julian.kiedaischandClaude Opus 5.5
058675a148
The program sends to its account's SMTP server, one connection for each recipient, and fetches its mails by POP3; the server now sends mails on to other domains by MX and returns notices to their senders. The program's folders are in the snapshot and go back into the project. EmailClientRun plays six stories with two servers; the mail oracles run in the language's locale, so Java's notice dates match the core's. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
14941 lines
299 KiB
JSON
14941 lines
299 KiB
JSON
{
|
|
"frames": {
|
|
"00000000-0000-0000-0000-000000000201": [
|
|
{
|
|
"time": 519,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
},
|
|
{
|
|
"time": 749,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 752,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 5000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 979,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 2000000,
|
|
"acknowledgement": 5000001
|
|
},
|
|
{
|
|
"time": 980,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 2000001
|
|
},
|
|
{
|
|
"time": 1232,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": "220 Willkommen bei filius.de",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1232,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 2000029
|
|
},
|
|
{
|
|
"time": 1288,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": "HELO 192.168.0.20",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1510,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000029,
|
|
"acknowledgement": 5000018
|
|
},
|
|
{
|
|
"time": 1566,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": "250 Hello 192.168.0.20",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1566,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000018,
|
|
"acknowledgement": 2000051
|
|
},
|
|
{
|
|
"time": 1622,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": "MAIL FROM: <anna@filius.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000018,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1844,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000051,
|
|
"acknowledgement": 5000045
|
|
},
|
|
{
|
|
"time": 1900,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": "250 Sender OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000051,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1900,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000045,
|
|
"acknowledgement": 2000064
|
|
},
|
|
{
|
|
"time": 1956,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": "RCPT TO:<bob@filius.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000045,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2179,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000064,
|
|
"acknowledgement": 5000068
|
|
},
|
|
{
|
|
"time": 2234,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": "250 Recipient OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000064,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2235,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000068,
|
|
"acknowledgement": 2000080
|
|
},
|
|
{
|
|
"time": 2290,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": "DATA",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000068,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2513,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000080,
|
|
"acknowledgement": 5000072
|
|
},
|
|
{
|
|
"time": 2568,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": "354 End data with <CR><LF>.<CR><LF>",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000080,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2569,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000072,
|
|
"acknowledgement": 2000115
|
|
},
|
|
{
|
|
"time": 2624,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": "From: Anna Muster <anna@filius.de>\nTo: <bob@filius.de>\nCc: Carla <carla@andere.de>\nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000072,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2847,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000115,
|
|
"acknowledgement": 5000205
|
|
},
|
|
{
|
|
"time": 2902,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": "250 Mail queued for delivery",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000115,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2903,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000205,
|
|
"acknowledgement": 2000143
|
|
},
|
|
{
|
|
"time": 2958,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000205,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3180,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000143,
|
|
"acknowledgement": 5000209
|
|
},
|
|
{
|
|
"time": 3236,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": "221 Server beendet Verbindung.",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000143,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3236,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000209,
|
|
"acknowledgement": 2000173
|
|
},
|
|
{
|
|
"time": 3291,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 5000209,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3347,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 7000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3458,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 2000173,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3458,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000210,
|
|
"acknowledgement": 2000174
|
|
},
|
|
{
|
|
"time": 3513,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000174,
|
|
"acknowledgement": 5000210
|
|
},
|
|
{
|
|
"time": 3568,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 6000000,
|
|
"acknowledgement": 7000001
|
|
},
|
|
{
|
|
"time": 3569,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000001,
|
|
"acknowledgement": 6000001
|
|
},
|
|
{
|
|
"time": 3857,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": "220 Willkommen bei filius.de",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3857,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000001,
|
|
"acknowledgement": 6000029
|
|
},
|
|
{
|
|
"time": 3913,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": "HELO 192.168.0.20",
|
|
"tcpFlags": "P",
|
|
"sequence": 7000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4135,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000029,
|
|
"acknowledgement": 7000018
|
|
},
|
|
{
|
|
"time": 4190,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": "250 Hello 192.168.0.20",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4190,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000018,
|
|
"acknowledgement": 6000051
|
|
},
|
|
{
|
|
"time": 4246,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": "MAIL FROM: <anna@filius.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 7000018,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4467,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000051,
|
|
"acknowledgement": 7000045
|
|
},
|
|
{
|
|
"time": 4523,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": "250 Sender OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000051,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4523,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000045,
|
|
"acknowledgement": 6000064
|
|
},
|
|
{
|
|
"time": 4578,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": "RCPT TO:<carla@andere.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 7000045,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4800,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000064,
|
|
"acknowledgement": 7000070
|
|
},
|
|
{
|
|
"time": 4855,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": "250 Recipient OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000064,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4856,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000070,
|
|
"acknowledgement": 6000080
|
|
},
|
|
{
|
|
"time": 4911,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": "DATA",
|
|
"tcpFlags": "P",
|
|
"sequence": 7000070,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5133,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000080,
|
|
"acknowledgement": 7000074
|
|
},
|
|
{
|
|
"time": 5188,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": "354 End data with <CR><LF>.<CR><LF>",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000080,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5188,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000074,
|
|
"acknowledgement": 6000115
|
|
},
|
|
{
|
|
"time": 5244,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": "From: Anna Muster <anna@filius.de>\nTo: <bob@filius.de>\nCc: Carla <carla@andere.de>\nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 7000074,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5466,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000115,
|
|
"acknowledgement": 7000207
|
|
},
|
|
{
|
|
"time": 5521,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": "250 Mail queued for delivery",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000115,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5521,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000207,
|
|
"acknowledgement": 6000143
|
|
},
|
|
{
|
|
"time": 5577,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 7000207,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5749,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 5804,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000143,
|
|
"acknowledgement": 7000211
|
|
},
|
|
{
|
|
"time": 5860,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": "221 Server beendet Verbindung.",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000143,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5860,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000211,
|
|
"acknowledgement": 6000173
|
|
},
|
|
{
|
|
"time": 5915,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 7000211,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6081,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 6000173,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6082,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000212,
|
|
"acknowledgement": 6000174
|
|
},
|
|
{
|
|
"time": 6137,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000174,
|
|
"acknowledgement": 7000212
|
|
},
|
|
{
|
|
"time": 6197,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.31"
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000202": [
|
|
{
|
|
"time": 637,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
},
|
|
{
|
|
"time": 5749,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 5749,
|
|
"source": "02:00:00:00:02:12",
|
|
"destination": "02:00:00:00:02:13",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.10",
|
|
"targetIp": "192.168.0.30"
|
|
},
|
|
{
|
|
"time": 5971,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:12",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 65069,
|
|
"destinationPort": 53,
|
|
"payload": "ID=27146 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n"
|
|
},
|
|
{
|
|
"time": 5975,
|
|
"source": "02:00:00:00:02:12",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 65069,
|
|
"payload": "ID=27146 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n"
|
|
},
|
|
{
|
|
"time": 6197,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.31"
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000203": [
|
|
{
|
|
"time": 637,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
},
|
|
{
|
|
"time": 638,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 865,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 5000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 868,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 2000000,
|
|
"acknowledgement": 5000001
|
|
},
|
|
{
|
|
"time": 1091,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 2000001
|
|
},
|
|
{
|
|
"time": 1120,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": "220 Willkommen bei filius.de",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1343,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 2000029
|
|
},
|
|
{
|
|
"time": 1399,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": "HELO 192.168.0.20",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1399,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000029,
|
|
"acknowledgement": 5000018
|
|
},
|
|
{
|
|
"time": 1455,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": "250 Hello 192.168.0.20",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1677,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000018,
|
|
