{ "frames": { "00000000-0000-0000-0000-000000000201": [ { "time": 515, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.20", "targetIp": "192.168.0.10" }, { "time": 751, "source": "02:00:00:00:02:12", "destination": "02:00:00:00:02:11", "arp": 2, "senderIp": "192.168.0.10", "targetIp": "192.168.0.20" }, { "time": 754, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:12", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.10", "protocol": 17, "sourcePort": 52531, "destinationPort": 53, "payload": "ID=43842 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" }, { "time": 985, "source": "02:00:00:00:02:12", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.10", "destinationIp": "192.168.0.20", "protocol": 17, "sourcePort": 53, "destinationPort": 52531, "payload": "ID=43842 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" }, { "time": 995, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.20", "targetIp": "192.168.0.30" }, { "time": 1218, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "arp": 2, "senderIp": "192.168.0.30", "targetIp": "192.168.0.20" }, { "time": 1218, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": null, "tcpFlags": "S", "sequence": 5000000, "acknowledgement": 0 }, { "time": 1442, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": null, "tcpFlags": "SA", "sequence": 2000000, "acknowledgement": 5000001 }, { "time": 1443, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 5000001, "acknowledgement": 2000001 }, { "time": 1734, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": "220 Willkommen bei filius.de", "tcpFlags": "P", "sequence": 2000001, "acknowledgement": 0 }, { "time": 1735, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 5000001, "acknowledgement": 2000029 }, { "time": 1790, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": "HELO 192.168.0.20", "tcpFlags": "P", "sequence": 5000001, "acknowledgement": 0 }, { "time": 2013, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": null, "tcpFlags": "A", "sequence": 2000029, "acknowledgement": 5000018 }, { "time": 2068, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": "250 Hello 192.168.0.20", "tcpFlags": "P", "sequence": 2000029, "acknowledgement": 0 }, { "time": 2069, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 5000018, "acknowledgement": 2000051 }, { "time": 2124, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": "MAIL FROM: ", "tcpFlags": "P", "sequence": 5000018, "acknowledgement": 0 }, { "time": 2347, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": null, "tcpFlags": "A", "sequence": 2000051, "acknowledgement": 5000045 }, { "time": 2403, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": "250 Sender OK", "tcpFlags": "P", "sequence": 2000051, "acknowledgement": 0 }, { "time": 2403, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 5000045, "acknowledgement": 2000064 }, { "time": 2459, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": "RCPT TO:", "tcpFlags": "P", "sequence": 5000045, "acknowledgement": 0 }, { "time": 2681, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": null, "tcpFlags": "A", "sequence": 2000064, "acknowledgement": 5000072 }, { "time": 2737, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": "250 Recipient OK", "tcpFlags": "P", "sequence": 2000064, "acknowledgement": 0 }, { "time": 2738, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 5000072, "acknowledgement": 2000080 }, { "time": 2793, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": "DATA", "tcpFlags": "P", "sequence": 5000072, "acknowledgement": 0 }, { "time": 3015, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": null, "tcpFlags": "A", "sequence": 2000080, "acknowledgement": 5000076 }, { "time": 3071, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": "354 End data with .", "tcpFlags": "P", "sequence": 2000080, "acknowledgement": 0 }, { "time": 3071, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 5000076, "acknowledgement": 2000115 }, { "time": 3127, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n", "tcpFlags": "P", "sequence": 5000076, "acknowledgement": 0 }, { "time": 3349, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": null, "tcpFlags": "A", "sequence": 2000115, "acknowledgement": 5000168 }, { "time": 3404, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": "250 Mail queued for delivery", "tcpFlags": "P", "sequence": 2000115, "acknowledgement": 0 }, { "time": 3404, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 5000168, "acknowledgement": 2000143 }, { "time": 3460, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": "QUIT", "tcpFlags": "P", "sequence": 5000168, "acknowledgement": 0 }, { "time": 3632, "source": "02:00:00:00:02:13", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.30", "targetIp": "192.168.0.10" }, { "time": 3687, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": null, "tcpFlags": "A", "sequence": 2000143, "acknowledgement": 5000172 }, { "time": 3742, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": "221 Server beendet Verbindung.", "tcpFlags": "P", "sequence": 2000143, "acknowledgement": 0 }, { "time": 3743, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 5000172, "acknowledgement": 2000173 }, { "time": 3798, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": null, "tcpFlags": "F", "sequence": 5000172, "acknowledgement": 0 }, { "time": 3964, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": null, "tcpFlags": "F", "sequence": 2000173, "acknowledgement": 0 }, { "time": 3965, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 5000173, "acknowledgement": 2000174 }, { "time": 4020, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": null, "tcpFlags": "A", "sequence": 2000174, "acknowledgement": 5000173 }, { "time": 4076, "source": "02:00:00:00:02:13", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.30", "targetIp": "192.168.0.31" }, { "time": 6522, "source": "02:00:00:00:02:14", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.31", "targetIp": "192.168.0.10" }, { "time": 12001, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:12", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.10", "protocol": 17, "sourcePort": 57606, "destinationPort": 53, "payload": "ID=60054 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" }, { "time": 12223, "source": "02:00:00:00:02:12", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.10", "destinationIp": "192.168.0.20", "protocol": 17, "sourcePort": 53, "destinationPort": 57606, "payload": "ID=60054 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" }, { "time": 12224, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": null, "tcpFlags": "S", "sequence": 11000000, "acknowledgement": 0 }, { "time": 12445, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": null, "tcpFlags": "SA", "sequence": 10000000, "acknowledgement": 11000001 }, { "time": 12446, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 11000001, "acknowledgement": 10000001 }, { "time": 12686, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": "220 Willkommen bei filius.de", "tcpFlags": "P", "sequence": 10000001, "acknowledgement": 0 }, { "time": 12686, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 11000001, "acknowledgement": 10000029 }, { "time": 12742, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": "HELO 192.168.0.20", "tcpFlags": "P", "sequence": 11000001, "acknowledgement": 0 }, { "time": 12964, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": null, "tcpFlags": "A", "sequence": 10000029, "acknowledgement": 11000018 }, { "time": 13019, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": "250 Hello 192.168.0.20", "tcpFlags": "P", "sequence": 10000029, "acknowledgement": 0 }, { "time": 13019, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 11000018, "acknowledgement": 10000051 }, { "time": 13075, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": "MAIL FROM: ", "tcpFlags": "P", "sequence": 11000018, "acknowledgement": 0 }, { "time": 13296, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": null, "tcpFlags": "A", "sequence": 10000051, "acknowledgement": 11000045 }, { "time": 13351, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": "250 Sender OK", "tcpFlags": "P", "sequence": 10000051, "acknowledgement": 0 }, { "time": 13351, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 11000045, "acknowledgement": 10000064 }, { "time": 13407, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": "RCPT TO:", "tcpFlags": "P", "sequence": 11000045, "acknowledgement": 0 }, { "time": 13628, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": null, "tcpFlags": "A", "sequence": 10000064, "acknowledgement": 11000074 }, { "time": 13683, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": "250 Recipient OK", "tcpFlags": "P", "sequence": 10000064, "acknowledgement": 0 }, { "time": 13683, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 11000074, "acknowledgement": 10000080 }, { "time": 13739, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": "DATA", "tcpFlags": "P", "sequence": 11000074, "acknowledgement": 0 }, { "time": 13960, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": null, "tcpFlags": "A", "sequence": 10000080, "acknowledgement": 11000078 }, { "time": 14015, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": "354 End data with .", "tcpFlags": "P", "sequence": 10000080, "acknowledgement": 0 }, { "time": 14016, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 11000078, "acknowledgement": 10000115 }, { "time": 14071, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n", "tcpFlags": "P", "sequence": 11000078, "acknowledgement": 0 }, { "time": 14292, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": null, "tcpFlags": "A", "sequence": 10000115, "acknowledgement": 11000172 }, { "time": 14348, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": "250 Mail queued for delivery", "tcpFlags": "P", "sequence": 10000115, "acknowledgement": 0 }, { "time": 14348, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 11000172, "acknowledgement": 10000143 }, { "time": 14403, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": "QUIT", "tcpFlags": "P", "sequence": 11000172, "acknowledgement": 0 }, { "time": 14626, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": null, "tcpFlags": "A", "sequence": 10000143, "acknowledgement": 11000176 }, { "time": 14681, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": "221 Server beendet Verbindung.", "tcpFlags": "P", "sequence": 10000143, "acknowledgement": 0 }, { "time": 14681, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 11000176, "acknowledgement": 10000173 }, { "time": 14736, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": null, "tcpFlags": "F", "sequence": 11000176, "acknowledgement": 0 }, { "time": 14903, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": null, "tcpFlags": "F", "sequence": 10000173, "acknowledgement": 0 }, { "time": 14903, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 11000177, "acknowledgement": 10000174 }, { "time": 14958, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": null, "tcpFlags": "A", "sequence": 10000174, "acknowledgement": 11000177 }, { "time": 25002, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:12", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.10", "protocol": 17, "sourcePort": 56276, "destinationPort": 53, "payload": "ID=40953 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" }, { "time": 25224, "source": "02:00:00:00:02:12", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.10", "destinationIp": "192.168.0.20", "protocol": 17, "sourcePort": 53, "destinationPort": 56276, "payload": "ID=40953 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" }, { "time": 25224, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "S", "sequence": 13000000, "acknowledgement": 0 }, { "time": 25446, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "SA", "sequence": 1000000, "acknowledgement": 13000001 }, { "time": 25446, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000001, "acknowledgement": 1000001 }, { "time": 25750, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK POP3 server ready", "tcpFlags": "P", "sequence": 1000001, "acknowledgement": 0 }, { "time": 25750, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000001, "acknowledgement": 1000022 }, { "time": 25805, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": "USER anna", "tcpFlags": "P", "sequence": 13000001, "acknowledgement": 0 }, { "time": 26027, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1000022, "acknowledgement": 13000010 }, { "time": 26082, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK enter password", "tcpFlags": "P", "sequence": 1000022, "acknowledgement": 0 }, { "time": 26082, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000010, "acknowledgement": 1000040 }, { "time": 26137, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": "PASS geheim", "tcpFlags": "P", "sequence": 13000010, "acknowledgement": 0 }, { "time": 26359, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1000040, "acknowledgement": 13000021 }, { "time": 26414, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK Mailbox locked and ready", "tcpFlags": "P", "sequence": 1000040, "acknowledgement": 0 }, { "time": 26415, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000021, "acknowledgement": 1000068 }, { "time": 26470, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": "STAT", "tcpFlags": "P", "sequence": 13000021, "acknowledgement": 0 }, { "time": 26691, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1000068, "acknowledgement": 13000025 }, { "time": 26746, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK 4 1054", "tcpFlags": "P", "sequence": 1000068, "acknowledgement": 0 }, { "time": 26746, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000025, "acknowledgement": 1000078 }, { "time": 26802, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": "LIST", "tcpFlags": "P", "sequence": 13000025, "acknowledgement": 0 }, { "time": 27023, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1000078, "acknowledgement": 13000029 }, { "time": 27078, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK 4 1054\n0 80\n1 89\n2 441\n3 444\n", "tcpFlags": "P", "sequence": 1000078, "acknowledgement": 0 }, { "time": 27078, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000029, "acknowledgement": 1000111 }, { "time": 27134, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": "RETR 0", "tcpFlags": "P", "sequence": 13000029, "acknowledgement": 0 }, { "time": 27355, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1000111, "acknowledgement": 13000035 }, { "time": 27410, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile", "tcpFlags": "P", "sequence": 1000111, "acknowledgement": 0 }, { "time": 27411, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000035, "acknowledgement": 1000233 }, { "time": 27466, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": "DELE 0", "tcpFlags": "P", "sequence": 13000035, "acknowledgement": 0 }, { "time": 27687, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1000233, "acknowledgement": 13000041 }, { "time": 27742, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK message marked for delete", "tcpFlags": "P", "sequence": 1000233, "acknowledgement": 0 }, { "time": 27743, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000041, "acknowledgement": 1000262 }, { "time": 27798, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": "RETR 1", "tcpFlags": "P", "sequence": 13000041, "acknowledgement": 0 }, { "time": 28019, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1000262, "acknowledgement": 13000047 }, { "time": 28075, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?", "tcpFlags": "P", "sequence": 1000262, "acknowledgement": 0 }, { "time": 28075, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000047, "acknowledgement": 1000414 }, { "time": 28130, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": "DELE 1", "tcpFlags": "P", "sequence": 13000047, "acknowledgement": 0 }, { "time": 28351, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1000414, "acknowledgement": 13000053 }, { "time": 28407, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK message marked for delete", "tcpFlags": "P", "sequence": 1000414, "acknowledgement": 0 }, { "time": 28407, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000053, "acknowledgement": 1000443 }, { "time": 28463, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": "RETR 2", "tcpFlags": "P", "sequence": 13000053, "acknowledgement": 0 }, { "time": 28684, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1000443, "acknowledgement": 13000059 }, { "time": 28739, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?", "tcpFlags": "P", "sequence": 1000443, "acknowledgement": 0 }, { "time": 28739, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000059, "acknowledgement": 1000925 }, { "time": 28794, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": "DELE 2", "tcpFlags": "P", "sequence": 13000059, "acknowledgement": 0 }, { "time": 29016, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1000925, "acknowledgement": 13000065 }, { "time": 29071, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK message marked for delete", "tcpFlags": "P", "sequence": 1000925, "acknowledgement": 0 }, { "time": 29071, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000065, "acknowledgement": 1000954 }, { "time": 29126, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": "RETR 3", "tcpFlags": "P", "sequence": 13000065, "acknowledgement": 0 }, { "time": 29348, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1000954, "acknowledgement": 13000071 }, { "time": 29403, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009jemand@nirgendwo.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?", "tcpFlags": "P", "sequence": 1000954, "acknowledgement": 0 }, { "time": 29403, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000071, "acknowledgement": 1001440 }, { "time": 29458, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": "DELE 3", "tcpFlags": "P", "sequence": 13000071, "acknowledgement": 0 }, { "time": 29679, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1001440, "acknowledgement": 13000077 }, { "time": 29735, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK message marked for delete", "tcpFlags": "P", "sequence": 1001440, "acknowledgement": 0 }, { "time": 29735, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000077, "acknowledgement": 1001469 }, { "time": 29790, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": "QUIT", "tcpFlags": "P", "sequence": 13000077, "acknowledgement": 0 }, { "time": 30012, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1001469, "acknowledgement": 13000081 }, { "time": 30067, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK", "tcpFlags": "P", "sequence": 1001469, "acknowledgement": 0 }, { "time": 30067, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000081, "acknowledgement": 1001472 }, { "time": 30123, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "F", "sequence": 13000081, "acknowledgement": 0 }, { "time": 30289, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "F", "sequence": 1001472, "acknowledgement": 0 }, { "time": 30289, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000082, "acknowledgement": 1001473 }, { "time": 30344, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1001473, "acknowledgement": 13000082 } ], "00000000-0000-0000-0000-000000000202": [ { "time": 638, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.20", "targetIp": "192.168.0.10" }, { "time": 640, "source": "02:00:00:00:02:12", "destination": "02:00:00:00:02:11", "arp": 2, "senderIp": "192.168.0.10", "targetIp": "192.168.0.20" }, { "time": 868, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:12", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.10", "protocol": 17, "sourcePort": 52531, "destinationPort": 53, "payload": "ID=43842 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" }, { "time": 873, "source": "02:00:00:00:02:12", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.10", "destinationIp": "192.168.0.20", "protocol": 17, "sourcePort": 53, "destinationPort": 52531, "payload": "ID=43842 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" }, { "time": 1106, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.20", "targetIp": "192.168.0.30" }, { "time": 3632, "source": "02:00:00:00:02:13", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.30", "targetIp": "192.168.0.10" }, { "time": 3632, "source": "02:00:00:00:02:12", "destination": "02:00:00:00:02:13", "arp": 2, "senderIp": "192.168.0.10", "targetIp": "192.168.0.30" }, { "time": 3853, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:12", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.10", "protocol": 17, "sourcePort": 62746, "destinationPort": 53, "payload": "ID=3243 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n" }, { "time": 3854, "source": "02:00:00:00:02:12", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.10", "destinationIp": "192.168.0.30", "protocol": 17, "sourcePort": 53, "destinationPort": 62746, "payload": "ID=3243 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n" }, { "time": 4076, "source": "02:00:00:00:02:13", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.30", "targetIp": "192.168.0.31" }, { "time": 6522, "source": "02:00:00:00:02:14", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.31", "targetIp": "192.168.0.10" }, { "time": 6522, "source": "02:00:00:00:02:12", "destination": "02:00:00:00:02:14", "arp": 2, "senderIp": "192.168.0.10", "targetIp": "192.168.0.31" }, { "time": 6743, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:12", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.10", "protocol": 17, "sourcePort": 58459, "destinationPort": 53, "payload": "ID=47846 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n" }, { "time": 6745, "source": "02:00:00:00:02:12", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.10", "destinationIp": "192.168.0.31", "protocol": 17, "sourcePort": 53, "destinationPort": 58459, "payload": "ID=47846 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n" }, { "time": 12111, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:12", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.10", "protocol": 17, "sourcePort": 57606, "destinationPort": 53, "payload": "ID=60054 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" }, { "time": 12112, "source": "02:00:00:00:02:12", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.10", "destinationIp": "192.168.0.20", "protocol": 17, "sourcePort": 53, "destinationPort": 57606, "payload": "ID=60054 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" }, { "time": 14571, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:12", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.10", "protocol": 17, "sourcePort": 53558, "destinationPort": 53, "payload": "ID=35053 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnirgendwo.de. MX IN\n" }, { "time": 14572, "source": "02:00:00:00:02:12", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.10", "destinationIp": "192.168.0.30", "protocol": 17, "sourcePort": 53, "destinationPort": 53558, "payload": "ID=35053 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" }, { "time": 25112, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:12", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.10", "protocol": 17, "sourcePort": 56276, "destinationPort": 53, "payload": "ID=40953 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" }, { "time": 25113, "source": "02:00:00:00:02:12", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.10", "destinationIp": "192.168.0.20", "protocol": 17, "sourcePort": 53, "destinationPort": 56276, "payload": "ID=40953 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" } ], "00000000-0000-0000-0000-000000000203": [ { "time": 638, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.20", "targetIp": "192.168.0.10" }, { "time": 1106, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.20", "targetIp": "192.168.0.30" }, { "time": 1106, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "arp": 2, "senderIp": "192.168.0.30", "targetIp": "192.168.0.20" }, { "time": 1330, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": null, "tcpFlags": "S", "sequence": 5000000, "acknowledgement": 0 }, { "time": 1331, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": null, "tcpFlags": "SA", "sequence": 2000000, "acknowledgement": 5000001 }, { "time": 1554, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 5000001, "acknowledgement": 2000001 }, { "time": 1623, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": "220 Willkommen bei filius.de", "tcpFlags": "P", "sequence": 2000001, "acknowledgement": 0 }, { "time": 1846, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 5000001, "acknowledgement": 2000029 }, { "time": 1901, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": "HELO 192.168.0.20", "tcpFlags": "P", "sequence": 5000001, "acknowledgement": 0 }, { "time": 1902, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": null, "tcpFlags": "A", "sequence": 2000029, "acknowledgement": 5000018 }, { "time": 1957, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": "250 Hello 192.168.0.20", "tcpFlags": "P", "sequence": 2000029, "acknowledgement": 0 }, { "time": 2180, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 5000018, "acknowledgement": 2000051 }, { "time": 2236, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": "MAIL FROM: ", "tcpFlags": "P", "sequence": 5000018, "acknowledgement": 0 }, { "time": 2236, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": null, "tcpFlags": "A", "sequence": 2000051, "acknowledgement": 5000045 }, { "time": 2292, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": "250 Sender OK", "tcpFlags": "P", "sequence": 2000051, "acknowledgement": 0 }, { "time": 2514, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 5000045, "acknowledgement": 2000064 }, { "time": 2570, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": "RCPT TO:", "tcpFlags": "P", "sequence": 5000045, "acknowledgement": 0 }, { "time": 2570, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": null, "tcpFlags": "A", "sequence": 2000064, "acknowledgement": 5000072 }, { "time": 2626, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": "250 Recipient OK", "tcpFlags": "P", "sequence": 2000064, "acknowledgement": 0 }, { "time": 2849, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 5000072, "acknowledgement": 2000080 }, { "time": 2904, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": "DATA", "tcpFlags": "P", "sequence": 5000072, "acknowledgement": 0 }, { "time": 2904, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": null, "tcpFlags": "A", "sequence": 2000080, "acknowledgement": 5000076 }, { "time": 2960, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": "354 End data with .", "tcpFlags": "P", "sequence": 2000080, "acknowledgement": 0 }, { "time": 3182, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 5000076, "acknowledgement": 2000115 }, { "time": 3237, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n", "tcpFlags": "P", "sequence": 5000076, "acknowledgement": 0 }, { "time": 3238, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": null, "tcpFlags": "A", "sequence": 2000115, "acknowledgement": 5000168 }, { "time": 3293, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": "250 Mail queued for delivery", "tcpFlags": "P", "sequence": 2000115, "acknowledgement": 0 }, { "time": 3515, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 5000168, "acknowledgement": 2000143 }, { "time": 3521, "source": "02:00:00:00:02:13", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.30", "targetIp": "192.168.0.10" }, { "time": 3571, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": "QUIT", "tcpFlags": "P", "sequence": 5000168, "acknowledgement": 0 }, { "time": 3576, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": null, "tcpFlags": "A", "sequence": 2000143, "acknowledgement": 5000172 }, { "time": 3632, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": "221 Server beendet Verbindung.", "tcpFlags": "P", "sequence": 2000143, "acknowledgement": 0 }, { "time": 3742, "source": "02:00:00:00:02:12", "destination": "02:00:00:00:02:13", "arp": 2, "senderIp": "192.168.0.10", "targetIp": "192.168.0.30" }, { "time": 3743, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:12", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.10", "protocol": 17, "sourcePort": 62746, "destinationPort": 53, "payload": "ID=3243 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n" }, { "time": 3853, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 5000172, "acknowledgement": 2000173 }, { "time": 3854, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": null, "tcpFlags": "F", "sequence": 2000173, "acknowledgement": 0 }, { "time": 3909, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": null, "tcpFlags": "F", "sequence": 5000172, "acknowledgement": 0 }, { "time": 3909, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 62333, "payload": null, "tcpFlags": "A", "sequence": 2000174, "acknowledgement": 5000173 }, { "time": 3965, "source": "02:00:00:00:02:12", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.10", "destinationIp": "192.168.0.30", "protocol": 17, "sourcePort": 53, "destinationPort": 62746, "payload": "ID=3243 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n" }, { "time": 3966, "source": "02:00:00:00:02:13", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.30", "targetIp": "192.168.0.31" }, { "time": 4075, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 62333, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 5000173, "acknowledgement": 2000174 }, { "time": 4187, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "arp": 2, "senderIp": "192.168.0.31", "targetIp": "192.168.0.30" }, { "time": 4187, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": null, "tcpFlags": "S", "sequence": 7000000, "acknowledgement": 0 }, { "time": 4409, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": null, "tcpFlags": "SA", "sequence": 4000000, "acknowledgement": 7000001 }, { "time": 4409, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 7000001, "acknowledgement": 4000001 }, { "time": 4636, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": "220 Willkommen bei andere.de", "tcpFlags": "P", "sequence": 4000001, "acknowledgement": 0 }, { "time": 4636, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 7000001, "acknowledgement": 4000029 }, { "time": 4692, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": "HELO 192.168.0.30", "tcpFlags": "P", "sequence": 7000001, "acknowledgement": 0 }, { "time": 4913, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": null, "tcpFlags": "A", "sequence": 4000029, "acknowledgement": 7000018 }, { "time": 4968, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": "250 Hello 192.168.0.30", "tcpFlags": "P", "sequence": 4000029, "acknowledgement": 0 }, { "time": 4969, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 7000018, "acknowledgement": 4000051 }, { "time": 5024, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": "MAIL FROM: ", "tcpFlags": "P", "sequence": 7000018, "acknowledgement": 0 }, { "time": 5245, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": null, "tcpFlags": "A", "sequence": 4000051, "acknowledgement": 7000045 }, { "time": 5301, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": "250 Sender OK", "tcpFlags": "P", "sequence": 4000051, "acknowledgement": 0 }, { "time": 5301, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 7000045, "acknowledgement": 4000064 }, { "time": 5356, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": "RCPT TO:", "tcpFlags": "P", "sequence": 7000045, "acknowledgement": 0 }, { "time": 5578, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": null, "tcpFlags": "A", "sequence": 4000064, "acknowledgement": 7000072 }, { "time": 5633, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": "250 Recipient OK", "tcpFlags": "P", "sequence": 4000064, "acknowledgement": 0 }, { "time": 5634, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 7000072, "acknowledgement": 4000080 }, { "time": 5689, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": "DATA", "tcpFlags": "P", "sequence": 7000072, "acknowledgement": 0 }, { "time": 5910, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": null, "tcpFlags": "A", "sequence": 4000080, "acknowledgement": 7000076 }, { "time": 5966, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": "354 End data with .", "tcpFlags": "P", "sequence": 4000080, "acknowledgement": 0 }, { "time": 5966, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 7000076, "acknowledgement": 4000115 }, { "time": 6021, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n", "tcpFlags": "P", "sequence": 7000076, "acknowledgement": 0 }, { "time": 6243, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": null, "tcpFlags": "A", "sequence": 4000115, "acknowledgement": 7000168 }, { "time": 6298, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": "250 Mail queued for delivery", "tcpFlags": "P", "sequence": 4000115, "acknowledgement": 0 }, { "time": 6299, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 7000168, "acknowledgement": 4000143 }, { "time": 6354, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": "QUIT", "tcpFlags": "P", "sequence": 7000168, "acknowledgement": 