julian.kiedaischandClaude Opus 5.5
f622959ecc
The account file's writer moves from the export (packages/fls) into the core, so that the export and the running server write the same. The server writes the file at its start and whenever its accounts change. EmailRun now records Java's file as it left it and as Java writes the accounts it ended with; Java leaves the notice to a local sender out until its next write. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
10266 lines
202 KiB
JSON
10266 lines
202 KiB
JSON
{
|
|
"frames": {
|
|
"00000000-0000-0000-0000-000000000201": [
|
|
{
|
|
"time": 519,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
},
|
|
{
|
|
"time": 759,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 761,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 3000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 988,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 1000000,
|
|
"acknowledgement": 3000001
|
|
},
|
|
{
|
|
"time": 989,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 1000001
|
|
},
|
|
{
|
|
"time": 1228,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": "+OK POP3 server ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1228,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 1000022
|
|
},
|
|
{
|
|
"time": 3001,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": "USER anna",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3224,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000022,
|
|
"acknowledgement": 3000010
|
|
},
|
|
{
|
|
"time": 3279,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": "+OK enter password",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000022,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3279,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000010,
|
|
"acknowledgement": 1000040
|
|
},
|
|
{
|
|
"time": 4500,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": "PASS geheim",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000010,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4723,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000040,
|
|
"acknowledgement": 3000021
|
|
},
|
|
{
|
|
"time": 4778,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": "+OK Mailbox locked and ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000040,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4779,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000021,
|
|
"acknowledgement": 1000068
|
|
},
|
|
{
|
|
"time": 6000,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": "STAT",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000021,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6223,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000068,
|
|
"acknowledgement": 3000025
|
|
},
|
|
{
|
|
"time": 6279,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": "+OK 2 169",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000068,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6279,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000025,
|
|
"acknowledgement": 1000077
|
|
},
|
|
{
|
|
"time": 7501,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": "LIST",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000025,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7723,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000077,
|
|
"acknowledgement": 3000029
|
|
},
|
|
{
|
|
"time": 7779,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": "+OK 2 169\n0 80\n1 89\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000077,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7779,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000029,
|
|
"acknowledgement": 1000097
|
|
},
|
|
{
|
|
"time": 9001,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": "RETR 0",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9224,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000097,
|
|
"acknowledgement": 3000035
|
|
},
|
|
{
|
|
"time": 9279,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": "+OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000097,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9280,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000035,
|
|
"acknowledgement": 1000219
|
|
},
|
|
{
|
|
"time": 10500,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": "RETR 1",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000035,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 10723,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000219,
|
|
"acknowledgement": 3000041
|
|
},
|
|
{
|
|
"time": 10778,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": "+OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000219,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 10779,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000041,
|
|
"acknowledgement": 1000371
|
|
},
|
|
{
|
|
"time": 12000,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": "DELE 0",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000041,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 12222,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000371,
|
|
"acknowledgement": 3000047
|
|
},
|
|
{
|
|
"time": 12278,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": "+OK message marked for delete",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000371,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 12278,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000047,
|
|
"acknowledgement": 1000400
|
|
},
|
|
{
|
|
"time": 13500,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": "DELE 1",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000047,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 13722,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000400,
|
|
"acknowledgement": 3000053
|
|
},
|
|
{
|
|
"time": 13777,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": "+OK message marked for delete",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000400,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 13778,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000053,
|
|
"acknowledgement": 1000429
|
|
},
|
|
{
|
|
"time": 15000,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000053,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 15222,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000429,
|
|
"acknowledgement": 3000057
|
|
},
|
|
{
|
|
"time": 15278,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": "+OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000429,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 15278,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000057,
|
|
"acknowledgement": 1000432
|
|
},
|
|
{
|
|
"time": 15500,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 1000432,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 15500,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000057,
|
|
"acknowledgement": 1000433
|
|
},
|
|
{
|
|
"time": 15556,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 3000057,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 15777,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000433,
|
|
"acknowledgement": 3000058
|
|
},
|
|
{
|
|
"time": 17501,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 54688,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 5000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 17723,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 54688,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 4000000,
|
|
"acknowledgement": 5000001
|
|
},
|
|
{
|
|
"time": 17723,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 54688,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 4000001
|
|
},
|
|
{
|
|
"time": 17962,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 54688,
|
|
"payload": "+OK POP3 server ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 17962,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 54688,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 4000022
|
|
},
|
|
{
|
|
"time": 20000,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 54688,
|
|
"destinationPort": 110,
|
|
"payload": "USER anna",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 20222,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 54688,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000022,
