The program sends to its account's SMTP server, one connection for each recipient, and fetches its mails by POP3; the server now sends mails on to other domains by MX and returns notices to their senders. The program's folders are in the snapshot and go back into the project. EmailClientRun plays six stories with two servers; the mail oracles run in the language's locale, so Java's notice dates match the core's. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
5002 lines
100 KiB
JSON
5002 lines
100 KiB
JSON
{
|
|
"frames": {
|
|
"00000000-0000-0000-0000-000000000201": [
|
|
{
|
|
"time": 517,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
},
|
|
{
|
|
"time": 752,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 755,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 3000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 983,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 2000000,
|
|
"acknowledgement": 3000001
|
|
},
|
|
{
|
|
"time": 983,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 2000001
|
|
},
|
|
{
|
|
"time": 1230,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": "220 Willkommen bei filius.de",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1230,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 2000029
|
|
},
|
|
{
|
|
"time": 3000,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": "HELO 192.168.0.20",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3223,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000029,
|
|
"acknowledgement": 3000018
|
|
},
|
|
{
|
|
"time": 3279,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": "250 Hello 192.168.0.20",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3279,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000018,
|
|
"acknowledgement": 2000051
|
|
},
|
|
{
|
|
"time": 4501,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": "MAIL FROM: <bob@filius.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000018,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4723,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000051,
|
|
"acknowledgement": 3000044
|
|
},
|
|
{
|
|
"time": 4779,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": "250 Sender OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000051,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4779,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000044,
|
|
"acknowledgement": 2000064
|
|
},
|
|
{
|
|
"time": 6000,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": "RCPT TO:<anna@filius.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000044,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6223,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000064,
|
|
"acknowledgement": 3000068
|
|
},
|
|
{
|
|
"time": 6278,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": "250 Recipient OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000064,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6279,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000068,
|
|
"acknowledgement": 2000080
|
|
},
|
|
{
|
|
"time": 7500,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": "DATA",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000068,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7723,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000080,
|
|
"acknowledgement": 3000072
|
|
},
|
|
{
|
|
"time": 7778,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": "354 End data with <CR><LF>.<CR><LF>",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000080,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7779,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000072,
|
|
"acknowledgement": 2000115
|
|
},
|
|
{
|
|
"time": 9000,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": "From: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Gruß\n\nHallo Anna,\nwie geht's?\u000d\n.\u000d\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000072,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9223,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000115,
|
|
"acknowledgement": 3000171
|
|
},
|
|
{
|
|
"time": 9278,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": "250 Mail queued for delivery",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000115,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9279,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000171,
|
|
"acknowledgement": 2000143
|
|
},
|
|
{
|
|
"time": 10500,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000171,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 10722,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000143,
|
|
"acknowledgement": 3000175
|
|
},
|
|
{
|
|
"time": 10778,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": "221 Server beendet Verbindung.",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000143,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 10778,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000175,
|
|
"acknowledgement": 2000173
|
|
},
|
|
{
|
|
"time": 11001,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 2000173,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 11001,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000175,
|
|
"acknowledgement": 2000174
|
|
},
|
|
{
|
|
"time": 11057,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 3000175,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 11278,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000174,
|
|
"acknowledgement": 3000176
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000202": [
|
|
{
|
|
"time": 640,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000203": [
|
|
{
|
|
"time": 640,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
},
|
|
{
|
|
"time": 641,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 869,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 3000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 871,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 2000000,
|
|
"acknowledgement": 3000001
|
|
},
|
|
{
|
|
"time": 1094,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 2000001
|
|
},
|
|
{
|
|
