SMTP on port 25 stores mails for the domain's accounts as Java reads them anew and tells a local sender of unknown recipients; POP3 on port 110 hands them out. The mailboxes are in the snapshot and go back into the project. EmailRun plays four stories over the network; MailCases feeds Java's workers without one (26 cases, de and en). 18 cases name Java bugs that the core does not take. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
6752 lines
132 KiB
JSON
6752 lines
132 KiB
JSON
{
|
|
"frames": {
|
|
"00000000-0000-0000-0000-000000000201": [
|
|
{
|
|
"time": 519,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
},
|
|
{
|
|
"time": 753,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 756,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 3000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 982,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 1000000,
|
|
"acknowledgement": 3000001
|
|
},
|
|
{
|
|
"time": 982,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 1000001
|
|
},
|
|
{
|
|
"time": 1228,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": "+OK POP3 server ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1229,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 1000022
|
|
},
|
|
{
|
|
"time": 3000,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": "NOOP",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3224,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000022,
|
|
"acknowledgement": 3000005
|
|
},
|
|
{
|
|
"time": 3279,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": "-ERR unknown command",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000022,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3280,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000005,
|
|
"acknowledgement": 1000042
|
|
},
|
|
{
|
|
"time": 4500,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": "USER niemand",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000005,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4723,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000042,
|
|
"acknowledgement": 3000017
|
|
},
|
|
{
|
|
"time": 4778,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": "-ERR user or password wrong",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000042,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4779,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000017,
|
|
"acknowledgement": 1000069
|
|
},
|
|
{
|
|
"time": 6000,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": "PASS x",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000017,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6223,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000069,
|
|
"acknowledgement": 3000023
|
|
},
|
|
{
|
|
"time": 6278,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": "-ERR Please enter PASS",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000069,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6279,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000023,
|
|
"acknowledgement": 1000091
|
|
},
|
|
{
|
|
"time": 7500,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": "USER anna",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000023,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7723,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000091,
|
|
"acknowledgement": 3000032
|
|
},
|
|
{
|
|
"time": 7779,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": "+OK enter password",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000091,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7779,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000032,
|
|
"acknowledgement": 1000109
|
|
},
|
|
{
|
|
"time": 9001,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": "PASS falsch",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000032,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9223,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000109,
|
|
"acknowledgement": 3000043
|
|
},
|
|
{
|
|
"time": 9279,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": "-ERR user or password wrong",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000109,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9279,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000043,
|
|
"acknowledgement": 1000136
|
|
},
|
|
{
|
|
"time": 10501,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": "PASS geheim",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000043,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 10723,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000136,
|
|
"acknowledgement": 3000054
|
|
},
|
|
{
|
|
"time": 10778,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": "+OK Mailbox locked and ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000136,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 10779,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000054,
|
|
"acknowledgement": 1000164
|
|
},
|
|
{
|
|
"time": 12001,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": "NOOP",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000054,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 12223,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000164,
|
|
"acknowledgement": 3000058
|
|
},
|
|
{
|
|
"time": 12278,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": "+OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000164,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 12278,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000058,
|
|
"acknowledgement": 1000167
|
|
},
|
|
{
|
|
"time": 13500,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": "USER bob",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000058,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 13722,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000167,
|
|
"acknowledgement": 3000066
|
|
},
|
|
{
|
|