|
|
"acknowledgement": 5000010
|
|
},
|
|
{
|
|
"time": 20277,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 54688,
|
|
"payload": "+OK enter password",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000022,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 20277,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 54688,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000010,
|
|
"acknowledgement": 4000040
|
|
},
|
|
{
|
|
"time": 21500,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 54688,
|
|
"destinationPort": 110,
|
|
"payload": "PASS geheim",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000010,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 21722,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 54688,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000040,
|
|
"acknowledgement": 5000021
|
|
},
|
|
{
|
|
"time": 21777,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 54688,
|
|
"payload": "+OK Mailbox locked and ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000040,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 21778,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 54688,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000021,
|
|
"acknowledgement": 4000068
|
|
},
|
|
{
|
|
"time": 23001,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 54688,
|
|
"destinationPort": 110,
|
|
"payload": "STAT",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000021,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 23222,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 54688,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000068,
|
|
"acknowledgement": 5000025
|
|
},
|
|
{
|
|
"time": 23278,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 54688,
|
|
"payload": "+OK 0 0",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000068,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 23279,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 54688,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000025,
|
|
"acknowledgement": 4000075
|
|
},
|
|
{
|
|
"time": 24500,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 54688,
|
|
"destinationPort": 110,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000025,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 24722,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 54688,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000075,
|
|
"acknowledgement": 5000029
|
|
},
|
|
{
|
|
"time": 24777,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 54688,
|
|
"payload": "+OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000075,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 24777,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 54688,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000029,
|
|
"acknowledgement": 4000078
|
|
},
|
|
{
|
|
"time": 24999,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 54688,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 4000078,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 24999,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 54688,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000029,
|
|
"acknowledgement": 4000079
|
|
},
|
|
{
|
|
"time": 25054,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 54688,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 5000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 25276,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 54688,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000079,
|
|
"acknowledgement": 5000030
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000202": [
|
|
{
|
|
"time": 643,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000203": [
|
|
{
|
|
"time": 644,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
},
|
|
{
|
|
"time": 647,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 875,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 3000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 877,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 1000000,
|
|
"acknowledgement": 3000001
|
|
},
|
|
{
|
|
"time": 1100,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 1000001
|
|
},
|
|
{
|
|
"time": 1117,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": "+OK POP3 server ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1339,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 1000022
|
|
},
|
|
{
|
|
"time": 3112,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": "USER anna",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3112,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000022,
|
|
"acknowledgement": 3000010
|
|
},
|
|
{
|
|
"time": 3168,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": "+OK enter password",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000022,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3391,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000010,
|
|
"acknowledgement": 1000040
|
|
},
|
|
{
|
|
"time": 4611,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": "PASS geheim",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000010,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4612,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000040,
|
|
"acknowledgement": 3000021
|
|
},
|
|
{
|
|
"time": 4667,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": "+OK Mailbox locked and ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000040,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4890,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000021,
|
|
"acknowledgement": 1000068
|
|
},
|
|
{
|
|
"time": 6112,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": "STAT",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000021,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6112,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000068,
|
|
"acknowledgement": 3000025
|
|
},
|
|
{
|
|
"time": 6168,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": "+OK 2 169",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000068,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6390,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000025,
|
|
"acknowledgement": 1000077
|
|
},
|
|
{
|
|
"time": 7612,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": "LIST",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000025,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7612,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000077,
|
|
"acknowledgement": 3000029
|
|
},
|
|
{
|
|
"time": 7668,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": "+OK 2 169\n0 80\n1 89\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000077,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7890,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000029,
|
|
"acknowledgement": 1000097
|
|
},
|
|
{
|
|
"time": 9112,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": "RETR 0",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9112,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000097,
|
|
"acknowledgement": 3000035
|
|
},
|
|
{
|
|
"time": 9168,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": "+OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000097,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9391,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000035,
|
|
"acknowledgement": 1000219
|
|
},
|
|
{
|
|
"time": 10611,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": "RETR 1",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000035,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 10612,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000219,
|
|
"acknowledgement": 3000041
|
|
},
|
|
{
|
|
"time": 10667,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": "+OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000219,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 10890,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000041,
|
|
"acknowledgement": 1000371
|
|
},
|
|
{
|
|
"time": 12111,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": "DELE 0",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000041,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 12111,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000371,