"acknowledgement": 2000051
|
|
},
|
|
{
|
|
"time": 1733,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": "MAIL FROM: <anna@filius.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000018,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1733,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000051,
|
|
"acknowledgement": 5000045
|
|
},
|
|
{
|
|
"time": 1789,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": "250 Sender OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000051,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2012,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000045,
|
|
"acknowledgement": 2000064
|
|
},
|
|
{
|
|
"time": 2067,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": "RCPT TO:<bob@filius.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000045,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2068,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000064,
|
|
"acknowledgement": 5000068
|
|
},
|
|
{
|
|
"time": 2123,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": "250 Recipient OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000064,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2346,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000068,
|
|
"acknowledgement": 2000080
|
|
},
|
|
{
|
|
"time": 2401,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": "DATA",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000068,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2402,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000080,
|
|
"acknowledgement": 5000072
|
|
},
|
|
{
|
|
"time": 2457,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": "354 End data with <CR><LF>.<CR><LF>",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000080,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2680,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000072,
|
|
"acknowledgement": 2000115
|
|
},
|
|
{
|
|
"time": 2735,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": "From: Anna Muster <anna@filius.de>\nTo: <bob@filius.de>\nCc: Carla <carla@andere.de>\nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000072,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2736,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000115,
|
|
"acknowledgement": 5000205
|
|
},
|
|
{
|
|
"time": 2791,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": "250 Mail queued for delivery",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000115,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3013,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000205,
|
|
"acknowledgement": 2000143
|
|
},
|
|
{
|
|
"time": 3069,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000205,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3069,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000143,
|
|
"acknowledgement": 5000209
|
|
},
|
|
{
|
|
"time": 3125,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": "221 Server beendet Verbindung.",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000143,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3347,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000209,
|
|
"acknowledgement": 2000173
|
|
},
|
|
{
|
|
"time": 3347,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 2000173,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3402,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 5000209,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3402,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56784,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000174,
|
|
"acknowledgement": 5000210
|
|
},
|
|
{
|
|
"time": 3457,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 7000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3458,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 6000000,
|
|
"acknowledgement": 7000001
|
|
},
|
|
{
|
|
"time": 3569,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56784,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000210,
|
|
"acknowledgement": 2000174
|
|
},
|
|
{
|
|
"time": 3679,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000001,
|
|
"acknowledgement": 6000001
|
|
},
|
|
{
|
|
"time": 3746,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": "220 Willkommen bei filius.de",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3968,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000001,
|
|
"acknowledgement": 6000029
|
|
},
|
|
{
|
|
"time": 4024,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": "HELO 192.168.0.20",
|
|
"tcpFlags": "P",
|
|
"sequence": 7000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4024,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000029,
|
|
"acknowledgement": 7000018
|
|
},
|
|
{
|
|
"time": 4079,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": "250 Hello 192.168.0.20",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4301,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000018,
|
|
"acknowledgement": 6000051
|
|
},
|
|
{
|
|
"time": 4356,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": "MAIL FROM: <anna@filius.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 7000018,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4357,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000051,
|
|
"acknowledgement": 7000045
|
|
},
|
|
{
|
|
"time": 4412,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": "250 Sender OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000051,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4634,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000045,
|
|
"acknowledgement": 6000064
|
|
},
|
|
{
|
|
"time": 4689,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": "RCPT TO:<carla@andere.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 7000045,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4689,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000064,
|
|
"acknowledgement": 7000070
|
|
},
|
|
{
|
|
"time": 4745,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": "250 Recipient OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000064,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4966,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000070,
|
|
"acknowledgement": 6000080
|
|
},
|
|
{
|
|
"time": 5022,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": "DATA",
|
|
"tcpFlags": "P",
|
|
"sequence": 7000070,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5022,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000080,
|
|
"acknowledgement": 7000074
|
|
},
|
|
{
|
|
"time": 5077,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": "354 End data with <CR><LF>.<CR><LF>",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000080,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5299,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000074,
|
|
"acknowledgement": 6000115
|
|
},
|
|
{
|
|
"time": 5355,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": "From: Anna Muster <anna@filius.de>\nTo: <bob@filius.de>\nCc: Carla <carla@andere.de>\nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 7000074,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5355,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000115,
|
|
"acknowledgement": 7000207
|
|
},
|
|
{
|
|
"time": 5410,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": "250 Mail queued for delivery",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000115,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5632,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000207,
|
|
"acknowledgement": 6000143
|
|
},
|
|
{
|
|
"time": 5638,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 5687,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 7000207,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5693,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000143,
|
|
"acknowledgement": 7000211
|
|
},
|
|
{
|
|
"time": 5749,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": "221 Server beendet Verbindung.",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000143,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5860,
|
|
"source": "02:00:00:00:02:12",
|
|
"destination": "02:00:00:00:02:13",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.10",
|
|
"targetIp": "192.168.0.30"
|
|
},
|
|
{
|
|
"time": 5860,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:12",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 65069,
|
|
"destinationPort": 53,
|
|
"payload": "ID=27146 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n"
|
|
},
|
|
{
|
|
"time": 5970,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000211,
|
|
"acknowledgement": 6000173
|
|
},
|
|
{
|
|
"time": 5971,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 6000173,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6026,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 7000211,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6026,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 56507,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000174,
|
|
"acknowledgement": 7000212
|
|
},
|
|
{
|
|
"time": 6085,
|
|
"source": "02:00:00:00:02:12",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 65069,
|
|
"payload": "ID=27146 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n"
|
|
},
|
|
{
|
|
"time": 6086,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.31"
|
|
},
|
|
{
|
|
"time": 6192,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56507,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000212,
|
|
"acknowledgement": 6000174
|
|
},
|
|
{
|
|
"time": 6308,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.31",
|
|
"targetIp": "192.168.0.30"
|
|
},
|
|
{
|
|
"time": 6308,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 9000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6529,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 4000000,
|
|
"acknowledgement": 9000001
|
|
},
|
|
{
|
|
"time": 6530,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000001,
|
|
"acknowledgement": 4000001
|
|
},
|
|
{
|
|
"time": 6835,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": "220 Willkommen bei andere.de",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6835,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000001,
|
|
"acknowledgement": 4000029
|
|
},
|
|
{
|
|
"time": 6890,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": "HELO 192.168.0.30",
|
|
"tcpFlags": "P",
|
|
"sequence": 9000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7112,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000029,
|
|
"acknowledgement": 9000018
|
|
},
|
|
{
|
|
"time": 7167,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": "250 Hello 192.168.0.30",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7167,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000018,
|
|
"acknowledgement": 4000051
|
|
},
|
|
{
|
|
"time": 7222,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": "MAIL FROM: <anna@filius.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 9000018,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7444,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000051,
|
|
"acknowledgement": 9000045
|
|
},
|
|
{
|
|
"time": 7499,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": "250 Sender OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000051,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7499,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000045,
|
|
"acknowledgement": 4000064
|
|
},
|
|
{
|
|
"time": 7554,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": "RCPT TO:<carla@andere.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 9000045,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7776,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000064,
|
|
"acknowledgement": 9000070
|
|
},
|
|
{
|
|
"time": 7831,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": "250 Recipient OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000064,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7832,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000070,
|
|
"acknowledgement": 4000080
|
|
},
|
|
{
|
|
"time": 7887,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": "DATA",
|
|
"tcpFlags": "P",
|
|
"sequence": 9000070,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 8109,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000080,
|
|
"acknowledgement": 9000074
|
|
},
|
|
{
|
|
"time": 8164,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": "354 End data with <CR><LF>.<CR><LF>",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000080,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 8164,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000074,