"time": 13777,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": "-ERR Please enter USER",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000167,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 13778,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000066,
|
|
"acknowledgement": 1000189
|
|
},
|
|
{
|
|
"time": 15001,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000066,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 15223,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000189,
|
|
"acknowledgement": 3000070
|
|
},
|
|
{
|
|
"time": 15278,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": "+OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000189,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 15278,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000070,
|
|
"acknowledgement": 1000192
|
|
},
|
|
{
|
|
"time": 15501,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 1000192,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 15501,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000070,
|
|
"acknowledgement": 1000193
|
|
},
|
|
{
|
|
"time": 15556,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 3000070,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 15778,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000193,
|
|
"acknowledgement": 3000071
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000202": [
|
|
{
|
|
"time": 640,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000203": [
|
|
{
|
|
"time": 640,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
},
|
|
{
|
|
"time": 642,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 869,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 3000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 871,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 1000000,
|
|
"acknowledgement": 3000001
|
|
},
|
|
{
|
|
"time": 1094,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 1000001
|
|
},
|
|
{
|
|
"time": 1117,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": "+OK POP3 server ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1340,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 1000022
|
|
},
|
|
{
|
|
"time": 3112,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": "NOOP",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3112,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000022,
|
|
"acknowledgement": 3000005
|
|
},
|
|
{
|
|
"time": 3168,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": "-ERR unknown command",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000022,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3391,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000005,
|
|
"acknowledgement": 1000042
|
|
},
|
|
{
|
|
"time": 4611,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": "USER niemand",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000005,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4612,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000042,
|
|
"acknowledgement": 3000017
|
|
},
|
|
{
|
|
"time": 4667,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": "-ERR user or password wrong",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000042,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4890,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000017,
|
|
"acknowledgement": 1000069
|
|
},
|
|
{
|
|
"time": 6111,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": "PASS x",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000017,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6112,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000069,
|
|
"acknowledgement": 3000023
|
|
},
|
|
{
|
|
"time": 6167,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": "-ERR Please enter PASS",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000069,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6390,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000023,
|
|
"acknowledgement": 1000091
|
|
},
|
|
{
|
|
"time": 7612,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": "USER anna",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000023,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7612,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000091,
|
|
"acknowledgement": 3000032
|
|
},
|
|
{
|
|
"time": 7668,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": "+OK enter password",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000091,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7890,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000032,
|
|
"acknowledgement": 1000109
|
|
},
|
|
{
|
|
"time": 9112,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": "PASS falsch",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000032,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9112,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000109,
|
|
"acknowledgement": 3000043
|
|
},
|
|
{
|
|
"time": 9168,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": "-ERR user or password wrong",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000109,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9390,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000043,
|
|
"acknowledgement": 1000136
|
|
},
|
|
{
|
|
"time": 10612,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": "PASS geheim",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000043,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 10612,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000136,
|
|
"acknowledgement": 3000054
|
|
},
|
|
{
|
|
"time": 10668,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": "+OK Mailbox locked and ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000136,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 10889,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000054,
|
|
"acknowledgement": 1000164
|
|
},
|
|
{
|
|
"time": 12111,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": "NOOP",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000054,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 12112,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000164,
