The program sends to its account's SMTP server, one connection for each recipient, and fetches its mails by POP3; the server now sends mails on to other domains by MX and returns notices to their senders. The program's folders are in the snapshot and go back into the project. EmailClientRun plays six stories with two servers; the mail oracles run in the language's locale, so Java's notice dates match the core's. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
6622 lines
132 KiB
JSON
6622 lines
132 KiB
JSON
{
|
|
"frames": {
|
|
"00000000-0000-0000-0000-000000000201": [
|
|
{
|
|
"time": 517,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
},
|
|
{
|
|
"time": 750,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 753,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 5000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 980,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 1000000,
|
|
"acknowledgement": 5000001
|
|
},
|
|
{
|
|
"time": 981,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 1000001
|
|
},
|
|
{
|
|
"time": 1229,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": "+OK POP3 server ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1230,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 1000022
|
|
},
|
|
{
|
|
"time": 1285,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": "USER anna",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1508,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000022,
|
|
"acknowledgement": 5000010
|
|
},
|
|
{
|
|
"time": 1563,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": "+OK enter password",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000022,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1564,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000010,
|
|
"acknowledgement": 1000040
|
|
},
|
|
{
|
|
"time": 1619,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": "PASS geheim",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000010,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1842,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000040,
|
|
"acknowledgement": 5000021
|
|
},
|
|
{
|
|
"time": 1898,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": "+OK Mailbox locked and ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000040,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1898,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000021,
|
|
"acknowledgement": 1000068
|
|
},
|
|
{
|
|
"time": 1953,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": "STAT",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000021,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2176,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000068,
|
|
"acknowledgement": 5000025
|
|
},
|
|
{
|
|
"time": 2232,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": "+OK 2 169",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000068,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2232,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000025,
|
|
"acknowledgement": 1000077
|
|
},
|
|
{
|
|
"time": 2287,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": "LIST",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000025,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2510,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000077,
|
|
"acknowledgement": 5000029
|
|
},
|
|
{
|
|
"time": 2566,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": "+OK 2 169\n0 80\n1 89\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000077,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2566,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000029,
|
|
"acknowledgement": 1000097
|
|
},
|
|
{
|
|
"time": 2621,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": "RETR 0",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2844,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000097,
|
|
"acknowledgement": 5000035
|
|
},
|
|
{
|
|
"time": 2899,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": "+OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000097,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2899,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000035,
|
|
"acknowledgement": 1000219
|
|
},
|
|
{
|
|
"time": 2955,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": "DELE 0",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000035,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3178,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000219,
|
|
"acknowledgement": 5000041
|
|
},
|
|
{
|
|
"time": 3233,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": "+OK message marked for delete",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000219,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3234,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000041,
|
|
"acknowledgement": 1000248
|
|
},
|
|
{
|
|
"time": 3289,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": "RETR 1",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000041,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3512,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000248,
|
|
"acknowledgement": 5000047
|
|
},
|
|
{
|
|
"time": 3567,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": "+OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000248,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3567,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000047,
|
|
"acknowledgement": 1000400
|
|
},
|
|
{
|
|
"time": 3623,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": "DELE 1",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000047,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3844,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000400,
|
|
"acknowledgement": 5000053
|
|
},
|
|
{
|
|
"time": 3900,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": "+OK message marked for delete",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000400,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3900,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000053,
|
|
"acknowledgement": 1000429
|
|
},
|
|
{
|
|
"time": 3955,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000053,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4177,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000429,
|
|
"acknowledgement": 5000057
|
|
},
|
|
{
|
|
"time": 4232,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": "+OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000429,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4232,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000057,
