julian.kiedaischandClaude Opus 5.5
058675a148
The program sends to its account's SMTP server, one connection for each recipient, and fetches its mails by POP3; the server now sends mails on to other domains by MX and returns notices to their senders. The program's folders are in the snapshot and go back into the project. EmailClientRun plays six stories with two servers; the mail oracles run in the language's locale, so Java's notice dates match the core's. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
30115 lines
614 KiB
JSON
30115 lines
614 KiB
JSON
{
|
|
"frames": {
|
|
"00000000-0000-0000-0000-000000000201": [
|
|
{
|
|
"time": 515,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 751,
|
|
"source": "02:00:00:00:02:12",
|
|
"destination": "02:00:00:00:02:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.10",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 754,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:12",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 52531,
|
|
"destinationPort": 53,
|
|
"payload": "ID=43842 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n"
|
|
},
|
|
{
|
|
"time": 985,
|
|
"source": "02:00:00:00:02:12",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 52531,
|
|
"payload": "ID=43842 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n"
|
|
},
|
|
{
|
|
"time": 995,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
},
|
|
{
|
|
"time": 1218,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 1218,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 5000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1442,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 2000000,
|
|
"acknowledgement": 5000001
|
|
},
|
|
{
|
|
"time": 1443,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 2000001
|
|
},
|
|
{
|
|
"time": 1734,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": "220 Willkommen bei filius.de",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1735,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 2000029
|
|
},
|
|
{
|
|
"time": 1790,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": "HELO 192.168.0.20",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2013,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000029,
|
|
"acknowledgement": 5000018
|
|
},
|
|
{
|
|
"time": 2068,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": "250 Hello 192.168.0.20",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2069,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000018,
|
|
"acknowledgement": 2000051
|
|
},
|
|
{
|
|
"time": 2124,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": "MAIL FROM: <anna@filius.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000018,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2347,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000051,
|
|
"acknowledgement": 5000045
|
|
},
|
|
{
|
|
"time": 2403,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": "250 Sender OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000051,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2403,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000045,
|
|
"acknowledgement": 2000064
|
|
},
|
|
{
|
|
"time": 2459,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": "RCPT TO:<niemand@andere.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000045,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2681,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000064,
|
|
"acknowledgement": 5000072
|
|
},
|
|
{
|
|
"time": 2737,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": "250 Recipient OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000064,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2738,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000072,
|
|
"acknowledgement": 2000080
|
|
},
|
|
{
|
|
"time": 2793,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": "DATA",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000072,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3015,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000080,
|
|
"acknowledgement": 5000076
|
|
},
|
|
{
|
|
"time": 3071,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": "354 End data with <CR><LF>.<CR><LF>",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000080,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3071,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000076,
|
|
"acknowledgement": 2000115
|
|
},
|
|
{
|
|
"time": 3127,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": "From: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000076,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3349,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000115,
|
|
"acknowledgement": 5000168
|
|
},
|
|
{
|
|
"time": 3404,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": "250 Mail queued for delivery",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000115,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3404,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000168,
|
|
"acknowledgement": 2000143
|
|
},
|
|
{
|
|
"time": 3460,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000168,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3632,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 3687,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000143,
|
|
"acknowledgement": 5000172
|
|
},
|
|
{
|
|
"time": 3742,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": "221 Server beendet Verbindung.",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000143,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3743,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000172,
|
|
"acknowledgement": 2000173
|
|
},
|
|
{
|
|
"time": 3798,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 5000172,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3964,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 2000173,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3965,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000173,
|
|
"acknowledgement": 2000174
|
|
},
|
|
{
|
|
"time": 4020,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000174,
|
|
"acknowledgement": 5000173
|
|
},
|
|
{
|
|
"time": 4076,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.31"
|
|
},
|
|
{
|
|