|
|
"acknowledgement": 4000115
|
|
},
|
|
{
|
|
"time": 8219,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": "From: Anna Muster <anna@filius.de>\nTo: <bob@filius.de>\nCc: Carla <carla@andere.de>\nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 9000074,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 8441,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000115,
|
|
"acknowledgement": 9000207
|
|
},
|
|
{
|
|
"time": 8496,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": "250 Mail queued for delivery",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000115,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 8496,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000207,
|
|
"acknowledgement": 4000143
|
|
},
|
|
{
|
|
"time": 8551,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 9000207,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 8773,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000143,
|
|
"acknowledgement": 9000211
|
|
},
|
|
{
|
|
"time": 8828,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": "221 Server beendet Verbindung.",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000143,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 8829,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000211,
|
|
"acknowledgement": 4000173
|
|
},
|
|
{
|
|
"time": 8884,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 9000211,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9050,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 4000173,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9050,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000212,
|
|
"acknowledgement": 4000174
|
|
},
|
|
{
|
|
"time": 9105,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000174,
|
|
"acknowledgement": 9000212
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000204": [
|
|
{
|
|
"time": 637,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
},
|
|
{
|
|
"time": 5749,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 6197,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.31"
|
|
},
|
|
{
|
|
"time": 6197,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.31",
|
|
"targetIp": "192.168.0.30"
|
|
},
|
|
{
|
|
"time": 6419,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 9000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6419,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 4000000,
|
|
"acknowledgement": 9000001
|
|
},
|
|
{
|
|
"time": 6640,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000001,
|
|
"acknowledgement": 4000001
|
|
},
|
|
{
|
|
"time": 6724,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": "220 Willkommen bei andere.de",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6946,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000001,
|
|
"acknowledgement": 4000029
|
|
},
|
|
{
|
|
"time": 7001,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": "HELO 192.168.0.30",
|
|
"tcpFlags": "P",
|
|
"sequence": 9000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7001,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000029,
|
|
"acknowledgement": 9000018
|
|
},
|
|
{
|
|
"time": 7056,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": "250 Hello 192.168.0.30",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7278,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000018,
|
|
"acknowledgement": 4000051
|
|
},
|
|
{
|
|
"time": 7333,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": "MAIL FROM: <anna@filius.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 9000018,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7333,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000051,
|
|
"acknowledgement": 9000045
|
|
},
|
|
{
|
|
"time": 7388,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": "250 Sender OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000051,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7610,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000045,
|
|
"acknowledgement": 4000064
|
|
},
|
|
{
|
|
"time": 7665,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": "RCPT TO:<carla@andere.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 9000045,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7665,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000064,
|
|
"acknowledgement": 9000070
|
|
},
|
|
{
|
|
"time": 7721,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": "250 Recipient OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000064,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7942,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000070,
|
|
"acknowledgement": 4000080
|
|
},
|
|
{
|
|
"time": 7998,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": "DATA",
|
|
"tcpFlags": "P",
|
|
"sequence": 9000070,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7998,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000080,
|
|
"acknowledgement": 9000074
|
|
},
|
|
{
|
|
"time": 8053,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": "354 End data with <CR><LF>.<CR><LF>",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000080,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 8275,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000074,
|
|
"acknowledgement": 4000115
|
|
},
|
|
{
|
|
"time": 8330,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": "From: Anna Muster <anna@filius.de>\nTo: <bob@filius.de>\nCc: Carla <carla@andere.de>\nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 9000074,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 8330,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000115,
|
|
"acknowledgement": 9000207
|
|
},
|
|
{
|
|
"time": 8386,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": "250 Mail queued for delivery",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000115,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 8607,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000207,
|
|
"acknowledgement": 4000143
|
|
},
|
|
{
|
|
"time": 8662,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 9000207,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 8662,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000143,
|
|
"acknowledgement": 9000211
|
|
},
|
|
{
|
|
"time": 8718,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": "221 Server beendet Verbindung.",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000143,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 8939,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000211,
|
|
"acknowledgement": 4000173
|
|
},
|
|
{
|
|
"time": 8939,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 4000173,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 8994,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 9000211,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 8995,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64361,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000174,
|
|
"acknowledgement": 9000212
|
|
},
|
|
{
|
|
"time": 9161,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64361,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000212,
|
|
"acknowledgement": 4000174
|
|
}
|
|
]
|
|
},
|
|
"rows": {
|
|
"00000000-0000-0000-0000-000000000201": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 5.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000, ACK: 5.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 2.000.029"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.20"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.029, ACK: 5.000.018"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.029"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.20"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.018, ACK: 2.000.051"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.018"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.051, ACK: 5.000.045"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.051"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.045, ACK: 2.000.064"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.045"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<bob@filius.de>"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.064, ACK: 5.000.068"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.064"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.068, ACK: 2.000.080"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.068"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.080, ACK: 5.000.072"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.080"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.072, ACK: 2.000.115"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.072"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Anna Muster <anna@filius.de>\nTo: <bob@filius.de>\nCc: Carla <carla@andere.de>\nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.115, ACK: 5.000.205"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.115"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.205, ACK: 2.000.143"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.205"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.143, ACK: 5.000.209"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.143"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.209, ACK: 2.000.173"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 5.000.209"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 7.000.000"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.173"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.210, ACK: 2.000.174"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.174, ACK: 5.000.210"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 6.000.000, ACK: 7.000.001"
|
|
],
|
|
[
|
|
"38",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.001, ACK: 6.000.001"
|
|
],
|
|
[
|
|
"39",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.001"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
"40",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.001, ACK: 6.000.029"
|
|
],
|
|
[
|
|
"41",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.001"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.20"
|
|
],
|
|
[
|
|
"42",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.029, ACK: 7.000.018"
|
|
],
|
|
[
|
|
"43",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.029"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.20"
|
|
],
|
|
[
|
|
"44",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.018, ACK: 6.000.051"
|
|
],
|
|
[
|
|
"45",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.018"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
"46",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.051, ACK: 7.000.045"
|
|
],
|
|
[
|
|
"47",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.051"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"48",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.045, ACK: 6.000.064"
|
|
],
|
|
[
|
|
"49",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.045"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<carla@andere.de>"
|
|
],
|
|
[
|
|
"50",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.064, ACK: 7.000.070"
|
|
],
|
|
[
|
|
"51",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.064"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"52",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.070, ACK: 6.000.080"
|
|
],
|
|
[
|
|
"53",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.070"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"54",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.080, ACK: 7.000.074"
|
|
],
|
|
[
|
|
"55",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.080"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"56",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.074, ACK: 6.000.115"
|
|
],
|
|
[
|
|
"57",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.074"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Anna Muster <anna@filius.de>\nTo: <bob@filius.de>\nCc: Carla <carla@andere.de>\nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"58",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.115, ACK: 7.000.207"
|
|
],
|
|
[
|
|
"59",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.115"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"60",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.207, ACK: 6.000.143"
|
|
],
|
|
[
|
|
"61",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.207"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"62",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"63",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.143, ACK: 7.000.211"
|
|
],
|
|
[
|
|