0 }, { "time": 6522, "source": "02:00:00:00:02:14", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.31", "targetIp": "192.168.0.10" }, { "time": 6577, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": null, "tcpFlags": "A", "sequence": 4000143, "acknowledgement": 7000172 }, { "time": 6966, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": "221 Server beendet Verbindung.", "tcpFlags": "P", "sequence": 4000143, "acknowledgement": 0 }, { "time": 6967, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 7000172, "acknowledgement": 4000173 }, { "time": 7022, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": null, "tcpFlags": "S", "sequence": 9000000, "acknowledgement": 0 }, { "time": 7022, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": null, "tcpFlags": "F", "sequence": 7000172, "acknowledgement": 0 }, { "time": 7077, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": null, "tcpFlags": "SA", "sequence": 6000000, "acknowledgement": 9000001 }, { "time": 7188, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": null, "tcpFlags": "F", "sequence": 4000173, "acknowledgement": 0 }, { "time": 7188, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 7000173, "acknowledgement": 4000174 }, { "time": 7243, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": null, "tcpFlags": "A", "sequence": 4000174, "acknowledgement": 7000173 }, { "time": 7299, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 9000001, "acknowledgement": 6000001 }, { "time": 7350, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": "220 Willkommen bei filius.de", "tcpFlags": "P", "sequence": 6000001, "acknowledgement": 0 }, { "time": 7572, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 9000001, "acknowledgement": 6000029 }, { "time": 7627, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": "HELO 192.168.0.31", "tcpFlags": "P", "sequence": 9000001, "acknowledgement": 0 }, { "time": 7627, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": null, "tcpFlags": "A", "sequence": 6000029, "acknowledgement": 9000018 }, { "time": 7682, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": "250 Hello 192.168.0.31", "tcpFlags": "P", "sequence": 6000029, "acknowledgement": 0 }, { "time": 7904, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 9000018, "acknowledgement": 6000051 }, { "time": 7959, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": "MAIL FROM: <>", "tcpFlags": "P", "sequence": 9000018, "acknowledgement": 0 }, { "time": 7959, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": null, "tcpFlags": "A", "sequence": 6000051, "acknowledgement": 9000031 }, { "time": 8014, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": "250 Sender OK", "tcpFlags": "P", "sequence": 6000051, "acknowledgement": 0 }, { "time": 8236, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 9000031, "acknowledgement": 6000064 }, { "time": 8291, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": "RCPT TO:", "tcpFlags": "P", "sequence": 9000031, "acknowledgement": 0 }, { "time": 8291, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": null, "tcpFlags": "A", "sequence": 6000064, "acknowledgement": 9000055 }, { "time": 8347, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": "250 Recipient OK", "tcpFlags": "P", "sequence": 6000064, "acknowledgement": 0 }, { "time": 8568, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 9000055, "acknowledgement": 6000080 }, { "time": 8623, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": "DATA", "tcpFlags": "P", "sequence": 9000055, "acknowledgement": 0 }, { "time": 8623, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": null, "tcpFlags": "A", "sequence": 6000080, "acknowledgement": 9000059 }, { "time": 8679, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": "354 End data with .", "tcpFlags": "P", "sequence": 6000080, "acknowledgement": 0 }, { "time": 8900, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 9000059, "acknowledgement": 6000115 }, { "time": 8956, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": "From: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n", "tcpFlags": "P", "sequence": 9000059, "acknowledgement": 0 }, { "time": 8956, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": null, "tcpFlags": "A", "sequence": 6000115, "acknowledgement": 9000525 }, { "time": 9011, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": "250 Mail queued for delivery", "tcpFlags": "P", "sequence": 6000115, "acknowledgement": 0 }, { "time": 9232, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 9000525, "acknowledgement": 6000143 }, { "time": 9288, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": "QUIT", "tcpFlags": "P", "sequence": 9000525, "acknowledgement": 0 }, { "time": 9288, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": null, "tcpFlags": "A", "sequence": 6000143, "acknowledgement": 9000529 }, { "time": 9343, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": "221 Server beendet Verbindung.", "tcpFlags": "P", "sequence": 6000143, "acknowledgement": 0 }, { "time": 9565, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 9000529, "acknowledgement": 6000173 }, { "time": 9565, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": null, "tcpFlags": "F", "sequence": 6000173, "acknowledgement": 0 }, { "time": 9620, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": null, "tcpFlags": "F", "sequence": 9000529, "acknowledgement": 0 }, { "time": 9620, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": null, "tcpFlags": "A", "sequence": 6000174, "acknowledgement": 9000530 }, { "time": 9786, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 9000530, "acknowledgement": 6000174 }, { "time": 12334, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": null, "tcpFlags": "S", "sequence": 11000000, "acknowledgement": 0 }, { "time": 12335, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": null, "tcpFlags": "SA", "sequence": 10000000, "acknowledgement": 11000001 }, { "time": 12556, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 11000001, "acknowledgement": 10000001 }, { "time": 12575, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": "220 Willkommen bei filius.de", "tcpFlags": "P", "sequence": 10000001, "acknowledgement": 0 }, { "time": 12797, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 11000001, "acknowledgement": 10000029 }, { "time": 12852, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": "HELO 192.168.0.20", "tcpFlags": "P", "sequence": 11000001, "acknowledgement": 0 }, { "time": 12853, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": null, "tcpFlags": "A", "sequence": 10000029, "acknowledgement": 11000018 }, { "time": 12908, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": "250 Hello 192.168.0.20", "tcpFlags": "P", "sequence": 10000029, "acknowledgement": 0 }, { "time": 13130, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 11000018, "acknowledgement": 10000051 }, { "time": 13185, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": "MAIL FROM: ", "tcpFlags": "P", "sequence": 11000018, "acknowledgement": 0 }, { "time": 13185, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": null, "tcpFlags": "A", "sequence": 10000051, "acknowledgement": 11000045 }, { "time": 13241, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": "250 Sender OK", "tcpFlags": "P", "sequence": 10000051, "acknowledgement": 0 }, { "time": 13462, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 11000045, "acknowledgement": 10000064 }, { "time": 13517, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": "RCPT TO:", "tcpFlags": "P", "sequence": 11000045, "acknowledgement": 0 }, { "time": 13517, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": null, "tcpFlags": "A", "sequence": 10000064, "acknowledgement": 11000074 }, { "time": 13573, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": "250 Recipient OK", "tcpFlags": "P", "sequence": 10000064, "acknowledgement": 0 }, { "time": 13794, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 11000074, "acknowledgement": 10000080 }, { "time": 13849, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": "DATA", "tcpFlags": "P", "sequence": 11000074, "acknowledgement": 0 }, { "time": 13850, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": null, "tcpFlags": "A", "sequence": 10000080, "acknowledgement": 11000078 }, { "time": 13905, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": "354 End data with .", "tcpFlags": "P", "sequence": 10000080, "acknowledgement": 0 }, { "time": 14126, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 11000078, "acknowledgement": 10000115 }, { "time": 14181, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n", "tcpFlags": "P", "sequence": 11000078, "acknowledgement": 0 }, { "time": 14182, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": null, "tcpFlags": "A", "sequence": 10000115, "acknowledgement": 11000172 }, { "time": 14237, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": "250 Mail queued for delivery", "tcpFlags": "P", "sequence": 10000115, "acknowledgement": 0 }, { "time": 14458, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 11000172, "acknowledgement": 10000143 }, { "time": 14460, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:12", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.10", "protocol": 17, "sourcePort": 53558, "destinationPort": 53, "payload": "ID=35053 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnirgendwo.de. MX IN\n" }, { "time": 14514, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": "QUIT", "tcpFlags": "P", "sequence": 11000172, "acknowledgement": 0 }, { "time": 14515, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": null, "tcpFlags": "A", "sequence": 10000143, "acknowledgement": 11000176 }, { "time": 14571, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": "221 Server beendet Verbindung.", "tcpFlags": "P", "sequence": 10000143, "acknowledgement": 0 }, { "time": 14682, "source": "02:00:00:00:02:12", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.10", "destinationIp": "192.168.0.30", "protocol": 17, "sourcePort": 53, "destinationPort": 53558, "payload": "ID=35053 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" }, { "time": 14792, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 11000176, "acknowledgement": 10000173 }, { "time": 14792, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": null, "tcpFlags": "F", "sequence": 10000173, "acknowledgement": 0 }, { "time": 14847, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": null, "tcpFlags": "F", "sequence": 11000176, "acknowledgement": 0 }, { "time": 14847, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 25, "destinationPort": 65366, "payload": null, "tcpFlags": "A", "sequence": 10000174, "acknowledgement": 11000177 }, { "time": 15013, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 65366, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 11000177, "acknowledgement": 10000174 }, { "time": 25335, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "S", "sequence": 13000000, "acknowledgement": 0 }, { "time": 25335, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "SA", "sequence": 1000000, "acknowledgement": 13000001 }, { "time": 25556, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000001, "acknowledgement": 1000001 }, { "time": 25639, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK POP3 server ready", "tcpFlags": "P", "sequence": 1000001, "acknowledgement": 0 }, { "time": 25860, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000001, "acknowledgement": 1000022 }, { "time": 25916, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": "USER anna", "tcpFlags": "P", "sequence": 13000001, "acknowledgement": 0 }, { "time": 25916, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1000022, "acknowledgement": 13000010 }, { "time": 25971, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK enter password", "tcpFlags": "P", "sequence": 1000022, "acknowledgement": 0 }, { "time": 26193, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000010, "acknowledgement": 1000040 }, { "time": 26248, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": "PASS geheim", "tcpFlags": "P", "sequence": 13000010, "acknowledgement": 0 }, { "time": 26248, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1000040, "acknowledgement": 13000021 }, { "time": 26304, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK Mailbox locked and ready", "tcpFlags": "P", "sequence": 1000040, "acknowledgement": 0 }, { "time": 26525, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000021, "acknowledgement": 1000068 }, { "time": 26580, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": "STAT", "tcpFlags": "P", "sequence": 13000021, "acknowledgement": 0 }, { "time": 26581, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1000068, "acknowledgement": 13000025 }, { "time": 26636, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK 4 1054", "tcpFlags": "P", "sequence": 1000068, "acknowledgement": 0 }, { "time": 26857, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000025, "acknowledgement": 1000078 }, { "time": 26912, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": "LIST", "tcpFlags": "P", "sequence": 13000025, "acknowledgement": 0 }, { "time": 26912, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1000078, "acknowledgement": 13000029 }, { "time": 26968, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK 4 1054\n0 80\n1 89\n2 441\n3 444\n", "tcpFlags": "P", "sequence": 1000078, "acknowledgement": 0 }, { "time": 27189, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000029, "acknowledgement": 1000111 }, { "time": 27244, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": "RETR 0", "tcpFlags": "P", "sequence": 13000029, "acknowledgement": 0 }, { "time": 27244, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1000111, "acknowledgement": 13000035 }, { "time": 27300, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile", "tcpFlags": "P", "sequence": 1000111, "acknowledgement": 0 }, { "time": 27521, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000035, "acknowledgement": 1000233 }, { "time": 27576, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": "DELE 0", "tcpFlags": "P", "sequence": 13000035, "acknowledgement": 0 }, { "time": 27577, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1000233, "acknowledgement": 13000041 }, { "time": 27632, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK message marked for delete", "tcpFlags": "P", "sequence": 1000233, "acknowledgement": 0 }, { "time": 27853, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000041, "acknowledgement": 1000262 }, { "time": 27908, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": "RETR 1", "tcpFlags": "P", "sequence": 13000041, "acknowledgement": 0 }, { "time": 27909, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1000262, "acknowledgement": 13000047 }, { "time": 27964, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?", "tcpFlags": "P", "sequence": 1000262, "acknowledgement": 0 }, { "time": 28185, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000047, "acknowledgement": 1000414 }, { "time": 28241, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": "DELE 1", "tcpFlags": "P", "sequence": 13000047, "acknowledgement": 0 }, { "time": 28241, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1000414, "acknowledgement": 13000053 }, { "time": 28296, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK message marked for delete", "tcpFlags": "P", "sequence": 1000414, "acknowledgement": 0 }, { "time": 28518, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000053, "acknowledgement": 1000443 }, { "time": 28573, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": "RETR 2", "tcpFlags": "P", "sequence": 13000053, "acknowledgement": 0 }, { "time": 28573, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1000443, "acknowledgement": 13000059 }, { "time": 28628, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?", "tcpFlags": "P", "sequence": 1000443, "acknowledgement": 0 }, { "time": 28850, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000059, "acknowledgement": 1000925 }, { "time": 28905, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": "DELE 2", "tcpFlags": "P", "sequence": 13000059, "acknowledgement": 0 }, { "time": 28905, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1000925, "acknowledgement": 13000065 }, { "time": 28960, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK message marked for delete", "tcpFlags": "P", "sequence": 1000925, "acknowledgement": 0 }, { "time": 29182, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000065, "acknowledgement": 1000954 }, { "time": 29237, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": "RETR 3", "tcpFlags": "P", "sequence": 13000065, "acknowledgement": 0 }, { "time": 29237, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1000954, "acknowledgement": 13000071 }, { "time": 29292, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009jemand@nirgendwo.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?", "tcpFlags": "P", "sequence": 1000954, "acknowledgement": 0 }, { "time": 29513, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000071, "acknowledgement": 1001440 }, { "time": 29569, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": "DELE 3", "tcpFlags": "P", "sequence": 13000071, "acknowledgement": 0 }, { "time": 29569, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1001440, "acknowledgement": 13000077 }, { "time": 29624, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK message marked for delete", "tcpFlags": "P", "sequence": 1001440, "acknowledgement": 0 }, { "time": 29846, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000077, "acknowledgement": 1001469 }, { "time": 29901, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": "QUIT", "tcpFlags": "P", "sequence": 13000077, "acknowledgement": 0 }, { "time": 29901, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1001469, "acknowledgement": 13000081 }, { "time": 29957, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": "+OK", "tcpFlags": "P", "sequence": 1001469, "acknowledgement": 0 }, { "time": 30178, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000081, "acknowledgement": 1001472 }, { "time": 30178, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "F", "sequence": 1001472, "acknowledgement": 0 }, { "time": 30233, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "F", "sequence": 13000081, "acknowledgement": 0 }, { "time": 30233, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 110, "destinationPort": 56326, "payload": null, "tcpFlags": "A", "sequence": 1001473, "acknowledgement": 13000082 }, { "time": 30399, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 56326, "destinationPort": 110, "payload": null, "tcpFlags": "A", "sequence": 13000082, "acknowledgement": 1001473 } ], "00000000-0000-0000-0000-000000000204": [ { "time": 638, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.20", "targetIp": "192.168.0.10" }, { "time": 1106, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.20", "targetIp": "192.168.0.30" }, { "time": 3632, "source": "02:00:00:00:02:13", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.30", "targetIp": "192.168.0.10" }, { "time": 4076, "source": "02:00:00:00:02:13", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.30", "targetIp": "192.168.0.31" }, { "time": 4076, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "arp": 2, "senderIp": "192.168.0.31", "targetIp": "192.168.0.30" }, { "time": 4298, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": null, "tcpFlags": "S", "sequence": 7000000, "acknowledgement": 0 }, { "time": 4298, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": null, "tcpFlags": "SA", "sequence": 4000000, "acknowledgement": 7000001 }, { "time": 4520, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 7000001, "acknowledgement": 4000001 }, { "time": 4525, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": "220 Willkommen bei andere.de", "tcpFlags": "P", "sequence": 4000001, "acknowledgement": 0 }, { "time": 4747, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 7000001, "acknowledgement": 4000029 }, { "time": 4802, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": "HELO 192.168.0.30", "tcpFlags": "P", "sequence": 7000001, "acknowledgement": 0 }, { "time": 4802, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": null, "tcpFlags": "A", "sequence": 4000029, "acknowledgement": 7000018 }, { "time": 4858, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": "250 Hello 192.168.0.30", "tcpFlags": "P", "sequence": 4000029, "acknowledgement": 0 }, { "time": 5079, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 7000018, "acknowledgement": 4000051 }, { "time": 5134, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": "MAIL FROM: ", "tcpFlags": "P", "sequence": 7000018, "acknowledgement": 0 }, { "time": 5135, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": null, "tcpFlags": "A", "sequence": 4000051, "acknowledgement": 7000045 }, { "time": 5190, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": "250 Sender OK", "tcpFlags": "P", "sequence": 4000051, "acknowledgement": 0 }, { "time": 5412, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 7000045, "acknowledgement": 4000064 }, { "time": 5467, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": "RCPT TO:", "tcpFlags": "P", "sequence": 7000045, "acknowledgement": 0 }, { "time": 5467, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": null, "tcpFlags": "A", "sequence": 4000064, "acknowledgement": 7000072 }, { "time": 5523, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": "250 Recipient OK", "tcpFlags": "P", "sequence": 4000064, "acknowledgement": 0 }, { "time": 5744, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 7000072, "acknowledgement": 4000080 }, { "time": 5799, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": "DATA", "tcpFlags": "P", "sequence": 7000072, "acknowledgement": 0 }, { "time": 5800, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": null, "tcpFlags": "A", "sequence": 4000080, "acknowledgement": 7000076 }, { "time": 5855, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": "354 End data with .", "tcpFlags": "P", "sequence": 4000080, "acknowledgement": 0 }, { "time": 6077, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 7000076, "acknowledgement": 4000115 }, { "time": 6132, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n", "tcpFlags": "P", "sequence": 7000076, "acknowledgement": 0 }, { "time": 6133, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": null, "tcpFlags": "A", "sequence": 4000115, "acknowledgement": 7000168 }, { "time": 6188, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": "250 Mail queued for delivery", "tcpFlags": "P", "sequence": 4000115, "acknowledgement": 0 }, { "time": 6409, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 7000168, "acknowledgement": 4000143 }, { "time": 6411, "source": "02:00:00:00:02:14", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.31", "targetIp": "192.168.0.10" }, { "time": 6464, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": "QUIT", "tcpFlags": "P", "sequence": 7000168, "acknowledgement": 0 }, { "time": 6467, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": null, "tcpFlags": "A", "sequence": 4000143, "acknowledgement": 7000172 }, { "time": 6633, "source": "02:00:00:00:02:12", "destination": "02:00:00:00:02:14", "arp": 2, "senderIp": "192.168.0.10", "targetIp": "192.168.0.31" }, { "time": 6633, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:12", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.10", "protocol": 17, "sourcePort": 58459, "destinationPort": 53, "payload": "ID=47846 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n" }, { "time": 6855, "source": "02:00:00:00:02:12", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.10", "destinationIp": "192.168.0.31", "protocol": 17, "sourcePort": 53, "destinationPort": 58459, "payload": "ID=47846 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n" }, { "time": 6856, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": "221 Server beendet Verbindung.", "tcpFlags": "P", "sequence": 4000143, "acknowledgement": 0 }, { "time": 6911, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": null, "tcpFlags": "S", "sequence": 9000000, "acknowledgement": 0 }, { "time": 7077, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 7000172, "acknowledgement": 4000173 }, { "time": 7078, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": null, "tcpFlags": "F", "sequence": 4000173, "acknowledgement": 0 }, { "time": 7133, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": null, "tcpFlags": "F", "sequence": 7000172, "acknowledgement": 0 }, { "time": 7133, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 25, "destinationPort": 64673, "payload": null, "tcpFlags": "A", "sequence": 4000174, "acknowledgement": 7000173 }, { "time": 7188, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": null, "tcpFlags": "SA", "sequence": 6000000, "acknowledgement": 9000001 }, { "time": 7188, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 9000001, "acknowledgement": 6000001 }, { "time": 7299, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 64673, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 7000173, "acknowledgement": 4000174 }, { "time": 7461, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": "220 Willkommen bei filius.de", "tcpFlags": "P", "sequence": 6000001, "acknowledgement": 0 }, { "time": 7461, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 9000001, "acknowledgement": 6000029 }, { "time": 7516, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": "HELO 192.168.0.31", "tcpFlags": "P", "sequence": 9000001, "acknowledgement": 0 }, { "time": 7738, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": null, "tcpFlags": "A", "sequence": 6000029, "acknowledgement": 9000018 }, { "time": 7793, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": "250 Hello 192.168.0.31", "tcpFlags": "P", "sequence": 6000029, "acknowledgement": 0 }, { "time": 7793, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 9000018, "acknowledgement": 6000051 }, { "time": 7848, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": "MAIL FROM: <>", "tcpFlags": "P", "sequence": 9000018, "acknowledgement": 0 }, { "time": 8070, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": null, "tcpFlags": "A", "sequence": 6000051, "acknowledgement": 9000031 }, { "time": 8125, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": "250 Sender OK", "tcpFlags": "P", "sequence": 6000051, "acknowledgement": 0 }, { "time": 8125, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 9000031, "acknowledgement": 6000064 }, { "time": 8180, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": "RCPT TO:", "tcpFlags": "P", "sequence": 9000031, "acknowledgement": 0 }, { "time": 8402, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": null, "tcpFlags": "A", "sequence": 6000064, "acknowledgement": 9000055 }, { "time": 8457, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": "250 Recipient OK", "tcpFlags": "P", "sequence": 6000064, "acknowledgement": 0 }, { "time": 8457, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 9000055, "acknowledgement": 6000080 }, { "time": 8513, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": "DATA", "tcpFlags": "P", "sequence": 9000055, "acknowledgement": 0 }, { "time": 8734, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": null, "tcpFlags": "A", "sequence": 6000080, "acknowledgement": 9000059 }, { "time": 8789, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": "354 End data with .", "tcpFlags": "P", "sequence": 6000080, "acknowledgement": 0 }, { "time": 8790, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 9000059, "acknowledgement": 6000115 }, { "time": 8845, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": "From: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n", "tcpFlags": "P", "sequence": 9000059, "acknowledgement": 0 }, { "time": 9066, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": null, "tcpFlags": "A", "sequence": 6000115, "acknowledgement": 9000525 }, { "time": 9122, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": "250 Mail queued for delivery", "tcpFlags": "P", "sequence": 6000115, "acknowledgement": 0 }, { "time": 9122, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 9000525, "acknowledgement": 6000143 }, { "time": 9177, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": "QUIT", "tcpFlags": "P", "sequence": 9000525, "acknowledgement": 0 }, { "time": 9399, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": null, "tcpFlags": "A", "sequence": 6000143, "acknowledgement": 9000529 }, { "time": 9454, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": "221 Server beendet Verbindung.", "tcpFlags": "P", "sequence": 6000143, "acknowledgement": 0 }, { "time": 9454, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 9000529, "acknowledgement": 6000173 }, { "time": 9509, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": null, "tcpFlags": "F", "sequence": 9000529, "acknowledgement": 0 }, { "time": 9676, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": null, "tcpFlags": "F", "sequence": 6000173, "acknowledgement": 0 }, { "time": 9676, "source": "02:00:00:00:02:14", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.31", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 50936, "destinationPort": 25, "payload": null, "tcpFlags": "A", "sequence": 9000530, "acknowledgement": 6000174 }, { "time": 9731, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:14", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.31", "protocol": 6, "sourcePort": 25, "destinationPort": 50936, "payload": null, "tcpFlags": "A", "sequence": 6000174, "acknowledgement": 9000530 } ] }, "rows": { "00000000-0000-0000-0000-000000000201": [ [ "1", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x806" ], [ "2", "192.168.0.10", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" ], [ "3", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "3", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "3", "192.168.0.20:52531", "192.168.0.10:53", "UDP", "Transport", "" ], [ "3", "192.168.0.20:52531", "192.168.0.10:53", "DNS", "Anwendung", "ID=43842 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" ], [ "4", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "4", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "4", "192.168.0.10:53", "192.168.0.20:52531", "UDP", "Transport", "" ], [ "4", "192.168.0.10:53", "192.168.0.20:52531", "DNS", "Anwendung", "ID=43842 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" ], [ "5", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "5", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ], [ "6", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x806" ], [ "6", "192.168.0.30", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" ], [ "7", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "7", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SYN, SEQ: 5.000.000" ], [ "8", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "8", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SYN, SEQ: 2.000.000, ACK: 5.000.001" ], [ "9", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "9", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "9", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.001, ACK: 2.000.001" ], [ "10", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "10", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "10", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.001" ], [ "10", "192.168.0.30:25", "192.168.0.20:62333", "SMTP", "Anwendung", "220 Willkommen bei filius.de" ], [ "11", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "11", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.001, ACK: 2.000.029" ], [ "12", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "12", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "12", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.001" ], [ "12", "192.168.0.20:62333", "192.168.0.30:25", "SMTP", "Anwendung", "HELO 192.168.0.20" ], [ "13", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "13", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "13", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.029, ACK: 5.000.018" ], [ "14", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "14", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "14", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.029" ], [ "14", "192.168.0.30:25", "192.168.0.20:62333", "SMTP", "Anwendung", "250 Hello 192.168.0.20" ], [ "15", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "15", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "15", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.018, ACK: 2.000.051" ], [ "16", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "16", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "16", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.018" ], [ "16", "192.168.0.20:62333", "192.168.0.30:25", "SMTP", "Anwendung", "MAIL FROM: " ], [ "17", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "17", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "17", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.051, ACK: 5.000.045" ], [ "18", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "18", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "18", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.051" ], [ "18", "192.168.0.30:25", "192.168.0.20:62333", "SMTP", "Anwendung", "250 Sender OK" ], [ "19", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "19", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "19", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.045, ACK: 2.000.064" ], [ "20", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "20", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "20", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.045" ], [ "20", "192.168.0.20:62333", "192.168.0.30:25", "SMTP", "Anwendung", "RCPT TO:" ], [ "21", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "21", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "21", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.064, ACK: 5.000.072" ], [ "22", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "22", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "22", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.064" ], [ "22", "192.168.0.30:25", "192.168.0.20:62333", "SMTP", "Anwendung", "250 Recipient OK" ], [ "23", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "23", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "23", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.072, ACK: 2.000.080" ], [ "24", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "24", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "24", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.072" ], [ "24", "192.168.0.20:62333", "192.168.0.30:25", "SMTP", "Anwendung", "DATA" ], [ "25", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "25", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "25", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.080, ACK: 5.000.076" ], [ "26", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "26", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "26", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.080" ], [ "26", "192.168.0.30:25", "192.168.0.20:62333", "SMTP", "Anwendung", "354 End data with ." ], [ "27", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "27", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "27", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.076, ACK: 2.000.115" ], [ "28", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "28", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "28", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.076" ], [ "28", "192.168.0.20:62333", "192.168.0.30:25", "SMTP", "Anwendung", "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" ], [ "29", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "29", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "29", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.115, ACK: 5.000.168" ], [ "30", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "30", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "30", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.115" ], [ "30", "192.168.0.30:25", "192.168.0.20:62333", "SMTP", "Anwendung", "250 Mail queued for delivery" ], [ "31", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "31", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "31", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.168, ACK: 2.000.143" ], [ "32", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "32", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "32", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.168" ], [ "32", "192.168.0.20:62333", "192.168.0.30:25", "SMTP", "Anwendung", "QUIT" ], [ "33", "02:00:00:00:02:13", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "33", "192.168.0.30", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "34", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "34", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "34", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.143, ACK: 5.000.172" ], [ "35", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "35", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "35", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.143" ], [ "35", "192.168.0.30:25", "192.168.0.20:62333", "SMTP", "Anwendung", "221 Server beendet Verbindung." ], [ "36", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "36", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "36", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.172, ACK: 2.000.173" ], [ "37", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "37", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "37", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "FIN, SEQ: 5.000.172" ], [ "38", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "38", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "38", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "FIN, SEQ: 2.000.173" ], [ "39", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "39", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "39", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.173, ACK: 2.000.174" ], [ "40", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "40", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "40", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.174, ACK: 5.000.173" ], [ "41", "02:00:00:00:02:13", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "41", "192.168.0.30", "192.168.0.31", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" ], [ "42", "02:00:00:00:02:14", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "42", "192.168.0.31", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "43", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "43", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "43", "192.168.0.20:57606", "192.168.0.10:53", "UDP", "Transport", "" ], [ "43", "192.168.0.20:57606", "192.168.0.10:53", "DNS", "Anwendung", "ID=60054 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" ], [ "44", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "44", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "44", "192.168.0.10:53", "192.168.0.20:57606", "UDP", "Transport", "" ], [ "44", "192.168.0.10:53", "192.168.0.20:57606", "DNS", "Anwendung", "ID=60054 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" ], [ "45", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "45", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "45", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SYN, SEQ: 11.000.000" ], [ "46", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "46", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "46", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SYN, SEQ: 10.000.000, ACK: 11.000.001" ], [ "47", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "47", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "47", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.001, ACK: 10.000.001" ], [ "48", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "48", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "48", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.001" ], [ "48", "192.168.0.30:25", "192.168.0.20:65366", "SMTP", "Anwendung", "220 Willkommen bei filius.de" ], [ "49", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "49", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "49", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.001, ACK: 10.000.029" ], [ "50", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "50", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "50", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.001" ], [ "50", "192.168.0.20:65366", "192.168.0.30:25", "SMTP", "Anwendung", "HELO 192.168.0.20" ], [ "51", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "51", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "51", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.029, ACK: 11.000.018" ], [ "52", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "52", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "52", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.029" ], [ "52", "192.168.0.30:25", "192.168.0.20:65366", "SMTP", "Anwendung", "250 Hello 192.168.0.20" ], [ "53", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "53", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "53", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.018, ACK: 10.000.051" ], [ "54", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "54", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "54", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.018" ], [ "54", "192.168.0.20:65366", "192.168.0.30:25", "SMTP", "Anwendung", "MAIL FROM: " ], [ "55", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "55", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "55", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.051, ACK: 11.000.045" ], [ "56", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "56", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "56", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.051" ], [ "56", "192.168.0.30:25", "192.168.0.20:65366", "SMTP", "Anwendung", "250 Sender OK" ], [ "57", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "57", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "57", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.045, ACK: 10.000.064" ], [ "58", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "58", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "58", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.045" ], [ "58", "192.168.0.20:65366", "192.168.0.30:25", "SMTP", "Anwendung", "RCPT TO:" ], [ "59", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "59", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "59", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.064, ACK: 11.000.074" ], [ "60", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "60", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "60", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.064" ], [ "60", "192.168.0.30:25", "192.168.0.20:65366", "SMTP", "Anwendung", "250 Recipient OK" ], [ "61", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "61", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "61", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.074, ACK: 10.000.080" ], [ "62", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "62", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "62", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.074" ], [ "62", "192.168.0.20:65366", "192.168.0.30:25", "SMTP", "Anwendung", "DATA" ], [ "63", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "63", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "63", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.080, ACK: 11.000.078" ], [ "64", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "64", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "64", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.080" ], [ "64", "192.168.0.30:25", "192.168.0.20:65366", "SMTP", "Anwendung", "354 End data with ." ], [ "65", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "65", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "65", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.078, ACK: 10.000.115" ], [ "66", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "66", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "66", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.078" ], [ "66", "192.168.0.20:65366", "192.168.0.30:25", "SMTP", "Anwendung", "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" ], [ "67", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "67", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "67", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.115, ACK: 11.000.172" ], [ "68", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "68", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "68", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.115" ], [ "68", "192.168.0.30:25", "192.168.0.20:65366", "SMTP", "Anwendung", "250 Mail queued for delivery" ], [ "69", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "69", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "69", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.172, ACK: 10.000.143" ], [ "70", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "70", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "70", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.172" ], [ "70", "192.168.0.20:65366", "192.168.0.30:25", "SMTP", "Anwendung", "QUIT" ], [ "71", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "71", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "71", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.143, ACK: 11.000.176" ], [ "72", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "72", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "72", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.143" ], [ "72", "192.168.0.30:25", "192.168.0.20:65366", "SMTP", "Anwendung", "221 Server beendet Verbindung." ], [ "73", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "73", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "73", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.176, ACK: 10.000.173" ], [ "74", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "74", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "74", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "FIN, SEQ: 11.000.176" ], [ "75", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "75", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "75", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "FIN, SEQ: 10.000.173" ], [ "76", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "76", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "76", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.177, ACK: 10.000.174" ], [ "77", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "77", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "77", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.174, ACK: 11.000.177" ], [ "78", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "78", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "78", "192.168.0.20:56276", "192.168.0.10:53", "UDP", "Transport", "" ], [ "78", "192.168.0.20:56276", "192.168.0.10:53", "DNS", "Anwendung", "ID=40953 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" ], [ "79", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "79", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "79", "192.168.0.10:53", "192.168.0.20:56276", "UDP", "Transport", "" ], [ "79", "192.168.0.10:53", "192.168.0.20:56276", "DNS", "Anwendung", "ID=40953 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" ], [ "80", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "80", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "80", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SYN, SEQ: 13.000.000" ], [ "81", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "81", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "81", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 13.000.001" ], [ "82", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "82", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "82", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.001, ACK: 1.000.001" ], [ "83", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "83", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "83", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.001" ], [ "83", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK POP3 server ready" ], [ "84", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "84", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "84", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.001, ACK: 1.000.022" ], [ "85", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "85", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "85", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.001" ], [ "85", "192.168.0.20:56326", "192.168.0.30:110", "POP3", "Anwendung", "USER anna" ], [ "86", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "86", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "86", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.022, ACK: 13.000.010" ], [ "87", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "87", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "87", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.022" ], [ "87", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK enter password" ], [ "88", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "88", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "88", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.010, ACK: 1.000.040" ], [ "89", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "89", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "89", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.010" ], [ "89", "192.168.0.20:56326", "192.168.0.30:110", "POP3", "Anwendung", "PASS geheim" ], [ "90", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "90", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "90", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.040, ACK: 13.000.021" ], [ "91", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "91", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "91", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.040" ], [ "91", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK Mailbox locked and ready" ], [ "92", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "92", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "92", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.021, ACK: 1.000.068" ], [ "93", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "93", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "93", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.021" ], [ "93", "192.168.0.20:56326", "192.168.0.30:110", "", "Anwendung", "STAT" ], [ "94", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "94", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "94", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.068, ACK: 13.000.025" ], [ "95", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "95", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "95", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.068" ], [ "95", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK 4 1054" ], [ "96", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "96", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "96", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.025, ACK: 1.000.078" ], [ "97", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "97", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "97", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.025" ], [ "97", "192.168.0.20:56326", "192.168.0.30:110", "", "Anwendung", "LIST" ], [ "98", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "98", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "98", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.078, ACK: 13.000.029" ], [ "99", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "99", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "99", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.078" ], [ "99", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK 4 1054\n0 80\n1 89\n2 441\n3 444\n" ], [ "100", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "100", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "100", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.029, ACK: 1.000.111" ], [ "101", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "101", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "101", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.029" ], [ "101", "192.168.0.20:56326", "192.168.0.30:110", "POP3", "Anwendung", "RETR 0" ], [ "102", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "102", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "102", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.111, ACK: 13.000.035" ], [ "103", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "103", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "103", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.111" ], [ "103", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile" ], [ "104", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "104", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "104", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.035, ACK: 1.000.233" ], [ "105", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "105", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "105", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.035" ], [ "105", "192.168.0.20:56326", "192.168.0.30:110", "POP3", "Anwendung", "DELE 0" ], [ "106", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "106", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "106", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.233, ACK: 13.000.041" ], [ "107", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "107", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "107", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.233" ], [ "107", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK message marked for delete" ], [ "108", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "108", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "108", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.041, ACK: 1.000.262" ], [ "109", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "109", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "109", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.041" ], [ "109", "192.168.0.20:56326", "192.168.0.30:110", "POP3", "Anwendung", "RETR 1" ], [ "110", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "110", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "110", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.262, ACK: 13.000.047" ], [ "111", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "111", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "111", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.262" ], [ "111", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?" ], [ "112", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "112", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "112", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.047, ACK: 1.000.414" ], [ "113", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "113", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "113", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.047" ], [ "113", "192.168.0.20:56326", "192.168.0.30:110", "POP3", "Anwendung", "DELE 1" ], [ "114", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "114", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "114", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.414, ACK: 13.000.053" ], [ "115", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "115", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "115", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.414" ], [ "115", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK message marked for delete" ], [ "116", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "116", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "116", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.053, ACK: 1.000.443" ], [ "117", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "117", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "117", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.053" ], [ "117", "192.168.0.20:56326", "192.168.0.30:110", "POP3", "Anwendung", "RETR 2" ], [ "118", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "118", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "118", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.443, ACK: 13.000.059" ], [ "119", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "119", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "119", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.443" ], [ "119", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?" ], [ "120", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "120", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "120", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.059, ACK: 1.000.925" ], [ "121", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "121", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "121", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.059" ], [ "121", "192.168.0.20:56326", "192.168.0.30:110", "POP3", "Anwendung", "DELE 2" ], [ "122", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "122", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "122", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.925, ACK: 13.000.065" ], [ "123", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "123", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "123", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.925" ], [ "123", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK message marked for delete" ], [ "124", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "124", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "124", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.065, ACK: 1.000.954" ], [ "125", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "125", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "125", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.065" ], [ "125", "192.168.0.20:56326", "192.168.0.30:110", "POP3", "Anwendung", "RETR 3" ], [ "126", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "126", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "126", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.954, ACK: 13.000.071" ], [ "127", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "127", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "127", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.954" ], [ "127", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009jemand@nirgendwo.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?" ], [ "128", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "128", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "128", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.071, ACK: 1.001.440" ], [ "129", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "129", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "129", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.071" ], [ "129", "192.168.0.20:56326", "192.168.0.30:110", "POP3", "Anwendung", "DELE 3" ], [ "130", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "130", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "130", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.001.440, ACK: 13.000.077" ], [ "131", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "131", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "131", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.001.440" ], [ "131", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK message marked for delete" ], [ "132", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "132", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "132", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.077, ACK: 1.001.469" ], [ "133", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "133", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "133", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.077" ], [ "133", "192.168.0.20:56326", "192.168.0.30:110", "POP3", "Anwendung", "QUIT" ], [ "134", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "134", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "134", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.001.469, ACK: 13.000.081" ], [ "135", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "135", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "135", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.001.469" ], [ "135", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK" ], [ "136", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "136", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "136", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.081, ACK: 1.001.472" ], [ "137", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "137", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "137", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "FIN, SEQ: 13.000.081" ], [ "138", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "138", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "138", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "FIN, SEQ: 1.001.472" ], [ "139", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "139", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "139", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.082, ACK: 1.001.473" ], [ "140", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "140", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "140", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.001.473, ACK: 13.000.082" ] ], "00000000-0000-0000-0000-000000000202": [ [ "1", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x806" ], [ "2", "192.168.0.10", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" ], [ "3", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "3", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "3", "192.168.0.20:52531", "192.168.0.10:53", "UDP", "Transport", "" ], [ "3", "192.168.0.20:52531", "192.168.0.10:53", "DNS", "Anwendung", "ID=43842 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" ], [ "4", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "4", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "4", "192.168.0.10:53", "192.168.0.20:52531", "UDP", "Transport", "" ], [ "4", "192.168.0.10:53", "192.168.0.20:52531", "DNS", "Anwendung", "ID=43842 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" ], [ "5", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "5", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ], [ "6", "02:00:00:00:02:13", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "6", "192.168.0.30", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "7", "02:00:00:00:02:12", "02:00:00:00:02:13", "", "Netzzugang", "0x806" ], [ "7", "192.168.0.10", "192.168.0.30", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:13|192.168.0.30]" ], [ "8", "02:00:00:00:02:13", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "8", "192.168.0.30", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "8", "192.168.0.30:62746", "192.168.0.10:53", "UDP", "Transport", "" ], [ "8", "192.168.0.30:62746", "192.168.0.10:53", "DNS", "Anwendung", "ID=3243 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n" ], [ "9", "02:00:00:00:02:12", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "9", "192.168.0.10", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "9", "192.168.0.10:53", "192.168.0.30:62746", "UDP", "Transport", "" ], [ "9", "192.168.0.10:53", "192.168.0.30:62746", "DNS", "Anwendung", "ID=3243 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n" ], [ "10", "02:00:00:00:02:13", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "10", "192.168.0.30", "192.168.0.31", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" ], [ "11", "02:00:00:00:02:14", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "11", "192.168.0.31", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "12", "02:00:00:00:02:12", "02:00:00:00:02:14", "", "Netzzugang", "0x806" ], [ "12", "192.168.0.10", "192.168.0.31", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:14|192.168.0.31]" ], [ "13", "02:00:00:00:02:14", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "13", "192.168.0.31", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "13", "192.168.0.31:58459", "192.168.0.10:53", "UDP", "Transport", "" ], [ "13", "192.168.0.31:58459", "192.168.0.10:53", "DNS", "Anwendung", "ID=47846 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n" ], [ "14", "02:00:00:00:02:12", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "14", "192.168.0.10", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "14", "192.168.0.10:53", "192.168.0.31:58459", "UDP", "Transport", "" ], [ "14", "192.168.0.10:53", "192.168.0.31:58459", "DNS", "Anwendung", "ID=47846 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n" ], [ "15", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "15", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "15", "192.168.0.20:57606", "192.168.0.10:53", "UDP", "Transport", "" ], [ "15", "192.168.0.20:57606", "192.168.0.10:53", "DNS", "Anwendung", "ID=60054 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" ], [ "16", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "16", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "16", "192.168.0.10:53", "192.168.0.20:57606", "UDP", "Transport", "" ], [ "16", "192.168.0.10:53", "192.168.0.20:57606", "DNS", "Anwendung", "ID=60054 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" ], [ "17", "02:00:00:00:02:13", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "17", "192.168.0.30", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "17", "192.168.0.30:53558", "192.168.0.10:53", "UDP", "Transport", "" ], [ "17", "192.168.0.30:53558", "192.168.0.10:53", "DNS", "Anwendung", "ID=35053 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnirgendwo.de. MX IN\n" ], [ "18", "02:00:00:00:02:12", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "18", "192.168.0.10", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "18", "192.168.0.10:53", "192.168.0.30:53558", "UDP", "Transport", "" ], [ "18", "192.168.0.10:53", "192.168.0.30:53558", "DNS", "Anwendung", "ID=35053 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" ], [ "19", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "19", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "19", "192.168.0.20:56276", "192.168.0.10:53", "UDP", "Transport", "" ], [ "19", "192.168.0.20:56276", "192.168.0.10:53", "DNS", "Anwendung", "ID=40953 