|
|
"acknowledgement": 3000058
|
|
},
|
|
{
|
|
"time": 12167,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": "+OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000164,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 12389,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000058,
|
|
"acknowledgement": 1000167
|
|
},
|
|
{
|
|
"time": 13611,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": "USER bob",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000058,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 13611,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000167,
|
|
"acknowledgement": 3000066
|
|
},
|
|
{
|
|
"time": 13667,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": "-ERR Please enter USER",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000167,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 13889,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000066,
|
|
"acknowledgement": 1000189
|
|
},
|
|
{
|
|
"time": 15112,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000066,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 15112,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000189,
|
|
"acknowledgement": 3000070
|
|
},
|
|
{
|
|
"time": 15167,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": "+OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000189,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 15389,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000070,
|
|
"acknowledgement": 1000192
|
|
},
|
|
{
|
|
"time": 15390,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 1000192,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 15612,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000070,
|
|
"acknowledgement": 1000193
|
|
},
|
|
{
|
|
"time": 15667,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 58845,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 3000070,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 15667,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 58845,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000193,
|
|
"acknowledgement": 3000071
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000204": [
|
|
{
|
|
"time": 640,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
}
|
|
]
|
|
},
|
|
"rows": {
|
|
"00000000-0000-0000-0000-000000000201": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 1.000.022"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"NOOP"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022, ACK: 3.000.005"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"POP3",
|
|
"Anwendung",
|
|
"-ERR unknown command"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.005, ACK: 1.000.042"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.005"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER niemand"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.042, ACK: 3.000.017"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.042"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"POP3",
|
|
"Anwendung",
|
|
"-ERR user or password wrong"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.017, ACK: 1.000.069"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.017"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS x"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.069, ACK: 3.000.023"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.069"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"POP3",
|
|
"Anwendung",
|
|
"-ERR Please enter PASS"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.023, ACK: 1.000.091"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.023"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.091, ACK: 3.000.032"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.091"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.032, ACK: 1.000.109"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.032"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS falsch"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.109, ACK: 3.000.043"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.109"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"POP3",
|
|
"Anwendung",
|
|
"-ERR user or password wrong"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.043, ACK: 1.000.136"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.043"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.136, ACK: 3.000.054"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.136"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.054, ACK: 1.000.164"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.054"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"NOOP"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.164, ACK: 3.000.058"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.164"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.058, ACK: 1.000.167"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.058"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER bob"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.167, ACK: 3.000.066"
|
|
],
|
|
[
|
|
"38",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.167"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"POP3",
|
|
"Anwendung",
|
|
"-ERR Please enter USER"
|
|
],
|
|
[
|
|
"39",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.066, ACK: 1.000.189"
|
|
],
|
|
[
|
|
"40",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.066"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"41",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.189, ACK: 3.000.070"
|
|
],
|
|
[
|
|
"42",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.189"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"43",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.070, ACK: 1.000.192"
|
|
],
|
|
[
|
|
"44",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.192"
|
|
],
|
|
[
|
|
"45",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.070, ACK: 1.000.193"
|
|
],
|
|
[
|
|