"time": 1118,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": "220 Willkommen bei filius.de",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1341,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 2000029
|
|
},
|
|
{
|
|
"time": 3111,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": "HELO 192.168.0.20",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3112,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000029,
|
|
"acknowledgement": 3000018
|
|
},
|
|
{
|
|
"time": 3168,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": "250 Hello 192.168.0.20",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3390,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000018,
|
|
"acknowledgement": 2000051
|
|
},
|
|
{
|
|
"time": 4612,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": "MAIL FROM: <bob@filius.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000018,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4612,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000051,
|
|
"acknowledgement": 3000044
|
|
},
|
|
{
|
|
"time": 4668,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": "250 Sender OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000051,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4890,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000044,
|
|
"acknowledgement": 2000064
|
|
},
|
|
{
|
|
"time": 6111,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": "RCPT TO:<anna@filius.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000044,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6112,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000064,
|
|
"acknowledgement": 3000068
|
|
},
|
|
{
|
|
"time": 6167,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": "250 Recipient OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000064,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6390,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000068,
|
|
"acknowledgement": 2000080
|
|
},
|
|
{
|
|
"time": 7611,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": "DATA",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000068,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7612,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000080,
|
|
"acknowledgement": 3000072
|
|
},
|
|
{
|
|
"time": 7667,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": "354 End data with <CR><LF>.<CR><LF>",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000080,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7890,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000072,
|
|
"acknowledgement": 2000115
|
|
},
|
|
{
|
|
"time": 9111,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": "From: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Gruß\n\nHallo Anna,\nwie geht's?\u000d\n.\u000d\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000072,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9112,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000115,
|
|
"acknowledgement": 3000171
|
|
},
|
|
{
|
|
"time": 9167,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": "250 Mail queued for delivery",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000115,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9390,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000171,
|
|
"acknowledgement": 2000143
|
|
},
|
|
{
|
|
"time": 10611,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000171,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 10612,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000143,
|
|
"acknowledgement": 3000175
|
|
},
|
|
{
|
|
"time": 10667,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": "221 Server beendet Verbindung.",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000143,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 10889,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000175,
|
|
"acknowledgement": 2000173
|
|
},
|
|
{
|
|
"time": 10889,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 2000173,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 11112,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000175,
|
|
"acknowledgement": 2000174
|
|
},
|
|
{
|
|
"time": 11167,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 52469,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 3000175,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 11168,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 52469,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000174,
|
|
"acknowledgement": 3000176
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000204": [
|
|
{
|
|
"time": 640,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
}
|
|
]
|
|
},
|
|
"rows": {
|
|
"00000000-0000-0000-0000-000000000201": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 2.000.029"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.20"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.029, ACK: 3.000.018"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.029"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.20"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.018, ACK: 2.000.051"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.018"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <bob@filius.de>"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.051, ACK: 3.000.044"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.051"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.044, ACK: 2.000.064"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.044"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<anna@filius.de>"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.064, ACK: 3.000.068"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.064"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.068, ACK: 2.000.080"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.068"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.080, ACK: 3.000.072"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.080"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.072, ACK: 2.000.115"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.072"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Gruß\n\nHallo Anna,\nwie geht's?