SMTP on port 25 stores mails for the domain's accounts as Java reads them anew and tells a local sender of unknown recipients; POP3 on port 110 hands them out. The mailboxes are in the snapshot and go back into the project. EmailRun plays four stories over the network; MailCases feeds Java's workers without one (26 cases, de and en). 18 cases name Java bugs that the core does not take. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
10265 lines
202 KiB
JSON
10265 lines
202 KiB
JSON
{
|
|
"frames": {
|
|
"00000000-0000-0000-0000-000000000201": [
|
|
{
|
|
"time": 517,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
},
|
|
{
|
|
"time": 751,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 753,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 3000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 980,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 1000000,
|
|
"acknowledgement": 3000001
|
|
},
|
|
{
|
|
"time": 980,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 1000001
|
|
},
|
|
{
|
|
"time": 1237,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": "+OK POP3 server ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1237,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 1000022
|
|
},
|
|
{
|
|
"time": 3000,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": "USER anna",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3223,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000022,
|
|
"acknowledgement": 3000010
|
|
},
|
|
{
|
|
"time": 3279,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": "+OK enter password",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000022,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3280,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000010,
|
|
"acknowledgement": 1000040
|
|
},
|
|
{
|
|
"time": 4500,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": "PASS geheim",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000010,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4723,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000040,
|
|
"acknowledgement": 3000021
|
|
},
|
|
{
|
|
"time": 4779,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": "+OK Mailbox locked and ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000040,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4779,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000021,
|
|
"acknowledgement": 1000068
|
|
},
|
|
{
|
|
"time": 6001,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": "STAT",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000021,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6223,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000068,
|
|
"acknowledgement": 3000025
|
|
},
|
|
{
|
|
"time": 6278,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": "+OK 2 169",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000068,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6279,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000025,
|
|
"acknowledgement": 1000077
|
|
},
|
|
{
|
|
"time": 7501,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": "LIST",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000025,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7723,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000077,
|
|
"acknowledgement": 3000029
|
|
},
|
|
{
|
|
"time": 7778,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": "+OK 2 169\n0 80\n1 89\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000077,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7778,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000029,
|
|
"acknowledgement": 1000097
|
|
},
|
|
{
|
|
"time": 9000,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": "RETR 0",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9223,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000097,
|
|
"acknowledgement": 3000035
|
|
},
|
|
{
|
|
"time": 9278,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": "+OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000097,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9278,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000035,
|
|
"acknowledgement": 1000219
|
|
},
|
|
{
|
|
"time": 10500,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": "RETR 1",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000035,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 10722,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000219,
|
|
"acknowledgement": 3000041
|
|
},
|
|
{
|
|
"time": 10778,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": "+OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000219,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 10778,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000041,
|
|
"acknowledgement": 1000371
|
|
},
|
|
{
|
|
"time": 12000,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": "DELE 0",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000041,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 12222,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000371,
|
|
"acknowledgement": 3000047
|
|
},
|
|
{
|
|
"time": 12277,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": "+OK message marked for delete",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000371,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 12278,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000047,
|
|
"acknowledgement": 1000400
|
|
},
|
|
{
|
|
"time": 13501,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": "DELE 1",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000047,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 13723,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000400,
|
|
"acknowledgement": 3000053
|
|
},
|
|
{
|
|
"time": 13778,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": "+OK message marked for delete",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000400,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 13778,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000053,
|
|
"acknowledgement": 1000429
|
|
},
|
|
{
|
|
"time": 15000,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000053,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 15222,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000429,
|
|
"acknowledgement": 3000057
|
|
},
|
|
{
|
|
"time": 15278,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": "+OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000429,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 15278,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000057,
|
|
"acknowledgement": 1000432
|
|
},
|
|
{
|
|
"time": 15500,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 1000432,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 15501,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000057,
|
|
"acknowledgement": 1000433
|
|
},
|
|
{
|
|
"time": 15556,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 3000057,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 15778,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000433,
|
|
"acknowledgement": 3000058
|
|
},
|
|
{
|
|
"time": 17501,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 63726,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 5000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 17723,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 63726,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 4000000,
|
|
"acknowledgement": 5000001
|
|
},
|
|
{
|
|
"time": 17723,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 63726,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 4000001
|
|
},
|
|
{
|
|
"time": 17971,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 63726,
|
|
"payload": "+OK POP3 server ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 17972,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 63726,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 4000022
|
|
},
|
|
{
|
|
"time": 20000,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 63726,
|
|
"destinationPort": 110,
|
|
"payload": "USER anna",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 20222,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 63726,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000022,