|
|
"acknowledgement": 3000047
|
|
},
|
|
{
|
|
"time": 12167,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": "+OK message marked for delete",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000371,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 12389,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000047,
|
|
"acknowledgement": 1000400
|
|
},
|
|
{
|
|
"time": 13611,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": "DELE 1",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000047,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 13611,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000400,
|
|
"acknowledgement": 3000053
|
|
},
|
|
{
|
|
"time": 13666,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": "+OK message marked for delete",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000400,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 13889,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000053,
|
|
"acknowledgement": 1000429
|
|
},
|
|
{
|
|
"time": 15111,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000053,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 15112,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000429,
|
|
"acknowledgement": 3000057
|
|
},
|
|
{
|
|
"time": 15167,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": "+OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000429,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 15389,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000057,
|
|
"acknowledgement": 1000432
|
|
},
|
|
{
|
|
"time": 15389,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 1000432,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 15611,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000057,
|
|
"acknowledgement": 1000433
|
|
},
|
|
{
|
|
"time": 15666,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 55976,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 3000057,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 15666,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 55976,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000433,
|
|
"acknowledgement": 3000058
|
|
},
|
|
{
|
|
"time": 17612,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 54688,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 5000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 17612,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 54688,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 4000000,
|
|
"acknowledgement": 5000001
|
|
},
|
|
{
|
|
"time": 17834,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 54688,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 4000001
|
|
},
|
|
{
|
|
"time": 17851,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 54688,
|
|
"payload": "+OK POP3 server ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 18073,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 54688,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 4000022
|
|
},
|
|
{
|
|
"time": 20111,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 54688,
|
|
"destinationPort": 110,
|
|
"payload": "USER anna",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 20111,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 54688,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000022,
|
|
"acknowledgement": 5000010
|
|
},
|
|
{
|
|
"time": 20166,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 54688,
|
|
"payload": "+OK enter password",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000022,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 20388,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 54688,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000010,
|
|
"acknowledgement": 4000040
|
|
},
|
|
{
|
|
"time": 21611,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 54688,
|
|
"destinationPort": 110,
|
|
"payload": "PASS geheim",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000010,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 21611,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 54688,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000040,
|
|
"acknowledgement": 5000021
|
|
},
|
|
{
|
|
"time": 21667,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 54688,
|
|
"payload": "+OK Mailbox locked and ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000040,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 21888,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 54688,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000021,
|
|
"acknowledgement": 4000068
|
|
},
|
|
{
|
|
"time": 23111,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 54688,
|
|
"destinationPort": 110,
|
|
"payload": "STAT",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000021,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 23112,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 54688,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000068,
|
|
"acknowledgement": 5000025
|
|
},
|
|
{
|
|
"time": 23167,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 54688,
|
|
"payload": "+OK 0 0",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000068,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 23390,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 54688,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000025,
|
|
"acknowledgement": 4000075
|
|
},
|
|
{
|
|
"time": 24611,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 54688,
|
|
"destinationPort": 110,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000025,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 24611,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 54688,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000075,
|
|
"acknowledgement": 5000029
|
|
},
|
|
{
|
|
"time": 24666,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 54688,
|
|
"payload": "+OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000075,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 24888,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 54688,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000029,
|
|
"acknowledgement": 4000078
|
|
},
|
|
{
|
|
"time": 24888,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 54688,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 4000078,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 25110,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 54688,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000029,
|
|
"acknowledgement": 4000079
|
|
},
|
|
{
|
|
"time": 25165,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 54688,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 5000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 25165,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 54688,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000079,
|
|
"acknowledgement": 5000030
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000204": [
|
|
{
|
|
"time": 643,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
}
|
|
]
|
|
},
|
|
"rows": {
|
|
"00000000-0000-0000-0000-000000000201": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 1.000.022"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022, ACK: 3.000.010"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.010, ACK: 1.000.040"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.010"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040, ACK: 3.000.021"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.021, ACK: 1.000.068"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.021"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"",
|
|
"Anwendung",
|
|
"STAT"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068, ACK: 3.000.025"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 2 169"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.025, ACK: 1.000.077"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.025"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"",
|
|
"Anwendung",
|
|