"46",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.000.070"
|
|
],
|
|
[
|
|
"47",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.193, ACK: 3.000.071"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000202": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000203": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 1.000.022"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"NOOP"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022, ACK: 3.000.005"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"POP3",
|
|
"Anwendung",
|
|
"-ERR unknown command"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.005, ACK: 1.000.042"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.005"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER niemand"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.042, ACK: 3.000.017"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.042"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"POP3",
|
|
"Anwendung",
|
|
"-ERR user or password wrong"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.017, ACK: 1.000.069"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.017"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS x"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.069, ACK: 3.000.023"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.069"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"POP3",
|
|
"Anwendung",
|
|
"-ERR Please enter PASS"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.023, ACK: 1.000.091"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.023"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.091, ACK: 3.000.032"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.091"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.032, ACK: 1.000.109"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.032"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS falsch"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.109, ACK: 3.000.043"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.109"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"POP3",
|
|
"Anwendung",
|
|
"-ERR user or password wrong"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.043, ACK: 1.000.136"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.043"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.136, ACK: 3.000.054"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.136"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.054, ACK: 1.000.164"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.054"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"NOOP"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.164, ACK: 3.000.058"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.164"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.058, ACK: 1.000.167"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.058"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER bob"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.167, ACK: 3.000.066"
|
|
],
|
|
[
|
|
"38",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.167"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"POP3",
|
|
"Anwendung",
|
|
"-ERR Please enter USER"
|
|
],
|
|
[
|
|
"39",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.066, ACK: 1.000.189"
|
|
],
|
|
[
|
|
"40",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.066"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"41",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.189, ACK: 3.000.070"
|
|
],
|
|
[
|
|
"42",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.189"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"43",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.070, ACK: 1.000.192"
|
|
],
|
|
[
|
|
"44",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.192"
|
|
],
|
|
[
|
|
"45",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.070, ACK: 1.000.193"
|
|
],
|
|
[
|
|
"46",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.20:58845",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.000.070"
|
|
],
|
|
[
|
|
"47",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.193, ACK: 3.000.071"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000204": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
]
|
|
]
|
|
},
|
|
"layeredRows": {
|
|
"00000000-0000-0000-0000-000000000201": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 1.000.022"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"NOOP"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022, ACK: 3.000.005"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022"
|
|
],
|
|
[
|
|
"10",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"-ERR unknown command"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.005, ACK: 1.000.042"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.005"
|
|
],
|
|
[
|
|
"12",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER niemand"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.042, ACK: 3.000.017"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.042"
|
|
],
|
|
[
|
|
"14",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"-ERR user or password wrong"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.017, ACK: 1.000.069"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.017"
|
|
],
|
|
[
|
|
"16",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS x"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.069, ACK: 3.000.023"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.069"
|
|
],
|
|
[
|
|
"18",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"-ERR Please enter PASS"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.023, ACK: 1.000.091"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.023"
|
|
],
|
|
[
|
|
"20",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.091, ACK: 3.000.032"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.091"
|
|
],
|
|
[
|
|
"22",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.032, ACK: 1.000.109"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.032"
|
|
],