|
|
"acknowledgement": 5000010
|
|
},
|
|
{
|
|
"time": 20277,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 63726,
|
|
"payload": "+OK enter password",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000022,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 20277,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 63726,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000010,
|
|
"acknowledgement": 4000040
|
|
},
|
|
{
|
|
"time": 21500,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 63726,
|
|
"destinationPort": 110,
|
|
"payload": "PASS geheim",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000010,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 21722,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 63726,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000040,
|
|
"acknowledgement": 5000021
|
|
},
|
|
{
|
|
"time": 21777,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 63726,
|
|
"payload": "+OK Mailbox locked and ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000040,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 21778,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 63726,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000021,
|
|
"acknowledgement": 4000068
|
|
},
|
|
{
|
|
"time": 23000,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 63726,
|
|
"destinationPort": 110,
|
|
"payload": "STAT",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000021,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 23222,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 63726,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000068,
|
|
"acknowledgement": 5000025
|
|
},
|
|
{
|
|
"time": 23278,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 63726,
|
|
"payload": "+OK 0 0",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000068,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 23279,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 63726,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000025,
|
|
"acknowledgement": 4000075
|
|
},
|
|
{
|
|
"time": 24500,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 63726,
|
|
"destinationPort": 110,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000025,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 24722,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 63726,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000075,
|
|
"acknowledgement": 5000029
|
|
},
|
|
{
|
|
"time": 24777,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 63726,
|
|
"payload": "+OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000075,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 24777,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 63726,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000029,
|
|
"acknowledgement": 4000078
|
|
},
|
|
{
|
|
"time": 24999,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 63726,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 4000078,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 24999,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 63726,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000029,
|
|
"acknowledgement": 4000079
|
|
},
|
|
{
|
|
"time": 25055,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 63726,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 5000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 25276,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 63726,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000079,
|
|
"acknowledgement": 5000030
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000202": [
|
|
{
|
|
"time": 638,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000203": [
|
|
{
|
|
"time": 638,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
},
|
|
{
|
|
"time": 639,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 866,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 3000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 868,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 1000000,
|
|
"acknowledgement": 3000001
|
|
},
|
|
{
|
|
"time": 1091,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 1000001
|
|
},
|
|
{
|
|
"time": 1126,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": "+OK POP3 server ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1348,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 1000022
|
|
},
|
|
{
|
|
"time": 3112,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": "USER anna",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3112,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000022,
|
|
"acknowledgement": 3000010
|
|
},
|
|
{
|
|
"time": 3168,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": "+OK enter password",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000022,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3391,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000010,
|
|
"acknowledgement": 1000040
|
|
},
|
|
{
|
|
"time": 4612,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": "PASS geheim",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000010,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4612,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000040,
|
|
"acknowledgement": 3000021
|
|
},
|
|
{
|
|
"time": 4667,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": "+OK Mailbox locked and ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000040,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4890,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000021,
|
|
"acknowledgement": 1000068
|
|
},
|
|
{
|
|
"time": 6112,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": "STAT",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000021,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6112,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000068,
|
|
"acknowledgement": 3000025
|
|
},
|
|
{
|
|
"time": 6168,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": "+OK 2 169",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000068,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6390,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000025,
|
|
"acknowledgement": 1000077
|
|
},
|
|
{
|
|
"time": 7612,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": "LIST",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000025,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7612,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000077,
|
|
"acknowledgement": 3000029
|
|
},
|
|
{
|
|
"time": 7667,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": "+OK 2 169\n0 80\n1 89\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000077,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7890,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000029,
|
|
"acknowledgement": 1000097
|
|
},
|
|
{
|
|
"time": 9111,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": "RETR 0",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9112,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000097,
|
|
"acknowledgement": 3000035
|
|
},
|
|
{
|
|
"time": 9167,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": "+OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000097,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9389,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000035,
|
|
"acknowledgement": 1000219
|
|
},
|
|
{
|
|
"time": 10611,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": "RETR 1",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000035,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 10612,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000219,
|
|
"acknowledgement": 3000041
|
|
},
|
|
{
|
|
"time": 10667,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": "+OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000219,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 10889,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000041,
|
|
"acknowledgement": 1000371
|
|
},
|
|
{
|
|
"time": 12111,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": "DELE 0",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000041,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 12111,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000371,