"time": 6522,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.31",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 12001,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:12",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 57606,
|
|
"destinationPort": 53,
|
|
"payload": "ID=60054 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n"
|
|
},
|
|
{
|
|
"time": 12223,
|
|
"source": "02:00:00:00:02:12",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 57606,
|
|
"payload": "ID=60054 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n"
|
|
},
|
|
{
|
|
"time": 12224,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 11000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 12445,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 10000000,
|
|
"acknowledgement": 11000001
|
|
},
|
|
{
|
|
"time": 12446,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 11000001,
|
|
"acknowledgement": 10000001
|
|
},
|
|
{
|
|
"time": 12686,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": "220 Willkommen bei filius.de",
|
|
"tcpFlags": "P",
|
|
"sequence": 10000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 12686,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 11000001,
|
|
"acknowledgement": 10000029
|
|
},
|
|
{
|
|
"time": 12742,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": "HELO 192.168.0.20",
|
|
"tcpFlags": "P",
|
|
"sequence": 11000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 12964,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 10000029,
|
|
"acknowledgement": 11000018
|
|
},
|
|
{
|
|
"time": 13019,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": "250 Hello 192.168.0.20",
|
|
"tcpFlags": "P",
|
|
"sequence": 10000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 13019,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 11000018,
|
|
"acknowledgement": 10000051
|
|
},
|
|
{
|
|
"time": 13075,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": "MAIL FROM: <anna@filius.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 11000018,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 13296,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 10000051,
|
|
"acknowledgement": 11000045
|
|
},
|
|
{
|
|
"time": 13351,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": "250 Sender OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 10000051,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 13351,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 11000045,
|
|
"acknowledgement": 10000064
|
|
},
|
|
{
|
|
"time": 13407,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": "RCPT TO:<jemand@nirgendwo.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 11000045,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 13628,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 10000064,
|
|
"acknowledgement": 11000074
|
|
},
|
|
{
|
|
"time": 13683,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": "250 Recipient OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 10000064,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 13683,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 11000074,
|
|
"acknowledgement": 10000080
|
|
},
|
|
{
|
|
"time": 13739,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": "DATA",
|
|
"tcpFlags": "P",
|
|
"sequence": 11000074,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 13960,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 10000080,
|
|
"acknowledgement": 11000078
|
|
},
|
|
{
|
|
"time": 14015,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": "354 End data with <CR><LF>.<CR><LF>",
|
|
"tcpFlags": "P",
|
|
"sequence": 10000080,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 14016,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 11000078,
|
|
"acknowledgement": 10000115
|
|
},
|
|
{
|
|
"time": 14071,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": "From: Anna Muster <anna@filius.de>\nTo: <jemand@nirgendwo.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 11000078,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 14292,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 10000115,
|
|
"acknowledgement": 11000172
|
|
},
|
|
{
|
|
"time": 14348,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": "250 Mail queued for delivery",
|
|
"tcpFlags": "P",
|
|
"sequence": 10000115,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 14348,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 11000172,
|
|
"acknowledgement": 10000143
|
|
},
|
|
{
|
|
"time": 14403,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 11000172,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 14626,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 10000143,
|
|
"acknowledgement": 11000176
|
|
},
|
|
{
|
|
"time": 14681,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": "221 Server beendet Verbindung.",
|
|
"tcpFlags": "P",
|
|
"sequence": 10000143,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 14681,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 11000176,
|
|
"acknowledgement": 10000173
|
|
},
|
|
{
|
|
"time": 14736,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 11000176,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 14903,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 10000173,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 14903,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 11000177,
|
|
"acknowledgement": 10000174
|
|
},
|
|
{
|
|
"time": 14958,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 10000174,
|
|
"acknowledgement": 11000177
|
|
},
|
|
{
|
|
"time": 25002,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:12",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 56276,
|
|
"destinationPort": 53,
|
|
"payload": "ID=40953 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n"
|
|
},
|
|
{
|
|
"time": 25224,
|
|
"source": "02:00:00:00:02:12",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 56276,
|
|
"payload": "ID=40953 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n"
|
|
},
|
|
{
|
|
"time": 25224,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 13000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 25446,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 1000000,
|
|
"acknowledgement": 13000001
|
|
},
|
|
{
|
|
"time": 25446,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000001,
