [ "14", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "SMTP", "Anwendung", "250 Hello " @@ -2033,7 +2033,7 @@ ], [ "15", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -2057,7 +2057,7 @@ ], [ "16", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -2065,7 +2065,7 @@ ], [ "16", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2090,7 +2090,7 @@ [ "17", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.045, ACK: 3.000.013" @@ -2114,7 +2114,7 @@ [ "18", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.045" @@ -2122,7 +2122,7 @@ [ "18", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "SMTP", "Anwendung", "503 Falsche Reihenfolge der Kommandos." @@ -2145,7 +2145,7 @@ ], [ "19", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -2169,7 +2169,7 @@ ], [ "20", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -2177,7 +2177,7 @@ ], [ "20", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2202,7 +2202,7 @@ [ "21", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.083, ACK: 3.000.037" @@ -2226,7 +2226,7 @@ [ "22", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.083" @@ -2234,7 +2234,7 @@ [ "22", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "SMTP", "Anwendung", "501 Syntax-Fehler - Parameter oder Argument falsch." @@ -2257,7 +2257,7 @@ ], [ "23", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -2281,7 +2281,7 @@ ], [ "24", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -2289,7 +2289,7 @@ ], [ "24", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2314,7 +2314,7 @@ [ "25", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.134, ACK: 3.000.064" @@ -2338,7 +2338,7 @@ [ "26", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.134" @@ -2346,7 +2346,7 @@ [ "26", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "SMTP", "Anwendung", "250 Recipient OK" @@ -2369,7 +2369,7 @@ ], [ "27", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -2393,7 +2393,7 @@ ], [ "28", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -2401,7 +2401,7 @@ ], [ "28", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2426,7 +2426,7 @@ [ "29", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.150, ACK: 3.000.068" @@ -2450,7 +2450,7 @@ [ "30", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.150" @@ -2458,7 +2458,7 @@ [ "30", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "SMTP", "Anwendung", "503 Falsche Reihenfolge der Kommandos." @@ -2481,7 +2481,7 @@ ], [ "31", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -2505,7 +2505,7 @@ ], [ "32", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -2513,7 +2513,7 @@ ], [ "32", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2538,7 +2538,7 @@ [ "33", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.188, ACK: 3.000.093" @@ -2562,7 +2562,7 @@ [ "34", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.188" @@ -2570,7 +2570,7 @@ [ "34", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "SMTP", "Anwendung", "250 Sender OK" @@ -2593,7 +2593,7 @@ ], [ "35", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -2617,7 +2617,7 @@ ], [ "36", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -2625,7 +2625,7 @@ ], [ "36", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2650,7 +2650,7 @@ [ "37", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.201, ACK: 3.000.106" @@ -2674,7 +2674,7 @@ [ "38", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.201" @@ -2682,7 +2682,7 @@ [ "38", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "SMTP", "Anwendung", "501 Syntax-Fehler - Parameter oder Argument falsch." @@ -2705,7 +2705,7 @@ ], [ "39", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -2729,7 +2729,7 @@ ], [ "40", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -2737,7 +2737,7 @@ ], [ "40", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2762,7 +2762,7 @@ [ "41", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.252, ACK: 3.000.110" @@ -2786,7 +2786,7 @@ [ "42", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.252" @@ -2794,7 +2794,7 @@ [ "42", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "SMTP", "Anwendung", "250 OK" @@ -2817,7 +2817,7 @@ ], [ "43", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -2841,7 +2841,7 @@ ], [ "44", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -2849,7 +2849,7 @@ ], [ "44", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2874,7 +2874,7 @@ [ "45", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.258, ACK: 3.000.114" @@ -2898,7 +2898,7 @@ [ "46", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.258" @@ -2906,7 +2906,7 @@ [ "46", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "SMTP", "Anwendung", "354 End data with ." @@ -2929,7 +2929,7 @@ ], [ "47", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -2953,7 +2953,7 @@ ], [ "48", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -2961,7 +2961,7 @@ ], [ "48", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "SMTP", "Anwendung", @@ -2986,7 +2986,7 @@ [ "49", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.293, ACK: 3.000.192" @@ -3010,7 +3010,7 @@ [ "50", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.293" @@ -3018,7 +3018,7 @@ [ "50", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "SMTP", "Anwendung", "250 Mail queued for delivery" @@ -3041,7 +3041,7 @@ ], [ "51", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -3065,7 +3065,7 @@ ], [ "52", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -3073,7 +3073,7 @@ ], [ "52", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "SMTP", "Anwendung", @@ -3098,7 +3098,7 @@ [ "53", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.321, ACK: 3.000.196" @@ -3122,7 +3122,7 @@ [ "54", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.321" @@ -3130,7 +3130,7 @@ [ "54", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "SMTP", "Anwendung", "221 Server beendet Verbindung." @@ -3153,7 +3153,7 @@ ], [ "55", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -3178,7 +3178,7 @@ [ "56", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "FIN, SEQ: 2.000.351" @@ -3201,7 +3201,7 @@ ], [ "57", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -3225,7 +3225,7 @@ ], [ "58", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -3250,7 +3250,7 @@ [ "59", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.352, ACK: 3.000.197" @@ -3325,7 +3325,7 @@ ], [ "3", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -3350,7 +3350,7 @@ [ "4", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SYN, SEQ: 2.000.000, ACK: 3.000.001" @@ -3373,7 +3373,7 @@ ], [ "5", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -3398,7 +3398,7 @@ [ "6", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.001" @@ -3406,7 +3406,7 @@ [ "6", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "SMTP", "Anwendung", "220 Willkommen bei filius.de" @@ -3429,7 +3429,7 @@ ], [ "7", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -3453,7 +3453,7 @@ ], [ "8", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -3461,7 +3461,7 @@ ], [ "8", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "SMTP", "Anwendung", @@ -3486,7 +3486,7 @@ [ "9", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.029, ACK: 3.000.005" @@ -3510,7 +3510,7 @@ [ "10", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.029" @@ -3518,7 +3518,7 @@ [ "10", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "SMTP", "Anwendung", "250 OK" @@ -3541,7 +3541,7 @@ ], [ "11", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -3565,7 +3565,7 @@ ], [ "12", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -3573,7 +3573,7 @@ ], [ "12", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "SMTP", "Anwendung", @@ -3598,7 +3598,7 @@ [ "13", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.035, ACK: 3.000.009" @@ -3622,7 +3622,7 @@ [ "14", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.035" @@ -3630,7 +3630,7 @@ [ "14", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "SMTP", "Anwendung", "250 Hello " @@ -3653,7 +3653,7 @@ ], [ "15", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -3677,7 +3677,7 @@ ], [ "16", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -3685,7 +3685,7 @@ ], [ "16", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "SMTP", "Anwendung", @@ -3710,7 +3710,7 @@ [ "17", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.045, ACK: 3.000.013" @@ -3734,7 +3734,7 @@ [ "18", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.045" @@ -3742,7 +3742,7 @@ [ "18", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "SMTP", "Anwendung", "503 Falsche Reihenfolge der Kommandos." @@ -3765,7 +3765,7 @@ ], [ "19", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -3789,7 +3789,7 @@ ], [ "20", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -3797,7 +3797,7 @@ ], [ "20", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "SMTP", "Anwendung", @@ -3822,7 +3822,7 @@ [ "21", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.083, ACK: 3.000.037" @@ -3846,7 +3846,7 @@ [ "22", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.083" @@ -3854,7 +3854,7 @@ [ "22", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "SMTP", "Anwendung", "501 Syntax-Fehler - Parameter oder Argument falsch." @@ -3877,7 +3877,7 @@ ], [ "23", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -3901,7 +3901,7 @@ ], [ "24", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -3909,7 +3909,7 @@ ], [ "24", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "SMTP", "Anwendung", @@ -3934,7 +3934,7 @@ [ "25", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.134, ACK: 3.000.064" @@ -3958,7 +3958,7 @@ [ "26", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.134" @@ -3966,7 +3966,7 @@ [ "26", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "SMTP", "Anwendung", "250 Recipient OK" @@ -3989,7 +3989,7 @@ ], [ "27", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -4013,7 +4013,7 @@ ], [ "28", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -4021,7 +4021,7 @@ ], [ "28", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "SMTP", "Anwendung", @@ -4046,7 +4046,7 @@ [ "29", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.150, ACK: 3.000.068" @@ -4070,7 +4070,7 @@ [ "30", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.150" @@ -4078,7 +4078,7 @@ [ "30", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "SMTP", "Anwendung", "503 Falsche Reihenfolge der Kommandos." @@ -4101,7 +4101,7 @@ ], [ "31", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -4125,7 +4125,7 @@ ], [ "32", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -4133,7 +4133,7 @@ ], [ "32", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "SMTP", "Anwendung", @@ -4158,7 +4158,7 @@ [ "33", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.188, ACK: 3.000.093" @@ -4182,7 +4182,7 @@ [ "34", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.188" @@ -4190,7 +4190,7 @@ [ "34", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "SMTP", "Anwendung", "250 Sender OK" @@ -4213,7 +4213,7 @@ ], [ "35", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -4237,7 +4237,7 @@ ], [ "36", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -4245,7 +4245,7 @@ ], [ "36", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "SMTP", "Anwendung", @@ -4270,7 +4270,7 @@ [ "37", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.201, ACK: 3.000.106" @@ -4294,7 +4294,7 @@ [ "38", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.201" @@ -4302,7 +4302,7 @@ [ "38", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "SMTP", "Anwendung", "501 Syntax-Fehler - Parameter oder Argument falsch." @@ -4325,7 +4325,7 @@ ], [ "39", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -4349,7 +4349,7 @@ ], [ "40", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -4357,7 +4357,7 @@ ], [ "40", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "SMTP", "Anwendung", @@ -4382,7 +4382,7 @@ [ "41", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.252, ACK: 3.000.110" @@ -4406,7 +4406,7 @@ [ "42", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.252" @@ -4414,7 +4414,7 @@ [ "42", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "SMTP", "Anwendung", "250 OK" @@ -4437,7 +4437,7 @@ ], [ "43", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -4461,7 +4461,7 @@ ], [ "44", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -4469,7 +4469,7 @@ ], [ "44", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "SMTP", "Anwendung", @@ -4494,7 +4494,7 @@ [ "45", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.258, ACK: 3.000.114" @@ -4518,7 +4518,7 @@ [ "46", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.258" @@ -4526,7 +4526,7 @@ [ "46", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "SMTP", "Anwendung", "354 End data with ." @@ -4549,7 +4549,7 @@ ], [ "47", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -4573,7 +4573,7 @@ ], [ "48", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -4581,7 +4581,7 @@ ], [ "48", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "SMTP", "Anwendung", @@ -4606,7 +4606,7 @@ [ "49", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.293, ACK: 3.000.192" @@ -4630,7 +4630,7 @@ [ "50", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.293" @@ -4638,7 +4638,7 @@ [ "50", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "SMTP", "Anwendung", "250 Mail queued for delivery" @@ -4661,7 +4661,7 @@ ], [ "51", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -4685,7 +4685,7 @@ ], [ "52", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -4693,7 +4693,7 @@ ], [ "52", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "SMTP", "Anwendung", @@ -4718,7 +4718,7 @@ [ "53", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.321, ACK: 3.000.196" @@ -4742,7 +4742,7 @@ [ "54", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.321" @@ -4750,7 +4750,7 @@ [ "54", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "SMTP", "Anwendung", "221 Server beendet Verbindung." @@ -4773,7 +4773,7 @@ ], [ "55", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -4798,7 +4798,7 @@ [ "56", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "FIN, SEQ: 2.000.351" @@ -4821,7 +4821,7 @@ ], [ "57", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -4845,7 +4845,7 @@ ], [ "58", - "192.168.0.20:53178", + "192.168.0.20:64275", "192.168.0.30:25", "TCP", "Transport", @@ -4870,7 +4870,7 @@ [ "59", "192.168.0.30:25", - "192.168.0.20:53178", + "192.168.0.20:64275", "TCP", "Transport", "SEQ: 2.000.352, ACK: 3.000.197" @@ -4947,7 +4947,7 @@ ], [ "3", - "53178", + "64275", "25", "TCP", "Transport", @@ -4972,7 +4972,7 @@ [ "4", "25", - "53178", + "64275", "TCP", "Transport", "SYN, SEQ: 2.000.000, ACK: 3.000.001" @@ -4995,7 +4995,7 @@ ], [ "5", - "53178", + "64275", "25", "TCP", "Transport", @@ -5020,7 +5020,7 @@ [ "6", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.001" @@ -5051,7 +5051,7 @@ ], [ "7", - "53178", + "64275", "25", "TCP", "Transport", @@ -5075,7 +5075,7 @@ ], [ "8", - "53178", + "64275", "25", "TCP", "Transport", @@ -5108,7 +5108,7 @@ [ "9", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.029, ACK: 3.000.005" @@ -5132,7 +5132,7 @@ [ "10", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.029" @@ -5163,7 +5163,7 @@ ], [ "11", - "53178", + "64275", "25", "TCP", "Transport", @@ -5187,7 +5187,7 @@ ], [ "12", - "53178", + "64275", "25", "TCP", "Transport", @@ -5220,7 +5220,7 @@ [ "13", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.035, ACK: 3.000.009" @@ -5244,7 +5244,7 @@ [ "14", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.035" @@ -5275,7 +5275,7 @@ ], [ "15", - "53178", + "64275", "25", "TCP", "Transport", @@ -5299,7 +5299,7 @@ ], [ "16", - "53178", + "64275", "25", "TCP", "Transport", @@ -5332,7 +5332,7 @@ [ "17", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.045, ACK: 3.000.013" @@ -5356,7 +5356,7 @@ [ "18", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.045" @@ -5387,7 +5387,7 @@ ], [ "19", - "53178", + "64275", "25", "TCP", "Transport", @@ -5411,7 +5411,7 @@ ], [ "20", - "53178", + "64275", "25", "TCP", "Transport", @@ -5444,7 +5444,7 @@ [ "21", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.083, ACK: 3.000.037" @@ -5468,7 +5468,7 @@ [ "22", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.083" @@ -5499,7 +5499,7 @@ ], [ "23", - "53178", + "64275", "25", "TCP", "Transport", @@ -5523,7 +5523,7 @@ ], [ "24", - "53178", + "64275", "25", "TCP", "Transport", @@ -5556,7 +5556,7 @@ [ "25", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.134, ACK: 3.000.064" @@ -5580,7 +5580,7 @@ [ "26", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.134" @@ -5611,7 +5611,7 @@ ], [ "27", - "53178", + "64275", "25", "TCP", "Transport", @@ -5635,7 +5635,7 @@ ], [ "28", - "53178", + "64275", "25", "TCP", "Transport", @@ -5668,7 +5668,7 @@ [ "29", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.150, ACK: 3.000.068" @@ -5692,7 +5692,7 @@ [ "30", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.150" @@ -5723,7 +5723,7 @@ ], [ "31", - "53178", + "64275", "25", "TCP", "Transport", @@ -5747,7 +5747,7 @@ ], [ "32", - "53178", + "64275", "25", "TCP", "Transport", @@ -5780,7 +5780,7 @@ [ "33", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.188, ACK: 3.000.093" @@ -5804,7 +5804,7 @@ [ "34", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.188" @@ -5835,7 +5835,7 @@ ], [ "35", - "53178", + "64275", "25", "TCP", "Transport", @@ -5859,7 +5859,7 @@ ], [ "36", - "53178", + "64275", "25", "TCP", "Transport", @@ -5892,7 +5892,7 @@ [ "37", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.201, ACK: 3.000.106" @@ -5916,7 +5916,7 @@ [ "38", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.201" @@ -5947,7 +5947,7 @@ ], [ "39", - "53178", + "64275", "25", "TCP", "Transport", @@ -5971,7 +5971,7 @@ ], [ "40", - "53178", + "64275", "25", "TCP", "Transport", @@ -6004,7 +6004,7 @@ [ "41", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.252, ACK: 3.000.110" @@ -6028,7 +6028,7 @@ [ "42", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.252" @@ -6059,7 +6059,7 @@ ], [ "43", - "53178", + "64275", "25", "TCP", "Transport", @@ -6083,7 +6083,7 @@ ], [ "44", - "53178", + "64275", "25", "TCP", "Transport", @@ -6116,7 +6116,7 @@ [ "45", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.258, ACK: 3.000.114" @@ -6140,7 +6140,7 @@ [ "46", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.258" @@ -6171,7 +6171,7 @@ ], [ "47", - "53178", + "64275", "25", "TCP", "Transport", @@ -6195,7 +6195,7 @@ ], [ "48", - "53178", + "64275", "25", "TCP", "Transport", @@ -6228,7 +6228,7 @@ [ "49", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.293, ACK: 3.000.192" @@ -6252,7 +6252,7 @@ [ "50", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.293" @@ -6283,7 +6283,7 @@ ], [ "51", - "53178", + "64275", "25", "TCP", "Transport", @@ -6307,7 +6307,7 @@ ], [ "52", - "53178", + "64275", "25", "TCP", "Transport", @@ -6340,7 +6340,7 @@ [ "53", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.321, ACK: 3.000.196" @@ -6364,7 +6364,7 @@ [ "54", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.321" @@ -6395,7 +6395,7 @@ ], [ "55", - "53178", + "64275", "25", "TCP", "Transport", @@ -6420,7 +6420,7 @@ [ "56", "25", - "53178", + "64275", "TCP", "Transport", "FIN, SEQ: 2.000.351" @@ -6443,7 +6443,7 @@ ], [ "57", - "53178", + "64275", "25", "TCP", "Transport", @@ -6467,7 +6467,7 @@ ], [ "58", - "53178", + "64275", "25", "TCP", "Transport", @@ -6492,7 +6492,7 @@ [ "59", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.352, ACK: 3.000.197" @@ -6567,7 +6567,7 @@ ], [ "3", - "53178", + "64275", "25", "TCP", "Transport", @@ -6592,7 +6592,7 @@ [ "4", "25", - "53178", + "64275", "TCP", "Transport", "SYN, SEQ: 2.000.000, ACK: 3.000.001" @@ -6615,7 +6615,7 @@ ], [ "5", - "53178", + "64275", "25", "TCP", "Transport", @@ -6640,7 +6640,7 @@ [ "6", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.001" @@ -6671,7 +6671,7 @@ ], [ "7", - "53178", + "64275", "25", "TCP", "Transport", @@ -6695,7 +6695,7 @@ ], [ "8", - "53178", + "64275", "25", "TCP", "Transport", @@ -6728,7 +6728,7 @@ [ "9", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.029, ACK: 3.000.005" @@ -6752,7 +6752,7 @@ [ "10", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.029" @@ -6783,7 +6783,7 @@ ], [ "11", - "53178", + "64275", "25", "TCP", "Transport", @@ -6807,7 +6807,7 @@ ], [ "12", - "53178", + "64275", "25", "TCP", "Transport", @@ -6840,7 +6840,7 @@ [ "13", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.035, ACK: 3.000.009" @@ -6864,7 +6864,7 @@ [ "14", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.035" @@ -6895,7 +6895,7 @@ ], [ "15", - "53178", + "64275", "25", "TCP", "Transport", @@ -6919,7 +6919,7 @@ ], [ "16", - "53178", + "64275", "25", "TCP", "Transport", @@ -6952,7 +6952,7 @@ [ "17", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.045, ACK: 3.000.013" @@ -6976,7 +6976,7 @@ [ "18", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.045" @@ -7007,7 +7007,7 @@ ], [ "19", - "53178", + "64275", "25", "TCP", "Transport", @@ -7031,7 +7031,7 @@ ], [ "20", - "53178", + "64275", "25", "TCP", "Transport", @@ -7064,7 +7064,7 @@ [ "21", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.083, ACK: 3.000.037" @@ -7088,7 +7088,7 @@ [ "22", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.083" @@ -7119,7 +7119,7 @@ ], [ "23", - "53178", + "64275", "25", "TCP", "Transport", @@ -7143,7 +7143,7 @@ ], [ "24", - "53178", + "64275", "25", "TCP", "Transport", @@ -7176,7 +7176,7 @@ [ "25", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.134, ACK: 3.000.064" @@ -7200,7 +7200,7 @@ [ "26", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.134" @@ -7231,7 +7231,7 @@ ], [ "27", - "53178", + "64275", "25", "TCP", "Transport", @@ -7255,7 +7255,7 @@ ], [ "28", - "53178", + "64275", "25", "TCP", "Transport", @@ -7288,7 +7288,7 @@ [ "29", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.150, ACK: 3.000.068" @@ -7312,7 +7312,7 @@ [ "30", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.150" @@ -7343,7 +7343,7 @@ ], [ "31", - "53178", + "64275", "25", "TCP", "Transport", @@ -7367,7 +7367,7 @@ ], [ "32", - "53178", + "64275", "25", "TCP", "Transport", @@ -7400,7 +7400,7 @@ [ "33", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.188, ACK: 3.000.093" @@ -7424,7 +7424,7 @@ [ "34", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.188" @@ -7455,7 +7455,7 @@ ], [ "35", - "53178", + "64275", "25", "TCP", "Transport", @@ -7479,7 +7479,7 @@ ], [ "36", - "53178", + "64275", "25", "TCP", "Transport", @@ -7512,7 +7512,7 @@ [ "37", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.201, ACK: 3.000.106" @@ -7536,7 +7536,7 @@ [ "38", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.201" @@ -7567,7 +7567,7 @@ ], [ "39", - "53178", + "64275", "25", "TCP", "Transport", @@ -7591,7 +7591,7 @@ ], [ "40", - "53178", + "64275", "25", "TCP", "Transport", @@ -7624,7 +7624,7 @@ [ "41", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.252, ACK: 3.000.110" @@ -7648,7 +7648,7 @@ [ "42", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.252" @@ -7679,7 +7679,7 @@ ], [ "43", - "53178", + "64275", "25", "TCP", "Transport", @@ -7703,7 +7703,7 @@ ], [ "44", - "53178", + "64275", "25", "TCP", "Transport", @@ -7736,7 +7736,7 @@ [ "45", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.258, ACK: 3.000.114" @@ -7760,7 +7760,7 @@ [ "46", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.258" @@ -7791,7 +7791,7 @@ ], [ "47", - "53178", + "64275", "25", "TCP", "Transport", @@ -7815,7 +7815,7 @@ ], [ "48", - "53178", + "64275", "25", "TCP", "Transport", @@ -7848,7 +7848,7 @@ [ "49", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.293, ACK: 3.000.192" @@ -7872,7 +7872,7 @@ [ "50", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.293" @@ -7903,7 +7903,7 @@ ], [ "51", - "53178", + "64275", "25", "TCP", "Transport", @@ -7927,7 +7927,7 @@ ], [ "52", - "53178", + "64275", "25", "TCP", "Transport", @@ -7960,7 +7960,7 @@ [ "53", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.321, ACK: 3.000.196" @@ -7984,7 +7984,7 @@ [ "54", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.321" @@ -8015,7 +8015,7 @@ ], [ "55", - "53178", + "64275", "25", "TCP", "Transport", @@ -8040,7 +8040,7 @@ [ "56", "25", - "53178", + "64275", "TCP", "Transport", "FIN, SEQ: 2.000.351" @@ -8063,7 +8063,7 @@ ], [ "57", - "53178", + "64275", "25", "TCP", "Transport", @@ -8087,7 +8087,7 @@ ], [ "58", - "53178", + "64275", "25", "TCP", "Transport", @@ -8112,7 +8112,7 @@ [ "59", "25", - "53178", + "64275", "TCP", "Transport", "SEQ: 2.000.352, ACK: 3.000.197" @@ -8139,17 +8139,17 @@ }, "events": [ [ - 212, + 213, "client", "null" ], [ - 213, + 214, "server", "null" ], [ - 500, + 501, "client", "call verbinden 25" ], @@ -8159,17 +8159,17 @@ "Verbindung hergestellt" ], [ - 1118, + 1120, "server", "----" ], [ - 1230, + 1232, "client", ">>220 Willkommen bei filius.de" ], [ - 1342, + 1343, "server", "192.168.0.20> 220 Willkommen bei filius.de" ], @@ -8184,7 +8184,7 @@ "192.168.0.20< NOOP" ], [ - 3224, + 3223, "client", "< 250 OK" ], [ - 4500, + 4501, "client", "call senden EHLO" ], @@ -8209,7 +8209,7 @@ "192.168.0.20< EHLO" ], [ - 4723, + 4724, "client", "<>250 Hello " ], [ - 4890, + 4891, "server", "192.168.0.20> 250 Hello " ], @@ -8244,7 +8244,7 @@ ">>503 Falsche Reihenfolge der Kommandos." ], [ - 6390, + 