|
|
"acknowledgement": 3000047
|
|
},
|
|
{
|
|
"time": 12167,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": "+OK message marked for delete",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000371,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 12388,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000047,
|
|
"acknowledgement": 1000400
|
|
},
|
|
{
|
|
"time": 13612,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": "DELE 1",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000047,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 13612,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000400,
|
|
"acknowledgement": 3000053
|
|
},
|
|
{
|
|
"time": 13667,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": "+OK message marked for delete",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000400,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 13889,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000053,
|
|
"acknowledgement": 1000429
|
|
},
|
|
{
|
|
"time": 15111,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000053,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 15111,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000429,
|
|
"acknowledgement": 3000057
|
|
},
|
|
{
|
|
"time": 15167,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": "+OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000429,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 15389,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000057,
|
|
"acknowledgement": 1000432
|
|
},
|
|
{
|
|
"time": 15390,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 1000432,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 15611,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000057,
|
|
"acknowledgement": 1000433
|
|
},
|
|
{
|
|
"time": 15667,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65526,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 3000057,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 15667,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 65526,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000433,
|
|
"acknowledgement": 3000058
|
|
},
|
|
{
|
|
"time": 17612,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 63726,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 5000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 17612,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 63726,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 4000000,
|
|
"acknowledgement": 5000001
|
|
},
|
|
{
|
|
"time": 17834,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 63726,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 4000001
|
|
},
|
|
{
|
|
"time": 17860,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 63726,
|
|
"payload": "+OK POP3 server ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 18082,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 63726,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 4000022
|
|
},
|
|
{
|
|
"time": 20111,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 63726,
|
|
"destinationPort": 110,
|
|
"payload": "USER anna",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 20111,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 63726,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000022,
|
|
"acknowledgement": 5000010
|
|
},
|
|
{
|
|
"time": 20166,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 63726,
|
|
"payload": "+OK enter password",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000022,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 20388,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 63726,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000010,
|
|
"acknowledgement": 4000040
|
|
},
|
|
{
|
|
"time": 21611,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 63726,
|
|
"destinationPort": 110,
|
|
"payload": "PASS geheim",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000010,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 21611,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 63726,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000040,
|
|
"acknowledgement": 5000021
|
|
},
|
|
{
|
|
"time": 21667,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 63726,
|
|
"payload": "+OK Mailbox locked and ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000040,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 21888,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 63726,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000021,
|
|
"acknowledgement": 4000068
|
|
},
|
|
{
|
|
"time": 23111,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 63726,
|
|
"destinationPort": 110,
|
|
"payload": "STAT",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000021,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 23112,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 63726,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000068,
|
|
"acknowledgement": 5000025
|
|
},
|
|
{
|
|
"time": 23167,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 63726,
|
|
"payload": "+OK 0 0",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000068,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 23390,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 63726,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000025,
|
|
"acknowledgement": 4000075
|
|
},
|
|
{
|
|
"time": 24611,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 63726,
|
|
"destinationPort": 110,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000025,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 24611,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 63726,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000075,
|
|
"acknowledgement": 5000029
|
|
},
|
|
{
|
|
"time": 24666,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 63726,
|
|
"payload": "+OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000075,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 24888,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 63726,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000029,
|
|
"acknowledgement": 4000078
|
|
},
|
|
{
|
|
"time": 24888,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 63726,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 4000078,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 25110,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 63726,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000029,
|
|
"acknowledgement": 4000079
|
|
},
|
|
{
|
|
"time": 25165,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 63726,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 5000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 25165,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 63726,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000079,
|
|
"acknowledgement": 5000030
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000204": [
|
|
{
|
|
"time": 638,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
}
|
|
]
|
|
},
|
|
"rows": {
|
|
"00000000-0000-0000-0000-000000000201": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 1.000.022"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022, ACK: 3.000.010"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.010, ACK: 1.000.040"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.010"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040, ACK: 3.000.021"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.021, ACK: 1.000.068"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.021"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"",
|
|
"Anwendung",
|
|
"STAT"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068, ACK: 3.000.025"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 2 169"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.025, ACK: 1.000.077"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.025"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"",
|
|
"Anwendung",
|
|