|
|
"acknowledgement": 1000001
|
|
},
|
|
{
|
|
"time": 25750,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK POP3 server ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 25750,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000001,
|
|
"acknowledgement": 1000022
|
|
},
|
|
{
|
|
"time": 25805,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": "USER anna",
|
|
"tcpFlags": "P",
|
|
"sequence": 13000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 26027,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000022,
|
|
"acknowledgement": 13000010
|
|
},
|
|
{
|
|
"time": 26082,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK enter password",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000022,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 26082,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000010,
|
|
"acknowledgement": 1000040
|
|
},
|
|
{
|
|
"time": 26137,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": "PASS geheim",
|
|
"tcpFlags": "P",
|
|
"sequence": 13000010,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 26359,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000040,
|
|
"acknowledgement": 13000021
|
|
},
|
|
{
|
|
"time": 26414,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK Mailbox locked and ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000040,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 26415,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000021,
|
|
"acknowledgement": 1000068
|
|
},
|
|
{
|
|
"time": 26470,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": "STAT",
|
|
"tcpFlags": "P",
|
|
"sequence": 13000021,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 26691,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000068,
|
|
"acknowledgement": 13000025
|
|
},
|
|
{
|
|
"time": 26746,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK 4 1054",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000068,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 26746,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000025,
|
|
"acknowledgement": 1000078
|
|
},
|
|
{
|
|
"time": 26802,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": "LIST",
|
|
"tcpFlags": "P",
|
|
"sequence": 13000025,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 27023,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000078,
|
|
"acknowledgement": 13000029
|
|
},
|
|
{
|
|
"time": 27078,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK 4 1054\n0 80\n1 89\n2 441\n3 444\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000078,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 27078,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000029,
|
|
"acknowledgement": 1000111
|
|
},
|
|
{
|
|
"time": 27134,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": "RETR 0",
|
|
"tcpFlags": "P",
|
|
"sequence": 13000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 27355,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000111,
|
|
"acknowledgement": 13000035
|
|
},
|
|
{
|
|
"time": 27410,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000111,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 27411,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000035,
|
|
"acknowledgement": 1000233
|
|
},
|
|
{
|
|
"time": 27466,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": "DELE 0",
|
|
"tcpFlags": "P",
|
|
"sequence": 13000035,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 27687,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000233,
|
|
"acknowledgement": 13000041
|
|
},
|
|
{
|
|
"time": 27742,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK message marked for delete",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000233,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 27743,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000041,
|
|
"acknowledgement": 1000262
|
|
},
|
|
{
|
|
"time": 27798,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": "RETR 1",
|
|
"tcpFlags": "P",
|
|
"sequence": 13000041,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 28019,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000262,
|
|
"acknowledgement": 13000047
|
|
},
|
|
{
|
|
"time": 28075,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000262,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 28075,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000047,
|
|
"acknowledgement": 1000414
|
|
},
|
|
{
|
|
"time": 28130,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": "DELE 1",
|
|
"tcpFlags": "P",
|
|
"sequence": 13000047,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 28351,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000414,
|
|
"acknowledgement": 13000053
|
|
},
|
|
{
|
|
"time": 28407,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK message marked for delete",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000414,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 28407,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000053,
|
|
"acknowledgement": 1000443
|
|
},
|
|
{
|
|
"time": 28463,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": "RETR 2",
|
|
"tcpFlags": "P",
|
|
"sequence": 13000053,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 28684,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000443,
|
|
"acknowledgement": 13000059
|
|
},
|
|
{
|
|
"time": 28739,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK message follows \nFrom: <noreply@andere.de>\nTo: Anna Muster <anna@filius.de>\nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000443,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 28739,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000059,
|
|
"acknowledgement": 1000925
|
|
},
|
|
{
|
|
"time": 28794,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": "DELE 2",
|
|
"tcpFlags": "P",
|
|
"sequence": 13000059,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 29016,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000925,
|
|
"acknowledgement": 13000065
|
|
},
|
|
{
|
|
"time": 29071,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK message marked for delete",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000925,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 29071,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000065,