|
|
"acknowledgement": 1000432
|
|
},
|
|
{
|
|
"time": 4287,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 5000057,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4454,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 1000432,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4454,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000058,
|
|
"acknowledgement": 1000433
|
|
},
|
|
{
|
|
"time": 4509,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000433,
|
|
"acknowledgement": 5000058
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000202": [
|
|
{
|
|
"time": 638,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000203": [
|
|
{
|
|
"time": 638,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
},
|
|
{
|
|
"time": 639,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 867,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 5000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 869,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 1000000,
|
|
"acknowledgement": 5000001
|
|
},
|
|
{
|
|
"time": 1092,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 1000001
|
|
},
|
|
{
|
|
"time": 1118,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": "+OK POP3 server ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1341,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 1000022
|
|
},
|
|
{
|
|
"time": 1396,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": "USER anna",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1397,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000022,
|
|
"acknowledgement": 5000010
|
|
},
|
|
{
|
|
"time": 1452,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": "+OK enter password",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000022,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1675,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000010,
|
|
"acknowledgement": 1000040
|
|
},
|
|
{
|
|
"time": 1730,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": "PASS geheim",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000010,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1731,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000040,
|
|
"acknowledgement": 5000021
|
|
},
|
|
{
|
|
"time": 1786,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": "+OK Mailbox locked and ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000040,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2009,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000021,
|
|
"acknowledgement": 1000068
|
|
},
|
|
{
|
|
"time": 2065,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": "STAT",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000021,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2065,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000068,
|
|
"acknowledgement": 5000025
|
|
},
|
|
{
|
|
"time": 2120,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": "+OK 2 169",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000068,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2343,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000025,
|
|
"acknowledgement": 1000077
|
|
},
|
|
{
|
|
"time": 2398,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": "LIST",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000025,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2399,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000077,
|
|
"acknowledgement": 5000029
|
|
},
|
|
{
|
|
"time": 2455,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": "+OK 2 169\n0 80\n1 89\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000077,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2677,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000029,
|
|
"acknowledgement": 1000097
|
|
},
|
|
{
|
|
"time": 2732,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": "RETR 0",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2733,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000097,
|
|
"acknowledgement": 5000035
|
|
},
|
|
{
|
|
"time": 2788,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": "+OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000097,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3011,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000035,
|
|
"acknowledgement": 1000219
|
|
},
|
|
{
|
|
"time": 3066,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": "DELE 0",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000035,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3067,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000219,
|
|
"acknowledgement": 5000041
|
|
},
|
|
{
|
|
"time": 3122,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": "+OK message marked for delete",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000219,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3345,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000041,
|
|
"acknowledgement": 1000248
|
|
},
|
|
{
|
|
"time": 3400,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": "RETR 1",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000041,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3401,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000248,
|
|
"acknowledgement": 5000047
|
|
},
|
|
{
|
|
"time": 3456,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": "+OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000248,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3678,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000047,
|
|
"acknowledgement": 1000400
|
|
},
|
|
{
|
|
"time": 3733,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": "DELE 1",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000047,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3734,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000400,
|
|
"acknowledgement": 5000053
|
|
},
|
|
{
|
|
"time": 3789,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": "+OK message marked for delete",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000400,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4010,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000053,
|
|
"acknowledgement": 1000429
|
|
},
|
|
{
|
|
"time": 4066,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000053,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4066,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000429,
|
|
"acknowledgement": 5000057
|
|
},
|
|
{
|
|
"time": 4121,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": "+OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000429,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4343,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000057,