"LIST"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.077, ACK: 3.000.029"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.077"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 2 169\n0 80\n1 89\n"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.029, ACK: 1.000.097"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.029"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 0"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.097, ACK: 3.000.035"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.097"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.035, ACK: 1.000.219"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.035"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 1"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.219, ACK: 3.000.041"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.219"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.041, ACK: 1.000.371"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.041"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 0"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.371, ACK: 3.000.047"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.371"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.047, ACK: 1.000.400"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.047"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 1"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.400, ACK: 3.000.053"
|
|
],
|
|
[
|
|
"38",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.400"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"39",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.053, ACK: 1.000.429"
|
|
],
|
|
[
|
|
"40",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.053"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"41",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.429, ACK: 3.000.057"
|
|
],
|
|
[
|
|
"42",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.429"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"43",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.057, ACK: 1.000.432"
|
|
],
|
|
[
|
|
"44",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.432"
|
|
],
|
|
[
|
|
"45",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.057, ACK: 1.000.433"
|
|
],
|
|
[
|
|
"46",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.000.057"
|
|
],
|
|
[
|
|
"47",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.433, ACK: 3.000.058"
|
|
],
|
|
[
|
|
"48",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 5.000.000"
|
|
],
|
|
[
|
|
"49",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000, ACK: 5.000.001"
|
|
],
|
|
[
|
|
"50",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"51",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"52",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 4.000.022"
|
|
],
|
|
[
|
|
"53",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"54",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.022, ACK: 5.000.010"
|
|
],
|
|
[
|
|
"55",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.022"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"56",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.010, ACK: 4.000.040"
|
|
],
|
|
[
|
|
"57",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.010"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"58",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.040, ACK: 5.000.021"
|
|
],
|
|
[
|
|
"59",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.040"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"60",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.021, ACK: 4.000.068"
|
|
],
|
|
[
|
|
"61",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.021"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"",
|
|
"Anwendung",
|
|
"STAT"
|
|
],
|
|
[
|
|
"62",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.068, ACK: 5.000.025"
|
|
],
|
|
[
|
|
"63",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.068"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 0 0"
|
|
],
|
|
[
|
|
"64",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.025, ACK: 4.000.075"
|
|
],
|
|
[
|
|
"65",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.025"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"66",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.075, ACK: 5.000.029"
|
|
],
|
|
[
|
|
"67",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.075"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"68",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.029, ACK: 4.000.078"
|
|
],
|
|
[
|
|
"69",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"69",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"69",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.078"
|
|
],
|
|
[
|
|
"70",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.029, ACK: 4.000.079"
|
|
],
|
|
[
|
|
"71",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"71",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"71",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 5.000.029"
|
|
],
|
|
[
|
|
"72",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"72",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"72",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.079, ACK: 5.000.030"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000202": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000203": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 1.000.022"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022, ACK: 3.000.010"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.010, ACK: 1.000.040"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.010"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040, ACK: 3.000.021"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.021, ACK: 1.000.068"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.021"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"",
|
|
"Anwendung",
|
|
"STAT"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068, ACK: 3.000.025"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 2 169"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.025, ACK: 1.000.077"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.025"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"",
|
|
"Anwendung",
|
|
"LIST"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.077, ACK: 3.000.029"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.077"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 2 169\n0 80\n1 89\n"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.029, ACK: 1.000.097"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.029"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 0"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.097, ACK: 3.000.035"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.097"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.035, ACK: 1.000.219"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.035"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 1"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.219, ACK: 3.000.041"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.219"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.041, ACK: 1.000.371"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.041"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 0"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.371, ACK: 3.000.047"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.371"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.047, ACK: 1.000.400"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.047"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 1"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.400, ACK: 3.000.053"
|
|
],
|
|
[
|
|
"38",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.400"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"39",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.053, ACK: 1.000.429"
|
|
],
|
|
[
|
|
"40",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.053"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"41",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.429, ACK: 3.000.057"
|
|
],
|
|
[
|
|
"42",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.429"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"43",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.057, ACK: 1.000.432"
|
|
],