|
|
[
|
|
"24",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS falsch"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.109, ACK: 3.000.043"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.109"
|
|
],
|
|
[
|
|
"26",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"-ERR user or password wrong"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.043, ACK: 1.000.136"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.043"
|
|
],
|
|
[
|
|
"28",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.136, ACK: 3.000.054"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.136"
|
|
],
|
|
[
|
|
"30",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.054, ACK: 1.000.164"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.054"
|
|
],
|
|
[
|
|
"32",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"NOOP"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.164, ACK: 3.000.058"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.164"
|
|
],
|
|
[
|
|
"34",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.058, ACK: 1.000.167"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.058"
|
|
],
|
|
[
|
|
"36",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER bob"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.167, ACK: 3.000.066"
|
|
],
|
|
[
|
|
"38",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"38",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.167"
|
|
],
|
|
[
|
|
"38",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"-ERR Please enter USER"
|
|
],
|
|
[
|
|
"39",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"39",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.066, ACK: 1.000.189"
|
|
],
|
|
[
|
|
"40",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"40",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.066"
|
|
],
|
|
[
|
|
"40",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"41",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"41",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.189, ACK: 3.000.070"
|
|
],
|
|
[
|
|
"42",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"42",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.189"
|
|
],
|
|
[
|
|
"42",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"43",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"43",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.070, ACK: 1.000.192"
|
|
],
|
|
[
|
|
"44",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"44",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.192"
|
|
],
|
|
[
|
|
"45",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"45",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.070, ACK: 1.000.193"
|
|
],
|
|
[
|
|
"46",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"46",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.000.070"
|
|
],
|
|
[
|
|
"47",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"47",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.193, ACK: 3.000.071"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000202": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000203": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 1.000.022"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"NOOP"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022, ACK: 3.000.005"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022"
|
|
],
|
|
[
|
|
"10",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"-ERR unknown command"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.005, ACK: 1.000.042"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.005"
|
|
],
|
|
[
|
|
"12",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER niemand"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.042, ACK: 3.000.017"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.042"
|
|
],
|
|
[
|
|
"14",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"-ERR user or password wrong"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.017, ACK: 1.000.069"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.017"
|
|
],
|
|
[
|
|
"16",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS x"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.069, ACK: 3.000.023"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.069"
|
|
],
|
|
[
|
|
"18",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"-ERR Please enter PASS"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.023, ACK: 1.000.091"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.023"
|
|
],
|
|
[
|
|
"20",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.091, ACK: 3.000.032"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.091"
|
|
],
|
|
[
|
|
"22",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.032, ACK: 1.000.109"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.032"
|
|
],
|
|
[
|
|
"24",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS falsch"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.109, ACK: 3.000.043"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.109"
|
|
],
|
|
[
|
|
"26",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"-ERR user or password wrong"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.043, ACK: 1.000.136"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.043"
|
|
],
|
|
[
|
|
"28",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.136, ACK: 3.000.054"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.136"
|
|
],
|
|
[
|
|
"30",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.054, ACK: 1.000.164"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.054"
|
|
],
|
|
[
|
|
"32",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"NOOP"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.164, ACK: 3.000.058"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.164"
|
|
],
|
|
[
|
|
"34",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.058, ACK: 1.000.167"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.058"
|
|
],
|
|
[
|
|
"36",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER bob"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.167, ACK: 3.000.066"