"LIST"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.077, ACK: 3.000.029"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.077"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 2 169\n0 80\n1 89\n"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.029, ACK: 1.000.097"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.029"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 0"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.097, ACK: 3.000.035"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.097"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.035, ACK: 1.000.219"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.035"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 1"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.219, ACK: 3.000.041"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.219"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.041, ACK: 1.000.371"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.041"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 0"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.371, ACK: 3.000.047"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.371"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.047, ACK: 1.000.400"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.047"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 1"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.400, ACK: 3.000.053"
|
|
],
|
|
[
|
|
"38",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.400"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"39",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.053, ACK: 1.000.429"
|
|
],
|
|
[
|
|
"40",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.053"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"41",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.429, ACK: 3.000.057"
|
|
],
|
|
[
|
|
"42",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.429"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"43",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.057, ACK: 1.000.432"
|
|
],
|
|
[
|
|
"44",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.432"
|
|
],
|
|
[
|
|
"45",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.057, ACK: 1.000.433"
|
|
],
|
|
[
|
|
"46",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.000.057"
|
|
],
|
|
[
|
|
"47",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.433, ACK: 3.000.058"
|
|
],
|
|
[
|
|
"48",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 5.000.000"
|
|
],
|
|
[
|
|
"49",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000, ACK: 5.000.001"
|
|
],
|
|
[
|
|
"50",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"51",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"52",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 4.000.022"
|
|
],
|
|
[
|
|
"53",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"54",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.022, ACK: 5.000.010"
|
|
],
|
|
[
|
|
"55",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.022"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"56",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.010, ACK: 4.000.040"
|
|
],
|
|
[
|
|
"57",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.010"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"58",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.040, ACK: 5.000.021"
|
|
],
|
|
[
|
|
"59",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.040"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"60",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.021, ACK: 4.000.068"
|
|
],
|
|
[
|
|
"61",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.021"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"",
|
|
"Anwendung",
|
|
"STAT"
|
|
],
|
|
[
|
|
"62",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.068, ACK: 5.000.025"
|
|
],
|
|
[
|
|
"63",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.068"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 0 0"
|
|
],
|
|
[
|
|
"64",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.025, ACK: 4.000.075"
|
|
],
|
|
[
|
|
"65",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.025"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"66",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.075, ACK: 5.000.029"
|
|
],
|
|
[
|
|
"67",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.075"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"68",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.029, ACK: 4.000.078"
|
|
],
|
|
[
|
|
"69",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"69",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"69",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.078"
|
|
],
|
|
[
|
|
"70",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.029, ACK: 4.000.079"
|
|
],
|
|
[
|
|
"71",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"71",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"71",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 5.000.029"
|
|
],
|
|
[
|
|
"72",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"72",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"72",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.079, ACK: 5.000.030"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000202": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000203": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 1.000.022"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022, ACK: 3.000.010"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.010, ACK: 1.000.040"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.010"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040, ACK: 3.000.021"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.021, ACK: 1.000.068"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.021"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"",
|
|
"Anwendung",
|
|
"STAT"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068, ACK: 3.000.025"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 2 169"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.025, ACK: 1.000.077"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.025"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"",
|
|
"Anwendung",
|
|
"LIST"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.077, ACK: 3.000.029"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.077"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 2 169\n0 80\n1 89\n"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.029, ACK: 1.000.097"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.029"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 0"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.097, ACK: 3.000.035"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.097"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.035, ACK: 1.000.219"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.035"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 1"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.219, ACK: 3.000.041"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.219"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.041, ACK: 1.000.371"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.041"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 0"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.371, ACK: 3.000.047"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.371"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.047, ACK: 1.000.400"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.047"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 1"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.400, ACK: 3.000.053"
|
|
],
|
|
[
|
|
"38",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.400"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"39",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.053, ACK: 1.000.429"
|
|
],
|
|
[
|
|
"40",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.053"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"41",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.429, ACK: 3.000.057"
|
|
],
|
|
[
|
|
"42",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.429"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"43",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.057, ACK: 1.000.432"