|
|
[
|
|
"44",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.432"
|
|
],
|
|
[
|
|
"45",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.057, ACK: 1.000.433"
|
|
],
|
|
[
|
|
"46",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.20:65526",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.000.057"
|
|
],
|
|
[
|
|
"47",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.433, ACK: 3.000.058"
|
|
],
|
|
[
|
|
"48",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 5.000.000"
|
|
],
|
|
[
|
|
"49",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000, ACK: 5.000.001"
|
|
],
|
|
[
|
|
"50",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"51",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"52",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 4.000.022"
|
|
],
|
|
[
|
|
"53",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"54",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.022, ACK: 5.000.010"
|
|
],
|
|
[
|
|
"55",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.022"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"56",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.010, ACK: 4.000.040"
|
|
],
|
|
[
|
|
"57",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.010"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"58",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.040, ACK: 5.000.021"
|
|
],
|
|
[
|
|
"59",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.040"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"60",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.021, ACK: 4.000.068"
|
|
],
|
|
[
|
|
"61",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.021"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"",
|
|
"Anwendung",
|
|
"STAT"
|
|
],
|
|
[
|
|
"62",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.068, ACK: 5.000.025"
|
|
],
|
|
[
|
|
"63",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.068"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 0 0"
|
|
],
|
|
[
|
|
"64",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.025, ACK: 4.000.075"
|
|
],
|
|
[
|
|
"65",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.025"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"66",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.075, ACK: 5.000.029"
|
|
],
|
|
[
|
|
"67",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.075"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"68",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.029, ACK: 4.000.078"
|
|
],
|
|
[
|
|
"69",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"69",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"69",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.078"
|
|
],
|
|
[
|
|
"70",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.029, ACK: 4.000.079"
|
|
],
|
|
[
|
|
"71",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"71",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"71",
|
|
"192.168.0.20:63726",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 5.000.029"
|
|
],
|
|
[
|
|
"72",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"72",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"72",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.079, ACK: 5.000.030"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000204": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
]
|
|
]
|
|
},
|
|
"layeredRows": {
|
|
"00000000-0000-0000-0000-000000000201": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 1.000.022"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022, ACK: 3.000.010"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022"
|
|
],
|
|
[
|
|
"10",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.010, ACK: 1.000.040"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.010"
|
|
],
|
|
[
|
|
"12",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040, ACK: 3.000.021"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040"
|
|
],
|
|
[
|
|
"14",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.021, ACK: 1.000.068"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.021"
|
|
],
|
|
[
|
|
"16",
|
|
null,
|
|
null,
|
|
"",
|
|
"Anwendung",
|
|
"STAT"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068, ACK: 3.000.025"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068"
|
|
],
|
|
[
|
|
"18",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 2 169"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.025, ACK: 1.000.077"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.025"
|
|
],
|
|
[
|
|
"20",
|
|
null,
|
|
null,
|
|
"",
|
|
"Anwendung",
|
|
"LIST"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.077, ACK: 3.000.029"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.077"
|
|
],
|
|
[
|
|
"22",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 2 169\n0 80\n1 89\n"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.029, ACK: 1.000.097"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.029"
|
|
],
|
|
[
|
|
"24",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 0"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.097, ACK: 3.000.035"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.097"
|
|
],
|
|
[
|
|
"26",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.035, ACK: 1.000.219"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.035"
|
|
],
|
|
[
|
|
"28",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 1"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.219, ACK: 3.000.041"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.219"
|
|
],
|
|
[
|
|
"30",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.041, ACK: 1.000.371"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.041"
|
|
],
|
|
[
|
|
"32",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 0"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.371, ACK: 3.000.047"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.371"
|
|
],
|
|
[
|
|
"34",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.047, ACK: 1.000.400"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.047"
|
|
],
|
|
[
|
|
"36",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 1"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.400, ACK: 3.000.053"
|
|
],
|
|
[
|
|
"38",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"38",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.400"
|
|
],
|
|
[
|
|
"38",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"39",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"39",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.053, ACK: 1.000.429"
|
|
],
|
|
[
|
|
"40",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"40",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.053"
|
|
],
|
|
[
|
|
"40",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"41",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"41",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.429, ACK: 3.000.057"
|
|
],
|
|
[
|
|
"42",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"42",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.429"
|
|
],
|
|
[
|
|
"42",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"43",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"43",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.057, ACK: 1.000.432"
|
|
],
|
|
[
|
|
"44",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"44",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.432"
|
|
],
|
|
[
|
|
"45",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"45",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.057, ACK: 1.000.433"
|
|
],
|
|
[
|
|
"46",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"46",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.000.057"
|
|
],
|
|
[
|
|
"47",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"47",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.433, ACK: 3.000.058"
|
|
],
|
|
[
|
|
"48",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"48",
|
|
"63726",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 5.000.000"
|
|
],
|
|
[
|
|
"49",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"49",
|
|
"110",
|
|
"63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000, ACK: 5.000.001"
|
|
],
|
|
[