6391, "server", "192.168.0.20> 503 Falsche Reihenfolge der Kommandos." ], @@ -8284,7 +8284,7 @@ "192.168.0.20< RCPT TO:" ], [ - 9223, + 9224, "client", "<" ], @@ -8304,12 +8304,12 @@ "call senden DATA" ], [ - 10612, + 10611, "server", "192.168.0.20< DATA" ], [ - 10723, + 10722, "client", "<" ], [ - 12111, + 12112, "server", "192.168.0.20< MAIL FROM:" ], [ - 12222, + 12223, "client", "<" ], [ - 12278, + 12279, "client", ">>250 Sender OK" ], [ - 12389, + 12390, "server", "192.168.0.20> 250 Sender OK" ], @@ -8369,7 +8369,7 @@ ">>501 Syntax-Fehler - Parameter oder Argument falsch." ], [ - 13890, + 13889, "server", "192.168.0.20> 501 Syntax-Fehler - Parameter oder Argument falsch." ], @@ -8379,7 +8379,7 @@ "call senden NOOP" ], [ - 15112, + 15111, "server", "192.168.0.20< NOOP" ], @@ -8449,7 +8449,7 @@ "192.168.0.20> 250 Mail queued for delivery" ], [ - 18395, + 18394, "server", "E-Mail für bob im Postfach gespeichert." ], @@ -8501,11 +8501,12 @@ [ "bob", [ - "From: \nTo: \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@filius.de\n\nDate: 01.10.26, 19:28\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: \nTo: \nSubject: Wer?\n\nIst da jemand?", + "From: \nTo: \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@filius.de\n\nDate: 02.10.26, 11:37\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: \nTo: \nSubject: Wer?\n\nIst da jemand?", "true", "false" ] ] ], - "file": "anna;filius.de;geheim;Muster;Anna;#Bob Beispiel $$$$$Hallo Anna$Erste Zeile|Zweite Zeile#Carla $Anna Muster ,$$$$Termin$Morgen um 10?\nbob;filius.de;passwort;Beispiel;Bob;\n" + "file": "anna;filius.de;geheim;Muster;Anna;#Bob Beispiel $$$$$Hallo Anna$Erste Zeile|Zweite Zeile#Carla $Anna Muster ,$$$$Termin$Morgen um 10?\nbob;filius.de;passwort;Beispiel;Bob;\n", + "savedFile": "anna;filius.de;geheim;Muster;Anna;#Bob Beispiel $$$$$Hallo Anna$Erste Zeile|Zweite Zeile#Carla $Anna Muster ,$$$$Termin$Morgen um 10?\nbob;filius.de;passwort;Beispiel;Bob;#$$$$$Non Delivery Notification$The mail could not be delivered either because user or mail domain is unknown.|Message could not be delivered to the following recipients:|\u0009niemand@filius.de||Date: 02.10.26, 11:37|Mail-Server: 192.168.0.30||______________________________________________________________________|From: |To: |Subject: Wer?||Ist da jemand?\n" } diff --git a/packages/fls/src/exportProject.ts b/packages/fls/src/exportProject.ts index 317573b..c5a9228 100644 --- a/packages/fls/src/exportProject.ts +++ b/packages/fls/src/exportProject.ts @@ -74,6 +74,8 @@ // Java FILIUS to the topology of the original up to those departures. import { + accountFileField, + serverAccountsFileText, javaBase64, defaultSwitchConfiguration, dhcpServerConfiguration, @@ -292,7 +294,7 @@ function exportSystem(node: TopologyNode, project: ProjectToExport, servingModem const client = project.installedPrograms.get(id)?.has('emailClient') === true ? project.emailClientConfigurations.get(id) : undefined; const server = project.installedPrograms.get(id)?.has('emailServer') === true ? project.emailServerConfigurations.get(id) : undefined; if (client?.account != null) putFile(root, EMAIL_CLIENT_FILE, 'text/txt', clientAccountFile(client, warn)); - if (server !== undefined) putFile(root, EMAIL_SERVER_FILE, 'txt', serverAccountsFile(server, warn)); + if (server !== undefined) putFile(root, EMAIL_SERVER_FILE, 'txt', serverAccountsFileText(server.domain, server.accounts, warn)); return { ...system, ssid: ssid === '' ? null : ssid, @@ -419,11 +421,7 @@ function javaContact(contact: EmailContact): JavaContact { } /** A field of an account file: each character it cannot carry becomes a space, with a warning. */ -function field(value: string, forbidden: RegExp, what: string, warn: Warn): string { - if (!forbidden.test(value)) return value; - warn(`${what} holds a character Java's account file cannot carry, written there with a space`); - return value.replace(new RegExp(forbidden.source, 'g'), ' '); -} +const field = accountFileField; /** EmailKonto.toString: nine fields; a field may hold no ';' and no line break. */ function clientAccountFile(client: EmailClientConfiguration, warn: Warn): string { @@ -442,53 +440,6 @@ function clientAccountFile(client: EmailClientConfiguration, warn: Warn): string ].join(';'); } -/** - * EmailServer.listeBenutzerkontenZuString: per account a line of user, - * domain, password, last and first name, then its messages, each "#" and - * seven fields joined by "$" — the text with Java's escapes - * (replaceSpecialChar, then line breaks as "|"), the others unescaped. - */ -function serverAccountsFile(server: EmailServerConfiguration, warn: Warn): string { - const where = (what: string) => `${EMAIL_SERVER_FILE}: ${what}`; - const plain = (value: string, what: string) => field(value, /[;#$\r\n]/, where(what), warn); - const address = (entry: EmailAddress, what: string) => { - const name = entry.name === null ? null : field(entry.name, /[;#$,<>\r\n]/, where(what), warn); - const mail = entry.mailAddress === null ? null : field(entry.mailAddress, /[;#$,<>\r\n]/, where(what), warn); - if (name === null) return mail === null ? '' : `<${mail}>`; - return mail === null ? name : `${name} <${mail}>`; - }; - const addresses = (entries: readonly EmailAddress[], what: string) => entries.map((entry) => address(entry, what)).join(','); - const escapedText = (text: string) => - text.replace(/\$/g, '&&00036&&').replace(/;/g, '&&00059&&').replace(/\|/g, '&&00124&&').replace(/#/g, '&&00035&&').replace(/\n/g, '|'); - return server.accounts - .map((account) => { - const messages = account.mailbox - .map( - (message) => - '#' + - [ - address(message.from, 'a sender'), - addresses(message.to, 'a recipient'), - addresses(message.cc, 'a recipient'), - addresses(message.bcc, 'a recipient'), - message.receivedAtMilliseconds === undefined ? '' : String(message.receivedAtMilliseconds), - plain(message.subject, 'a subject'), - field(escapedText(message.body), /\r$/, where('a text'), warn), - ].join('$'), - ) - .join(''); - return [ - plain(account.username, 'a user name'), - server.domain, - plain(account.password, 'a password'), - plain(account.lastName, 'a last name'), - plain(account.firstName, 'a first name'), - messages, - ].join(';') + '\n'; - }) - .join(''); -} - /** * The file at an absolute path of the root's tree, replacing one of the same * name in any case (Java's holeDatei finds it so); directories are made. diff --git a/tools/java-oracle/README.md b/tools/java-oracle/README.md index 979bab3..44c04a3 100644 --- a/tools/java-oracle/README.md +++ b/tools/java-oracle/README.md @@ -726,6 +726,14 @@ Gemessen (01.10.2026): * Die Größe in `STAT` und `LIST` ist Javas eigene: die Länge von Text, Absender, Betreff, Empfängerliste (`[a, b]`) und Datum. +* Die Kontendatei `/mailserver/konten.txt` (seit F3.5a mitgeschrieben, wie + Java sie hinterlässt und wie `kontenSpeichern` die Konten am Ende + schreibt, 02.10.2026): Java schreibt sie nach einer angenommenen Mail, + nach POP3-Befehlen, bei Kontoänderungen und beim Stoppen; die + Benachrichtigung an einen lokalen Absender schickt der SMTP-Arbeiter erst + nach dem Speichern, sie fehlt in der Datei bis zum nächsten Mal. Felder + ohne Wert (das Datum) schreibt Java leer. + ## E-Mail-Programm (F3.3b) `EmailClientRun` lässt Javas E-Mail-Programm (`EmailAnwendung`) auf diff --git a/tools/java-oracle/src/EmailRun.java b/tools/java-oracle/src/EmailRun.java index c91f3fe..35b363b 100644 --- a/tools/java-oracle/src/EmailRun.java +++ b/tools/java-oracle/src/EmailRun.java @@ -3,7 +3,8 @@ // really happens: every frame each card saw, every line the server wrote // into its window, every line of the generic client that talks to it, and // the server's accounts at the end (each message as Email.toString, whether -// it is new, whether it is marked for deletion). +// it is new, whether it is marked for deletion), and its account file, as +// Java left it and as Java writes those accounts (kontenSpeichern). // // EmailRun // @@ -139,7 +140,10 @@ public class EmailRun { out.close(']'); } out.close(']'); + // The account file as Java left it, and as Java writes the accounts it ends with (kontenSpeichern). out.key("file").string(files.holeDatei("/mailserver/konten.txt").getDateiInhalt()); + server.kontenSpeichern(); + out.key("savedFile").string(files.holeDatei("/mailserver/konten.txt").getDateiInhalt()); out.close('}'); network.stop(); ScenarioNetwork.write(args[3], out);