|
|
],
|
|
[
|
|
"44",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.432"
|
|
],
|
|
[
|
|
"45",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.057, ACK: 1.000.433"
|
|
],
|
|
[
|
|
"46",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.20:55976",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.000.057"
|
|
],
|
|
[
|
|
"47",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.433, ACK: 3.000.058"
|
|
],
|
|
[
|
|
"48",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 5.000.000"
|
|
],
|
|
[
|
|
"49",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000, ACK: 5.000.001"
|
|
],
|
|
[
|
|
"50",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"51",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"52",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 4.000.022"
|
|
],
|
|
[
|
|
"53",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"54",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.022, ACK: 5.000.010"
|
|
],
|
|
[
|
|
"55",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.022"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"56",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.010, ACK: 4.000.040"
|
|
],
|
|
[
|
|
"57",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.010"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"58",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.040, ACK: 5.000.021"
|
|
],
|
|
[
|
|
"59",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.040"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"60",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.021, ACK: 4.000.068"
|
|
],
|
|
[
|
|
"61",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.021"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"",
|
|
"Anwendung",
|
|
"STAT"
|
|
],
|
|
[
|
|
"62",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.068, ACK: 5.000.025"
|
|
],
|
|
[
|
|
"63",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.068"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 0 0"
|
|
],
|
|
[
|
|
"64",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.025, ACK: 4.000.075"
|
|
],
|
|
[
|
|
"65",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.025"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"66",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.075, ACK: 5.000.029"
|
|
],
|
|
[
|
|
"67",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.075"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"68",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.029, ACK: 4.000.078"
|
|
],
|
|
[
|
|
"69",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"69",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"69",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.078"
|
|
],
|
|
[
|
|
"70",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.029, ACK: 4.000.079"
|
|
],
|
|
[
|
|
"71",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"71",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"71",
|
|
"192.168.0.20:54688",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 5.000.029"
|
|
],
|
|
[
|
|
"72",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"72",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"72",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.079, ACK: 5.000.030"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000204": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
]
|
|
]
|
|
},
|
|
"layeredRows": {
|
|
"00000000-0000-0000-0000-000000000201": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 1.000.022"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022, ACK: 3.000.010"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022"
|
|
],
|
|
[
|
|
"10",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.010, ACK: 1.000.040"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.010"
|
|
],
|
|
[
|
|
"12",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040, ACK: 3.000.021"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040"
|
|
],
|
|
[
|
|
"14",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.021, ACK: 1.000.068"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.021"
|
|
],
|
|
[
|
|
"16",
|
|
null,
|
|
null,
|
|
"",
|
|
"Anwendung",
|
|
"STAT"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068, ACK: 3.000.025"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068"
|
|
],
|
|
[
|
|
"18",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 2 169"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.025, ACK: 1.000.077"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.025"
|
|
],
|
|
[
|
|
"20",
|
|
null,
|
|
null,
|
|
"",
|
|
"Anwendung",
|
|
"LIST"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.077, ACK: 3.000.029"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.077"
|
|
],
|
|
[
|
|
"22",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 2 169\n0 80\n1 89\n"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.029, ACK: 1.000.097"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.029"
|
|
],
|
|
[
|
|
"24",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 0"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.097, ACK: 3.000.035"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.097"
|
|
],
|
|
[
|
|
"26",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.035, ACK: 1.000.219"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.035"
|
|
],
|
|
[
|
|
"28",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 1"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.219, ACK: 3.000.041"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.219"
|
|
],
|
|
[
|
|
"30",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.041, ACK: 1.000.371"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.041"
|
|
],
|
|
[
|
|
"32",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 0"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.371, ACK: 3.000.047"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.371"
|
|
],
|
|
[
|
|
"34",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.047, ACK: 1.000.400"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.047"
|
|
],
|
|
[
|
|
"36",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 1"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.400, ACK: 3.000.053"
|
|
],
|
|
[
|
|
"38",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"38",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.400"
|
|
],
|
|
[
|
|
"38",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"39",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"39",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.053, ACK: 1.000.429"
|
|
],
|
|
[
|
|
"40",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"40",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.053"
|
|
],
|
|
[
|
|
"40",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"41",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"41",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.429, ACK: 3.000.057"
|
|
],
|
|
[
|
|
"42",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"42",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.429"
|
|
],
|
|
[
|
|
"42",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"43",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"43",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.057, ACK: 1.000.432"
|
|
],
|
|
[
|
|
"44",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"44",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.432"
|
|
],
|
|
[
|
|
"45",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"45",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.057, ACK: 1.000.433"
|
|
],
|
|
[
|
|
"46",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"46",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.000.057"
|
|
],
|
|
[
|
|
"47",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"47",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.433, ACK: 3.000.058"
|
|
],
|
|
[
|
|
"48",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"48",
|
|
"54688",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 5.000.000"
|
|
],
|
|
[
|
|
"49",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"49",
|
|
"110",
|
|
"54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000, ACK: 5.000.001"
|
|