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" ], [ "20", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "20", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "20", "192.168.0.10:53", "192.168.0.20:56276", "UDP", "Transport", "" ], [ "20", "192.168.0.10:53", "192.168.0.20:56276", "DNS", "Anwendung", "ID=40953 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" ] ], "00000000-0000-0000-0000-000000000203": [ [ "1", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "2", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ], [ "3", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x806" ], [ "3", "192.168.0.30", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" ], [ "4", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "4", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "4", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SYN, SEQ: 5.000.000" ], [ "5", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "5", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "5", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SYN, SEQ: 2.000.000, ACK: 5.000.001" ], [ "6", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "6", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "6", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.001, ACK: 2.000.001" ], [ "7", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "7", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.001" ], [ "7", "192.168.0.30:25", "192.168.0.20:62333", "SMTP", "Anwendung", "220 Willkommen bei filius.de" ], [ "8", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "8", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.001, ACK: 2.000.029" ], [ "9", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "9", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "9", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.001" ], [ "9", "192.168.0.20:62333", "192.168.0.30:25", "SMTP", "Anwendung", "HELO 192.168.0.20" ], [ "10", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "10", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "10", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.029, ACK: 5.000.018" ], [ "11", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "11", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.029" ], [ "11", "192.168.0.30:25", "192.168.0.20:62333", "SMTP", "Anwendung", "250 Hello 192.168.0.20" ], [ "12", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "12", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "12", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.018, ACK: 2.000.051" ], [ "13", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "13", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "13", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.018" ], [ "13", "192.168.0.20:62333", "192.168.0.30:25", "SMTP", "Anwendung", "MAIL FROM: " ], [ "14", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "14", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "14", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.051, ACK: 5.000.045" ], [ "15", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "15", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "15", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.051" ], [ "15", "192.168.0.30:25", "192.168.0.20:62333", "SMTP", "Anwendung", "250 Sender OK" ], [ "16", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "16", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "16", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.045, ACK: 2.000.064" ], [ "17", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "17", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "17", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.045" ], [ "17", "192.168.0.20:62333", "192.168.0.30:25", "SMTP", "Anwendung", "RCPT TO:" ], [ "18", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "18", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "18", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.064, ACK: 5.000.072" ], [ "19", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "19", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "19", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.064" ], [ "19", "192.168.0.30:25", "192.168.0.20:62333", "SMTP", "Anwendung", "250 Recipient OK" ], [ "20", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "20", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "20", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.072, ACK: 2.000.080" ], [ "21", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "21", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "21", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.072" ], [ "21", "192.168.0.20:62333", "192.168.0.30:25", "SMTP", "Anwendung", "DATA" ], [ "22", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "22", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "22", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.080, ACK: 5.000.076" ], [ "23", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "23", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "23", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.080" ], [ "23", "192.168.0.30:25", "192.168.0.20:62333", "SMTP", "Anwendung", "354 End data with ." ], [ "24", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "24", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "24", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.076, ACK: 2.000.115" ], [ "25", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "25", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "25", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.076" ], [ "25", "192.168.0.20:62333", "192.168.0.30:25", "SMTP", "Anwendung", "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" ], [ "26", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "26", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "26", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.115, ACK: 5.000.168" ], [ "27", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "27", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "27", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.115" ], [ "27", "192.168.0.30:25", "192.168.0.20:62333", "SMTP", "Anwendung", "250 Mail queued for delivery" ], [ "28", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "28", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "28", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.168, ACK: 2.000.143" ], [ "29", "02:00:00:00:02:13", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "29", "192.168.0.30", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "30", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "30", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "30", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.168" ], [ "30", "192.168.0.20:62333", "192.168.0.30:25", "SMTP", "Anwendung", "QUIT" ], [ "31", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "31", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "31", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.143, ACK: 5.000.172" ], [ "32", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "32", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "32", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.143" ], [ "32", "192.168.0.30:25", "192.168.0.20:62333", "SMTP", "Anwendung", "221 Server beendet Verbindung." ], [ "33", "02:00:00:00:02:12", "02:00:00:00:02:13", "", "Netzzugang", "0x806" ], [ "33", "192.168.0.10", "192.168.0.30", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:13|192.168.0.30]" ], [ "34", "02:00:00:00:02:13", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "34", "192.168.0.30", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "34", "192.168.0.30:62746", "192.168.0.10:53", "UDP", "Transport", "" ], [ "34", "192.168.0.30:62746", "192.168.0.10:53", "DNS", "Anwendung", "ID=3243 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n" ], [ "35", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "35", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "35", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.172, ACK: 2.000.173" ], [ "36", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "36", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "36", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "FIN, SEQ: 2.000.173" ], [ "37", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "37", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "37", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "FIN, SEQ: 5.000.172" ], [ "38", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "38", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "38", "192.168.0.30:25", "192.168.0.20:62333", "TCP", "Transport", "SEQ: 2.000.174, ACK: 5.000.173" ], [ "39", "02:00:00:00:02:12", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "39", "192.168.0.10", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "39", "192.168.0.10:53", "192.168.0.30:62746", "UDP", "Transport", "" ], [ "39", "192.168.0.10:53", "192.168.0.30:62746", "DNS", "Anwendung", "ID=3243 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n" ], [ "40", "02:00:00:00:02:13", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "40", "192.168.0.30", "192.168.0.31", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" ], [ "41", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "41", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "41", "192.168.0.20:62333", "192.168.0.30:25", "TCP", "Transport", "SEQ: 5.000.173, ACK: 2.000.174" ], [ "42", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x806" ], [ "42", "192.168.0.31", "192.168.0.30", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:14 [op=REPLY, sender=02:00:00:00:02:14|192.168.0.31, target=02:00:00:00:02:13|192.168.0.30]" ], [ "43", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "43", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "43", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SYN, SEQ: 7.000.000" ], [ "44", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "44", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "44", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SYN, SEQ: 4.000.000, ACK: 7.000.001" ], [ "45", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "45", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "45", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.001, ACK: 4.000.001" ], [ "46", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "46", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "46", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.001" ], [ "46", "192.168.0.31:25", "192.168.0.30:64673", "SMTP", "Anwendung", "220 Willkommen bei andere.de" ], [ "47", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "47", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "47", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.001, ACK: 4.000.029" ], [ "48", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "48", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "48", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.001" ], [ "48", "192.168.0.30:64673", "192.168.0.31:25", "SMTP", "Anwendung", "HELO 192.168.0.30" ], [ "49", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "49", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "49", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.029, ACK: 7.000.018" ], [ "50", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "50", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "50", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.029" ], [ "50", "192.168.0.31:25", "192.168.0.30:64673", "SMTP", "Anwendung", "250 Hello 192.168.0.30" ], [ "51", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "51", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "51", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.018, ACK: 4.000.051" ], [ "52", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "52", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "52", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.018" ], [ "52", "192.168.0.30:64673", "192.168.0.31:25", "SMTP", "Anwendung", "MAIL FROM: " ], [ "53", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "53", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "53", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.051, ACK: 7.000.045" ], [ "54", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "54", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "54", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.051" ], [ "54", "192.168.0.31:25", "192.168.0.30:64673", "SMTP", "Anwendung", "250 Sender OK" ], [ "55", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "55", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "55", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.045, ACK: 4.000.064" ], [ "56", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "56", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "56", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.045" ], [ "56", "192.168.0.30:64673", "192.168.0.31:25", "SMTP", "Anwendung", "RCPT TO:" ], [ "57", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "57", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "57", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.064, ACK: 7.000.072" ], [ "58", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "58", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "58", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.064" ], [ "58", "192.168.0.31:25", "192.168.0.30:64673", "SMTP", "Anwendung", "250 Recipient OK" ], [ "59", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "59", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "59", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.072, ACK: 4.000.080" ], [ "60", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "60", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "60", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.072" ], [ "60", "192.168.0.30:64673", "192.168.0.31:25", "SMTP", "Anwendung", "DATA" ], [ "61", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "61", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "61", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.080, ACK: 7.000.076" ], [ "62", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "62", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "62", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.080" ], [ "62", "192.168.0.31:25", "192.168.0.30:64673", "SMTP", "Anwendung", "354 End data with ." ], [ "63", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "63", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "63", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.076, ACK: 4.000.115" ], [ "64", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "64", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "64", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.076" ], [ "64", "192.168.0.30:64673", "192.168.0.31:25", "SMTP", "Anwendung", "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" ], [ "65", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "65", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "65", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.115, ACK: 7.000.168" ], [ "66", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "66", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "66", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.115" ], [ "66", "192.168.0.31:25", "192.168.0.30:64673", "SMTP", "Anwendung", "250 Mail queued for delivery" ], [ "67", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "67", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "67", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.168, ACK: 4.000.143" ], [ "68", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "68", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "68", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.168" ], [ "68", "192.168.0.30:64673", "192.168.0.31:25", "SMTP", "Anwendung", "QUIT" ], [ "69", "02:00:00:00:02:14", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "69", "192.168.0.31", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "70", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "70", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "70", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.143, ACK: 7.000.172" ], [ "71", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "71", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "71", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.143" ], [ "71", "192.168.0.31:25", "192.168.0.30:64673", "SMTP", "Anwendung", "221 Server beendet Verbindung." ], [ "72", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "72", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "72", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.172, ACK: 4.000.173" ], [ "73", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "73", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "73", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SYN, SEQ: 9.000.000" ], [ "74", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "74", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "74", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "FIN, SEQ: 7.000.172" ], [ "75", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "75", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "75", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SYN, SEQ: 6.000.000, ACK: 9.000.001" ], [ "76", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "76", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "76", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "FIN, SEQ: 4.000.173" ], [ "77", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "77", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "77", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.173, ACK: 4.000.174" ], [ "78", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "78", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "78", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.174, ACK: 7.000.173" ], [ "79", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "79", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "79", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.001, ACK: 6.000.001" ], [ "80", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "80", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "80", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.001" ], [ "80", "192.168.0.30:25", "192.168.0.31:50936", "SMTP", "Anwendung", "220 Willkommen bei filius.de" ], [ "81", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "81", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "81", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.001, ACK: 6.000.029" ], [ "82", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "82", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "82", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.001" ], [ "82", "192.168.0.31:50936", "192.168.0.30:25", "SMTP", "Anwendung", "HELO 192.168.0.31" ], [ "83", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "83", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "83", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.029, ACK: 9.000.018" ], [ "84", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "84", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "84", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.029" ], [ "84", "192.168.0.30:25", "192.168.0.31:50936", "SMTP", "Anwendung", "250 Hello 192.168.0.31" ], [ "85", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "85", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "85", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.018, ACK: 6.000.051" ], [ "86", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "86", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "86", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.018" ], [ "86", "192.168.0.31:50936", "192.168.0.30:25", "SMTP", "Anwendung", "MAIL FROM: <>" ], [ "87", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "87", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "87", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.051, ACK: 9.000.031" ], [ "88", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "88", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "88", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.051" ], [ "88", "192.168.0.30:25", "192.168.0.31:50936", "SMTP", "Anwendung", "250 Sender OK" ], [ "89", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "89", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "89", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.031, ACK: 6.000.064" ], [ "90", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "90", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "90", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.031" ], [ "90", "192.168.0.31:50936", "192.168.0.30:25", "SMTP", "Anwendung", "RCPT TO:" ], [ "91", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "91", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "91", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.064, ACK: 9.000.055" ], [ "92", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "92", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "92", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.064" ], [ "92", "192.168.0.30:25", "192.168.0.31:50936", "SMTP", "Anwendung", "250 Recipient OK" ], [ "93", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "93", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "93", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.055, ACK: 6.000.080" ], [ "94", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "94", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "94", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.055" ], [ "94", "192.168.0.31:50936", "192.168.0.30:25", "SMTP", "Anwendung", "DATA" ], [ "95", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "95", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "95", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.080, ACK: 9.000.059" ], [ "96", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "96", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "96", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.080" ], [ "96", "192.168.0.30:25", "192.168.0.31:50936", "SMTP", "Anwendung", "354 End data with ." ], [ "97", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "97", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "97", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.059, ACK: 6.000.115" ], [ "98", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "98", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "98", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.059" ], [ "98", "192.168.0.31:50936", "192.168.0.30:25", "SMTP", "Anwendung", "From: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" ], [ "99", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "99", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "99", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.115, ACK: 9.000.525" ], [ "100", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "100", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "100", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.115" ], [ "100", "192.168.0.30:25", "192.168.0.31:50936", "SMTP", "Anwendung", "250 Mail queued for delivery" ], [ "101", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "101", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "101", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.525, ACK: 6.000.143" ], [ "102", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "102", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "102", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.525" ], [ "102", "192.168.0.31:50936", "192.168.0.30:25", "SMTP", "Anwendung", "QUIT" ], [ "103", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "103", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "103", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.143, ACK: 9.000.529" ], [ "104", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "104", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "104", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.143" ], [ "104", "192.168.0.30:25", "192.168.0.31:50936", "SMTP", "Anwendung", "221 Server beendet Verbindung." ], [ "105", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "105", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "105", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.529, ACK: 6.000.173" ], [ "106", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "106", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "106", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "FIN, SEQ: 6.000.173" ], [ "107", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "107", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "107", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "FIN, SEQ: 9.000.529" ], [ "108", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "108", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "108", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.174, ACK: 9.000.530" ], [ "109", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "109", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "109", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.530, ACK: 6.000.174" ], [ "110", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "110", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "110", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SYN, SEQ: 11.000.000" ], [ "111", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "111", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "111", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SYN, SEQ: 10.000.000, ACK: 11.000.001" ], [ "112", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "112", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "112", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.001, ACK: 10.000.001" ], [ "113", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "113", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "113", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.001" ], [ "113", "192.168.0.30:25", "192.168.0.20:65366", "SMTP", "Anwendung", "220 Willkommen bei filius.de" ], [ "114", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "114", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "114", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.001, ACK: 10.000.029" ], [ "115", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "115", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "115", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.001" ], [ "115", "192.168.0.20:65366", "192.168.0.30:25", "SMTP", "Anwendung", "HELO 192.168.0.20" ], [ "116", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "116", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "116", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.029, ACK: 11.000.018" ], [ "117", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "117", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "117", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.029" ], [ "117", "192.168.0.30:25", "192.168.0.20:65366", "SMTP", "Anwendung", "250 Hello 192.168.0.20" ], [ "118", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "118", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "118", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.018, ACK: 10.000.051" ], [ "119", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "119", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "119", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.018" ], [ "119", "192.168.0.20:65366", "192.168.0.30:25", "SMTP", "Anwendung", "MAIL FROM: " ], [ "120", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "120", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "120", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.051, ACK: 11.000.045" ], [ "121", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "121", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "121", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.051" ], [ "121", "192.168.0.30:25", "192.168.0.20:65366", "SMTP", "Anwendung", "250 Sender OK" ], [ "122", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "122", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "122", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.045, ACK: 10.000.064" ], [ "123", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "123", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "123", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.045" ], [ "123", "192.168.0.20:65366", "192.168.0.30:25", "SMTP", "Anwendung", "RCPT TO:" ], [ "124", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "124", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "124", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.064, ACK: 11.000.074" ], [ "125", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "125", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "125", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.064" ], [ "125", "192.168.0.30:25", "192.168.0.20:65366", "SMTP", "Anwendung", "250 Recipient OK" ], [ "126", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "126", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "126", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.074, ACK: 10.000.080" ], [ "127", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "127", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "127", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.074" ], [ "127", "192.168.0.20:65366", "192.168.0.30:25", "SMTP", "Anwendung", "DATA" ], [ "128", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "128", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "128", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.080, ACK: 11.000.078" ], [ "129", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "129", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "129", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.080" ], [ "129", "192.168.0.30:25", "192.168.0.20:65366", "SMTP", "Anwendung", "354 End data with ." ], [ "130", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "130", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "130", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.078, ACK: 10.000.115" ], [ "131", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "131", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "131", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.078" ], [ "131", "192.168.0.20:65366", "192.168.0.30:25", "SMTP", "Anwendung", "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" ], [ "132", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "132", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "132", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.115, ACK: 11.000.172" ], [ "133", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "133", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "133", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.115" ], [ "133", "192.168.0.30:25", "192.168.0.20:65366", "SMTP", "Anwendung", "250 Mail queued for delivery" ], [ "134", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "134", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "134", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.172, ACK: 10.000.143" ], [ "135", "02:00:00:00:02:13", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "135", "192.168.0.30", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "135", "192.168.0.30:53558", "192.168.0.10:53", "UDP", "Transport", "" ], [ "135", "192.168.0.30:53558", "192.168.0.10:53", "DNS", "Anwendung", "ID=35053 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnirgendwo.de. MX IN\n" ], [ "136", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "136", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "136", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.172" ], [ "136", "192.168.0.20:65366", "192.168.0.30:25", "SMTP", "Anwendung", "QUIT" ], [ "137", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "137", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "137", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.143, ACK: 11.000.176" ], [ "138", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "138", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "138", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.143" ], [ "138", "192.168.0.30:25", "192.168.0.20:65366", "SMTP", "Anwendung", "221 Server beendet Verbindung." ], [ "139", "02:00:00:00:02:12", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "139", "192.168.0.10", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "139", "192.168.0.10:53", "192.168.0.30:53558", "UDP", "Transport", "" ], [ "139", "192.168.0.10:53", "192.168.0.30:53558", "DNS", "Anwendung", "ID=35053 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" ], [ "140", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "140", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "140", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.176, ACK: 10.000.173" ], [ "141", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "141", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "141", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "FIN, SEQ: 10.000.173" ], [ "142", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "142", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "142", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "FIN, SEQ: 11.000.176" ], [ "143", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "143", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "143", "192.168.0.30:25", "192.168.0.20:65366", "TCP", "Transport", "SEQ: 