|
|
],
|
|
[
|
|
"38",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"38",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.167"
|
|
],
|
|
[
|
|
"38",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"-ERR Please enter USER"
|
|
],
|
|
[
|
|
"39",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"39",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.066, ACK: 1.000.189"
|
|
],
|
|
[
|
|
"40",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"40",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.066"
|
|
],
|
|
[
|
|
"40",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"41",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"41",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.189, ACK: 3.000.070"
|
|
],
|
|
[
|
|
"42",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"42",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.189"
|
|
],
|
|
[
|
|
"42",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"43",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"43",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.070, ACK: 1.000.192"
|
|
],
|
|
[
|
|
"44",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"44",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.192"
|
|
],
|
|
[
|
|
"45",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"45",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.070, ACK: 1.000.193"
|
|
],
|
|
[
|
|
"46",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"46",
|
|
"58845",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.000.070"
|
|
],
|
|
[
|
|
"47",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"47",
|
|
"110",
|
|
"58845",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.193, ACK: 3.000.071"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000204": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
]
|
|
]
|
|
},
|
|
"events": [
|
|
[
|
|
210,
|
|
"client",
|
|
"null"
|
|
],
|
|
[
|
|
211,
|
|
"server",
|
|
"null"
|
|
],
|
|
[
|
|
501,
|
|
"client",
|
|
"call verbinden 110"
|
|
],
|
|
[
|
|
1005,
|
|
"client",
|
|
"Verbindung hergestellt"
|
|
],
|
|
[
|
|
1116,
|
|
"server",
|
|
"----"
|
|
],
|
|
[
|
|
1116,
|
|
"server",
|
|
"192.168.0.20> +OK POP3 server ready"
|
|
],
|
|
[
|
|
1229,
|
|
"client",
|
|
">>+OK POP3 server ready"
|
|
],
|
|
[
|
|
3000,
|
|
"client",
|
|
"call senden NOOP"
|
|
],
|
|
[
|
|
3113,
|
|
"server",
|
|
"192.168.0.20< NOOP"
|
|
],
|
|
[
|
|
3113,
|
|
"server",
|
|
"192.168.0.20> -ERR unknown command"
|
|
],
|
|
[
|
|
3224,
|
|
"client",
|
|
"<<NOOP"
|
|
],
|
|
[
|
|
3280,
|
|
"client",
|
|
">>-ERR unknown command"
|
|
],
|
|
[
|
|
4500,
|
|
"client",
|
|
"call senden USER niemand"
|
|
],
|
|
[
|
|
4612,
|
|
"server",
|
|
"192.168.0.20< USER niemand"
|
|
],
|
|
[
|
|
4612,
|
|
"server",
|
|
"192.168.0.20> -ERR user or password wrong"
|
|
],
|
|
[
|
|
4723,
|
|
"client",
|
|
"<<USER niemand"
|
|
],
|
|
[
|
|
4779,
|
|
"client",
|
|
">>-ERR user or password wrong"
|
|
],
|
|
[
|
|
6000,
|
|
"client",
|
|
"call senden PASS x"
|
|
],
|
|
[
|
|
6112,
|
|
"server",
|
|
"192.168.0.20< PASS x"
|
|
],
|
|
[
|
|
6112,
|
|
"server",
|
|
"192.168.0.20> -ERR Please enter PASS"
|
|
],
|
|
[
|
|
6223,
|
|
"client",
|
|
"<<PASS x"
|
|
],
|
|
[
|
|
6278,
|
|
"client",
|
|
">>-ERR Please enter PASS"
|
|
],
|
|
[
|
|
7500,
|
|
"client",
|
|
"call senden USER anna"
|
|
],
|
|
[
|
|
7612,
|
|
"server",
|
|
"192.168.0.20< USER anna"
|
|
],
|
|
[
|
|
7617,
|
|
"server",
|
|
"192.168.0.20> +OK enter password"
|
|
],
|
|
[
|
|
7723,
|
|
"client",
|
|
"<<USER anna"
|
|
],
|
|
[
|
|
7779,
|
|
"client",
|
|
">>+OK enter password"
|
|
],
|
|
[
|
|
9000,
|
|
"client",
|
|
"call senden PASS falsch"
|
|
],
|
|
[
|
|
9112,
|
|
"server",
|
|
"192.168.0.20< PASS falsch"
|
|
],
|
|
[
|
|
9113,
|
|
"server",
|
|
"192.168.0.20> -ERR user or password wrong"
|
|
],
|
|
[
|
|
9223,
|
|
"client",
|
|
"<<PASS falsch"
|
|
],
|
|
[
|
|
9279,
|
|
"client",
|
|
">>-ERR user or password wrong"
|
|
],
|
|
[
|
|
10500,
|
|
"client",
|
|
"call senden PASS geheim"
|
|
],
|
|
[
|
|
10612,
|
|
"server",
|
|
"192.168.0.20< PASS geheim"
|
|
],
|
|
[
|
|
10612,
|
|
"server",
|
|
"192.168.0.20> +OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
10723,
|
|
"client",
|
|
"<<PASS geheim"
|
|
],
|
|
[
|
|
10779,
|
|
"client",
|
|
">>+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
12000,
|
|
"client",
|
|
"call senden NOOP"
|
|
],
|
|
[
|
|
12112,
|
|
"server",
|
|
"192.168.0.20< NOOP"
|
|
],
|
|
[
|
|
12112,
|
|
"server",
|
|
"192.168.0.20> +OK"
|
|
],
|
|
[
|
|
12223,
|
|
"client",
|
|
"<<NOOP"
|
|
],
|
|
[
|
|
12278,
|
|
"client",
|
|
">>+OK"
|
|
],
|
|
[
|
|
13500,
|
|
"client",
|
|
"call senden USER bob"
|
|
],
|
|
[
|
|
13611,
|
|
"server",
|
|
"192.168.0.20< USER bob"
|
|
],
|
|
[
|
|
13612,
|
|
"server",
|
|
"192.168.0.20> -ERR Please enter USER"
|
|
],
|
|
[
|
|
13722,
|
|
"client",
|
|
"<<USER bob"
|
|
],
|
|
[
|
|
13778,
|
|
"client",
|
|
">>-ERR Please enter USER"
|
|
],
|
|
[
|
|
15000,
|
|
"client",
|
|
"call senden QUIT"
|
|
],
|
|
[
|
|
15112,
|
|
"server",
|
|
"192.168.0.20< QUIT"
|
|
],
|
|
[
|
|
15112,
|
|
"server",
|
|
"null"
|
|
],
|
|
[
|
|
15112,
|
|
"server",
|
|
"192.168.0.20> +OK"
|
|
],
|
|
[
|
|
15223,
|
|
"client",
|
|
"<<QUIT"
|
|
],
|
|
[
|
|
15278,
|
|
"client",
|
|
">>+OK"
|
|
],
|
|
[
|
|
15501,
|
|
"client",
|
|
"Socket zu 192.168.0.30:110 getrennt"
|
|
]
|
|
],
|
|
"accounts": [
|
|
[
|
|
"anna",
|
|
[
|
|
"From: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile",
|
|
"true",
|
|
"false"
|
|
],
|
|
[
|
|
"From: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?",
|
|
"true",
|
|
"false"
|
|
]
|
|
],
|
|
[
|
|
"bob"
|
|
]
|
|
],
|
|
"file": "anna;filius.de;geheim;Muster;Anna;#Bob Beispiel <bob@filius.de>$<anna@filius.de>$$$$Hallo Anna$Erste Zeile|Zweite Zeile#Carla <carla@andere.de>$Anna Muster <anna@filius.de>,<bob@filius.de>$<chef@filius.de>$$$Termin$Morgen um 10?\nbob;filius.de;passwort;Beispiel;Bob;\n"
|
|
}
|