|
|
"50",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"50",
|
|
"63726",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"51",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"51",
|
|
"110",
|
|
"63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"51",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"52",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"52",
|
|
"63726",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 4.000.022"
|
|
],
|
|
[
|
|
"53",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"53",
|
|
"63726",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001"
|
|
],
|
|
[
|
|
"53",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"54",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"54",
|
|
"110",
|
|
"63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.022, ACK: 5.000.010"
|
|
],
|
|
[
|
|
"55",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"55",
|
|
"110",
|
|
"63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.022"
|
|
],
|
|
[
|
|
"55",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"56",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"56",
|
|
"63726",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.010, ACK: 4.000.040"
|
|
],
|
|
[
|
|
"57",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"57",
|
|
"63726",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.010"
|
|
],
|
|
[
|
|
"57",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"58",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"58",
|
|
"110",
|
|
"63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.040, ACK: 5.000.021"
|
|
],
|
|
[
|
|
"59",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"59",
|
|
"110",
|
|
"63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.040"
|
|
],
|
|
[
|
|
"59",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"60",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"60",
|
|
"63726",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.021, ACK: 4.000.068"
|
|
],
|
|
[
|
|
"61",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"61",
|
|
"63726",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.021"
|
|
],
|
|
[
|
|
"61",
|
|
null,
|
|
null,
|
|
"",
|
|
"Anwendung",
|
|
"STAT"
|
|
],
|
|
[
|
|
"62",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"62",
|
|
"110",
|
|
"63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.068, ACK: 5.000.025"
|
|
],
|
|
[
|
|
"63",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"63",
|
|
"110",
|
|
"63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.068"
|
|
],
|
|
[
|
|
"63",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 0 0"
|
|
],
|
|
[
|
|
"64",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"64",
|
|
"63726",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.025, ACK: 4.000.075"
|
|
],
|
|
[
|
|
"65",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"65",
|
|
"63726",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.025"
|
|
],
|
|
[
|
|
"65",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"66",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"66",
|
|
"110",
|
|
"63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.075, ACK: 5.000.029"
|
|
],
|
|
[
|
|
"67",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"67",
|
|
"110",
|
|
"63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.075"
|
|
],
|
|
[
|
|
"67",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"68",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"68",
|
|
"63726",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.029, ACK: 4.000.078"
|
|
],
|
|
[
|
|
"69",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"69",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"69",
|
|
"110",
|
|
"63726",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.078"
|
|
],
|
|
[
|
|
"70",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"70",
|
|
"63726",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.029, ACK: 4.000.079"
|
|
],
|
|
[
|
|
"71",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"71",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"71",
|
|
"63726",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 5.000.029"
|
|
],
|
|
[
|
|
"72",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"72",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"72",
|
|
"110",
|
|
"63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.079, ACK: 5.000.030"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000202": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000203": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 1.000.022"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022, ACK: 3.000.010"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022"
|
|
],
|
|
[
|
|
"10",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.010, ACK: 1.000.040"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.010"
|
|
],
|
|
[
|
|
"12",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040, ACK: 3.000.021"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040"
|
|
],
|
|
[
|
|
"14",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.021, ACK: 1.000.068"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.021"
|
|
],
|
|
[
|
|
"16",
|
|
null,
|
|
null,
|
|
"",
|
|
"Anwendung",
|
|
"STAT"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068, ACK: 3.000.025"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068"
|
|
],
|
|
[
|
|
"18",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 2 169"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.025, ACK: 1.000.077"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.025"
|
|
],
|
|
[
|
|
"20",
|
|
null,
|
|
null,
|
|
"",
|
|
"Anwendung",
|
|
"LIST"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.077, ACK: 3.000.029"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.077"
|
|
],
|
|
[
|
|
"22",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 2 169\n0 80\n1 89\n"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.029, ACK: 1.000.097"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.029"
|
|
],
|
|
[
|
|
"24",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 0"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.097, ACK: 3.000.035"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.097"
|
|
],
|
|
[
|
|
"26",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.035, ACK: 1.000.219"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.035"
|
|
],
|
|
[
|
|
"28",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 1"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.219, ACK: 3.000.041"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.219"
|
|
],
|
|
[
|
|
"30",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.041, ACK: 1.000.371"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.041"
|
|
],
|
|
[
|
|
"32",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 0"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.371, ACK: 3.000.047"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.371"
|
|
],
|
|
[
|
|
"34",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.047, ACK: 1.000.400"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.047"
|
|
],
|
|
[
|
|
"36",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 1"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.400, ACK: 3.000.053"
|
|
],
|
|
[
|
|
"38",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"38",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.400"
|
|
],
|
|
[
|
|
"38",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"39",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"39",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.053, ACK: 1.000.429"
|
|
],
|
|
[
|
|
"40",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"40",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.053"
|
|
],
|
|
[
|
|
"40",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"41",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"41",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.429, ACK: 3.000.057"
|
|
],
|
|
[
|
|
"42",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"42",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.429"
|
|
],
|
|
[
|
|