10.000.174, ACK: 11.000.177" ], [ "144", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "144", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "144", "192.168.0.20:65366", "192.168.0.30:25", "TCP", "Transport", "SEQ: 11.000.177, ACK: 10.000.174" ], [ "145", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "145", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "145", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SYN, SEQ: 13.000.000" ], [ "146", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "146", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "146", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 13.000.001" ], [ "147", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "147", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "147", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.001, ACK: 1.000.001" ], [ "148", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "148", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "148", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.001" ], [ "148", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK POP3 server ready" ], [ "149", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "149", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "149", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.001, ACK: 1.000.022" ], [ "150", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "150", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "150", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.001" ], [ "150", "192.168.0.20:56326", "192.168.0.30:110", "POP3", "Anwendung", "USER anna" ], [ "151", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "151", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "151", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.022, ACK: 13.000.010" ], [ "152", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "152", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "152", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.022" ], [ "152", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK enter password" ], [ "153", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "153", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "153", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.010, ACK: 1.000.040" ], [ "154", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "154", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "154", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.010" ], [ "154", "192.168.0.20:56326", "192.168.0.30:110", "POP3", "Anwendung", "PASS geheim" ], [ "155", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "155", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "155", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.040, ACK: 13.000.021" ], [ "156", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "156", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "156", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.040" ], [ "156", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK Mailbox locked and ready" ], [ "157", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "157", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "157", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.021, ACK: 1.000.068" ], [ "158", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "158", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "158", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.021" ], [ "158", "192.168.0.20:56326", "192.168.0.30:110", "", "Anwendung", "STAT" ], [ "159", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "159", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "159", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.068, ACK: 13.000.025" ], [ "160", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "160", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "160", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.068" ], [ "160", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK 4 1054" ], [ "161", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "161", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "161", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.025, ACK: 1.000.078" ], [ "162", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "162", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "162", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.025" ], [ "162", "192.168.0.20:56326", "192.168.0.30:110", "", "Anwendung", "LIST" ], [ "163", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "163", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "163", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.078, ACK: 13.000.029" ], [ "164", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "164", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "164", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.078" ], [ "164", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK 4 1054\n0 80\n1 89\n2 441\n3 444\n" ], [ "165", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "165", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "165", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.029, ACK: 1.000.111" ], [ "166", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "166", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "166", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.029" ], [ "166", "192.168.0.20:56326", "192.168.0.30:110", "POP3", "Anwendung", "RETR 0" ], [ "167", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "167", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "167", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.111, ACK: 13.000.035" ], [ "168", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "168", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "168", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.111" ], [ "168", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile" ], [ "169", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "169", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "169", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.035, ACK: 1.000.233" ], [ "170", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "170", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "170", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.035" ], [ "170", "192.168.0.20:56326", "192.168.0.30:110", "POP3", "Anwendung", "DELE 0" ], [ "171", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "171", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "171", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.233, ACK: 13.000.041" ], [ "172", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "172", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "172", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.233" ], [ "172", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK message marked for delete" ], [ "173", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "173", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "173", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.041, ACK: 1.000.262" ], [ "174", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "174", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "174", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.041" ], [ "174", "192.168.0.20:56326", "192.168.0.30:110", "POP3", "Anwendung", "RETR 1" ], [ "175", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "175", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "175", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.262, ACK: 13.000.047" ], [ "176", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "176", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "176", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.262" ], [ "176", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?" ], [ "177", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "177", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "177", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.047, ACK: 1.000.414" ], [ "178", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "178", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "178", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.047" ], [ "178", "192.168.0.20:56326", "192.168.0.30:110", "POP3", "Anwendung", "DELE 1" ], [ "179", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "179", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "179", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.414, ACK: 13.000.053" ], [ "180", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "180", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "180", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.414" ], [ "180", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK message marked for delete" ], [ "181", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "181", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "181", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.053, ACK: 1.000.443" ], [ "182", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "182", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "182", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.053" ], [ "182", "192.168.0.20:56326", "192.168.0.30:110", "POP3", "Anwendung", "RETR 2" ], [ "183", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "183", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "183", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.443, ACK: 13.000.059" ], [ "184", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "184", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "184", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.443" ], [ "184", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?" ], [ "185", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "185", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "185", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.059, ACK: 1.000.925" ], [ "186", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "186", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "186", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.059" ], [ "186", "192.168.0.20:56326", "192.168.0.30:110", "POP3", "Anwendung", "DELE 2" ], [ "187", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "187", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "187", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.925, ACK: 13.000.065" ], [ "188", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "188", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "188", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.925" ], [ "188", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK message marked for delete" ], [ "189", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "189", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "189", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.065, ACK: 1.000.954" ], [ "190", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "190", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "190", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.065" ], [ "190", "192.168.0.20:56326", "192.168.0.30:110", "POP3", "Anwendung", "RETR 3" ], [ "191", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "191", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "191", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.954, ACK: 13.000.071" ], [ "192", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "192", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "192", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.000.954" ], [ "192", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009jemand@nirgendwo.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?" ], [ "193", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "193", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "193", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.071, ACK: 1.001.440" ], [ "194", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "194", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "194", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.071" ], [ "194", "192.168.0.20:56326", "192.168.0.30:110", "POP3", "Anwendung", "DELE 3" ], [ "195", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "195", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "195", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.001.440, ACK: 13.000.077" ], [ "196", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "196", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "196", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.001.440" ], [ "196", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK message marked for delete" ], [ "197", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "197", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "197", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.077, ACK: 1.001.469" ], [ "198", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "198", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "198", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.077" ], [ "198", "192.168.0.20:56326", "192.168.0.30:110", "POP3", "Anwendung", "QUIT" ], [ "199", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "199", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "199", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.001.469, ACK: 13.000.081" ], [ "200", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "200", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "200", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.001.469" ], [ "200", "192.168.0.30:110", "192.168.0.20:56326", "POP3", "Anwendung", "+OK" ], [ "201", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "201", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "201", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.081, ACK: 1.001.472" ], [ "202", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "202", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "202", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "FIN, SEQ: 1.001.472" ], [ "203", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "203", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "203", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "FIN, SEQ: 13.000.081" ], [ "204", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "204", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "204", "192.168.0.30:110", "192.168.0.20:56326", "TCP", "Transport", "SEQ: 1.001.473, ACK: 13.000.082" ], [ "205", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "205", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "205", "192.168.0.20:56326", "192.168.0.30:110", "TCP", "Transport", "SEQ: 13.000.082, ACK: 1.001.473" ] ], "00000000-0000-0000-0000-000000000204": [ [ "1", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "2", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ], [ "3", "02:00:00:00:02:13", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "3", "192.168.0.30", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "4", "02:00:00:00:02:13", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "4", "192.168.0.30", "192.168.0.31", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" ], [ "5", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x806" ], [ "5", "192.168.0.31", "192.168.0.30", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:14 [op=REPLY, sender=02:00:00:00:02:14|192.168.0.31, target=02:00:00:00:02:13|192.168.0.30]" ], [ "6", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "6", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "6", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SYN, SEQ: 7.000.000" ], [ "7", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "7", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SYN, SEQ: 4.000.000, ACK: 7.000.001" ], [ "8", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "8", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.001, ACK: 4.000.001" ], [ "9", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "9", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "9", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.001" ], [ "9", "192.168.0.31:25", "192.168.0.30:64673", "SMTP", "Anwendung", "220 Willkommen bei andere.de" ], [ "10", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "10", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "10", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.001, ACK: 4.000.029" ], [ "11", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "11", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.001" ], [ "11", "192.168.0.30:64673", "192.168.0.31:25", "SMTP", "Anwendung", "HELO 192.168.0.30" ], [ "12", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "12", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "12", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.029, ACK: 7.000.018" ], [ "13", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "13", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "13", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.029" ], [ "13", "192.168.0.31:25", "192.168.0.30:64673", "SMTP", "Anwendung", "250 Hello 192.168.0.30" ], [ "14", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "14", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "14", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.018, ACK: 4.000.051" ], [ "15", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "15", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "15", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.018" ], [ "15", "192.168.0.30:64673", "192.168.0.31:25", "SMTP", "Anwendung", "MAIL FROM: " ], [ "16", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "16", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "16", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.051, ACK: 7.000.045" ], [ "17", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "17", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "17", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.051" ], [ "17", "192.168.0.31:25", "192.168.0.30:64673", "SMTP", "Anwendung", "250 Sender OK" ], [ "18", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "18", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "18", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.045, ACK: 4.000.064" ], [ "19", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "19", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "19", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.045" ], [ "19", "192.168.0.30:64673", "192.168.0.31:25", "SMTP", "Anwendung", "RCPT TO:" ], [ "20", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "20", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "20", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.064, ACK: 7.000.072" ], [ "21", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "21", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "21", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.064" ], [ "21", "192.168.0.31:25", "192.168.0.30:64673", "SMTP", "Anwendung", "250 Recipient OK" ], [ "22", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "22", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "22", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.072, ACK: 4.000.080" ], [ "23", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "23", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "23", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.072" ], [ "23", "192.168.0.30:64673", "192.168.0.31:25", "SMTP", "Anwendung", "DATA" ], [ "24", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "24", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "24", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.080, ACK: 7.000.076" ], [ "25", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "25", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "25", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.080" ], [ "25", "192.168.0.31:25", "192.168.0.30:64673", "SMTP", "Anwendung", "354 End data with ." ], [ "26", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "26", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "26", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.076, ACK: 4.000.115" ], [ "27", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "27", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "27", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.076" ], [ "27", "192.168.0.30:64673", "192.168.0.31:25", "SMTP", "Anwendung", "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" ], [ "28", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "28", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "28", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.115, ACK: 7.000.168" ], [ "29", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "29", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "29", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.115" ], [ "29", "192.168.0.31:25", "192.168.0.30:64673", "SMTP", "Anwendung", "250 Mail queued for delivery" ], [ "30", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "30", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "30", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.168, ACK: 4.000.143" ], [ "31", "02:00:00:00:02:14", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "31", "192.168.0.31", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "32", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "32", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "32", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.168" ], [ "32", "192.168.0.30:64673", "192.168.0.31:25", "SMTP", "Anwendung", "QUIT" ], [ "33", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "33", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "33", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.143, ACK: 7.000.172" ], [ "34", "02:00:00:00:02:12", "02:00:00:00:02:14", "", "Netzzugang", "0x806" ], [ "34", "192.168.0.10", "192.168.0.31", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:14|192.168.0.31]" ], [ "35", "02:00:00:00:02:14", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "35", "192.168.0.31", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "35", "192.168.0.31:58459", "192.168.0.10:53", "UDP", "Transport", "" ], [ "35", "192.168.0.31:58459", "192.168.0.10:53", "DNS", "Anwendung", "ID=47846 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n" ], [ "36", "02:00:00:00:02:12", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "36", "192.168.0.10", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "36", "192.168.0.10:53", "192.168.0.31:58459", "UDP", "Transport", "" ], [ "36", "192.168.0.10:53", "192.168.0.31:58459", "DNS", "Anwendung", "ID=47846 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n" ], [ "37", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "37", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "37", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.143" ], [ "37", "192.168.0.31:25", "192.168.0.30:64673", "SMTP", "Anwendung", "221 Server beendet Verbindung." ], [ "38", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "38", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "38", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SYN, SEQ: 9.000.000" ], [ "39", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "39", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "39", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.172, ACK: 4.000.173" ], [ "40", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "40", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "40", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "FIN, SEQ: 4.000.173" ], [ "41", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "41", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "41", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "FIN, SEQ: 7.000.172" ], [ "42", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "42", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "42", "192.168.0.31:25", "192.168.0.30:64673", "TCP", "Transport", "SEQ: 4.000.174, ACK: 7.000.173" ], [ "43", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "43", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "43", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SYN, SEQ: 6.000.000, ACK: 9.000.001" ], [ "44", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "44", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "44", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.001, ACK: 6.000.001" ], [ "45", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "45", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "45", "192.168.0.30:64673", "192.168.0.31:25", "TCP", "Transport", "SEQ: 7.000.173, ACK: 4.000.174" ], [ "46", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "46", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "46", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.001" ], [ "46", "192.168.0.30:25", "192.168.0.31:50936", "SMTP", "Anwendung", "220 Willkommen bei filius.de" ], [ "47", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "47", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "47", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.001, ACK: 6.000.029" ], [ "48", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "48", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "48", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.001" ], [ "48", "192.168.0.31:50936", "192.168.0.30:25", "SMTP", "Anwendung", "HELO 192.168.0.31" ], [ "49", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "49", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "49", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.029, ACK: 9.000.018" ], [ "50", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "50", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "50", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.029" ], [ "50", "192.168.0.30:25", "192.168.0.31:50936", "SMTP", "Anwendung", "250 Hello 192.168.0.31" ], [ "51", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "51", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "51", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.018, ACK: 6.000.051" ], [ "52", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "52", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "52", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.018" ], [ "52", "192.168.0.31:50936", "192.168.0.30:25", "SMTP", "Anwendung", "MAIL FROM: <>" ], [ "53", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "53", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "53", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.051, ACK: 9.000.031" ], [ "54", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "54", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "54", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.051" ], [ "54", "192.168.0.30:25", "192.168.0.31:50936", "SMTP", "Anwendung", "250 Sender OK" ], [ "55", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "55", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "55", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.031, ACK: 6.000.064" ], [ "56", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "56", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "56", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.031" ], [ "56", "192.168.0.31:50936", "192.168.0.30:25", "SMTP", "Anwendung", "RCPT TO:" ], [ "57", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "57", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "57", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.064, ACK: 9.000.055" ], [ "58", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "58", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "58", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.064" ], [ "58", "192.168.0.30:25", "192.168.0.31:50936", "SMTP", "Anwendung", "250 Recipient OK" ], [ "59", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "59", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "59", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.055, ACK: 6.000.080" ], [ "60", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "60", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "60", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.055" ], [ "60", "192.168.0.31:50936", "192.168.0.30:25", "SMTP", "Anwendung", "DATA" ], [ "61", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "61", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "61", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.080, ACK: 9.000.059" ], [ "62", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "62", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "62", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.080" ], [ "62", "192.168.0.30:25", "192.168.0.31:50936", "SMTP", "Anwendung", "354 End data with ." ], [ "63", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "63", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "63", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.059, ACK: 6.000.115" ], [ "64", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "64", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "64", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.059" ], [ "64", "192.168.0.31:50936", "192.168.0.30:25", "SMTP", "Anwendung", "From: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" ], [ "65", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "65", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "65", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.115, ACK: 9.000.525" ], [ "66", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "66", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "66", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.115" ], [ "66", "192.168.0.30:25", "192.168.0.31:50936", "SMTP", "Anwendung", "250 Mail queued for delivery" ], [ "67", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "67", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "67", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.525, ACK: 6.000.143" ], [ "68", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "68", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "68", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.525" ], [ "68", "192.168.0.31:50936", "192.168.0.30:25", "SMTP", "Anwendung", "QUIT" ], [ "69", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "69", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "69", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.143, ACK: 9.000.529" ], [ "70", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "70", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "70", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.143" ], [ "70", "192.168.0.30:25", "192.168.0.31:50936", "SMTP", "Anwendung", "221 Server beendet Verbindung." ], [ "71", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "71", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "71", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.529, ACK: 6.000.173" ], [ "72", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "72", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "72", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "FIN, SEQ: 9.000.529" ], [ "73", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "73", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "73", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "FIN, SEQ: 6.000.173" ], [ "74", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "74", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "74", "192.168.0.31:50936", "192.168.0.30:25", "TCP", "Transport", "SEQ: 9.000.530, ACK: 6.000.174" ], [ "75", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "75", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "75", "192.168.0.30:25", "192.168.0.31:50936", "TCP", "Transport", "SEQ: 6.000.174, ACK: 9.000.530" ] ] }, "layeredRows": { "00000000-0000-0000-0000-000000000201": [ [ "1", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x806" ], [ "2", "192.168.0.10", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" ], [ "3", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "3", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "3", "52531", "53", "UDP", "Transport", "" ], [ "3", null, null, "DNS", "Anwendung", "ID=43842 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" ], [ "4", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "4", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "4", "53", "52531", "UDP", "Transport", "" ], [ "4", null, null, "DNS", "Anwendung", "ID=43842 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" ], [ "5", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "5", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ], [ "6", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x806" ], [ "6", "192.168.0.30", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" ], [ "7", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "7", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "62333", "25", "TCP", "Transport", "SYN, SEQ: 5.000.000" ], [ "8", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "8", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "25", "62333", "TCP", "Transport", "SYN, SEQ: 2.000.000, ACK: 5.000.001" ], [ "9", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "9", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "9", "62333", "25", "TCP", "Transport", "SEQ: 5.000.001, ACK: 2.000.001" ], [ "10", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "10", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "10", "25", "62333", "TCP", "Transport", "SEQ: 2.000.001" ], [ "10", null, null, "SMTP", "Anwendung", "220 