"64",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.143"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"65",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.211, ACK: 6.000.173"
|
|
],
|
|
[
|
|
"66",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 7.000.211"
|
|
],
|
|
[
|
|
"67",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 6.000.173"
|
|
],
|
|
[
|
|
"68",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.212, ACK: 6.000.174"
|
|
],
|
|
[
|
|
"69",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"69",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"69",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.174, ACK: 7.000.212"
|
|
],
|
|
[
|
|
"70",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000202": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.10",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:13|192.168.0.30]"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30:65069",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30:65069",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=27146 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.10",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.10:53",
|
|
"192.168.0.30:65069",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.10:53",
|
|
"192.168.0.30:65069",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=27146 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000203": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 5.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000, ACK: 5.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 2.000.029"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.20"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.029, ACK: 5.000.018"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.029"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.20"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.018, ACK: 2.000.051"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.018"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.051, ACK: 5.000.045"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.051"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.045, ACK: 2.000.064"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.045"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<bob@filius.de>"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.064, ACK: 5.000.068"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.064"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.068, ACK: 2.000.080"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.068"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.080, ACK: 5.000.072"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.080"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.072, ACK: 2.000.115"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.072"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Anna Muster <anna@filius.de>\nTo: <bob@filius.de>\nCc: Carla <carla@andere.de>\nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.115, ACK: 5.000.205"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.115"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.205, ACK: 2.000.143"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.205"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.143, ACK: 5.000.209"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.143"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.209, ACK: 2.000.173"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.173"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 5.000.209"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.174, ACK: 5.000.210"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 7.000.000"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 6.000.000, ACK: 7.000.001"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.20:56784",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.210, ACK: 2.000.174"
|
|
],
|
|
[
|
|
"38",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.001, ACK: 6.000.001"
|
|
],
|
|
[
|
|
"39",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.001"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
"40",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.001, ACK: 6.000.029"
|
|
],
|
|
[
|
|
"41",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.001"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.20"
|
|
],
|
|
[
|
|
"42",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.029, ACK: 7.000.018"
|
|
],
|
|
[
|
|
"43",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.029"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.20"
|
|
],
|
|
[
|
|
"44",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.018, ACK: 6.000.051"
|
|
],
|
|
[
|
|
"45",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.018"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
"46",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.051, ACK: 7.000.045"
|
|
],
|
|
[
|
|
"47",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.051"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"48",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.045, ACK: 6.000.064"
|
|
],
|
|
[
|
|
"49",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.045"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<carla@andere.de>"
|
|
],
|
|
[
|
|
"50",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.064, ACK: 7.000.070"
|
|
],
|
|
[
|
|
"51",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.064"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"52",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.070, ACK: 6.000.080"
|
|
],
|
|
[
|
|
"53",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.070"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"54",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.080, ACK: 7.000.074"
|
|
],
|
|
[
|
|
"55",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.080"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"56",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.074, ACK: 6.000.115"
|
|
],
|
|
[
|
|
"57",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.074"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Anna Muster <anna@filius.de>\nTo: <bob@filius.de>\nCc: Carla <carla@andere.de>\nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"58",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.115, ACK: 7.000.207"
|
|
],
|
|
[
|
|
"59",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.115"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"60",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.207, ACK: 6.000.143"
|
|
],
|
|
[
|
|
"61",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"62",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.207"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"63",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.143, ACK: 7.000.211"
|
|
],
|
|
[
|
|
"64",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.143"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"65",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.10",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:13|192.168.0.30]"
|
|
],
|
|
[
|
|
"66",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.30:65069",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.30:65069",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=27146 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n"
|
|
],
|
|
[
|
|
"67",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.211, ACK: 6.000.173"
|
|
],
|
|
[
|
|
"68",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 6.000.173"
|
|
],
|
|
[
|
|
"69",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"69",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"69",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 7.000.211"
|
|
],
|
|
[
|
|
"70",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.174, ACK: 7.000.212"
|
|
],
|
|
[
|
|
"71",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"71",
|
|
"192.168.0.10",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"71",
|
|
"192.168.0.10:53",
|
|
"192.168.0.30:65069",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"71",
|
|
"192.168.0.10:53",
|
|
"192.168.0.30:65069",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=27146 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n"
|
|
],
|
|
[
|
|
"72",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"72",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"73",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"73",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"73",
|
|
"192.168.0.20:56507",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.212, ACK: 6.000.174"
|
|
],
|
|
[
|
|
"74",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"74",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:14 [op=REPLY, sender=02:00:00:00:02:14|192.168.0.31, target=02:00:00:00:02:13|192.168.0.30]"
|
|
],
|
|
[
|
|
"75",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"75",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"75",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 9.000.000"
|
|
],
|
|
[
|
|
"76",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"76",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"76",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000, ACK: 9.000.001"
|
|
],
|
|
[
|
|
"77",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"77",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"77",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.001, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"78",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"78",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"78",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"78",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei andere.de"
|
|
],
|
|
[
|
|
"79",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"79",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"79",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.001, ACK: 4.000.029"
|
|
],
|
|
[
|
|
"80",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"80",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"80",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.001"
|
|
],
|
|
[
|
|
"80",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.30"
|
|
],
|
|
[
|
|
"81",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"81",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"81",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.029, ACK: 9.000.018"
|
|
],
|
|
[
|
|
"82",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"82",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"82",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.029"
|
|
],
|
|
[
|
|
"82",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.30"
|
|
],
|
|
[
|
|
"83",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"83",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"83",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.018, ACK: 4.000.051"
|
|
],
|
|
[
|
|
"84",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"84",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"84",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.018"
|
|
],
|
|
[
|
|
"84",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
"85",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"85",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"85",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.051, ACK: 9.000.045"
|
|
],
|
|
[
|
|
"86",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"86",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"86",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.051"
|
|
],
|
|
[
|
|
"86",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"87",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"87",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"87",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.045, ACK: 4.000.064"
|
|
],
|
|
[
|
|
"88",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"88",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"88",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.045"
|
|
],
|
|
[
|
|
"88",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<carla@andere.de>"
|
|
],
|
|
[
|
|
"89",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"89",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"89",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.064, ACK: 9.000.070"
|
|
],
|
|
[
|
|
"90",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"90",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"90",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.064"
|
|
],
|
|
[
|
|