],
|
|
[
|
|
"50",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"50",
|
|
"54688",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"51",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"51",
|
|
"110",
|
|
"54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"51",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"52",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"52",
|
|
"54688",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 4.000.022"
|
|
],
|
|
[
|
|
"53",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"53",
|
|
"54688",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001"
|
|
],
|
|
[
|
|
"53",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"54",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"54",
|
|
"110",
|
|
"54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.022, ACK: 5.000.010"
|
|
],
|
|
[
|
|
"55",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"55",
|
|
"110",
|
|
"54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.022"
|
|
],
|
|
[
|
|
"55",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"56",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"56",
|
|
"54688",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.010, ACK: 4.000.040"
|
|
],
|
|
[
|
|
"57",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"57",
|
|
"54688",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.010"
|
|
],
|
|
[
|
|
"57",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"58",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"58",
|
|
"110",
|
|
"54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.040, ACK: 5.000.021"
|
|
],
|
|
[
|
|
"59",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"59",
|
|
"110",
|
|
"54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.040"
|
|
],
|
|
[
|
|
"59",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"60",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"60",
|
|
"54688",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.021, ACK: 4.000.068"
|
|
],
|
|
[
|
|
"61",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"61",
|
|
"54688",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.021"
|
|
],
|
|
[
|
|
"61",
|
|
null,
|
|
null,
|
|
"",
|
|
"Anwendung",
|
|
"STAT"
|
|
],
|
|
[
|
|
"62",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"62",
|
|
"110",
|
|
"54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.068, ACK: 5.000.025"
|
|
],
|
|
[
|
|
"63",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"63",
|
|
"110",
|
|
"54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.068"
|
|
],
|
|
[
|
|
"63",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 0 0"
|
|
],
|
|
[
|
|
"64",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"64",
|
|
"54688",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.025, ACK: 4.000.075"
|
|
],
|
|
[
|
|
"65",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"65",
|
|
"54688",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.025"
|
|
],
|
|
[
|
|
"65",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"66",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"66",
|
|
"110",
|
|
"54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.075, ACK: 5.000.029"
|
|
],
|
|
[
|
|
"67",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"67",
|
|
"110",
|
|
"54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.075"
|
|
],
|
|
[
|
|
"67",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"68",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"68",
|
|
"54688",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.029, ACK: 4.000.078"
|
|
],
|
|
[
|
|
"69",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"69",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"69",
|
|
"110",
|
|
"54688",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.078"
|
|
],
|
|
[
|
|
"70",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"70",
|
|
"54688",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.029, ACK: 4.000.079"
|
|
],
|
|
[
|
|
"71",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"71",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"71",
|
|
"54688",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 5.000.029"
|
|
],
|
|
[
|
|
"72",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"72",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"72",
|
|
"110",
|
|
"54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.079, ACK: 5.000.030"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000202": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000203": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 1.000.022"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022, ACK: 3.000.010"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022"
|
|
],
|
|
[
|
|
"10",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.010, ACK: 1.000.040"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.010"
|
|
],
|
|
[
|
|
"12",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040, ACK: 3.000.021"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040"
|
|
],
|
|
[
|
|
"14",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.021, ACK: 1.000.068"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.021"
|
|
],
|
|
[
|
|
"16",
|
|
null,
|
|
null,
|
|
"",
|
|
"Anwendung",
|
|
"STAT"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068, ACK: 3.000.025"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068"
|
|
],
|
|
[
|
|
"18",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 2 169"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.025, ACK: 1.000.077"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.025"
|
|
],
|
|
[
|
|
"20",
|
|
null,
|
|
null,
|
|
"",
|
|
"Anwendung",
|
|
"LIST"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.077, ACK: 3.000.029"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.077"
|
|
],
|
|
[
|
|
"22",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 2 169\n0 80\n1 89\n"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.029, ACK: 1.000.097"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.029"
|
|
],
|
|
[
|
|
"24",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 0"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.097, ACK: 3.000.035"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.097"
|
|
],
|
|
[
|
|
"26",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.035, ACK: 1.000.219"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.035"
|
|
],
|
|
[
|
|
"28",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 1"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.219, ACK: 3.000.041"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.219"
|
|
],
|
|
[
|
|
"30",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.041, ACK: 1.000.371"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.041"
|
|
],
|
|
[
|
|
"32",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 0"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.371, ACK: 3.000.047"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.371"
|
|
],
|
|
[
|
|
"34",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.047, ACK: 1.000.400"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.047"
|
|
],
|
|
[
|
|
"36",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 1"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.400, ACK: 3.000.053"
|
|
],
|
|
[
|
|
"38",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"38",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.400"
|
|
],
|
|
[
|
|
"38",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"39",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"39",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.053, ACK: 1.000.429"
|
|
],
|
|
[
|
|
"40",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"40",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.053"
|
|
],
|
|
[
|
|
"40",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"41",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"41",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.429, ACK: 3.000.057"
|
|
],
|
|
[
|
|
"42",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"42",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.429"
|
|
],
|
|
[
|
|