Willkommen bei filius.de" ], [ "11", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "11", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "62333", "25", "TCP", "Transport", "SEQ: 5.000.001, ACK: 2.000.029" ], [ "12", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "12", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "12", "62333", "25", "TCP", "Transport", "SEQ: 5.000.001" ], [ "12", null, null, "SMTP", "Anwendung", "HELO 192.168.0.20" ], [ "13", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "13", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "13", "25", "62333", "TCP", "Transport", "SEQ: 2.000.029, ACK: 5.000.018" ], [ "14", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "14", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "14", "25", "62333", "TCP", "Transport", "SEQ: 2.000.029" ], [ "14", null, null, "SMTP", "Anwendung", "250 Hello 192.168.0.20" ], [ "15", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "15", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "15", "62333", "25", "TCP", "Transport", "SEQ: 5.000.018, ACK: 2.000.051" ], [ "16", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "16", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "16", "62333", "25", "TCP", "Transport", "SEQ: 5.000.018" ], [ "16", null, null, "SMTP", "Anwendung", "MAIL FROM: " ], [ "17", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "17", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "17", "25", "62333", "TCP", "Transport", "SEQ: 2.000.051, ACK: 5.000.045" ], [ "18", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "18", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "18", "25", "62333", "TCP", "Transport", "SEQ: 2.000.051" ], [ "18", null, null, "SMTP", "Anwendung", "250 Sender OK" ], [ "19", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "19", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "19", "62333", "25", "TCP", "Transport", "SEQ: 5.000.045, ACK: 2.000.064" ], [ "20", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "20", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "20", "62333", "25", "TCP", "Transport", "SEQ: 5.000.045" ], [ "20", null, null, "SMTP", "Anwendung", "RCPT TO:" ], [ "21", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "21", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "21", "25", "62333", "TCP", "Transport", "SEQ: 2.000.064, ACK: 5.000.072" ], [ "22", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "22", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "22", "25", "62333", "TCP", "Transport", "SEQ: 2.000.064" ], [ "22", null, null, "SMTP", "Anwendung", "250 Recipient OK" ], [ "23", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "23", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "23", "62333", "25", "TCP", "Transport", "SEQ: 5.000.072, ACK: 2.000.080" ], [ "24", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "24", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "24", "62333", "25", "TCP", "Transport", "SEQ: 5.000.072" ], [ "24", null, null, "SMTP", "Anwendung", "DATA" ], [ "25", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "25", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "25", "25", "62333", "TCP", "Transport", "SEQ: 2.000.080, ACK: 5.000.076" ], [ "26", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "26", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "26", "25", "62333", "TCP", "Transport", "SEQ: 2.000.080" ], [ "26", null, null, "SMTP", "Anwendung", "354 End data with ." ], [ "27", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "27", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "27", "62333", "25", "TCP", "Transport", "SEQ: 5.000.076, ACK: 2.000.115" ], [ "28", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "28", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "28", "62333", "25", "TCP", "Transport", "SEQ: 5.000.076" ], [ "28", null, null, "SMTP", "Anwendung", "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" ], [ "29", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "29", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "29", "25", "62333", "TCP", "Transport", "SEQ: 2.000.115, ACK: 5.000.168" ], [ "30", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "30", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "30", "25", "62333", "TCP", "Transport", "SEQ: 2.000.115" ], [ "30", null, null, "SMTP", "Anwendung", "250 Mail queued for delivery" ], [ "31", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "31", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "31", "62333", "25", "TCP", "Transport", "SEQ: 5.000.168, ACK: 2.000.143" ], [ "32", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "32", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "32", "62333", "25", "TCP", "Transport", "SEQ: 5.000.168" ], [ "32", null, null, "SMTP", "Anwendung", "QUIT" ], [ "33", "02:00:00:00:02:13", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "33", "192.168.0.30", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "34", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "34", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "34", "25", "62333", "TCP", "Transport", "SEQ: 2.000.143, ACK: 5.000.172" ], [ "35", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "35", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "35", "25", "62333", "TCP", "Transport", "SEQ: 2.000.143" ], [ "35", null, null, "SMTP", "Anwendung", "221 Server beendet Verbindung." ], [ "36", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "36", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "36", "62333", "25", "TCP", "Transport", "SEQ: 5.000.172, ACK: 2.000.173" ], [ "37", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "37", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "37", "62333", "25", "TCP", "Transport", "FIN, SEQ: 5.000.172" ], [ "38", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "38", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "38", "25", "62333", "TCP", "Transport", "FIN, SEQ: 2.000.173" ], [ "39", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "39", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "39", "62333", "25", "TCP", "Transport", "SEQ: 5.000.173, ACK: 2.000.174" ], [ "40", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "40", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "40", "25", "62333", "TCP", "Transport", "SEQ: 2.000.174, ACK: 5.000.173" ], [ "41", "02:00:00:00:02:13", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "41", "192.168.0.30", "192.168.0.31", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" ], [ "42", "02:00:00:00:02:14", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "42", "192.168.0.31", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "43", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "43", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "43", "57606", "53", "UDP", "Transport", "" ], [ "43", null, null, "DNS", "Anwendung", "ID=60054 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" ], [ "44", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "44", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "44", "53", "57606", "UDP", "Transport", "" ], [ "44", null, null, "DNS", "Anwendung", "ID=60054 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" ], [ "45", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "45", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "45", "65366", "25", "TCP", "Transport", "SYN, SEQ: 11.000.000" ], [ "46", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "46", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "46", "25", "65366", "TCP", "Transport", "SYN, SEQ: 10.000.000, ACK: 11.000.001" ], [ "47", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "47", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "47", "65366", "25", "TCP", "Transport", "SEQ: 11.000.001, ACK: 10.000.001" ], [ "48", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "48", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "48", "25", "65366", "TCP", "Transport", "SEQ: 10.000.001" ], [ "48", null, null, "SMTP", "Anwendung", "220 Willkommen bei filius.de" ], [ "49", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "49", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "49", "65366", "25", "TCP", "Transport", "SEQ: 11.000.001, ACK: 10.000.029" ], [ "50", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "50", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "50", "65366", "25", "TCP", "Transport", "SEQ: 11.000.001" ], [ "50", null, null, "SMTP", "Anwendung", "HELO 192.168.0.20" ], [ "51", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "51", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "51", "25", "65366", "TCP", "Transport", "SEQ: 10.000.029, ACK: 11.000.018" ], [ "52", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "52", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "52", "25", "65366", "TCP", "Transport", "SEQ: 10.000.029" ], [ "52", null, null, "SMTP", "Anwendung", "250 Hello 192.168.0.20" ], [ "53", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "53", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "53", "65366", "25", "TCP", "Transport", "SEQ: 11.000.018, ACK: 10.000.051" ], [ "54", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "54", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "54", "65366", "25", "TCP", "Transport", "SEQ: 11.000.018" ], [ "54", null, null, "SMTP", "Anwendung", "MAIL FROM: " ], [ "55", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "55", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "55", "25", "65366", "TCP", "Transport", "SEQ: 10.000.051, ACK: 11.000.045" ], [ "56", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "56", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "56", "25", "65366", "TCP", "Transport", "SEQ: 10.000.051" ], [ "56", null, null, "SMTP", "Anwendung", "250 Sender OK" ], [ "57", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "57", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "57", "65366", "25", "TCP", "Transport", "SEQ: 11.000.045, ACK: 10.000.064" ], [ "58", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "58", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "58", "65366", "25", "TCP", "Transport", "SEQ: 11.000.045" ], [ "58", null, null, "SMTP", "Anwendung", "RCPT TO:" ], [ "59", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "59", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "59", "25", "65366", "TCP", "Transport", "SEQ: 10.000.064, ACK: 11.000.074" ], [ "60", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "60", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "60", "25", "65366", "TCP", "Transport", "SEQ: 10.000.064" ], [ "60", null, null, "SMTP", "Anwendung", "250 Recipient OK" ], [ "61", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "61", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "61", "65366", "25", "TCP", "Transport", "SEQ: 11.000.074, ACK: 10.000.080" ], [ "62", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "62", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "62", "65366", "25", "TCP", "Transport", "SEQ: 11.000.074" ], [ "62", null, null, "SMTP", "Anwendung", "DATA" ], [ "63", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "63", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "63", "25", "65366", "TCP", "Transport", "SEQ: 10.000.080, ACK: 11.000.078" ], [ "64", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "64", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "64", "25", "65366", "TCP", "Transport", "SEQ: 10.000.080" ], [ "64", null, null, "SMTP", "Anwendung", "354 End data with ." ], [ "65", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "65", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "65", "65366", "25", "TCP", "Transport", "SEQ: 11.000.078, ACK: 10.000.115" ], [ "66", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "66", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "66", "65366", "25", "TCP", "Transport", "SEQ: 11.000.078" ], [ "66", null, null, "SMTP", "Anwendung", "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" ], [ "67", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "67", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "67", "25", "65366", "TCP", "Transport", "SEQ: 10.000.115, ACK: 11.000.172" ], [ "68", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "68", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "68", "25", "65366", "TCP", "Transport", "SEQ: 10.000.115" ], [ "68", null, null, "SMTP", "Anwendung", "250 Mail queued for delivery" ], [ "69", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "69", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "69", "65366", "25", "TCP", "Transport", "SEQ: 11.000.172, ACK: 10.000.143" ], [ "70", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "70", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "70", "65366", "25", "TCP", "Transport", "SEQ: 11.000.172" ], [ "70", null, null, "SMTP", "Anwendung", "QUIT" ], [ "71", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "71", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "71", "25", "65366", "TCP", "Transport", "SEQ: 10.000.143, ACK: 11.000.176" ], [ "72", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "72", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "72", "25", "65366", "TCP", "Transport", "SEQ: 10.000.143" ], [ "72", null, null, "SMTP", "Anwendung", "221 Server beendet Verbindung." ], [ "73", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "73", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "73", "65366", "25", "TCP", "Transport", "SEQ: 11.000.176, ACK: 10.000.173" ], [ "74", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "74", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "74", "65366", "25", "TCP", "Transport", "FIN, SEQ: 11.000.176" ], [ "75", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "75", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "75", "25", "65366", "TCP", "Transport", "FIN, SEQ: 10.000.173" ], [ "76", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "76", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "76", "65366", "25", "TCP", "Transport", "SEQ: 11.000.177, ACK: 10.000.174" ], [ "77", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "77", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "77", "25", "65366", "TCP", "Transport", "SEQ: 10.000.174, ACK: 11.000.177" ], [ "78", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "78", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "78", "56276", "53", "UDP", "Transport", "" ], [ "78", null, null, "DNS", "Anwendung", "ID=40953 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" ], [ "79", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "79", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "79", "53", "56276", "UDP", "Transport", "" ], [ "79", null, null, "DNS", "Anwendung", "ID=40953 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" ], [ "80", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "80", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "80", "56326", "110", "TCP", "Transport", "SYN, SEQ: 13.000.000" ], [ "81", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "81", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "81", "110", "56326", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 13.000.001" ], [ "82", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "82", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "82", "56326", "110", "TCP", "Transport", "SEQ: 13.000.001, ACK: 1.000.001" ], [ "83", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "83", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "83", "110", "56326", "TCP", "Transport", "SEQ: 1.000.001" ], [ "83", null, null, "POP3", "Anwendung", "+OK POP3 server ready" ], [ "84", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "84", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "84", "56326", "110", "TCP", "Transport", "SEQ: 13.000.001, ACK: 1.000.022" ], [ "85", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "85", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "85", "56326", "110", "TCP", "Transport", "SEQ: 13.000.001" ], [ "85", null, null, "POP3", "Anwendung", "USER anna" ], [ "86", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "86", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "86", "110", "56326", "TCP", "Transport", "SEQ: 1.000.022, ACK: 13.000.010" ], [ "87", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "87", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "87", "110", "56326", "TCP", "Transport", "SEQ: 1.000.022" ], [ "87", null, null, "POP3", "Anwendung", "+OK enter password" ], [ "88", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "88", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "88", "56326", "110", "TCP", "Transport", "SEQ: 13.000.010, ACK: 1.000.040" ], [ "89", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "89", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "89", "56326", "110", "TCP", "Transport", "SEQ: 13.000.010" ], [ "89", null, null, "POP3", "Anwendung", "PASS geheim" ], [ "90", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "90", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "90", "110", "56326", "TCP", "Transport", "SEQ: 1.000.040, ACK: 13.000.021" ], [ "91", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "91", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "91", "110", "56326", "TCP", "Transport", "SEQ: 1.000.040" ], [ "91", null, null, "POP3", "Anwendung", "+OK Mailbox locked and ready" ], [ "92", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "92", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "92", "56326", "110", "TCP", "Transport", "SEQ: 13.000.021, ACK: 1.000.068" ], [ "93", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "93", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "93", "56326", "110", "TCP", "Transport", "SEQ: 13.000.021" ], [ "93", null, null, "", "Anwendung", "STAT" ], [ "94", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "94", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "94", "110", "56326", "TCP", "Transport", "SEQ: 1.000.068, ACK: 13.000.025" ], [ "95", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "95", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "95", "110", "56326", "TCP", "Transport", "SEQ: 1.000.068" ], [ "95", null, null, "POP3", "Anwendung", "+OK 4 1054" ], [ "96", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "96", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "96", "56326", "110", "TCP", "Transport", "SEQ: 13.000.025, ACK: 1.000.078" ], [ "97", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "97", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "97", "56326", "110", "TCP", "Transport", "SEQ: 13.000.025" ], [ "97", null, null, "", "Anwendung", "LIST" ], [ "98", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "98", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "98", "110", "56326", "TCP", "Transport", "SEQ: 1.000.078, ACK: 13.000.029" ], [ "99", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "99", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "99", "110", "56326", "TCP", "Transport", "SEQ: 1.000.078" ], [ "99", null, null, "POP3", "Anwendung", "+OK 4 1054\n0 80\n1 89\n2 441\n3 444\n" ], [ "100", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "100", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "100", "56326", "110", "TCP", "Transport", "SEQ: 13.000.029, ACK: 1.000.111" ], [ "101", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "101", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "101", "56326", "110", "TCP", "Transport", "SEQ: 13.000.029" ], [ "101", null, null, "POP3", "Anwendung", "RETR 0" ], [ "102", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "102", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "102", "110", "56326", "TCP", "Transport", "SEQ: 1.000.111, ACK: 13.000.035" ], [ "103", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "103", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "103", "110", "56326", "TCP", "Transport", "SEQ: 1.000.111" ], [ "103", null, null, "POP3", "Anwendung", "+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile" ], [ "104", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "104", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "104", "56326", "110", "TCP", "Transport", "SEQ: 13.000.035, ACK: 1.000.233" ], [ "105", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "105", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "105", "56326", "110", "TCP", "Transport", "SEQ: 13.000.035" ], [ "105", null, null, "POP3", "Anwendung", "DELE 0" ], [ "106", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "106", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "106", "110", "56326", "TCP", "Transport", "SEQ: 1.000.233, ACK: 13.000.041" ], [ "107", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "107", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "107", "110", "56326", "TCP", "Transport", "SEQ: 1.000.233" ], [ "107", null, null, "POP3", "Anwendung", "+OK message marked for delete" ], [ "108", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "108", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "108", "56326", "110", "TCP", "Transport", "SEQ: 13.000.041, ACK: 1.000.262" ], [ "109", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "109", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "109", "56326", "110", "TCP", "Transport", "SEQ: 13.000.041" ], [ "109", null, null, "POP3", "Anwendung", "RETR 1" ], [ "110", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "110", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "110", "110", "56326", "TCP", "Transport", "SEQ: 1.000.262, ACK: 13.000.047" ], [ "111", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "111", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "111", "110", "56326", "TCP", "Transport", "SEQ: 1.000.262" ], [ "111", null, null, "POP3", "Anwendung", "+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?" ], [ "112", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "112", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "112", "56326", "110", "TCP", "Transport", "SEQ: 13.000.047, ACK: 1.000.414" ], [ "113", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "113", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "113", "56326", "110", "TCP", "Transport", "SEQ: 13.000.047" ], [ "113", null, null, "POP3", "Anwendung", "DELE 1" ], [ "114", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "114", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "114", "110", "56326", "TCP", "Transport", "SEQ: 1.000.414, ACK: 13.000.053" ], [ "115", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "115", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "115", "110", "56326", "TCP", "Transport", "SEQ: 1.000.414" ], [ "115", null, null, "POP3", "Anwendung", "+OK message marked for delete" ], [ "116", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "116", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "116", "56326", "110", "TCP", "Transport", "SEQ: 13.000.053, ACK: 1.000.443" ], [ "117", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "117", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "117", "56326", "110", "TCP", "Transport", "SEQ: 13.000.053" ], [ "117", null, null, "POP3", "Anwendung", "RETR 2" ], [ "118", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "118", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "118", "110", "56326", "TCP", "Transport", "SEQ: 1.000.443, ACK: 13.000.059" ], [ "119", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "119", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "119", "110", "56326", "TCP", "Transport", "SEQ: 1.000.443" ], [ "119", null, null, "POP3", "Anwendung", "+OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?" ], [ "120", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "120", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "120", "56326", "110", "TCP", "Transport", "SEQ: 13.000.059, ACK: 1.000.925" ], [ "121", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "121", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "121", "56326", "110", "TCP", "Transport", "SEQ: 13.000.059" ], [ "121", null, null, "POP3", "Anwendung", "DELE 2" ], [ "122", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "122", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "122", "110", "56326", "TCP", "Transport", "SEQ: 1.000.925, ACK: 13.000.065" ], [ "123", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "123", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "123", "110", "56326", "TCP", "Transport", "SEQ: 1.000.925" ], [ "123", null, null, "POP3", "Anwendung", "+OK message marked for delete" ], [ "124", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "124", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "124", "56326", "110", "TCP", "Transport", "SEQ: 13.000.065, ACK: 1.000.954" ], [ "125", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "125", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "125", "56326", "110", "TCP", "Transport", "SEQ: 13.000.065" ], [ "125", null, null, "POP3", "Anwendung", "RETR 3" ], [ "126", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "126", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "126", "110", "56326", "TCP", "Transport", "SEQ: 1.000.954, ACK: 13.000.071" ], [ "127", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "127", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "127", "110", "56326", "TCP", "Transport", "SEQ: 1.000.954" ], [ "127", null, null, "POP3", "Anwendung", "+OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009jemand@nirgendwo.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?" ], [ "128", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "128", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "128", "56326", "110", "TCP", "Transport", "SEQ: 13.000.071, ACK: 1.001.440" ], [ "129", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "129", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "129", "56326", "110", "TCP", "Transport", "SEQ: 13.000.071" ], [ "129", null, null, "POP3", "Anwendung", "DELE 3" ], [ "130", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "130", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "130", "110", "56326", "TCP", "Transport", "SEQ: 1.001.440, ACK: 13.000.077" ], [ "131", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "131", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "131", "110", "56326", "TCP", "Transport", "SEQ: 1.001.440" ], [ "131", null, null, "POP3", "Anwendung", "+OK message marked for delete" ], [ "132", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "132", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "132", "56326", "110", "TCP", "Transport", "SEQ: 13.000.077, ACK: 1.001.469" ], [ "133", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "133", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "133", "56326", "110", "TCP", "Transport", "SEQ: 13.000.077" ], [ "133", null, null, "POP3", "Anwendung", "QUIT" ], [ "134", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "134", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "134", "110", "56326", "TCP", "Transport", "SEQ: 1.001.469, ACK: 13.000.081" ], [ "135", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "135", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "135", "110", "56326", "TCP", "Transport", "SEQ: 1.001.469" ], [ "135", null, null, "POP3", "Anwendung", "+OK" ], [ "136", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "136", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "136", "56326", "110", "TCP", "Transport", "SEQ: 13.000.081, ACK: 1.001.472" ], [ "137", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "137", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "137", "56326", "110", "TCP", "Transport", "FIN, SEQ: 13.000.081" ], [ "138", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "138", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "138", "110", "56326", "TCP", "Transport", "FIN, SEQ: 1.001.472" ], [ "139", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "139", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "139", "56326", "110", "TCP", "Transport", "SEQ: 13.000.082, ACK: 1.001.473" ], [ "140", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "140", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "140", "110", "56326", "TCP", "Transport", "SEQ: 1.001.473, ACK: 13.000.082" ] ], "00000000-0000-0000-0000-000000000202": [ [ "1", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x806" ], [ "2", "192.168.0.10", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" ], [ "3", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "3", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "3", "52531", "53", "UDP", "Transport", "" ], [ "3", null, null, "DNS", "Anwendung", "ID=43842 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" ], [ "4", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "4", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "4", "53", "52531", "UDP", "Transport", "" ], [ "4", null, null, "DNS", "Anwendung", "ID=43842 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" ], [ "5", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "5", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ], [ "6", "02:00:00:00:02:13", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "6", "192.168.0.30", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "7", "02:00:00:00:02:12", "02:00:00:00:02:13", "", "Netzzugang", "0x806" ], [ "7", "192.168.0.10", "192.168.0.30", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:13|192.168.0.30]" ], [ "8", "02:00:00:00:02:13", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "8", "192.168.0.30", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "8", "62746", "53", "UDP", "Transport", "" ], [ "8", null, null, "DNS", "Anwendung", "ID=3243 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n" ], [ "9", "02:00:00:00:02:12", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "9", "192.168.0.10", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "9", "53", "62746", "UDP", "Transport", "" ], [ "9", null, null, "DNS", "Anwendung", "ID=3243 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n" ], [ "10", "02:00:00:00:02:13", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "10", "192.168.0.30", "192.168.0.31", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" ], [ "11", "02:00:00:00:02:14", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "11", "192.168.0.31", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "12", "02:00:00:00:02:12", "02:00:00:00:02:14", "", "Netzzugang", "0x806" ], [ "12", "192.168.0.10", "192.168.0.31", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:14|192.168.0.31]" ], [ "13", "02:00:00:00:02:14", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "13", "192.168.0.31", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "13", "58459", "53", "UDP", "Transport", "" ], [ "13", null, null, "DNS", "Anwendung", "ID=47846 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n" ], [ "14", "02:00:00:00:02:12", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "14", "192.168.0.10", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "14", "53", "58459", "UDP", "Transport", "" ], [ "14", null, null, "DNS", "Anwendung", "ID=47846 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n" ], [ "15", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "15", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "15", "57606", "53", "UDP", "Transport", "" ], [ "15", null, null, "DNS", "Anwendung", "ID=60054 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" ], [ "16", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "16", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "16", "53", "57606", "UDP", "Transport", "" ], [ "16", null, null, "DNS", "Anwendung", "ID=60054 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" ], [ "17", "02:00:00:00:02:13", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "17", "192.168.0.30", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "17", "53558", "53", "UDP", "Transport", "" ], [ "17", null, null, "DNS", "Anwendung", "ID=35053 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnirgendwo.de. MX IN\n" ], [ "18", "02:00:00:00:02:12", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "18", "192.168.0.10", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "18", "53", "53558", "UDP", "Transport", "" ], [ "18", null, null, "DNS", "Anwendung", "ID=35053 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" ], [ "19", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "19", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "19", "56276", "53", "UDP", "Transport", "" ], [ "19", null, null, "DNS", "Anwendung", "ID=40953 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n" ], [ "20", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "20", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "20", "53", "56276", "UDP", "Transport", "" ], [ "20", null, null, "DNS", "Anwendung", "ID=40953 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n" ] ], "00000000-0000-0000-0000-000000000203": [ [ "1", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "2", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ], [ "3", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x806" ], [ "3", "192.168.0.30", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" ], [ "4", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "4", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "4", "62333", "25", "TCP", "Transport", "SYN, SEQ: 