"90",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"91",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"91",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"91",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.070, ACK: 4.000.080"
|
|
],
|
|
[
|
|
"92",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"92",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"92",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.070"
|
|
],
|
|
[
|
|
"92",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"93",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"93",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"93",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.080, ACK: 9.000.074"
|
|
],
|
|
[
|
|
"94",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"94",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"94",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.080"
|
|
],
|
|
[
|
|
"94",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"95",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"95",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"95",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.074, ACK: 4.000.115"
|
|
],
|
|
[
|
|
"96",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"96",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"96",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.074"
|
|
],
|
|
[
|
|
"96",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Anna Muster <anna@filius.de>\nTo: <bob@filius.de>\nCc: Carla <carla@andere.de>\nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"97",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"97",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"97",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.115, ACK: 9.000.207"
|
|
],
|
|
[
|
|
"98",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"98",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"98",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.115"
|
|
],
|
|
[
|
|
"98",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"99",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"99",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"99",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.207, ACK: 4.000.143"
|
|
],
|
|
[
|
|
"100",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"100",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"100",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.207"
|
|
],
|
|
[
|
|
"100",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"101",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"101",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"101",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.143, ACK: 9.000.211"
|
|
],
|
|
[
|
|
"102",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"102",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"102",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.143"
|
|
],
|
|
[
|
|
"102",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"103",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"103",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"103",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.211, ACK: 4.000.173"
|
|
],
|
|
[
|
|
"104",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"104",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"104",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 9.000.211"
|
|
],
|
|
[
|
|
"105",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"105",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"105",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.173"
|
|
],
|
|
[
|
|
"106",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"106",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"106",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.212, ACK: 4.000.174"
|
|
],
|
|
[
|
|
"107",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"107",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"107",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.174, ACK: 9.000.212"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000204": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:14 [op=REPLY, sender=02:00:00:00:02:14|192.168.0.31, target=02:00:00:00:02:13|192.168.0.30]"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 9.000.000"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000, ACK: 9.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.001, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei andere.de"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.001, ACK: 4.000.029"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.001"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.30"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.029, ACK: 9.000.018"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.029"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.30"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.018, ACK: 4.000.051"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.018"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.051, ACK: 9.000.045"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.051"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.045, ACK: 4.000.064"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.045"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<carla@andere.de>"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.064, ACK: 9.000.070"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.064"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.070, ACK: 4.000.080"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.070"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.080, ACK: 9.000.074"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.080"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.074, ACK: 4.000.115"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.074"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Anna Muster <anna@filius.de>\nTo: <bob@filius.de>\nCc: Carla <carla@andere.de>\nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.115, ACK: 9.000.207"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.115"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.207, ACK: 4.000.143"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.207"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.143, ACK: 9.000.211"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.143"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.211, ACK: 4.000.173"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.173"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 9.000.211"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.174, ACK: 9.000.212"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30:64361",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.212, ACK: 4.000.174"
|
|
]
|
|
]
|
|
},
|
|
"layeredRows": {
|
|
"00000000-0000-0000-0000-000000000201": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 5.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000, ACK: 5.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 2.000.029"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.20"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.029, ACK: 5.000.018"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.029"
|
|
],
|
|
[
|
|
"10",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.20"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.018, ACK: 2.000.051"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.018"
|
|
],
|
|
[
|
|
"12",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.051, ACK: 5.000.045"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.051"
|
|
],
|
|
[
|
|
"14",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.045, ACK: 2.000.064"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.045"
|
|
],
|
|
[
|
|
"16",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<bob@filius.de>"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.064, ACK: 5.000.068"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.064"
|
|
],
|
|
[
|
|
"18",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.068, ACK: 2.000.080"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.068"
|
|
],
|
|
[
|
|
"20",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.080, ACK: 5.000.072"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.080"
|
|
],
|
|
[
|
|
"22",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.072, ACK: 2.000.115"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.072"
|
|
],
|
|
[
|
|
"24",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Anna Muster <anna@filius.de>\nTo: <bob@filius.de>\nCc: Carla <carla@andere.de>\nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.115, ACK: 5.000.205"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.115"
|
|
],
|
|
[
|
|
"26",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.205, ACK: 2.000.143"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.205"
|
|
],
|
|
[
|
|
"28",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.143, ACK: 5.000.209"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.143"
|
|
],
|
|
[
|
|
"30",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.209, ACK: 2.000.173"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 5.000.209"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 7.000.000"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.173"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.210, ACK: 2.000.174"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.174, ACK: 5.000.210"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 6.000.000, ACK: 7.000.001"
|
|
],
|
|
[
|
|
"38",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"38",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.001, ACK: 6.000.001"
|
|
],
|
|
[
|
|
"39",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"39",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.001"
|
|
],
|
|
[
|
|
"39",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
"40",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"40",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.001, ACK: 6.000.029"
|
|
],
|
|
[
|
|
"41",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"41",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.001"
|
|
],
|
|
[
|
|
"41",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.20"
|
|
],
|
|
[
|
|
"42",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"42",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.029, ACK: 7.000.018"
|
|
],
|
|
[
|
|
"43",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"43",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.029"
|
|
],
|
|
[
|
|
"43",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.20"
|
|
],
|
|
[
|
|
"44",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"44",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.018, ACK: 6.000.051"
|
|
],
|
|
[
|
|
"45",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"45",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.018"
|
|
],
|
|
[
|
|
"45",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
"46",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"46",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.051, ACK: 7.000.045"
|
|
],
|
|
[
|
|
"47",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"47",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.051"
|
|
],
|
|
[
|
|
"47",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"48",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"48",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.045, ACK: 6.000.064"
|
|
],
|
|
[
|
|
"49",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"49",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.045"
|
|
],
|
|
[
|
|
"49",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<carla@andere.de>"
|
|
],
|
|
[
|
|
"50",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"50",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.064, ACK: 7.000.070"
|
|
],
|
|
[
|
|
"51",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"51",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.064"
|
|
],
|
|
[
|
|
"51",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"52",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"52",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.070, ACK: 6.000.080"
|
|
],
|
|
[
|
|
"53",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"53",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.070"
|
|
],
|
|
[
|
|
"53",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"54",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"54",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.080, ACK: 7.000.074"
|
|
],
|
|
[
|
|
"55",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"55",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.080"