"42",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"43",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"43",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.057, ACK: 1.000.432"
|
|
],
|
|
[
|
|
"44",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"44",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.432"
|
|
],
|
|
[
|
|
"45",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"45",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.057, ACK: 1.000.433"
|
|
],
|
|
[
|
|
"46",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"46",
|
|
"55976",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.000.057"
|
|
],
|
|
[
|
|
"47",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"47",
|
|
"110",
|
|
"55976",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.433, ACK: 3.000.058"
|
|
],
|
|
[
|
|
"48",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"48",
|
|
"54688",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 5.000.000"
|
|
],
|
|
[
|
|
"49",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"49",
|
|
"110",
|
|
"54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000, ACK: 5.000.001"
|
|
],
|
|
[
|
|
"50",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"50",
|
|
"54688",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"51",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"51",
|
|
"110",
|
|
"54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"51",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"52",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"52",
|
|
"54688",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 4.000.022"
|
|
],
|
|
[
|
|
"53",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"53",
|
|
"54688",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001"
|
|
],
|
|
[
|
|
"53",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"54",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"54",
|
|
"110",
|
|
"54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.022, ACK: 5.000.010"
|
|
],
|
|
[
|
|
"55",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"55",
|
|
"110",
|
|
"54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.022"
|
|
],
|
|
[
|
|
"55",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"56",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"56",
|
|
"54688",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.010, ACK: 4.000.040"
|
|
],
|
|
[
|
|
"57",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"57",
|
|
"54688",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.010"
|
|
],
|
|
[
|
|
"57",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"58",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"58",
|
|
"110",
|
|
"54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.040, ACK: 5.000.021"
|
|
],
|
|
[
|
|
"59",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"59",
|
|
"110",
|
|
"54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.040"
|
|
],
|
|
[
|
|
"59",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"60",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"60",
|
|
"54688",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.021, ACK: 4.000.068"
|
|
],
|
|
[
|
|
"61",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"61",
|
|
"54688",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.021"
|
|
],
|
|
[
|
|
"61",
|
|
null,
|
|
null,
|
|
"",
|
|
"Anwendung",
|
|
"STAT"
|
|
],
|
|
[
|
|
"62",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"62",
|
|
"110",
|
|
"54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.068, ACK: 5.000.025"
|
|
],
|
|
[
|
|
"63",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"63",
|
|
"110",
|
|
"54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.068"
|
|
],
|
|
[
|
|
"63",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 0 0"
|
|
],
|
|
[
|
|
"64",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"64",
|
|
"54688",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.025, ACK: 4.000.075"
|
|
],
|
|
[
|
|
"65",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"65",
|
|
"54688",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.025"
|
|
],
|
|
[
|
|
"65",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"66",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"66",
|
|
"110",
|
|
"54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.075, ACK: 5.000.029"
|
|
],
|
|
[
|
|
"67",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"67",
|
|
"110",
|
|
"54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.075"
|
|
],
|
|
[
|
|
"67",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"68",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"68",
|
|
"54688",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.029, ACK: 4.000.078"
|
|
],
|
|
[
|
|
"69",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"69",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"69",
|
|
"110",
|
|
"54688",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.078"
|
|
],
|
|
[
|
|
"70",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"70",
|
|
"54688",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.029, ACK: 4.000.079"
|
|
],
|
|
[
|
|
"71",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"71",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"71",
|
|
"54688",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 5.000.029"
|
|
],
|
|
[
|
|
"72",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"72",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"72",
|
|
"110",
|
|
"54688",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.079, ACK: 5.000.030"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000204": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
]
|
|
]
|
|
},
|
|
"events": [
|
|
[
|
|
209,
|
|
"client",
|
|
"null"
|
|
],
|
|
[
|
|
210,
|
|
"server",
|
|
"null"
|
|
],
|
|
[
|
|
501,
|
|
"client",
|
|
"call verbinden 110"
|
|
],
|
|
[
|
|
1005,
|
|
"client",
|
|
"Verbindung hergestellt"
|
|
],
|
|
[
|
|
1116,
|
|
"server",
|
|
"----"
|
|
],
|
|
[
|
|
1116,
|
|
"server",
|
|
"192.168.0.20> +OK POP3 server ready"
|
|
],
|
|
[
|
|
1228,
|
|
"client",
|
|
">>+OK POP3 server ready"
|
|
],
|
|
[
|
|
3000,
|
|
"client",
|
|
"call senden USER anna"
|
|
],
|
|
[
|
|
3113,
|
|
"server",
|
|
"192.168.0.20< USER anna"
|
|
],
|
|
[
|
|
3116,
|
|
"server",
|
|
"192.168.0.20> +OK enter password"
|
|
],
|
|
[
|
|
3224,
|
|
"client",
|
|
"<<USER anna"
|
|
],
|
|
[
|
|
3279,
|
|
"client",
|
|
">>+OK enter password"
|
|
],
|
|
[
|
|
4500,
|
|
"client",
|
|
"call senden PASS geheim"
|
|
],
|
|
[
|
|
4612,
|
|
"server",
|
|
"192.168.0.20< PASS geheim"
|
|
],
|
|
[
|
|
4612,
|
|
"server",
|
|
"192.168.0.20> +OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
4723,
|
|
"client",
|
|
"<<PASS geheim"
|
|
],
|
|
[
|
|
4779,
|
|
"client",
|
|
">>+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
6000,
|
|
"client",
|
|
"call senden STAT"
|
|
],
|
|
[
|
|
6112,
|
|
"server",
|
|
"192.168.0.20< STAT"
|
|
],
|
|
[
|
|
6113,
|
|
"server",
|
|
"192.168.0.20> +OK 2 169"
|
|
],
|
|
[
|
|
6223,
|
|
"client",
|
|
"<<STAT"
|
|
],
|
|
[
|
|
6279,
|
|
"client",
|
|
">>+OK 2 169"
|
|
],
|
|
[
|
|
7501,
|
|
"client",
|
|
"call senden LIST"
|
|
],
|
|
[
|
|
7612,
|
|
"server",
|
|
"192.168.0.20< LIST"
|
|
],
|
|
[
|
|
7613,
|
|
"server",
|
|
"192.168.0.20> +OK 2 169\n0 80\n1 89\n"
|
|
],
|
|
[
|
|
7723,
|
|
"client",
|
|
"<<LIST"
|
|
],
|
|
[
|
|
7779,
|
|
"client",
|
|
">>+OK 2 169\n0 80\n1 89\n"
|
|
],
|
|
[
|
|
9001,
|
|
"client",
|
|
"call senden RETR 0"
|
|
],
|
|
[
|
|
9112,
|
|
"server",
|
|
"192.168.0.20< RETR 0"
|
|
],
|
|
[
|
|
9113,
|
|
"server",
|
|
"192.168.0.20> +OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile"
|
|
],
|
|
[
|
|
9224,
|
|
"client",
|
|
"<<RETR 0"
|
|
],
|
|
[
|
|
9279,
|
|
"client",
|
|
">>+OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile"
|
|
],
|
|
[
|
|
10500,
|
|
"client",
|
|
"call senden RETR 1"
|
|
],
|
|
[
|
|
10612,
|
|
"server",
|
|
"192.168.0.20< RETR 1"
|
|
],
|
|
[
|
|
10612,
|
|
"server",
|
|
"192.168.0.20> +OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?"
|
|
],
|
|
[
|
|
10723,
|
|
"client",
|
|
"<<RETR 1"
|
|
],
|
|
[
|
|
10779,
|
|
"client",
|
|
">>+OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?"