"42",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"43",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"43",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.057, ACK: 1.000.432"
|
|
],
|
|
[
|
|
"44",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"44",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.432"
|
|
],
|
|
[
|
|
"45",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"45",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.057, ACK: 1.000.433"
|
|
],
|
|
[
|
|
"46",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"46",
|
|
"65526",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.000.057"
|
|
],
|
|
[
|
|
"47",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"47",
|
|
"110",
|
|
"65526",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.433, ACK: 3.000.058"
|
|
],
|
|
[
|
|
"48",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"48",
|
|
"63726",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 5.000.000"
|
|
],
|
|
[
|
|
"49",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"49",
|
|
"110",
|
|
"63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000, ACK: 5.000.001"
|
|
],
|
|
[
|
|
"50",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"50",
|
|
"63726",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"51",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"51",
|
|
"110",
|
|
"63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"51",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"52",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"52",
|
|
"63726",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 4.000.022"
|
|
],
|
|
[
|
|
"53",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"53",
|
|
"63726",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001"
|
|
],
|
|
[
|
|
"53",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"54",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"54",
|
|
"110",
|
|
"63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.022, ACK: 5.000.010"
|
|
],
|
|
[
|
|
"55",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"55",
|
|
"110",
|
|
"63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.022"
|
|
],
|
|
[
|
|
"55",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"56",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"56",
|
|
"63726",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.010, ACK: 4.000.040"
|
|
],
|
|
[
|
|
"57",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"57",
|
|
"63726",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.010"
|
|
],
|
|
[
|
|
"57",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"58",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"58",
|
|
"110",
|
|
"63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.040, ACK: 5.000.021"
|
|
],
|
|
[
|
|
"59",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"59",
|
|
"110",
|
|
"63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.040"
|
|
],
|
|
[
|
|
"59",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"60",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"60",
|
|
"63726",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.021, ACK: 4.000.068"
|
|
],
|
|
[
|
|
"61",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"61",
|
|
"63726",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.021"
|
|
],
|
|
[
|
|
"61",
|
|
null,
|
|
null,
|
|
"",
|
|
"Anwendung",
|
|
"STAT"
|
|
],
|
|
[
|
|
"62",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"62",
|
|
"110",
|
|
"63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.068, ACK: 5.000.025"
|
|
],
|
|
[
|
|
"63",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"63",
|
|
"110",
|
|
"63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.068"
|
|
],
|
|
[
|
|
"63",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 0 0"
|
|
],
|
|
[
|
|
"64",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"64",
|
|
"63726",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.025, ACK: 4.000.075"
|
|
],
|
|
[
|
|
"65",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"65",
|
|
"63726",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.025"
|
|
],
|
|
[
|
|
"65",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"66",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"66",
|
|
"110",
|
|
"63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.075, ACK: 5.000.029"
|
|
],
|
|
[
|
|
"67",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"67",
|
|
"110",
|
|
"63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.075"
|
|
],
|
|
[
|
|
"67",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"68",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"68",
|
|
"63726",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.029, ACK: 4.000.078"
|
|
],
|
|
[
|
|
"69",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"69",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"69",
|
|
"110",
|
|
"63726",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.078"
|
|
],
|
|
[
|
|
"70",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"70",
|
|
"63726",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.029, ACK: 4.000.079"
|
|
],
|
|
[
|
|
"71",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"71",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"71",
|
|
"63726",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 5.000.029"
|
|
],
|
|
[
|
|
"72",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"72",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"72",
|
|
"110",
|
|
"63726",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.079, ACK: 5.000.030"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000204": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
]
|
|
]
|
|
},
|
|
"events": [
|
|
[
|
|
219,
|
|
"client",
|
|
"null"
|
|
],
|
|
[
|
|
220,
|
|
"server",
|
|
"null"
|
|
],
|
|
[
|
|
501,
|
|
"client",
|
|
"call verbinden 110"
|
|
],
|
|
[
|
|
1004,
|
|
"client",
|
|
"Verbindung hergestellt"
|
|
],
|
|
[
|
|
1125,
|
|
"server",
|
|
"----"
|
|
],
|
|
[
|
|
1125,
|
|
"server",
|
|
"192.168.0.20> +OK POP3 server ready"
|
|
],
|
|
[
|
|
1237,
|
|
"client",
|
|
">>+OK POP3 server ready"
|
|
],
|
|
[
|
|
3000,
|
|
"client",
|
|
"call senden USER anna"
|
|
],
|
|
[
|
|
3112,
|
|
"server",
|
|
"192.168.0.20< USER anna"
|
|
],
|
|
[
|
|
3116,
|
|
"server",
|
|
"192.168.0.20> +OK enter password"
|
|
],
|
|
[
|
|
3224,
|
|
"client",
|
|
"<<USER anna"
|
|
],
|
|
[
|
|
3280,
|
|
"client",
|
|
">>+OK enter password"
|
|
],
|
|
[
|
|
4500,
|
|
"client",
|
|
"call senden PASS geheim"
|
|
],
|
|
[
|
|
4612,
|
|
"server",
|
|
"192.168.0.20< PASS geheim"
|
|
],
|
|
[
|
|
4612,
|
|
"server",
|
|
"192.168.0.20> +OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
4723,
|
|
"client",
|
|
"<<PASS geheim"
|
|
],
|
|
[
|
|
4779,
|
|
"client",
|
|
">>+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
6000,
|
|
"client",
|
|
"call senden STAT"
|
|
],
|
|
[
|
|
6112,
|
|
"server",
|
|
"192.168.0.20< STAT"
|
|
],
|
|
[
|
|
6114,
|
|
"server",
|
|
"192.168.0.20> +OK 2 169"
|
|
],
|
|
[
|
|
6223,
|
|
"client",
|
|
"<<STAT"
|
|
],
|
|
[
|
|
6279,
|
|
"client",
|
|
">>+OK 2 169"
|
|
],
|
|
[
|
|
7500,
|
|
"client",
|
|
"call senden LIST"
|
|
],
|
|
[
|
|
7612,
|
|
"server",
|
|
"192.168.0.20< LIST"
|
|
],
|
|
[
|
|
7612,
|
|
"server",
|
|
"192.168.0.20> +OK 2 169\n0 80\n1 89\n"
|
|
],
|
|
[
|
|
7723,
|
|
"client",
|
|
"<<LIST"
|
|
],
|
|
[
|
|
7778,
|
|
"client",
|
|
">>+OK 2 169\n0 80\n1 89\n"
|
|
],
|
|
[
|
|
9000,
|
|
"client",
|
|
"call senden RETR 0"
|
|
],
|
|
[
|
|
9112,
|
|
"server",
|
|
"192.168.0.20< RETR 0"
|
|
],
|
|
[
|
|
9112,
|
|
"server",
|
|
"192.168.0.20> +OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile"
|
|
],
|
|
[
|
|
9223,
|
|
"client",
|
|
"<<RETR 0"
|
|
],
|
|
[
|
|
9278,
|
|
"client",
|
|
">>+OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile"
|
|
],
|
|
[
|
|
10500,
|
|
"client",
|
|
"call senden RETR 1"
|
|
],
|
|
[
|
|
10611,
|
|
"server",
|
|
"192.168.0.20< RETR 1"
|
|
],
|
|
[
|
|
10612,
|
|
"server",
|
|
"192.168.0.20> +OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?"
|
|
],
|
|
[
|
|
10723,
|
|
"client",
|
|
"<<RETR 1"
|
|
],
|
|
[
|
|
10778,
|
|
"client",
|
|
">>+OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?"