|
|
],
|
|
[
|
|
"55",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"56",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"56",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.074, ACK: 6.000.115"
|
|
],
|
|
[
|
|
"57",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"57",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.074"
|
|
],
|
|
[
|
|
"57",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Anna Muster <anna@filius.de>\nTo: <bob@filius.de>\nCc: Carla <carla@andere.de>\nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"58",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"58",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.115, ACK: 7.000.207"
|
|
],
|
|
[
|
|
"59",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"59",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.115"
|
|
],
|
|
[
|
|
"59",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"60",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"60",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.207, ACK: 6.000.143"
|
|
],
|
|
[
|
|
"61",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"61",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.207"
|
|
],
|
|
[
|
|
"61",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"62",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"63",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"63",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.143, ACK: 7.000.211"
|
|
],
|
|
[
|
|
"64",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"64",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.143"
|
|
],
|
|
[
|
|
"64",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"65",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"65",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.211, ACK: 6.000.173"
|
|
],
|
|
[
|
|
"66",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"66",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 7.000.211"
|
|
],
|
|
[
|
|
"67",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"67",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 6.000.173"
|
|
],
|
|
[
|
|
"68",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"68",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.212, ACK: 6.000.174"
|
|
],
|
|
[
|
|
"69",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"69",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"69",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.174, ACK: 7.000.212"
|
|
],
|
|
[
|
|
"70",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000202": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.10",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:13|192.168.0.30]"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"65069",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"4",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=27146 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.10",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"53",
|
|
"65069",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"5",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=27146 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000203": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 5.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000, ACK: 5.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 2.000.029"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.20"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.029, ACK: 5.000.018"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.029"
|
|
],
|
|
[
|
|
"10",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.20"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.018, ACK: 2.000.051"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.018"
|
|
],
|
|
[
|
|
"12",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.051, ACK: 5.000.045"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.051"
|
|
],
|
|
[
|
|
"14",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.045, ACK: 2.000.064"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.045"
|
|
],
|
|
[
|
|
"16",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<bob@filius.de>"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.064, ACK: 5.000.068"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.064"
|
|
],
|
|
[
|
|
"18",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.068, ACK: 2.000.080"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.068"
|
|
],
|
|
[
|
|
"20",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.080, ACK: 5.000.072"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.080"
|
|
],
|
|
[
|
|
"22",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.072, ACK: 2.000.115"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.072"
|
|
],
|
|
[
|
|
"24",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Anna Muster <anna@filius.de>\nTo: <bob@filius.de>\nCc: Carla <carla@andere.de>\nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.115, ACK: 5.000.205"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.115"
|
|
],
|
|
[
|
|
"26",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.205, ACK: 2.000.143"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.205"
|
|
],
|
|
[
|
|
"28",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.143, ACK: 5.000.209"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.143"
|
|
],
|
|
[
|
|
"30",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.209, ACK: 2.000.173"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.173"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 5.000.209"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"25",
|
|
"56784",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.174, ACK: 5.000.210"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 7.000.000"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 6.000.000, ACK: 7.000.001"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"56784",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.210, ACK: 2.000.174"
|
|
],
|
|
[
|
|
"38",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"38",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.001, ACK: 6.000.001"
|
|
],
|
|
[
|
|
"39",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"39",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.001"
|
|
],
|
|
[
|
|
"39",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
"40",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"40",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.001, ACK: 6.000.029"
|
|
],
|
|
[
|
|
"41",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"41",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.001"
|
|
],
|
|
[
|
|
"41",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.20"
|
|
],
|
|
[
|
|
"42",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"42",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.029, ACK: 7.000.018"
|
|
],
|
|
[
|
|
"43",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"43",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.029"
|
|
],
|
|
[
|
|
"43",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.20"
|
|
],
|
|
[
|
|
"44",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"44",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.018, ACK: 6.000.051"
|
|
],
|
|
[
|
|
"45",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"45",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.018"
|
|
],
|
|
[
|
|
"45",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
"46",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"46",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.051, ACK: 7.000.045"
|
|
],
|
|
[
|
|
"47",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"47",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.051"
|
|
],
|
|
[
|
|
"47",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"48",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"48",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.045, ACK: 6.000.064"
|
|
],
|
|
[
|
|
"49",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"49",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.045"
|
|
],
|
|
[
|
|
"49",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<carla@andere.de>"
|
|
],
|
|
[
|
|
"50",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"50",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.064, ACK: 7.000.070"
|
|
],
|
|
[
|
|
"51",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"51",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.064"
|
|
],
|
|
[
|
|
"51",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"52",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"52",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.070, ACK: 6.000.080"
|
|
],
|
|
[
|
|
"53",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"53",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.070"
|
|
],
|
|
[
|
|
"53",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"54",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"54",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.080, ACK: 7.000.074"
|
|
],
|
|
[
|
|
"55",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"55",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.080"
|
|
],
|
|
[
|
|
"55",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"56",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"56",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.074, ACK: 6.000.115"
|
|
],
|
|
[
|
|
"57",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"57",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.074"
|
|
],
|
|
[
|
|
"57",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Anna Muster <anna@filius.de>\nTo: <bob@filius.de>\nCc: Carla <carla@andere.de>\nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"58",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"58",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.115, ACK: 7.000.207"
|
|
],
|
|
[
|
|
"59",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"59",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.115"
|
|
],
|
|
[
|
|
"59",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"60",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"60",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.207, ACK: 6.000.143"
|
|
],
|
|
[
|
|
"61",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"62",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"62",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.207"
|
|
],
|
|
[
|
|
"62",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"63",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"63",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.143, ACK: 7.000.211"
|
|
],
|
|
[
|
|
"64",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"64",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.143"
|
|
],
|
|
[
|
|
"64",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"65",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.10",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:13|192.168.0.30]"
|
|
],
|
|
[
|
|
"66",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"66",
|
|
"65069",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"66",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=27146 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n"
|
|
],
|
|
[
|
|
"67",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"67",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.211, ACK: 6.000.173"
|
|
],
|
|
[
|
|
"68",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"68",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 6.000.173"
|
|
],
|
|
[
|
|
"69",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"69",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"69",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 7.000.211"
|
|
],
|
|
[
|
|
"70",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"70",
|
|
"25",
|
|
"56507",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.174, ACK: 7.000.212"
|
|
],
|
|
[
|
|
"71",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"71",
|
|
"192.168.0.10",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"71",
|
|
"53",
|
|
"65069",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"71",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=27146 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n"
|
|
],
|
|
[
|
|
"72",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"72",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"73",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"73",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"73",
|
|
"56507",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.212, ACK: 6.000.174"