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.115, ACK: 3.000.171"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.115"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.171, ACK: 2.000.143"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.171"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.143, ACK: 3.000.175"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.143"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.175, ACK: 2.000.173"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.173"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.175, ACK: 2.000.174"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.000.175"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.174, ACK: 3.000.176"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000202": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000203": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 2.000.029"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.20"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.029, ACK: 3.000.018"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.029"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.20"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.018, ACK: 2.000.051"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.018"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <bob@filius.de>"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.051, ACK: 3.000.044"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.051"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.044, ACK: 2.000.064"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.044"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<anna@filius.de>"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.064, ACK: 3.000.068"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.064"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.068, ACK: 2.000.080"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.068"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.080, ACK: 3.000.072"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.080"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.072, ACK: 2.000.115"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.072"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Gruß\n\nHallo Anna,\nwie geht's?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.115, ACK: 3.000.171"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.115"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.171, ACK: 2.000.143"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.171"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.143, ACK: 3.000.175"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.143"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.175, ACK: 2.000.173"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.173"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.175, ACK: 2.000.174"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.20:52469",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.000.175"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.174, ACK: 3.000.176"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000204": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
]
|
|
]
|
|
},
|
|
"layeredRows": {
|
|
"00000000-0000-0000-0000-000000000201": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 2.000.029"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.20"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.029, ACK: 3.000.018"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.029"
|
|
],
|
|
[
|
|
"10",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.20"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.018, ACK: 2.000.051"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.018"
|
|
],
|
|
[
|
|
"12",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <bob@filius.de>"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.051, ACK: 3.000.044"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.051"
|
|
],
|
|
[
|
|
"14",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.044, ACK: 2.000.064"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.044"
|
|
],
|
|
[
|
|
"16",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<anna@filius.de>"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.064, ACK: 3.000.068"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.064"
|
|
],
|
|
[
|
|
"18",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.068, ACK: 2.000.080"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.068"
|
|
],
|
|
[
|
|
"20",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.080, ACK: 3.000.072"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.080"
|
|
],
|
|
[
|
|
"22",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.072, ACK: 2.000.115"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.072"
|
|
],
|
|
[
|
|
"24",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Gruß\n\nHallo Anna,\nwie geht's?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.115, ACK: 3.000.171"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.115"
|
|
],
|
|
[
|
|
"26",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.171, ACK: 2.000.143"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.171"
|
|
],
|
|
[
|
|
"28",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.143, ACK: 3.000.175"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.143"
|
|
],
|
|
[
|
|
"30",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.175, ACK: 2.000.173"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.173"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.175, ACK: 2.000.174"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.000.175"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.174, ACK: 3.000.176"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000202": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000203": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 2.000.029"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.20"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.029, ACK: 3.000.018"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.029"
|
|
],
|
|
[
|
|
"10",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.20"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.018, ACK: 2.000.051"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.018"