5.000.000" ], [ "5", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "5", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "5", "25", "62333", "TCP", "Transport", "SYN, SEQ: 2.000.000, ACK: 5.000.001" ], [ "6", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "6", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "6", "62333", "25", "TCP", "Transport", "SEQ: 5.000.001, ACK: 2.000.001" ], [ "7", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "7", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "25", "62333", "TCP", "Transport", "SEQ: 2.000.001" ], [ "7", null, null, "SMTP", "Anwendung", "220 Willkommen bei filius.de" ], [ "8", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "8", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "62333", "25", "TCP", "Transport", "SEQ: 5.000.001, ACK: 2.000.029" ], [ "9", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "9", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "9", "62333", "25", "TCP", "Transport", "SEQ: 5.000.001" ], [ "9", null, null, "SMTP", "Anwendung", "HELO 192.168.0.20" ], [ "10", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "10", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "10", "25", "62333", "TCP", "Transport", "SEQ: 2.000.029, ACK: 5.000.018" ], [ "11", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "11", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "25", "62333", "TCP", "Transport", "SEQ: 2.000.029" ], [ "11", null, null, "SMTP", "Anwendung", "250 Hello 192.168.0.20" ], [ "12", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "12", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "12", "62333", "25", "TCP", "Transport", "SEQ: 5.000.018, ACK: 2.000.051" ], [ "13", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "13", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "13", "62333", "25", "TCP", "Transport", "SEQ: 5.000.018" ], [ "13", null, null, "SMTP", "Anwendung", "MAIL FROM: " ], [ "14", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "14", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "14", "25", "62333", "TCP", "Transport", "SEQ: 2.000.051, ACK: 5.000.045" ], [ "15", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "15", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "15", "25", "62333", "TCP", "Transport", "SEQ: 2.000.051" ], [ "15", null, null, "SMTP", "Anwendung", "250 Sender OK" ], [ "16", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "16", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "16", "62333", "25", "TCP", "Transport", "SEQ: 5.000.045, ACK: 2.000.064" ], [ "17", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "17", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "17", "62333", "25", "TCP", "Transport", "SEQ: 5.000.045" ], [ "17", null, null, "SMTP", "Anwendung", "RCPT TO:" ], [ "18", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "18", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "18", "25", "62333", "TCP", "Transport", "SEQ: 2.000.064, ACK: 5.000.072" ], [ "19", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "19", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "19", "25", "62333", "TCP", "Transport", "SEQ: 2.000.064" ], [ "19", null, null, "SMTP", "Anwendung", "250 Recipient OK" ], [ "20", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "20", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "20", "62333", "25", "TCP", "Transport", "SEQ: 5.000.072, ACK: 2.000.080" ], [ "21", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "21", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "21", "62333", "25", "TCP", "Transport", "SEQ: 5.000.072" ], [ "21", null, null, "SMTP", "Anwendung", "DATA" ], [ "22", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "22", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "22", "25", "62333", "TCP", "Transport", "SEQ: 2.000.080, ACK: 5.000.076" ], [ "23", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "23", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "23", "25", "62333", "TCP", "Transport", "SEQ: 2.000.080" ], [ "23", null, null, "SMTP", "Anwendung", "354 End data with ." ], [ "24", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "24", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "24", "62333", "25", "TCP", "Transport", "SEQ: 5.000.076, ACK: 2.000.115" ], [ "25", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "25", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "25", "62333", "25", "TCP", "Transport", "SEQ: 5.000.076" ], [ "25", null, null, "SMTP", "Anwendung", "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" ], [ "26", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "26", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "26", "25", "62333", "TCP", "Transport", "SEQ: 2.000.115, ACK: 5.000.168" ], [ "27", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "27", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "27", "25", "62333", "TCP", "Transport", "SEQ: 2.000.115" ], [ "27", null, null, "SMTP", "Anwendung", "250 Mail queued for delivery" ], [ "28", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "28", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "28", "62333", "25", "TCP", "Transport", "SEQ: 5.000.168, ACK: 2.000.143" ], [ "29", "02:00:00:00:02:13", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "29", "192.168.0.30", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "30", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "30", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "30", "62333", "25", "TCP", "Transport", "SEQ: 5.000.168" ], [ "30", null, null, "SMTP", "Anwendung", "QUIT" ], [ "31", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "31", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "31", "25", "62333", "TCP", "Transport", "SEQ: 2.000.143, ACK: 5.000.172" ], [ "32", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "32", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "32", "25", "62333", "TCP", "Transport", "SEQ: 2.000.143" ], [ "32", null, null, "SMTP", "Anwendung", "221 Server beendet Verbindung." ], [ "33", "02:00:00:00:02:12", "02:00:00:00:02:13", "", "Netzzugang", "0x806" ], [ "33", "192.168.0.10", "192.168.0.30", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:13|192.168.0.30]" ], [ "34", "02:00:00:00:02:13", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "34", "192.168.0.30", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "34", "62746", "53", "UDP", "Transport", "" ], [ "34", null, null, "DNS", "Anwendung", "ID=3243 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n" ], [ "35", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "35", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "35", "62333", "25", "TCP", "Transport", "SEQ: 5.000.172, ACK: 2.000.173" ], [ "36", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "36", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "36", "25", "62333", "TCP", "Transport", "FIN, SEQ: 2.000.173" ], [ "37", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "37", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "37", "62333", "25", "TCP", "Transport", "FIN, SEQ: 5.000.172" ], [ "38", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "38", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "38", "25", "62333", "TCP", "Transport", "SEQ: 2.000.174, ACK: 5.000.173" ], [ "39", "02:00:00:00:02:12", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "39", "192.168.0.10", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "39", "53", "62746", "UDP", "Transport", "" ], [ "39", null, null, "DNS", "Anwendung", "ID=3243 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n" ], [ "40", "02:00:00:00:02:13", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "40", "192.168.0.30", "192.168.0.31", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" ], [ "41", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "41", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "41", "62333", "25", "TCP", "Transport", "SEQ: 5.000.173, ACK: 2.000.174" ], [ "42", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x806" ], [ "42", "192.168.0.31", "192.168.0.30", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:14 [op=REPLY, sender=02:00:00:00:02:14|192.168.0.31, target=02:00:00:00:02:13|192.168.0.30]" ], [ "43", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "43", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "43", "64673", "25", "TCP", "Transport", "SYN, SEQ: 7.000.000" ], [ "44", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "44", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "44", "25", "64673", "TCP", "Transport", "SYN, SEQ: 4.000.000, ACK: 7.000.001" ], [ "45", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "45", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "45", "64673", "25", "TCP", "Transport", "SEQ: 7.000.001, ACK: 4.000.001" ], [ "46", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "46", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "46", "25", "64673", "TCP", "Transport", "SEQ: 4.000.001" ], [ "46", null, null, "SMTP", "Anwendung", "220 Willkommen bei andere.de" ], [ "47", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "47", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "47", "64673", "25", "TCP", "Transport", "SEQ: 7.000.001, ACK: 4.000.029" ], [ "48", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "48", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "48", "64673", "25", "TCP", "Transport", "SEQ: 7.000.001" ], [ "48", null, null, "SMTP", "Anwendung", "HELO 192.168.0.30" ], [ "49", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "49", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "49", "25", "64673", "TCP", "Transport", "SEQ: 4.000.029, ACK: 7.000.018" ], [ "50", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "50", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "50", "25", "64673", "TCP", "Transport", "SEQ: 4.000.029" ], [ "50", null, null, "SMTP", "Anwendung", "250 Hello 192.168.0.30" ], [ "51", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "51", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "51", "64673", "25", "TCP", "Transport", "SEQ: 7.000.018, ACK: 4.000.051" ], [ "52", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "52", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "52", "64673", "25", "TCP", "Transport", "SEQ: 7.000.018" ], [ "52", null, null, "SMTP", "Anwendung", "MAIL FROM: " ], [ "53", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "53", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "53", "25", "64673", "TCP", "Transport", "SEQ: 4.000.051, ACK: 7.000.045" ], [ "54", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "54", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "54", "25", "64673", "TCP", "Transport", "SEQ: 4.000.051" ], [ "54", null, null, "SMTP", "Anwendung", "250 Sender OK" ], [ "55", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "55", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "55", "64673", "25", "TCP", "Transport", "SEQ: 7.000.045, ACK: 4.000.064" ], [ "56", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "56", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "56", "64673", "25", "TCP", "Transport", "SEQ: 7.000.045" ], [ "56", null, null, "SMTP", "Anwendung", "RCPT TO:" ], [ "57", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "57", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "57", "25", "64673", "TCP", "Transport", "SEQ: 4.000.064, ACK: 7.000.072" ], [ "58", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "58", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "58", "25", "64673", "TCP", "Transport", "SEQ: 4.000.064" ], [ "58", null, null, "SMTP", "Anwendung", "250 Recipient OK" ], [ "59", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "59", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "59", "64673", "25", "TCP", "Transport", "SEQ: 7.000.072, ACK: 4.000.080" ], [ "60", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "60", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "60", "64673", "25", "TCP", "Transport", "SEQ: 7.000.072" ], [ "60", null, null, "SMTP", "Anwendung", "DATA" ], [ "61", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "61", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "61", "25", "64673", "TCP", "Transport", "SEQ: 4.000.080, ACK: 7.000.076" ], [ "62", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "62", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "62", "25", "64673", "TCP", "Transport", "SEQ: 4.000.080" ], [ "62", null, null, "SMTP", "Anwendung", "354 End data with ." ], [ "63", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "63", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "63", "64673", "25", "TCP", "Transport", "SEQ: 7.000.076, ACK: 4.000.115" ], [ "64", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "64", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "64", "64673", "25", "TCP", "Transport", "SEQ: 7.000.076" ], [ "64", null, null, "SMTP", "Anwendung", "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" ], [ "65", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "65", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "65", "25", "64673", "TCP", "Transport", "SEQ: 4.000.115, ACK: 7.000.168" ], [ "66", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "66", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "66", "25", "64673", "TCP", "Transport", "SEQ: 4.000.115" ], [ "66", null, null, "SMTP", "Anwendung", "250 Mail queued for delivery" ], [ "67", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "67", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "67", "64673", "25", "TCP", "Transport", "SEQ: 7.000.168, ACK: 4.000.143" ], [ "68", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "68", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "68", "64673", "25", "TCP", "Transport", "SEQ: 7.000.168" ], [ "68", null, null, "SMTP", "Anwendung", "QUIT" ], [ "69", "02:00:00:00:02:14", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "69", "192.168.0.31", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "70", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "70", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "70", "25", "64673", "TCP", "Transport", "SEQ: 4.000.143, ACK: 7.000.172" ], [ "71", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "71", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "71", "25", "64673", "TCP", "Transport", "SEQ: 4.000.143" ], [ "71", null, null, "SMTP", "Anwendung", "221 Server beendet Verbindung." ], [ "72", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "72", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "72", "64673", "25", "TCP", "Transport", "SEQ: 7.000.172, ACK: 4.000.173" ], [ "73", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "73", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "73", "50936", "25", "TCP", "Transport", "SYN, SEQ: 9.000.000" ], [ "74", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "74", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "74", "64673", "25", "TCP", "Transport", "FIN, SEQ: 7.000.172" ], [ "75", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "75", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "75", "25", "50936", "TCP", "Transport", "SYN, SEQ: 6.000.000, ACK: 9.000.001" ], [ "76", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "76", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "76", "25", "64673", "TCP", "Transport", "FIN, SEQ: 4.000.173" ], [ "77", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "77", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "77", "64673", "25", "TCP", "Transport", "SEQ: 7.000.173, ACK: 4.000.174" ], [ "78", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "78", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "78", "25", "64673", "TCP", "Transport", "SEQ: 4.000.174, ACK: 7.000.173" ], [ "79", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "79", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "79", "50936", "25", "TCP", "Transport", "SEQ: 9.000.001, ACK: 6.000.001" ], [ "80", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "80", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "80", "25", "50936", "TCP", "Transport", "SEQ: 6.000.001" ], [ "80", null, null, "SMTP", "Anwendung", "220 Willkommen bei filius.de" ], [ "81", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "81", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "81", "50936", "25", "TCP", "Transport", "SEQ: 9.000.001, ACK: 6.000.029" ], [ "82", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "82", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "82", "50936", "25", "TCP", "Transport", "SEQ: 9.000.001" ], [ "82", null, null, "SMTP", "Anwendung", "HELO 192.168.0.31" ], [ "83", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "83", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "83", "25", "50936", "TCP", "Transport", "SEQ: 6.000.029, ACK: 9.000.018" ], [ "84", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "84", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "84", "25", "50936", "TCP", "Transport", "SEQ: 6.000.029" ], [ "84", null, null, "SMTP", "Anwendung", "250 Hello 192.168.0.31" ], [ "85", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "85", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "85", "50936", "25", "TCP", "Transport", "SEQ: 9.000.018, ACK: 6.000.051" ], [ "86", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "86", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "86", "50936", "25", "TCP", "Transport", "SEQ: 9.000.018" ], [ "86", null, null, "SMTP", "Anwendung", "MAIL FROM: <>" ], [ "87", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "87", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "87", "25", "50936", "TCP", "Transport", "SEQ: 6.000.051, ACK: 9.000.031" ], [ "88", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "88", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "88", "25", "50936", "TCP", "Transport", "SEQ: 6.000.051" ], [ "88", null, null, "SMTP", "Anwendung", "250 Sender OK" ], [ "89", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "89", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "89", "50936", "25", "TCP", "Transport", "SEQ: 9.000.031, ACK: 6.000.064" ], [ "90", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "90", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "90", "50936", "25", "TCP", "Transport", "SEQ: 9.000.031" ], [ "90", null, null, "SMTP", "Anwendung", "RCPT TO:" ], [ "91", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "91", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "91", "25", "50936", "TCP", "Transport", "SEQ: 6.000.064, ACK: 9.000.055" ], [ "92", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "92", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "92", "25", "50936", "TCP", "Transport", "SEQ: 6.000.064" ], [ "92", null, null, "SMTP", "Anwendung", "250 Recipient OK" ], [ "93", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "93", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "93", "50936", "25", "TCP", "Transport", "SEQ: 9.000.055, ACK: 6.000.080" ], [ "94", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "94", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "94", "50936", "25", "TCP", "Transport", "SEQ: 9.000.055" ], [ "94", null, null, "SMTP", "Anwendung", "DATA" ], [ "95", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "95", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "95", "25", "50936", "TCP", "Transport", "SEQ: 6.000.080, ACK: 9.000.059" ], [ "96", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "96", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "96", "25", "50936", "TCP", "Transport", "SEQ: 6.000.080" ], [ "96", null, null, "SMTP", "Anwendung", "354 End data with ." ], [ "97", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "97", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "97", "50936", "25", "TCP", "Transport", "SEQ: 9.000.059, ACK: 6.000.115" ], [ "98", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "98", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "98", "50936", "25", "TCP", "Transport", "SEQ: 9.000.059" ], [ "98", null, null, "SMTP", "Anwendung", "From: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" ], [ "99", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "99", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "99", "25", "50936", "TCP", "Transport", "SEQ: 6.000.115, ACK: 9.000.525" ], [ "100", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "100", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "100", "25", "50936", "TCP", "Transport", "SEQ: 6.000.115" ], [ "100", null, null, "SMTP", "Anwendung", "250 Mail queued for delivery" ], [ "101", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "101", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "101", "50936", "25", "TCP", "Transport", "SEQ: 9.000.525, ACK: 6.000.143" ], [ "102", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "102", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "102", "50936", "25", "TCP", "Transport", "SEQ: 9.000.525" ], [ "102", null, null, "SMTP", "Anwendung", "QUIT" ], [ "103", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "103", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "103", "25", "50936", "TCP", "Transport", "SEQ: 6.000.143, ACK: 9.000.529" ], [ "104", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "104", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "104", "25", "50936", "TCP", "Transport", "SEQ: 6.000.143" ], [ "104", null, null, "SMTP", "Anwendung", "221 Server beendet Verbindung." ], [ "105", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "105", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "105", "50936", "25", "TCP", "Transport", "SEQ: 9.000.529, ACK: 6.000.173" ], [ "106", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "106", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "106", "25", "50936", "TCP", "Transport", "FIN, SEQ: 6.000.173" ], [ "107", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "107", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "107", "50936", "25", "TCP", "Transport", "FIN, SEQ: 9.000.529" ], [ "108", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "108", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "108", "25", "50936", "TCP", "Transport", "SEQ: 6.000.174, ACK: 9.000.530" ], [ "109", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "109", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "109", "50936", "25", "TCP", "Transport", "SEQ: 9.000.530, ACK: 6.000.174" ], [ "110", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "110", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "110", "65366", "25", "TCP", "Transport", "SYN, SEQ: 11.000.000" ], [ "111", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "111", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "111", "25", "65366", "TCP", "Transport", "SYN, SEQ: 10.000.000, ACK: 11.000.001" ], [ "112", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "112", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "112", "65366", "25", "TCP", "Transport", "SEQ: 11.000.001, ACK: 10.000.001" ], [ "113", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "113", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "113", "25", "65366", "TCP", "Transport", "SEQ: 10.000.001" ], [ "113", null, null, "SMTP", "Anwendung", "220 Willkommen bei filius.de" ], [ "114", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "114", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "114", "65366", "25", "TCP", "Transport", "SEQ: 11.000.001, ACK: 10.000.029" ], [ "115", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "115", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "115", "65366", "25", "TCP", "Transport", "SEQ: 11.000.001" ], [ "115", null, null, "SMTP", "Anwendung", "HELO 192.168.0.20" ], [ "116", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "116", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "116", "25", "65366", "TCP", "Transport", "SEQ: 10.000.029, ACK: 11.000.018" ], [ "117", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "117", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "117", "25", "65366", "TCP", "Transport", "SEQ: 10.000.029" ], [ "117", null, null, "SMTP", "Anwendung", "250 Hello 192.168.0.20" ], [ "118", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "118", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "118", "65366", "25", "TCP", "Transport", "SEQ: 11.000.018, ACK: 10.000.051" ], [ "119", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "119", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "119", "65366", "25", "TCP", "Transport", "SEQ: 11.000.018" ], [ "119", null, null, "SMTP", "Anwendung", "MAIL FROM: " ], [ "120", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "120", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "120", "25", "65366", "TCP", "Transport", "SEQ: 10.000.051, ACK: 11.000.045" ], [ "121", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "121", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "121", "25", "65366", "TCP", "Transport", "SEQ: 10.000.051" ], [ "121", null, null, "SMTP", "Anwendung", "250 Sender OK" ], [ "122", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "122", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "122", "65366", "25", "TCP", "Transport", "SEQ: 11.000.045, ACK: 10.000.064" ], [ "123", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "123", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "123", "65366", "25", "TCP", "Transport", "SEQ: 11.000.045" ], [ "123", null, null, "SMTP", "Anwendung", "RCPT TO:" ], [ "124", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "124", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "124", "25", "65366", "TCP", "Transport", "SEQ: 10.000.064, ACK: 11.000.074" ], [ "125", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "125", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "125", "25", "65366", "TCP", "Transport", "SEQ: 10.000.064" ], [ "125", null, null, "SMTP", "Anwendung", "250 Recipient OK" ], [ "126", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "126", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "126", "65366", "25", "TCP", "Transport", "SEQ: 11.000.074, ACK: 10.000.080" ], [ "127", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "127", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "127", "65366", "25", "TCP", "Transport", "SEQ: 11.000.074" ], [ "127", null, null, "SMTP", "Anwendung", "DATA" ], [ "128", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "128", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "128", "25", "65366", "TCP", "Transport", "SEQ: 10.000.080, ACK: 11.000.078" ], [ "129", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "129", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "129", "25", "65366", "TCP", "Transport", "SEQ: 10.000.080" ], [ "129", null, null, "SMTP", "Anwendung", "354 End data with ." ], [ "130", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "130", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "130", "65366", "25", "TCP", "Transport", "SEQ: 11.000.078, ACK: 10.000.115" ], [ "131", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "131", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "131", "65366", "25", "TCP", "Transport", "SEQ: 11.000.078" ], [ "131", null, null, "SMTP", "Anwendung", "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" ], [ "132", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "132", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "132", "25", "65366", "TCP", "Transport", "SEQ: 10.000.115, ACK: 11.000.172" ], [ "133", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "133", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "133", "25", "65366", "TCP", "Transport", "SEQ: 10.000.115" ], [ "133", null, null, "SMTP", "Anwendung", "250 Mail queued for delivery" ], [ "134", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "134", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "134", "65366", "25", "TCP", "Transport", "SEQ: 11.000.172, ACK: 10.000.143" ], [ "135", "02:00:00:00:02:13", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "135", "192.168.0.30", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "135", "53558", "53", "UDP", "Transport", "" ], [ "135", null, null, "DNS", "Anwendung", "ID=35053 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnirgendwo.de. MX IN\n" ], [ "136", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "136", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "136", "65366", "25", "TCP", "Transport", "SEQ: 11.000.172" ], [ "136", null, null, "SMTP", "Anwendung", "QUIT" ], [ "137", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "137", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "137", "25", "65366", "TCP", "Transport", "SEQ: 10.000.143, ACK: 11.000.176" ], [ "138", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "138", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "138", "25", "65366", "TCP", "Transport", "SEQ: 10.000.143" ], [ "138", null, null, "SMTP", "Anwendung", "221 Server beendet Verbindung." ], [ "139", "02:00:00:00:02:12", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "139", "192.168.0.10", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "139", "53", "53558", "UDP", "Transport", "" ], [ "139", null, null, "DNS", "Anwendung", "ID=35053 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" ], [ "140", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "140", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "140", "65366", "25", "TCP", "Transport", "SEQ: 11.000.176, ACK: 10.000.173" ], [ "141", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "141", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "141", "25", "65366", "TCP", "Transport", "FIN, SEQ: 10.000.173" ], [ "142", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "142", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "142", "65366", "25", "TCP", "Transport", "FIN, SEQ: 11.000.176" ], [ "143", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "143", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "143", "25", "65366", "TCP", "Transport", "SEQ: 10.000.174, ACK: 11.000.177" ], [ "144", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "144", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "144", "65366", "25", "TCP", "Transport", "SEQ: 11.000.177, ACK: 10.000.174" ], [ "145", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "145", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "145", "56326", "110", "TCP", "Transport", "SYN, SEQ: 13.000.000" ], [ "146", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "146", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "146", "110", "56326", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 13.000.001" ], [ "147", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "147", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "147", "56326", "110", "TCP", "Transport", "SEQ: 13.000.001, ACK: 1.000.001" ], [ "148", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "148", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "148", "110", "56326", "TCP", "Transport", "SEQ: 1.000.001" ], [ "148", null, null, "POP3", "Anwendung", "+OK POP3 server ready" ], [ "149", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "149", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "149", "56326", "110", "TCP", "Transport", "SEQ: 13.000.001, ACK: 1.000.022" ], [ "150", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "150", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "150", "56326", "110", "TCP", "Transport", "SEQ: 13.000.001" ], [ "150", null, null, "POP3", "Anwendung", "USER anna" ], [ "151", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "151", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "151", "110", "56326", "TCP", "Transport", "SEQ: 1.000.022, ACK: 13.000.010" ], [ "152", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "152", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "152", "110", "56326", "TCP", "Transport", "SEQ: 1.000.022" ], [ "152", null, null, "POP3", "Anwendung", "+OK enter password" ], [ "153", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "153", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "153", "56326", "110", "TCP", "Transport", "SEQ: 13.000.010, ACK: 1.000.040" ], [ "154", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "154", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "154", "56326", "110", "TCP", "Transport", "SEQ: 13.000.010" ], [ "154", null, null, "POP3", "Anwendung", "PASS geheim" ], [ "155", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "155", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "155", "110", "56326", "TCP", "Transport", "SEQ: 1.000.040, ACK: 13.000.021" ], [ "156", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "156", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "156", "110", "56326", "TCP", "Transport", "SEQ: 1.000.040" ], [ "156", null, null, "POP3", "Anwendung", "+OK Mailbox locked and ready" ], [ "157", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "157", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "157", "56326", "110", "TCP", "Transport", "SEQ: 13.000.021, ACK: 1.000.068" ], [ "158", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "158", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "158", "56326", "110", "TCP", "Transport", "SEQ: 13.000.021" ], [ "158", null, null, "", "Anwendung", "STAT" ], [ "159", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "159", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "159", "110", "56326", "TCP", "Transport", "SEQ: 1.000.068, ACK: 13.000.025" ], [ "160", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "160", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "160", "110", "56326", "TCP", "Transport", "SEQ: 1.000.068" ], [ "160", null, null, "POP3", "Anwendung", "+OK 4 1054" ], [ "161", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "161", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "161", "56326", "110", "TCP", "Transport", "SEQ: 13.000.025, ACK: 1.000.078" ], [ "162", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "162", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "162", "56326", "110", "TCP", "Transport", "SEQ: 13.000.025" ], [ "162", null, null, "", "Anwendung", "LIST" ], [ "163", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "163", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "163", "110", "56326", "TCP", "Transport", "SEQ: 1.000.078, ACK: 13.000.029" ], [ "164", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "164", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "164", "110", "56326", "TCP", "Transport", "SEQ: 1.000.078" ], [ "164", null, null, "POP3", "Anwendung", "+OK 4 1054\n0 80\n1 89\n2 441\n3 444\n" ], [ "165", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "165", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "165", "56326", "110", "TCP", "Transport", "SEQ: 13.000.029, ACK: 1.000.111" ], [ "166", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "166", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "166", "56326", "110", "TCP", "Transport", "SEQ: 13.000.029" ], [ "166", null, null, "POP3", "Anwendung", "RETR 0" ], [ "167", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "167", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "167", "110", "56326", "TCP", "Transport", "SEQ: 1.000.111, ACK: 13.000.035" ], [ "168", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "168", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "168", "110", "56326", "TCP", "Transport", "SEQ: 1.000.111" ], [ "168", null, null, "POP3", "Anwendung", "+OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile" ], [ "169", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "169", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "169", "56326", "110", "TCP", "Transport", "SEQ: 13.000.035, ACK: 1.000.233" ], [ "170", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "170", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "170", "56326", "110", "TCP", "Transport", "SEQ: 13.000.035" ], [ "170", null, null, "POP3", "Anwendung", "DELE 0" ], [ "171", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "171", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "171", "110", "56326", "TCP", "Transport", "SEQ: 1.000.233, ACK: 13.000.041" ], [ "172", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "172", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "172", "110", "56326", "TCP", "Transport", "SEQ: 1.000.233" ], [ "172", null, null, "POP3", "Anwendung", "+OK message marked for delete" ], [ "173", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "173", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "173", "56326", "110", "TCP", "Transport", "SEQ: 13.000.041, ACK: 1.000.262" ], [ "174", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "174", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "174", "56326", "110", "TCP", "Transport", "SEQ: 13.000.041" ], [ "174", null, null, "POP3", "Anwendung", "RETR 1" ], [ "175", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "175", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "175", "110", "56326", "TCP", "Transport", "SEQ: 1.000.262, ACK: 13.000.047" ], [ "176", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "176", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "176", "110", "56326", "TCP", "Transport", "SEQ: 1.000.262" ], [ "176", null, null, "POP3", "Anwendung", "+OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?" ], [ "177", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "177", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "177", "56326", "110", "TCP", "Transport", "SEQ: 13.000.047, ACK: 1.000.414" ], [ "178", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "178", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "178", "56326", "110", "TCP", "Transport", "SEQ: 13.000.047" ], [ "178", null, null, "POP3", "Anwendung", "DELE 1" ], [ "179", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "179", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "179", "110", "56326", "TCP", "Transport", "SEQ: 1.000.414, ACK: 13.000.053" ], [ "180", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "180", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "180", "110", "56326", "TCP", "Transport", "SEQ: 1.000.414" ], [ "180", null, null, "POP3", "Anwendung", "+OK message marked for delete" ], [ "181", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "181", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "181", "56326", "110", "TCP", "Transport", "SEQ: 13.000.053, ACK: 1.000.443" ], [ "182", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "182", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "182", "56326", "110", "TCP", "Transport", "SEQ: 13.000.053" ], [ "182", null, null, "POP3", "Anwendung", "RETR 2" ], [ "183", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "183", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "183", "110", "56326", "TCP", "Transport", "SEQ: 1.000.443, ACK: 13.000.059" ], [ "184", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "184", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "184", "110", "56326", "TCP", "Transport", "SEQ: 1.000.443" ], [ "184", null, null, "POP3", "Anwendung", "+OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?" ], [ "185", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "185", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "185", "56326", "110", "TCP", "Transport", "SEQ: 13.000.059, ACK: 1.000.925" ], [ "186", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "186", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "186", "56326", "110", "TCP", "Transport", "SEQ: 13.000.059" ], [ "186", null, null, "POP3", "Anwendung", "DELE 2" ], [ "187", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "187", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "187", "110", "56326", "TCP", "Transport", "SEQ: 1.000.925, ACK: 13.000.065" ], [ "188", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "188", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "188", "110", "56326", "TCP", "Transport", "SEQ: 1.000.925" ], [ "188", null, null, "POP3", "Anwendung", "+OK message marked for delete" ], [ "189", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "189", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "189", "56326", "110", "TCP", "Transport", "SEQ: 13.000.065, ACK: 1.000.954" ], [ "190", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "190", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "190", "56326", "110", "TCP", "Transport", "SEQ: 13.000.065" ], [ "190", null, null, "POP3", "Anwendung", "RETR 3" ], [ "191", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "191", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "191", "110", "56326", "TCP", "Transport", "SEQ: 1.000.954, ACK: 13.000.071" ], [ "192", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "192", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "192", "110", "56326", "TCP", "Transport", "SEQ: 1.000.954" ], [ "192", null, null, "POP3", "Anwendung", "+OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009jemand@nirgendwo.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?" ], [ "193", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "193", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "193", "56326", "110", "TCP", "Transport", "SEQ: 13.000.071, ACK: 1.001.440" ], [ "194", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "194", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "194", "56326", "110", "TCP", "Transport", "SEQ: 13.000.071" ], [ "194", null, null, "POP3", "Anwendung", "DELE 3" ], [ "195", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "195", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "195", "110", "56326", "TCP", "Transport", "SEQ: 1.001.440, ACK: 13.000.077" ], [ "196", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "196", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "196", "110", "56326", "TCP", "Transport", "SEQ: 1.001.440" ], [ "196", null, null, "POP3", "Anwendung", "+OK message marked for delete" ], [ "197", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "197", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "197", "56326", "110", "TCP", "Transport", "SEQ: 13.000.077, ACK: 1.001.469" ], [ "198", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "198", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "198", "56326", "110", "TCP", "Transport", "SEQ: 13.000.077" ], [ "198", null, null, "POP3", "Anwendung", "QUIT" ], [ "199", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "199", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "199", "110", "56326", "TCP", "Transport", "SEQ: 1.001.469, ACK: 13.000.081" ], [ "200", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "200", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "200", "110", "56326", "TCP", "Transport", "SEQ: 1.001.469" ], [ "200", null, null, "POP3", "Anwendung", "+OK" ], [ "201", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "201", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "201", "56326", "110", "TCP", "Transport", "SEQ: 13.000.081, ACK: 1.001.472" ], [ "202", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "202", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "202", "110", "56326", "TCP", "Transport", "FIN, SEQ: 1.001.472" ], [ "203", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "203", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "203", "56326", "110", "TCP", "Transport", "FIN, SEQ: 13.000.081" ], [ "204", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "204", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "204", "110", "56326", "TCP", "Transport", "SEQ: 1.001.473, ACK: 13.000.082" ], [ "205", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "205", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "205", "56326", "110", "TCP", "Transport", "SEQ: 13.000.082, ACK: 1.001.473" ] ], "00000000-0000-0000-0000-000000000204": [ [ "1", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "2", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ], [ "3", "02:00:00:00:02:13", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "3", "192.168.0.30", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "4", "02:00:00:00:02:13", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "4", "192.168.0.30", "192.168.0.31", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" ], [ "5", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x806" ], [ "5", "192.168.0.31", "192.168.0.30", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:14 [op=REPLY, sender=02:00:00:00:02:14|192.168.0.31, target=02:00:00:00:02:13|192.168.0.30]" ], [ "6", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "6", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "6", "64673", "25", "TCP", "Transport", "SYN, SEQ: 7.000.000" ], [ "7", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "7", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "25", "64673", "TCP", "Transport", "SYN, SEQ: 4.000.000, ACK: 7.000.001" ], [ "8", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "8", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "64673", "25", "TCP", "Transport", "SEQ: 7.000.001, ACK: 4.000.001" ], [ "9", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "9", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "9", "25", "64673", "TCP", "Transport", "SEQ: 4.000.001" ], [ "9", null, null, "SMTP", "Anwendung", "220 Willkommen bei andere.de" ], [ "10", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "10", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "10", "64673", "25", "TCP", "Transport", "SEQ: 7.000.001, ACK: 4.000.029" ], [ "11", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "11", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "64673", "25", "TCP", "Transport", "SEQ: 7.000.001" ], [ "11", null, null, "SMTP", "Anwendung", "HELO 192.168.0.30" ], [ "12", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "12", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "12", "25", "64673", "TCP", "Transport", "SEQ: 4.000.029, ACK: 7.000.018" ], [ "13", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "13", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "13", "25", "64673", "TCP", "Transport", "SEQ: 4.000.029" ], [ "13", null, null, "SMTP", "Anwendung", "250 Hello 192.168.0.30" ], [ "14", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "14", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "14", "64673", "25", "TCP", "Transport", "SEQ: 7.000.018, ACK: 4.000.051" ], [ "15", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "15", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "15", "64673", "25", "TCP", "Transport", "SEQ: 7.000.018" ], [ "15", null, null, "SMTP", "Anwendung", "MAIL FROM: " ], [ "16", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "16", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "16", "25", "64673", "TCP", "Transport", "SEQ: 4.000.051, ACK: 7.000.045" ], [ "17", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "17", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "17", "25", "64673", "TCP", "Transport", "SEQ: 4.000.051" ], [ "17", null, null, "SMTP", "Anwendung", "250 Sender OK" ], [ "18", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "18", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "18", "64673", "25", "TCP", "Transport", "SEQ: 7.000.045, ACK: 4.000.064" ], [ "19", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "19", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "19", "64673", "25", "TCP", "Transport", "SEQ: 7.000.045" ], [ "19", null, null, "SMTP", "Anwendung", "RCPT TO:" ], [ "20", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "20", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "20", "25", "64673", "TCP", "Transport", "SEQ: 4.000.064, ACK: 7.000.072" ], [ "21", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "21", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "21", "25", "64673", "TCP", "Transport", "SEQ: 4.000.064" ], [ "21", null, null, "SMTP", "Anwendung", "250 Recipient OK" ], [ "22", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "22", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "22", "64673", "25", "TCP", "Transport", "SEQ: 7.000.072, ACK: 4.000.080" ], [ "23", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "23", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "23", "64673", "25", "TCP", "Transport", "SEQ: 7.000.072" ], [ "23", null, null, "SMTP", "Anwendung", "DATA" ], [ "24", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "24", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "24", "25", "64673", "TCP", "Transport", "SEQ: 4.000.080, ACK: 7.000.076" ], [ "25", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "25", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "25", "25", "64673", "TCP", "Transport", "SEQ: 4.000.080" ], [ "25", null, null, "SMTP", "Anwendung", "354 End data with ." ], [ "26", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "26", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "26", "64673", "25", "TCP", "Transport", "SEQ: 7.000.076, ACK: 4.000.115" ], [ "27", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "27", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "27", "64673", "25", "TCP", "Transport", "SEQ: 7.000.076" ], [ "27", null, null, "SMTP", "Anwendung", "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" ], [ "28", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "28", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "28", "25", "64673", "TCP", "Transport", "SEQ: 4.000.115, ACK: 7.000.168" ], [ "29", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "29", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "29", "25", "64673", "TCP", "Transport", "SEQ: 4.000.115" ], [ "29", null, null, "SMTP", "Anwendung", "250 Mail queued for delivery" ], [ "30", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "30", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "30", "64673", "25", "TCP", "Transport", "SEQ: 7.000.168, ACK: 4.000.143" ], [ "31", "02:00:00:00:02:14", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "31", "192.168.0.31", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "32", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "32", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "32", "64673", "25", "TCP", "Transport", "SEQ: 7.000.168" ], [ "32", null, null, "SMTP", "Anwendung", "QUIT" ], [ "33", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "33", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "33", "25", "64673", "TCP", "Transport", "SEQ: 4.000.143, ACK: 7.000.172" ], [ "34", "02:00:00:00:02:12", "02:00:00:00:02:14", "", "Netzzugang", "0x806" ], [ "34", "192.168.0.10", "192.168.0.31", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:14|192.168.0.31]" ], [ "35", "02:00:00:00:02:14", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "35", "192.168.0.31", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "35", "58459", "53", "UDP", "Transport", "" ], [ "35", null, null, "DNS", "Anwendung", "ID=47846 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n" ], [ "36", "02:00:00:00:02:12", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "36", "192.168.0.10", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "36", "53", "58459", "UDP", "Transport", "" ], [ "36", null, null, "DNS", "Anwendung", "ID=47846 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n" ], [ "37", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "37", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "37", "25", "64673", "TCP", "Transport", "SEQ: 4.000.143" ], [ "37", null, null, "SMTP", "Anwendung", "221 Server beendet Verbindung." ], [ "38", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "38", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "38", "50936", "25", "TCP", "Transport", "SYN, SEQ: 9.000.000" ], [ "39", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "39", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "39", "64673", "25", "TCP", "Transport", "SEQ: 7.000.172, ACK: 4.000.173" ], [ "40", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "40", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "40", "25", "64673", "TCP", "Transport", "FIN, SEQ: 4.000.173" ], [ "41", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "41", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "41", "64673", "25", "TCP", "Transport", "FIN, SEQ: 7.000.172" ], [ "42", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "42", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "42", "25", "64673", "TCP", "Transport", "SEQ: 4.000.174, ACK: 7.000.173" ], [ "43", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "43", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "43", "25", "50936", "TCP", "Transport", "SYN, SEQ: 6.000.000, ACK: 9.000.001" ], [ "44", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "44", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "44", "50936", "25", "TCP", "Transport", "SEQ: 9.000.001, ACK: 6.000.001" ], [ "45", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "45", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "45", "64673", "25", "TCP", "Transport", "SEQ: 7.000.173, ACK: 4.000.174" ], [ "46", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "46", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "46", "25", "50936", "TCP", "Transport", "SEQ: 6.000.001" ], [ "46", null, null, "SMTP", "Anwendung", "220 Willkommen bei filius.de" ], [ "47", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "47", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "47", "50936", "25", "TCP", "Transport", "SEQ: 9.000.001, ACK: 6.000.029" ], [ "48", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "48", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "48", "50936", "25", "TCP", "Transport", "SEQ: 9.000.001" ], [ "48", null, null, "SMTP", "Anwendung", "HELO 192.168.0.31" ], [ "49", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "49", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "49", "25", "50936", "TCP", "Transport", "SEQ: 6.000.029, ACK: 9.000.018" ], [ "50", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "50", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "50", "25", "50936", "TCP", "Transport", "SEQ: 6.000.029" ], [ "50", null, null, "SMTP", "Anwendung", "250 Hello 192.168.0.31" ], [ "51", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "51", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "51", "50936", "25", "TCP", "Transport", "SEQ: 9.000.018, ACK: 6.000.051" ], [ "52", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "52", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "52", "50936", "25", "TCP", "Transport", "SEQ: 9.000.018" ], [ "52", null, null, "SMTP", "Anwendung", "MAIL FROM: <>" ], [ "53", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "53", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "53", "25", "50936", "TCP", "Transport", "SEQ: 6.000.051, ACK: 9.000.031" ], [ "54", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "54", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "54", "25", "50936", "TCP", "Transport", "SEQ: 6.000.051" ], [ "54", null, null, "SMTP", "Anwendung", "250 Sender OK" ], [ "55", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "55", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "55", "50936", "25", "TCP", "Transport", "SEQ: 9.000.031, ACK: 6.000.064" ], [ "56", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "56", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "56", "50936", "25", "TCP", "Transport", "SEQ: 9.000.031" ], [ "56", null, null, "SMTP", "Anwendung", "RCPT TO:" ], [ "57", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "57", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "57", "25", "50936", "TCP", "Transport", "SEQ: 6.000.064, ACK: 9.000.055" ], [ "58", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "58", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "58", "25", "50936", "TCP", "Transport", "SEQ: 6.000.064" ], [ "58", null, null, "SMTP", "Anwendung", "250 Recipient OK" ], [ "59", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "59", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "59", "50936", "25", "TCP", "Transport", "SEQ: 9.000.055, ACK: 6.000.080" ], [ "60", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "60", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "60", "50936", "25", "TCP", "Transport", "SEQ: 9.000.055" ], [ "60", null, null, "SMTP", "Anwendung", "DATA" ], [ "61", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "61", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "61", "25", "50936", "TCP", "Transport", "SEQ: 6.000.080, ACK: 9.000.059" ], [ "62", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "62", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "62", "25", "50936", "TCP", "Transport", "SEQ: 6.000.080" ], [ "62", null, null, "SMTP", "Anwendung", "354 End data with ." ], [ "63", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "63", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "63", "50936", "25", "TCP", "Transport", "SEQ: 9.000.059, ACK: 6.000.115" ], [ "64", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "64", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "64", "50936", "25", "TCP", "Transport", "SEQ: 9.000.059" ], [ "64", null, null, "SMTP", "Anwendung", "From: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" ], [ "65", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "65", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "65", "25", "50936", "TCP", "Transport", "SEQ: 6.000.115, ACK: 9.000.525" ], [ "66", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "66", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "66", "25", "50936", "TCP", "Transport", "SEQ: 6.000.115" ], [ "66", null, null, "SMTP", "Anwendung", "250 Mail queued for delivery" ], [ "67", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "67", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "67", "50936", "25", "TCP", "Transport", "SEQ: 9.000.525, ACK: 6.000.143" ], [ "68", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "68", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "68", "50936", "25", "TCP", "Transport", "SEQ: 9.000.525" ], [ "68", null, null, "SMTP", "Anwendung", "QUIT" ], [ "69", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "69", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "69", "25", "50936", "TCP", "Transport", "SEQ: 6.000.143, ACK: 9.000.529" ], [ "70", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "70", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "70", "25", "50936", "TCP", "Transport", "SEQ: 6.000.143" ], [ "70", null, null, "SMTP", "Anwendung", "221 Server beendet Verbindung." ], [ "71", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "71", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "71", "50936", "25", "TCP", "Transport", "SEQ: 9.000.529, ACK: 6.000.173" ], [ "72", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "72", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "72", "50936", "25", "TCP", "Transport", "FIN, SEQ: 9.000.529" ], [ "73", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "73", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "73", "25", "50936", "TCP", "Transport", "FIN, SEQ: 6.000.173" ], [ "74", "02:00:00:00:02:14", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "74", "192.168.0.31", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "74", "50936", "25", "TCP", "Transport", "SEQ: 9.000.530, ACK: 6.000.174" ], [ "75", "02:00:00:00:02:13", "02:00:00:00:02:14", "", "Netzzugang", "0x800" ], [ "75", "192.168.0.30", "192.168.0.31", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "75", "25", "50936", "TCP", "Transport", "SEQ: 6.000.174, ACK: 9.000.530" ] ] }, "events": [ [ 215, "client", "null" ], [ 218, "server", "null" ], [ 221, "otherServer", "null" ], [ 500, "client", "call versendeEmail niemand@andere.de | | " ], [ 503, "client", "----" ], [ 1486, "client", "Verbindung zu 192.168.0.30:25 hergestellt" ], [ 1623, "server", "----" ], [ 1846, "server", "192.168.0.20> 220 Willkommen bei filius.de" ], [ 1902, "server", "192.168.0.20< HELO 192.168.0.20" ], [ 2180, "server", "192.168.0.20> 250 Hello 192.168.0.20" ], [ 2236, "server", "192.168.0.20< MAIL FROM: " ], [ 2514, "server", "192.168.0.20> 250 Sender OK" ], [ 2570, "server", "192.168.0.20< RCPT TO:" ], [ 2849, "server", "192.168.0.20> 250 Recipient OK" ], [ 2904, "server", "192.168.0.20< DATA" ], [ 3182, "server", "192.168.0.20> 354 End data with ." ], [ 3238, "server", "192.168.0.20< From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" ], [ 3515, "server", "192.168.0.20> 250 Mail queued for delivery" ], [ 3571, "server", "192.168.0.20< QUIT" ], [ 3743, "client", "Mail versendet an niemand@andere.de" ], [ 3743, "client", "null" ], [ 3743, "client", "Verbindung zu 192.168.0.30:25 getrennt" ], [ 3854, "server", "192.168.0.20> 221 Server beendet Verbindung." ], [ 3966, "server", "----" ], [ 4466, "server", "Verbindung zu 192.168.0.31:25 hergestellt" ], [ 4525, "otherServer", "----" ], [ 4747, "otherServer", "192.168.0.30> 220 Willkommen bei andere.de" ], [ 4802, "otherServer", "192.168.0.30< HELO 192.168.0.30" ], [ 5079, "otherServer", "192.168.0.30> 250 Hello 192.168.0.30" ], [ 5135, "otherServer", "192.168.0.30< MAIL FROM: " ], [ 5412, "otherServer", "192.168.0.30> 250 Sender OK" ], [ 5467, "otherServer", "192.168.0.30< RCPT TO:" ], [ 5744, "otherServer", "192.168.0.30> 250 Recipient OK" ], [ 5800, "otherServer", "192.168.0.30< DATA" ], [ 6077, "otherServer", "192.168.0.30> 354 End data with ." ], [ 6132, "otherServer", "192.168.0.30< From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" ], [ 6409, "otherServer", "192.168.0.30> 250 Mail queued for delivery" ], [ 6856, "otherServer", "192.168.0.30< QUIT" ], [ 6856, "otherServer", "----" ], [ 6967, "server", "Mail versendet an niemand@andere.de" ], [ 6967, "server", "null" ], [ 6967, "server", "Verbindung zu 192.168.0.31:25 getrennt" ], [ 7078, "otherServer", "192.168.0.30> 221 Server beendet Verbindung." ], [ 7256, "otherServer", "Verbindung zu 192.168.0.30:25 hergestellt" ], [ 7350, "server", "----" ], [ 7572, "server", "192.168.0.31> 220 Willkommen bei filius.de" ], [ 7627, "server", "192.168.0.31< HELO 192.168.0.31" ], [ 7904, "server", "192.168.0.31> 250 Hello 192.168.0.31" ], [ 7959, "server", "192.168.0.31< MAIL FROM: <>" ], [ 8236, "server", "192.168.0.31> 250 Sender OK" ], [ 8291, "server", "192.168.0.31< RCPT TO:" ], [ 8568, "server", "192.168.0.31> 250 Recipient OK" ], [ 8623, "server", "192.168.0.31< DATA" ], [ 8901, "server", "192.168.0.31> 354 End data with ." ], [ 8956, "server", "192.168.0.31< From: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" ], [ 9233, "server", "192.168.0.31> 250 Mail queued for delivery" ], [ 9233, "server", "E-Mail für anna im Postfach gespeichert." ], [ 9288, "server", "192.168.0.31< QUIT" ], [ 9454, "otherServer", "Mail versendet an anna@filius.de" ], [ 9454, "otherServer", "null" ], [ 9454, "otherServer", "Verbindung zu 192.168.0.30:25 getrennt" ], [ 9565, "server", "192.168.0.31> 221 Server beendet Verbindung." ], [ 12000, "client", "call versendeEmail jemand@nirgendwo.de | | " ], [ 12000, "client", "----" ], [ 12524, "client", "Verbindung zu 192.168.0.30:25 hergestellt" ], [ 12575, "server", "----" ], [ 12797, "server", "192.168.0.20> 220 Willkommen bei filius.de" ], [ 12853, "server", "192.168.0.20< HELO 192.168.0.20" ], [ 13130, "server", "192.168.0.20> 250 Hello 192.168.0.20" ], [ 13185, "server", "192.168.0.20< MAIL FROM: " ], [ 13462, "server", "192.168.0.20> 250 Sender OK" ], [ 13517, "server", "192.168.0.20< RCPT TO:" ], [ 13794, "server", "192.168.0.20> 250 Recipient OK" ], [ 13849, "server", "192.168.0.20< DATA" ], [ 14126, "server", "192.168.0.20> 354 End data with ." ], [ 14182, "server", "192.168.0.20< From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n" ], [ 14459, "server", "192.168.0.20> 250 Mail queued for delivery" ], [ 14514, "server", "192.168.0.20< QUIT" ], [ 14681, "client", "Mail versendet an jemand@nirgendwo.de" ], [ 14681, "client", "null" ], [ 14681, "client", "Verbindung zu 192.168.0.30:25 getrennt" ], [ 14683, "server", "E-Mail für anna im Postfach gespeichert." ], [ 14792, "server", "192.168.0.20> 221 Server beendet Verbindung." ], [ 25000, "client", "call emailsAbholenEmails" ], [ 25639, "server", "----" ], [ 25639, "server", "192.168.0.20> +OK POP3 server ready" ], [ 25916, "server", "192.168.0.20< USER anna" ], [ 25917, "server", "192.168.0.20> +OK enter password" ], [ 26248, "server", "192.168.0.20< PASS geheim" ], [ 26249, "server", "192.168.0.20> +OK Mailbox locked and ready" ], [ 26580, "server", "192.168.0.20< STAT" ], [ 26582, "server", "192.168.0.20> +OK 4 1054" ], [ 26912, "server", "192.168.0.20< LIST" ], [ 26913, "server", "192.168.0.20> +OK 4 1054\n0 80\n1 89\n2 441\n3 444\n" ], [ 27244, "server", "192.168.0.20< RETR 0" ], [ 27245, "server", "192.168.0.20> +OK message follows \nFrom: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile" ], [ 27576, "server", "192.168.0.20< DELE 0" ], [ 27577, "server", "192.168.0.20> +OK message marked for delete" ], [ 27909, "server", "192.168.0.20< RETR 1" ], [ 27909, "server", "192.168.0.20> +OK message follows \nFrom: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?" ], [ 28241, "server", "192.168.0.20< DELE 1" ], [ 28241, "server", "192.168.0.20> +OK message marked for delete" ], [ 28573, "server", "192.168.0.20< RETR 2" ], [ 28574, "server", "192.168.0.20> +OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?" ], [ 28905, "server", "192.168.0.20< DELE 2" ], [ 28906, "server", "192.168.0.20> +OK message marked for delete" ], [ 29237, "server", "192.168.0.20< RETR 3" ], [ 29237, "server", "192.168.0.20> +OK message follows \nFrom: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009jemand@nirgendwo.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?" ], [ 29569, "server", "192.168.0.20< DELE 3" ], [ 29569, "server", "192.168.0.20> +OK message marked for delete" ], [ 29901, "server", "192.168.0.20< QUIT" ], [ 29901, "server", "null" ], [ 29901, "server", "192.168.0.20> +OK" ], [ 30067, "client", "null" ] ], "inbox": [ [ "From: Bob Beispiel \nTo: \nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile", "true", "false" ], [ "From: Carla \nTo: Anna Muster , \nCc: \nSubject: Termin\n\nMorgen um 10?", "true", "false" ], [ "From: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?", "true", "false" ], [ "From: \nTo: Anna Muster \nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009jemand@nirgendwo.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?", "true", "false" ] ], "sent": [ [ "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?", "true", "false" ], [ "From: Anna Muster \nTo: \nSubject: Hallo?\n\nIst da wer?", "true", "false" ] ], "accounts": [ [ "anna", [] ], [ "bob", [] ] ], "otherAccounts": [ [ "carla", [] ] ] }