|
|
],
|
|
[
|
|
"74",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"74",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:14 [op=REPLY, sender=02:00:00:00:02:14|192.168.0.31, target=02:00:00:00:02:13|192.168.0.30]"
|
|
],
|
|
[
|
|
"75",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"75",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"75",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 9.000.000"
|
|
],
|
|
[
|
|
"76",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"76",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"76",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000, ACK: 9.000.001"
|
|
],
|
|
[
|
|
"77",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"77",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"77",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.001, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"78",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"78",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"78",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"78",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei andere.de"
|
|
],
|
|
[
|
|
"79",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"79",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"79",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.001, ACK: 4.000.029"
|
|
],
|
|
[
|
|
"80",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"80",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"80",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.001"
|
|
],
|
|
[
|
|
"80",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.30"
|
|
],
|
|
[
|
|
"81",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"81",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"81",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.029, ACK: 9.000.018"
|
|
],
|
|
[
|
|
"82",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"82",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"82",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.029"
|
|
],
|
|
[
|
|
"82",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.30"
|
|
],
|
|
[
|
|
"83",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"83",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"83",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.018, ACK: 4.000.051"
|
|
],
|
|
[
|
|
"84",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"84",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"84",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.018"
|
|
],
|
|
[
|
|
"84",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
"85",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"85",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"85",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.051, ACK: 9.000.045"
|
|
],
|
|
[
|
|
"86",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"86",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"86",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.051"
|
|
],
|
|
[
|
|
"86",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"87",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"87",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"87",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.045, ACK: 4.000.064"
|
|
],
|
|
[
|
|
"88",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"88",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"88",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.045"
|
|
],
|
|
[
|
|
"88",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<carla@andere.de>"
|
|
],
|
|
[
|
|
"89",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"89",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"89",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.064, ACK: 9.000.070"
|
|
],
|
|
[
|
|
"90",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"90",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"90",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.064"
|
|
],
|
|
[
|
|
"90",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"91",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"91",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"91",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.070, ACK: 4.000.080"
|
|
],
|
|
[
|
|
"92",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"92",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"92",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.070"
|
|
],
|
|
[
|
|
"92",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"93",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"93",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"93",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.080, ACK: 9.000.074"
|
|
],
|
|
[
|
|
"94",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"94",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"94",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.080"
|
|
],
|
|
[
|
|
"94",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"95",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"95",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"95",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.074, ACK: 4.000.115"
|
|
],
|
|
[
|
|
"96",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"96",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"96",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.074"
|
|
],
|
|
[
|
|
"96",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Anna Muster <anna@filius.de>\nTo: <bob@filius.de>\nCc: Carla <carla@andere.de>\nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"97",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"97",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"97",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.115, ACK: 9.000.207"
|
|
],
|
|
[
|
|
"98",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"98",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"98",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.115"
|
|
],
|
|
[
|
|
"98",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"99",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"99",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"99",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.207, ACK: 4.000.143"
|
|
],
|
|
[
|
|
"100",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"100",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"100",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.207"
|
|
],
|
|
[
|
|
"100",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"101",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"101",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"101",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.143, ACK: 9.000.211"
|
|
],
|
|
[
|
|
"102",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"102",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"102",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.143"
|
|
],
|
|
[
|
|
"102",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"103",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"103",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"103",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.211, ACK: 4.000.173"
|
|
],
|
|
[
|
|
"104",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"104",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"104",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 9.000.211"
|
|
],
|
|
[
|
|
"105",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"105",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"105",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.173"
|
|
],
|
|
[
|
|
"106",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"106",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"106",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.212, ACK: 4.000.174"
|
|
],
|
|
[
|
|
"107",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"107",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"107",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.174, ACK: 9.000.212"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000204": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:14 [op=REPLY, sender=02:00:00:00:02:14|192.168.0.31, target=02:00:00:00:02:13|192.168.0.30]"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 9.000.000"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000, ACK: 9.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.001, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei andere.de"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.001, ACK: 4.000.029"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.001"
|
|
],
|
|
[
|
|
"10",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.30"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.029, ACK: 9.000.018"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.029"
|
|
],
|
|
[
|
|
"12",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.30"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.018, ACK: 4.000.051"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.018"
|
|
],
|
|
[
|
|
"14",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.051, ACK: 9.000.045"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.051"
|
|
],
|
|
[
|
|
"16",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.045, ACK: 4.000.064"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.045"
|
|
],
|
|
[
|
|
"18",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<carla@andere.de>"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.064, ACK: 9.000.070"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.064"
|
|
],
|
|
[
|
|
"20",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.070, ACK: 4.000.080"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.070"
|
|
],
|
|
[
|
|
"22",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.080, ACK: 9.000.074"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.080"
|
|
],
|
|
[
|
|
"24",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.074, ACK: 4.000.115"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.074"
|
|
],
|
|
[
|
|
"26",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Anna Muster <anna@filius.de>\nTo: <bob@filius.de>\nCc: Carla <carla@andere.de>\nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.115, ACK: 9.000.207"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.115"
|
|
],
|
|
[
|
|
"28",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.207, ACK: 4.000.143"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.207"
|
|
],
|
|
[
|
|
"30",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.143, ACK: 9.000.211"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.143"
|
|
],
|
|
[
|
|
"32",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.211, ACK: 4.000.173"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.173"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 9.000.211"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"25",
|
|
"64361",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.174, ACK: 9.000.212"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"64361",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.212, ACK: 4.000.174"
|
|
]
|
|
]
|
|
},
|
|
"events": [
|
|
[
|
|
212,
|
|
"client",
|
|
"null"
|
|
],
|
|
[
|
|
215,
|
|
"server",
|
|
"null"
|
|
],
|
|
[
|
|
219,
|
|
"otherServer",
|
|
"null"
|
|
],
|
|
[
|
|
501,
|
|
"client",
|
|
"call versendeEmail bob@filius.de | Carla <carla@andere.de> | "
|
|
],
|
|
[
|
|
504,
|
|
"client",
|
|
"----"
|
|
],
|
|
[
|
|
1007,
|
|
"client",
|
|
"Verbindung zu 192.168.0.30:25 hergestellt"
|
|
],
|
|
[
|
|
1119,
|
|
"server",
|
|
"----"
|
|
],
|
|
[
|
|
1344,
|
|
"server",
|
|
"192.168.0.20> 220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
1399,
|
|
"server",
|
|
"192.168.0.20< HELO 192.168.0.20"
|
|
],
|
|
[
|
|
1678,
|
|
"server",
|
|
"192.168.0.20> 250 Hello 192.168.0.20"
|
|
],
|
|
[
|
|
1733,
|
|
"server",
|
|
"192.168.0.20< MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
2012,
|
|
"server",
|
|
"192.168.0.20> 250 Sender OK"
|
|
],
|
|
[
|
|
2068,
|
|
"server",
|
|
"192.168.0.20< RCPT TO:<bob@filius.de>"
|
|
],
|
|
[
|
|
2346,
|
|
"server",
|
|
"192.168.0.20> 250 Recipient OK"
|
|
],
|
|
[
|
|
2402,
|
|
"server",
|
|
"192.168.0.20< DATA"
|
|
],
|
|
[
|
|
2680,
|
|
"server",
|
|
"192.168.0.20> 354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
2735,
|
|
"server",
|
|
"192.168.0.20< From: Anna Muster <anna@filius.de>\nTo: <bob@filius.de>\nCc: Carla <carla@andere.de>\nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
3014,
|
|
"server",
|
|
"192.168.0.20> 250 Mail queued for delivery"
|
|
],
|
|
[
|
|
3014,
|
|
"server",
|
|
"E-Mail für bob im Postfach gespeichert."