|
|
],
|
|
[
|
|
12000,
|
|
"client",
|
|
"call senden DELE 0"
|
|
],
|
|
[
|
|
12111,
|
|
"server",
|
|
"192.168.0.20< DELE 0"
|
|
],
|
|
[
|
|
12112,
|
|
"server",
|
|
"192.168.0.20> +OK message marked for delete"
|
|
],
|
|
[
|
|
12222,
|
|
"client",
|
|
"<<DELE 0"
|
|
],
|
|
[
|
|
12278,
|
|
"client",
|
|
">>+OK message marked for delete"
|
|
],
|
|
[
|
|
13500,
|
|
"client",
|
|
"call senden DELE 1"
|
|
],
|
|
[
|
|
13612,
|
|
"server",
|
|
"192.168.0.20< DELE 1"
|
|
],
|
|
[
|
|
13612,
|
|
"server",
|
|
"192.168.0.20> +OK message marked for delete"
|
|
],
|
|
[
|
|
13723,
|
|
"client",
|
|
"<<DELE 1"
|
|
],
|
|
[
|
|
13778,
|
|
"client",
|
|
">>+OK message marked for delete"
|
|
],
|
|
[
|
|
15000,
|
|
"client",
|
|
"call senden QUIT"
|
|
],
|
|
[
|
|
15111,
|
|
"server",
|
|
"192.168.0.20< QUIT"
|
|
],
|
|
[
|
|
15112,
|
|
"server",
|
|
"null"
|
|
],
|
|
[
|
|
15112,
|
|
"server",
|
|
"192.168.0.20> +OK"
|
|
],
|
|
[
|
|
15222,
|
|
"client",
|
|
"<<QUIT"
|
|
],
|
|
[
|
|
15278,
|
|
"client",
|
|
">>+OK"
|
|
],
|
|
[
|
|
15501,
|
|
"client",
|
|
"Socket zu 192.168.0.30:110 getrennt"
|
|
],
|
|
[
|
|
17500,
|
|
"client",
|
|
"call verbinden 110"
|
|
],
|
|
[
|
|
17801,
|
|
"client",
|
|
"Verbindung hergestellt"
|
|
],
|
|
[
|
|
17860,
|
|
"server",
|
|
"----"
|
|
],
|
|
[
|
|
17860,
|
|
"server",
|
|
"192.168.0.20> +OK POP3 server ready"
|
|
],
|
|
[
|
|
17971,
|
|
"client",
|
|
">>+OK POP3 server ready"
|
|
],
|
|
[
|
|
20000,
|
|
"client",
|
|
"call senden USER anna"
|
|
],
|
|
[
|
|
20111,
|
|
"server",
|
|
"192.168.0.20< USER anna"
|
|
],
|
|
[
|
|
20111,
|
|
"server",
|
|
"192.168.0.20> +OK enter password"
|
|
],
|
|
[
|
|
20222,
|
|
"client",
|
|
"<<USER anna"
|
|
],
|
|
[
|
|
20277,
|
|
"client",
|
|
">>+OK enter password"
|
|
],
|
|
[
|
|
21500,
|
|
"client",
|
|
"call senden PASS geheim"
|
|
],
|
|
[
|
|
21611,
|
|
"server",
|
|
"192.168.0.20< PASS geheim"
|
|
],
|
|
[
|
|
21611,
|
|
"server",
|
|
"192.168.0.20> +OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
21722,
|
|
"client",
|
|
"<<PASS geheim"
|
|
],
|
|
[
|
|
21778,
|
|
"client",
|
|
">>+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
23000,
|
|
"client",
|
|
"call senden STAT"
|
|
],
|
|
[
|
|
23111,
|
|
"server",
|
|
"192.168.0.20< STAT"
|
|
],
|
|
[
|
|
23112,
|
|
"server",
|
|
"192.168.0.20> +OK 0 0"
|
|
],
|
|
[
|
|
23223,
|
|
"client",
|
|
"<<STAT"
|
|
],
|
|
[
|
|
23278,
|
|
"client",
|
|
">>+OK 0 0"
|
|
],
|
|
[
|
|
24500,
|
|
"client",
|
|
"call senden QUIT"
|
|
],
|
|
[
|
|
24611,
|
|
"server",
|
|
"192.168.0.20< QUIT"
|
|
],
|
|
[
|
|
24611,
|
|
"server",
|
|
"null"
|
|
],
|
|
[
|
|
24611,
|
|
"server",
|
|
"192.168.0.20> +OK"
|
|
],
|
|
[
|
|
24722,
|
|
"client",
|
|
"<<QUIT"
|
|
],
|
|
[
|
|
24777,
|
|
"client",
|
|
">>+OK"
|
|
],
|
|
[
|
|
24999,
|
|
"client",
|
|
"Socket zu 192.168.0.30:110 getrennt"
|
|
]
|
|
],
|
|
"accounts": [
|
|
[
|
|
"anna"
|
|
],
|
|
[
|
|
"bob"
|
|
]
|
|
],
|
|
"file": "anna;filius.de;geheim;Muster;Anna;\nbob;filius.de;passwort;Beispiel;Bob;\n"
|
|
}
|