|
|
"acknowledgement": 1000432
|
|
},
|
|
{
|
|
"time": 4343,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 1000432,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4398,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 5000057,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4399,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 62384,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000433,
|
|
"acknowledgement": 5000058
|
|
},
|
|
{
|
|
"time": 4565,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62384,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000058,
|
|
"acknowledgement": 1000433
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000204": [
|
|
{
|
|
"time": 638,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
}
|
|
]
|
|
},
|
|
"rows": {
|
|
"00000000-0000-0000-0000-000000000201": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 5.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 5.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 1.000.022"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022, ACK: 5.000.010"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.010, ACK: 1.000.040"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.010"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040, ACK: 5.000.021"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.021, ACK: 1.000.068"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.021"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"",
|
|
"Anwendung",
|
|
"STAT"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068, ACK: 5.000.025"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 2 169"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.025, ACK: 1.000.077"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.025"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"",
|
|
"Anwendung",
|
|
"LIST"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.077, ACK: 5.000.029"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.077"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 2 169\n0 80\n1 89\n"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.029, ACK: 1.000.097"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.029"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 0"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.097, ACK: 5.000.035"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.097"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.035, ACK: 1.000.219"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.035"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 0"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.219, ACK: 5.000.041"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.219"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.041, ACK: 1.000.248"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.041"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 1"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.248, ACK: 5.000.047"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.248"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.047, ACK: 1.000.400"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.047"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 1"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.400, ACK: 5.000.053"
|
|
],
|
|
[
|
|
"38",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.400"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"39",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.053, ACK: 1.000.429"
|
|
],
|
|
[
|
|
"40",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.053"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"41",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.429, ACK: 5.000.057"
|
|
],
|
|
[
|
|
"42",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.429"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"43",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.057, ACK: 1.000.432"
|
|
],
|
|
[
|
|
"44",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 5.000.057"
|
|
],
|
|
[
|
|
"45",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.432"
|
|
],
|
|
[
|
|
"46",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.058, ACK: 1.000.433"
|
|
],
|
|
[
|
|
"47",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.433, ACK: 5.000.058"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000202": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000203": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 5.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 5.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 1.000.022"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022, ACK: 5.000.010"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.010, ACK: 1.000.040"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.010"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040, ACK: 5.000.021"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.021, ACK: 1.000.068"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.021"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"",
|
|
"Anwendung",
|
|
"STAT"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068, ACK: 5.000.025"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 2 169"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.025, ACK: 1.000.077"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.025"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"",
|
|
"Anwendung",
|
|
"LIST"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.077, ACK: 5.000.029"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.077"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 2 169\n0 80\n1 89\n"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.029, ACK: 1.000.097"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.029"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 0"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.097, ACK: 5.000.035"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.097"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.035, ACK: 1.000.219"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.035"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 0"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.219, ACK: 5.000.041"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.219"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.041, ACK: 1.000.248"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.041"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 1"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.248, ACK: 5.000.047"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.248"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.047, ACK: 1.000.400"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.047"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 1"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.400, ACK: 5.000.053"