|
|
],
|
|
[
|
|
3069,
|
|
"server",
|
|
"192.168.0.20< QUIT"
|
|
],
|
|
[
|
|
3236,
|
|
"client",
|
|
"Mail versendet an bob@filius.de"
|
|
],
|
|
[
|
|
3236,
|
|
"client",
|
|
"null"
|
|
],
|
|
[
|
|
3236,
|
|
"client",
|
|
"Verbindung zu 192.168.0.30:25 getrennt"
|
|
],
|
|
[
|
|
3237,
|
|
"client",
|
|
"----"
|
|
],
|
|
[
|
|
3347,
|
|
"server",
|
|
"192.168.0.20> 221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
3637,
|
|
"client",
|
|
"Verbindung zu 192.168.0.30:25 hergestellt"
|
|
],
|
|
[
|
|
3746,
|
|
"server",
|
|
"----"
|
|
],
|
|
[
|
|
3968,
|
|
"server",
|
|
"192.168.0.20> 220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
4024,
|
|
"server",
|
|
"192.168.0.20< HELO 192.168.0.20"
|
|
],
|
|
[
|
|
4301,
|
|
"server",
|
|
"192.168.0.20> 250 Hello 192.168.0.20"
|
|
],
|
|
[
|
|
4357,
|
|
"server",
|
|
"192.168.0.20< MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
4634,
|
|
"server",
|
|
"192.168.0.20> 250 Sender OK"
|
|
],
|
|
[
|
|
4689,
|
|
"server",
|
|
"192.168.0.20< RCPT TO:<carla@andere.de>"
|
|
],
|
|
[
|
|
4967,
|
|
"server",
|
|
"192.168.0.20> 250 Recipient OK"
|
|
],
|
|
[
|
|
5022,
|
|
"server",
|
|
"192.168.0.20< DATA"
|
|
],
|
|
[
|
|
5299,
|
|
"server",
|
|
"192.168.0.20> 354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
5355,
|
|
"server",
|
|
"192.168.0.20< From: Anna Muster <anna@filius.de>\nTo: <bob@filius.de>\nCc: Carla <carla@andere.de>\nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
5632,
|
|
"server",
|
|
"192.168.0.20> 250 Mail queued for delivery"
|
|
],
|
|
[
|
|
5688,
|
|
"server",
|
|
"192.168.0.20< QUIT"
|
|
],
|
|
[
|
|
5860,
|
|
"client",
|
|
"Mail versendet an carla@andere.de"
|
|
],
|
|
[
|
|
5860,
|
|
"client",
|
|
"null"
|
|
],
|
|
[
|
|
5860,
|
|
"client",
|
|
"Verbindung zu 192.168.0.30:25 getrennt"
|
|
],
|
|
[
|
|
5971,
|
|
"server",
|
|
"192.168.0.20> 221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
6086,
|
|
"server",
|
|
"----"
|
|
],
|
|
[
|
|
6586,
|
|
"server",
|
|
"Verbindung zu 192.168.0.31:25 hergestellt"
|
|
],
|
|
[
|
|
6724,
|
|
"otherServer",
|
|
"----"
|
|
],
|
|
[
|
|
6946,
|
|
"otherServer",
|
|
"192.168.0.30> 220 Willkommen bei andere.de"
|
|
],
|
|
[
|
|
7001,
|
|
"otherServer",
|
|
"192.168.0.30< HELO 192.168.0.30"
|
|
],
|
|
[
|
|
7278,
|
|
"otherServer",
|
|
"192.168.0.30> 250 Hello 192.168.0.30"
|
|
],
|
|
[
|
|
7333,
|
|
"otherServer",
|
|
"192.168.0.30< MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
7610,
|
|
"otherServer",
|
|
"192.168.0.30> 250 Sender OK"
|
|
],
|
|
[
|
|
7665,
|
|
"otherServer",
|
|
"192.168.0.30< RCPT TO:<carla@andere.de>"
|
|
],
|
|
[
|
|
7942,
|
|
"otherServer",
|
|
"192.168.0.30> 250 Recipient OK"
|
|
],
|
|
[
|
|
7998,
|
|
"otherServer",
|
|
"192.168.0.30< DATA"
|
|
],
|
|
[
|
|
8275,
|
|
"otherServer",
|
|
"192.168.0.30> 354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
8330,
|
|
"otherServer",
|
|
"192.168.0.30< From: Anna Muster <anna@filius.de>\nTo: <bob@filius.de>\nCc: Carla <carla@andere.de>\nSubject: Treffen\n\nHallo zusammen,\nbis morgen!\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
8607,
|
|
"otherServer",
|
|
"192.168.0.30> 250 Mail queued for delivery"
|
|
],
|
|
[
|
|
8607,
|
|
"otherServer",
|
|
"E-Mail für carla im Postfach gespeichert."
|
|
],
|
|
[
|
|
8662,
|
|
"otherServer",
|
|
"192.168.0.30< QUIT"
|
|
],
|
|
[
|
|
8828,
|
|
"server",
|
|
"Mail versendet an carla@andere.de"
|
|
],
|
|
[
|
|
8828,
|
|
"server",
|
|
"null"
|
|
],
|
|
[
|
|
8829,
|
|
"server",
|
|
"Verbindung zu 192.168.0.31:25 getrennt"
|
|
],
|
|
[
|
|
8939,
|
|
"otherServer",
|
|
"192.168.0.30> 221 Server beendet Verbindung."
|
|
]
|
|
],
|
|
"inbox": [],
|
|
"sent": [
|
|
[
|
|
"From: Anna Muster <anna@filius.de>\nTo: <bob@filius.de>\nCc: Carla <carla@andere.de>\nSubject: Treffen\n\nHallo zusammen,\nbis morgen!",
|
|
"true",
|
|
"false"
|
|
]
|
|
],
|
|
"accounts": [
|
|
[
|
|
"anna",
|
|
[
|
|
[
|
|
"From: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile",
|
|
"true",
|
|
"false"
|
|
],
|
|
[
|
|
"From: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?",
|
|
"true",
|
|
"false"
|
|
]
|
|
]
|
|
],
|
|
[
|
|
"bob",
|
|
[
|
|
[
|
|
"From: Anna Muster <anna@filius.de>\nTo: <bob@filius.de>\nCc: Carla <carla@andere.de>\nSubject: Treffen\n\nHallo zusammen,\nbis morgen!",
|
|
"true",
|
|
"false"
|
|
]
|
|
]
|
|
]
|
|
],
|
|
"otherAccounts": [
|
|
[
|
|
"carla",
|
|
[
|
|
[
|
|
"From: Anna Muster <anna@filius.de>\nTo: <bob@filius.de>\nCc: Carla <carla@andere.de>\nSubject: Treffen\n\nHallo zusammen,\nbis morgen!",
|
|
"true",
|
|
"false"
|
|
]
|
|
]
|
|
]
|
|
]
|
|
}
|