|
|
],
|
|
[
|
|
"12",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <bob@filius.de>"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.051, ACK: 3.000.044"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.051"
|
|
],
|
|
[
|
|
"14",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.044, ACK: 2.000.064"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.044"
|
|
],
|
|
[
|
|
"16",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<anna@filius.de>"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.064, ACK: 3.000.068"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.064"
|
|
],
|
|
[
|
|
"18",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.068, ACK: 2.000.080"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.068"
|
|
],
|
|
[
|
|
"20",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.080, ACK: 3.000.072"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.080"
|
|
],
|
|
[
|
|
"22",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.072, ACK: 2.000.115"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.072"
|
|
],
|
|
[
|
|
"24",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Gruß\n\nHallo Anna,\nwie geht's?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.115, ACK: 3.000.171"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.115"
|
|
],
|
|
[
|
|
"26",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.171, ACK: 2.000.143"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.171"
|
|
],
|
|
[
|
|
"28",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.143, ACK: 3.000.175"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.143"
|
|
],
|
|
[
|
|
"30",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.175, ACK: 2.000.173"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.173"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.175, ACK: 2.000.174"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"52469",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.000.175"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"25",
|
|
"52469",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.174, ACK: 3.000.176"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000204": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
]
|
|
]
|
|
},
|
|
"events": [
|
|
[
|
|
210,
|
|
"client",
|
|
"null"
|
|
],
|
|
[
|
|
211,
|
|
"server",
|
|
"null"
|
|
],
|
|
[
|
|
500,
|
|
"client",
|
|
"call verbinden 25"
|
|
],
|
|
[
|
|
1004,
|
|
"client",
|
|
"Verbindung hergestellt"
|
|
],
|
|
[
|
|
1118,
|
|
"server",
|
|
"----"
|
|
],
|
|
[
|
|
1230,
|
|
"client",
|
|
">>220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
1341,
|
|
"server",
|
|
"192.168.0.20> 220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
3000,
|
|
"client",
|
|
"call senden HELO 192.168.0.20"
|
|
],
|
|
[
|
|
3112,
|
|
"server",
|
|
"192.168.0.20< HELO 192.168.0.20"
|
|
],
|
|
[
|
|
3223,
|
|
"client",
|
|
"<<HELO 192.168.0.20"
|
|
],
|
|
[
|
|
3279,
|
|
"client",
|
|
">>250 Hello 192.168.0.20"
|
|
],
|
|
[
|
|
3391,
|
|
"server",
|
|
"192.168.0.20> 250 Hello 192.168.0.20"
|
|
],
|
|
[
|
|
4500,
|
|
"client",
|
|
"call senden MAIL FROM: <bob@filius.de>"
|
|
],
|
|
[
|
|
4612,
|
|
"server",
|
|
"192.168.0.20< MAIL FROM: <bob@filius.de>"
|
|
],
|
|
[
|
|
4724,
|
|
"client",
|
|
"<<MAIL FROM: <bob@filius.de>"
|
|
],
|
|
[
|
|
4779,
|
|
"client",
|
|
">>250 Sender OK"
|
|
],
|
|
[
|
|
4891,
|
|
"server",
|
|
"192.168.0.20> 250 Sender OK"
|
|
],
|
|
[
|
|
6000,
|
|
"client",
|
|
"call senden RCPT TO:<anna@filius.de>"
|
|
],
|
|
[
|
|
6112,
|
|
"server",
|
|
"192.168.0.20< RCPT TO:<anna@filius.de>"
|
|
],
|
|
[
|
|
6223,
|
|
"client",
|
|
"<<RCPT TO:<anna@filius.de>"
|
|
],
|
|
[
|
|
6278,
|
|
"client",
|
|
">>250 Recipient OK"
|
|
],
|
|
[
|
|
6390,
|
|
"server",
|
|
"192.168.0.20> 250 Recipient OK"
|
|
],
|
|
[
|
|
7500,
|
|
"client",
|
|
"call senden DATA"
|
|
],
|
|
[
|
|
7611,
|
|
"server",
|
|
"192.168.0.20< DATA"
|
|
],
|
|
[
|
|
7723,
|
|
"client",
|
|
"<<DATA"
|
|
],
|
|
[
|
|
7778,
|
|
"client",
|
|
">>354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
7890,
|
|
"server",
|
|
"192.168.0.20> 354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
9000,
|
|
"client",
|
|
"call senden From: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Gruß\n\nHallo Anna,\nwie geht's?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
9112,
|
|
"server",
|
|
"192.168.0.20< From: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Gruß\n\nHallo Anna,\nwie geht's?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
9223,
|
|
"client",
|
|
"<<From: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Gruß\n\nHallo Anna,\nwie geht's?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
9279,
|
|
"client",
|
|
">>250 Mail queued for delivery"
|
|
],
|
|
[
|
|
9390,
|
|
"server",
|
|
"192.168.0.20> 250 Mail queued for delivery"
|
|
],
|
|
[
|
|
9390,
|
|
"server",
|
|
"E-Mail für anna im Postfach gespeichert."
|
|
],
|
|
[
|
|
10500,
|
|
"client",
|
|
"call senden QUIT"
|
|
],
|
|
[
|
|
10611,
|
|
"server",
|
|
"192.168.0.20< QUIT"
|
|
],
|
|
[
|
|
10723,
|
|
"client",
|
|
"<<QUIT"
|
|
],
|
|
[
|
|
10778,
|
|
"client",
|
|
">>221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
10889,
|
|
"server",
|
|
"192.168.0.20> 221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
11001,
|
|
"client",
|
|
"Socket zu 192.168.0.30:25 getrennt"
|
|
]
|
|
],
|
|
"accounts": [
|
|
[
|
|
"anna",
|
|
[
|
|
"From: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile",
|
|
"true",
|
|
"false"
|
|
],
|
|
[
|
|
"From: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?",
|
|
"true",
|
|
"false"
|
|
],
|
|
[
|
|
"From: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Gruß\n\nHallo Anna,\nwie geht's?",
|
|
"true",
|
|
"false"
|
|
]
|
|
],
|
|
[
|
|
"bob"
|
|
]
|
|
],
|
|
"file": "anna;filius.de;geheim;Muster;Anna;#Bob Beispiel <bob@filius.de>$<anna@filius.de>$$$$Hallo Anna$Erste Zeile|Zweite Zeile#Carla <carla@andere.de>$Anna Muster <anna@filius.de>,<bob@filius.de>$<chef@filius.de>$$$Termin$Morgen um 10?#Bob Beispiel <bob@filius.de>$<anna@filius.de>$$$$Gruß$Hallo Anna,|wie geht's?|\nbob;filius.de;passwort;Beispiel;Bob;\n"
|
|
}
|