|
|
],
|
|
[
|
|
"38",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.400"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"39",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.053, ACK: 1.000.429"
|
|
],
|
|
[
|
|
"40",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.053"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"41",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.429, ACK: 5.000.057"
|
|
],
|
|
[
|
|
"42",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.429"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"43",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.057, ACK: 1.000.432"
|
|
],
|
|
[
|
|
"44",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.432"
|
|
],
|
|
[
|
|
"45",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 5.000.057"
|
|
],
|
|
[
|
|
"46",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.433, ACK: 5.000.058"
|
|
],
|
|
[
|
|
"47",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.20:62384",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.058, ACK: 1.000.433"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000204": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
]
|
|
]
|
|
},
|
|
"layeredRows": {
|
|
"00000000-0000-0000-0000-000000000201": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 5.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 5.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 1.000.022"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022, ACK: 5.000.010"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022"
|
|
],
|
|
[
|
|
"10",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.010, ACK: 1.000.040"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.010"
|
|
],
|
|
[
|
|
"12",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040, ACK: 5.000.021"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040"
|
|
],
|
|
[
|
|
"14",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.021, ACK: 1.000.068"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.021"
|
|
],
|
|
[
|
|
"16",
|
|
null,
|
|
null,
|
|
"",
|
|
"Anwendung",
|
|
"STAT"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068, ACK: 5.000.025"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068"
|
|
],
|
|
[
|
|
"18",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 2 169"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.025, ACK: 1.000.077"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.025"
|
|
],
|
|
[
|
|
"20",
|
|
null,
|
|
null,
|
|
"",
|
|
"Anwendung",
|
|
"LIST"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.077, ACK: 5.000.029"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.077"
|
|
],
|
|
[
|
|
"22",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 2 169\n0 80\n1 89\n"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.029, ACK: 1.000.097"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.029"
|
|
],
|
|
[
|
|
"24",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 0"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.097, ACK: 5.000.035"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.097"
|
|
],
|
|
[
|
|
"26",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.035, ACK: 1.000.219"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.035"
|
|
],
|
|
[
|
|
"28",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 0"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.219, ACK: 5.000.041"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.219"
|
|
],
|
|
[
|
|
"30",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.041, ACK: 1.000.248"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.041"
|
|
],
|
|
[
|
|
"32",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 1"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.248, ACK: 5.000.047"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.248"
|
|
],
|
|
[
|
|
"34",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.047, ACK: 1.000.400"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.047"
|
|
],
|
|
[
|
|
"36",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 1"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.400, ACK: 5.000.053"
|
|
],
|
|
[
|
|
"38",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"38",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.400"
|
|
],
|
|
[
|
|
"38",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"39",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"39",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.053, ACK: 1.000.429"
|
|
],
|
|
[
|
|
"40",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"40",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.053"
|
|
],
|
|
[
|
|
"40",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"41",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"41",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.429, ACK: 5.000.057"
|
|
],
|
|
[
|
|
"42",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"42",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.429"
|
|
],
|
|
[
|
|
"42",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"43",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"43",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.057, ACK: 1.000.432"
|
|
],
|
|
[
|
|
"44",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"44",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 5.000.057"
|
|
],
|
|
[
|
|
"45",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"45",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.432"
|
|
],
|
|
[
|
|
"46",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"46",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.058, ACK: 1.000.433"
|
|
],
|
|
[
|
|
"47",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"47",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.433, ACK: 5.000.058"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000202": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000203": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 5.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 5.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 1.000.022"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022, ACK: 5.000.010"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022"
|
|
],
|
|
[