|
|
],
|
|
[
|
|
12000,
|
|
"client",
|
|
"call senden DELE 0"
|
|
],
|
|
[
|
|
12111,
|
|
"server",
|
|
"192.168.0.20< DELE 0"
|
|
],
|
|
[
|
|
12112,
|
|
"server",
|
|
"192.168.0.20> +OK message marked for delete"
|
|
],
|
|
[
|
|
12223,
|
|
"client",
|
|
"<<DELE 0"
|
|
],
|
|
[
|
|
12278,
|
|
"client",
|
|
">>+OK message marked for delete"
|
|
],
|
|
[
|
|
13500,
|
|
"client",
|
|
"call senden DELE 1"
|
|
],
|
|
[
|
|
13611,
|
|
"server",
|
|
"192.168.0.20< DELE 1"
|
|
],
|
|
[
|
|
13612,
|
|
"server",
|
|
"192.168.0.20> +OK message marked for delete"
|
|
],
|
|
[
|
|
13722,
|
|
"client",
|
|
"<<DELE 1"
|
|
],
|
|
[
|
|
13778,
|
|
"client",
|
|
">>+OK message marked for delete"
|
|
],
|
|
[
|
|
15000,
|
|
"client",
|
|
"call senden QUIT"
|
|
],
|
|
[
|
|
15112,
|
|
"server",
|
|
"192.168.0.20< QUIT"
|
|
],
|
|
[
|
|
15112,
|
|
"server",
|
|
"null"
|
|
],
|
|
[
|
|
15112,
|
|
"server",
|
|
"192.168.0.20> +OK"
|
|
],
|
|
[
|
|
15222,
|
|
"client",
|
|
"<<QUIT"
|
|
],
|
|
[
|
|
15278,
|
|
"client",
|
|
">>+OK"
|
|
],
|
|
[
|
|
15500,
|
|
"client",
|
|
"Socket zu 192.168.0.30:110 getrennt"
|
|
],
|
|
[
|
|
17501,
|
|
"client",
|
|
"call verbinden 110"
|
|
],
|
|
[
|
|
17801,
|
|
"client",
|
|
"Verbindung hergestellt"
|
|
],
|
|
[
|
|
17851,
|
|
"server",
|
|
"----"
|
|
],
|
|
[
|
|
17851,
|
|
"server",
|
|
"192.168.0.20> +OK POP3 server ready"
|
|
],
|
|
[
|
|
17962,
|
|
"client",
|
|
">>+OK POP3 server ready"
|
|
],
|
|
[
|
|
20000,
|
|
"client",
|
|
"call senden USER anna"
|
|
],
|
|
[
|
|
20111,
|
|
"server",
|
|
"192.168.0.20< USER anna"
|
|
],
|
|
[
|
|
20111,
|
|
"server",
|
|
"192.168.0.20> +OK enter password"
|
|
],
|
|
[
|
|
20222,
|
|
"client",
|
|
"<<USER anna"
|
|
],
|
|
[
|
|
20277,
|
|
"client",
|
|
">>+OK enter password"
|
|
],
|
|
[
|
|
21500,
|
|
"client",
|
|
"call senden PASS geheim"
|
|
],
|
|
[
|
|
21611,
|
|
"server",
|
|
"192.168.0.20< PASS geheim"
|
|
],
|
|
[
|
|
21611,
|
|
"server",
|
|
"192.168.0.20> +OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
21722,
|
|
"client",
|
|
"<<PASS geheim"
|
|
],
|
|
[
|
|
21777,
|
|
"client",
|
|
">>+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
23000,
|
|
"client",
|
|
"call senden STAT"
|
|
],
|
|
[
|
|
23112,
|
|
"server",
|
|
"192.168.0.20< STAT"
|
|
],
|
|
[
|
|
23112,
|
|
"server",
|
|
"192.168.0.20> +OK 0 0"
|
|
],
|
|
[
|
|
23223,
|
|
"client",
|
|
"<<STAT"
|
|
],
|
|
[
|
|
23279,
|
|
"client",
|
|
">>+OK 0 0"
|
|
],
|
|
[
|
|
24500,
|
|
"client",
|
|
"call senden QUIT"
|
|
],
|
|
[
|
|
24611,
|
|
"server",
|
|
"192.168.0.20< QUIT"
|
|
],
|
|
[
|
|
24611,
|
|
"server",
|
|
"null"
|
|
],
|
|
[
|
|
24611,
|
|
"server",
|
|
"192.168.0.20> +OK"
|
|
],
|
|
[
|
|
24722,
|
|
"client",
|
|
"<<QUIT"
|
|
],
|
|
[
|
|
24777,
|
|
"client",
|
|
">>+OK"
|
|
],
|
|
[
|
|
24999,
|
|
"client",
|
|
"Socket zu 192.168.0.30:110 getrennt"
|
|
]
|
|
],
|
|
"accounts": [
|
|
[
|
|
"anna"
|
|
],
|
|
[
|
|
"bob"
|
|
]
|
|
],
|
|
"file": "anna;filius.de;geheim;Muster;Anna;\nbob;filius.de;passwort;Beispiel;Bob;\n",
|
|
"savedFile": "anna;filius.de;geheim;Muster;Anna;\nbob;filius.de;passwort;Beispiel;Bob;\n"
|
|
}
|