|
|
"10",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.010, ACK: 1.000.040"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.010"
|
|
],
|
|
[
|
|
"12",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040, ACK: 5.000.021"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040"
|
|
],
|
|
[
|
|
"14",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.021, ACK: 1.000.068"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.021"
|
|
],
|
|
[
|
|
"16",
|
|
null,
|
|
null,
|
|
"",
|
|
"Anwendung",
|
|
"STAT"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068, ACK: 5.000.025"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068"
|
|
],
|
|
[
|
|
"18",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 2 169"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.025, ACK: 1.000.077"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.025"
|
|
],
|
|
[
|
|
"20",
|
|
null,
|
|
null,
|
|
"",
|
|
"Anwendung",
|
|
"LIST"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.077, ACK: 5.000.029"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.077"
|
|
],
|
|
[
|
|
"22",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 2 169\n0 80\n1 89\n"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.029, ACK: 1.000.097"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.029"
|
|
],
|
|
[
|
|
"24",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 0"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.097, ACK: 5.000.035"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.097"
|
|
],
|
|
[
|
|
"26",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.035, ACK: 1.000.219"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.035"
|
|
],
|
|
[
|
|
"28",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 0"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.219, ACK: 5.000.041"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.219"
|
|
],
|
|
[
|
|
"30",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.041, ACK: 1.000.248"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.041"
|
|
],
|
|
[
|
|
"32",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 1"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.248, ACK: 5.000.047"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.248"
|
|
],
|
|
[
|
|
"34",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.047, ACK: 1.000.400"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.047"
|
|
],
|
|
[
|
|
"36",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 1"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.400, ACK: 5.000.053"
|
|
],
|
|
[
|
|
"38",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"38",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.400"
|
|
],
|
|
[
|
|
"38",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"39",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"39",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.053, ACK: 1.000.429"
|
|
],
|
|
[
|
|
"40",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"40",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.053"
|
|
],
|
|
[
|
|
"40",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"41",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"41",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.429, ACK: 5.000.057"
|
|
],
|
|
[
|
|
"42",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"42",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.429"
|
|
],
|
|
[
|
|
"42",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"43",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"43",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.057, ACK: 1.000.432"
|
|
],
|
|
[
|
|
"44",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"44",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.432"
|
|
],
|
|
[
|
|
"45",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"45",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 5.000.057"
|
|
],
|
|
[
|
|
"46",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"46",
|
|
"110",
|
|
"62384",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.433, ACK: 5.000.058"
|
|
],
|
|
[
|
|
"47",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"47",
|
|
"62384",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.058, ACK: 1.000.433"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000204": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
]
|
|
]
|
|
},
|
|
"events": [
|
|
[
|
|
210,
|
|
"client",
|
|
"null"
|
|
],
|
|
[
|
|
212,
|
|
"server",
|
|
"null"
|
|
],
|
|
[
|
|
216,
|
|
"otherServer",
|
|
"null"
|
|
],
|
|
[
|
|
500,
|
|
"client",
|
|
"call emailsAbholenEmails"
|
|
],
|
|
[
|
|
1117,
|
|
"server",
|
|
"----"
|
|
],
|
|
[
|
|
1117,
|
|
"server",
|
|
"192.168.0.20> +OK POP3 server ready"
|
|
],
|
|
[
|
|
1397,
|
|
"server",
|
|
"192.168.0.20< USER anna"
|
|
],
|
|
[
|
|
1400,
|
|
"server",
|
|
"192.168.0.20> +OK enter password"
|
|
],
|
|
[
|
|
1731,
|
|
"server",
|
|
"192.168.0.20< PASS geheim"
|
|
],
|
|
[
|
|
1731,
|
|
"server",
|
|
"192.168.0.20> +OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
2065,
|
|
"server",
|
|
"192.168.0.20< STAT"
|
|
],
|
|
[
|
|
2066,
|
|
"server",
|
|
"192.168.0.20> +OK 2 169"
|
|
],
|
|
[
|
|
2399,
|
|
"server",
|
|
"192.168.0.20< LIST"
|
|
],
|
|
[
|
|
2399,
|
|
"server",
|
|
"192.168.0.20> +OK 2 169\n0 80\n1 89\n"
|
|
],
|
|
[
|
|
2732,
|
|
"server",
|
|
"192.168.0.20< RETR 0"
|
|
],
|
|
[
|
|
2733,
|
|
"server",
|
|
"192.168.0.20> +OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile"
|
|
],
|
|
[
|
|
3067,
|
|
"server",
|
|
"192.168.0.20< DELE 0"
|
|
],
|
|
[
|
|
3070,
|
|
"server",
|
|
"192.168.0.20> +OK message marked for delete"
|
|
],
|
|
[
|
|
3401,
|
|
"server",
|
|
"192.168.0.20< RETR 1"
|
|
],
|
|
[
|
|
3401,
|
|
"server",
|
|
"192.168.0.20> +OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?"
|
|
],
|
|
[
|
|
3734,
|
|
"server",
|
|
"192.168.0.20< DELE 1"
|
|
],
|
|
[
|
|
3734,
|
|
"server",
|
|
"192.168.0.20> +OK message marked for delete"
|
|
],
|
|
[
|
|
4066,
|
|
"server",
|
|
"192.168.0.20< QUIT"
|
|
],
|
|
[
|
|
4066,
|
|
"server",
|
|
"null"
|
|
],
|
|
[
|
|
4066,
|
|
"server",
|
|
"192.168.0.20> +OK"
|
|
],
|
|
[
|
|
4232,
|
|
"client",
|
|
"null"
|
|
]
|
|
],
|
|
"inbox": [
|
|
[
|
|
"From: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile",
|
|
"true",
|
|
"false"
|
|
],
|
|
[
|
|
"From: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?",
|
|
"true",
|
|
"false"
|
|
]
|
|
],
|
|
"sent": [],
|
|
"accounts": [
|
|
[
|
|
"anna",
|
|
[]
|
|
],
|
|
[
|
|
"bob",
|
|
[]
|
|
]
|
|
],
|
|
"otherAccounts": [
|
|
[
|
|
"carla",
|
|
[]
|
|
]
|
|
]
|
|
}
|