|
|
"acknowledgement": 1000954
|
|
},
|
|
{
|
|
"time": 29126,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": "RETR 3",
|
|
"tcpFlags": "P",
|
|
"sequence": 13000065,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 29348,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000954,
|
|
"acknowledgement": 13000071
|
|
},
|
|
{
|
|
"time": 29403,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK message follows \nFrom: <noreply@filius.de>\nTo: Anna Muster <anna@filius.de>\nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009jemand@nirgendwo.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Anna Muster <anna@filius.de>\nTo: <jemand@nirgendwo.de>\nSubject: Hallo?\n\nIst da wer?",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000954,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 29403,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000071,
|
|
"acknowledgement": 1001440
|
|
},
|
|
{
|
|
"time": 29458,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": "DELE 3",
|
|
"tcpFlags": "P",
|
|
"sequence": 13000071,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 29679,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1001440,
|
|
"acknowledgement": 13000077
|
|
},
|
|
{
|
|
"time": 29735,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK message marked for delete",
|
|
"tcpFlags": "P",
|
|
"sequence": 1001440,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 29735,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000077,
|
|
"acknowledgement": 1001469
|
|
},
|
|
{
|
|
"time": 29790,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 13000077,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 30012,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1001469,
|
|
"acknowledgement": 13000081
|
|
},
|
|
{
|
|
"time": 30067,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 1001469,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 30067,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000081,
|
|
"acknowledgement": 1001472
|
|
},
|
|
{
|
|
"time": 30123,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 13000081,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 30289,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 1001472,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 30289,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000082,
|
|
"acknowledgement": 1001473
|
|
},
|
|
{
|
|
"time": 30344,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1001473,
|
|
"acknowledgement": 13000082
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000202": [
|
|
{
|
|
"time": 638,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 640,
|
|
"source": "02:00:00:00:02:12",
|
|
"destination": "02:00:00:00:02:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.10",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 868,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:12",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 52531,
|
|
"destinationPort": 53,
|
|
"payload": "ID=43842 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n"
|
|
},
|
|
{
|
|
"time": 873,
|
|
"source": "02:00:00:00:02:12",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 52531,
|
|
"payload": "ID=43842 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n"
|
|
},
|
|
{
|
|
"time": 1106,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
},
|
|
{
|
|
"time": 3632,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 3632,
|
|
"source": "02:00:00:00:02:12",
|
|
"destination": "02:00:00:00:02:13",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.10",
|
|
"targetIp": "192.168.0.30"
|
|
},
|
|
{
|
|
"time": 3853,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:12",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 62746,
|
|
"destinationPort": 53,
|
|
"payload": "ID=3243 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n"
|
|
},
|
|
{
|
|
"time": 3854,
|
|
"source": "02:00:00:00:02:12",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 62746,
|
|
"payload": "ID=3243 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n"
|
|
},
|
|
{
|
|
"time": 4076,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.31"
|
|
},
|
|
{
|
|
"time": 6522,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.31",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 6522,
|
|
"source": "02:00:00:00:02:12",
|
|
"destination": "02:00:00:00:02:14",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.10",
|
|
"targetIp": "192.168.0.31"
|
|
},
|
|
{
|
|
"time": 6743,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:12",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 58459,
|
|
"destinationPort": 53,
|
|
"payload": "ID=47846 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
|
|
},
|
|
{
|
|
"time": 6745,
|
|
"source": "02:00:00:00:02:12",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 58459,
|
|
"payload": "ID=47846 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n"
|
|
},
|
|
{
|
|
"time": 12111,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:12",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 57606,
|
|
"destinationPort": 53,
|
|
"payload": "ID=60054 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n"
|
|
},
|
|
{
|
|
"time": 12112,
|
|
"source": "02:00:00:00:02:12",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 57606,
|
|
"payload": "ID=60054 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n"
|
|
},
|
|
{
|
|
"time": 14571,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:12",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 53558,
|
|
"destinationPort": 53,
|
|
"payload": "ID=35053 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnirgendwo.de. MX IN\n"
|
|
},
|
|
{
|
|
"time": 14572,
|
|
"source": "02:00:00:00:02:12",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 53558,
|
|
"payload": "ID=35053 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
},
|
|
{
|
|
"time": 25112,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:12",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 56276,
|
|
"destinationPort": 53,
|
|
"payload": "ID=40953 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n"
|
|
},
|
|
{
|
|
"time": 25113,
|
|
"source": "02:00:00:00:02:12",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 56276,
|
|
"payload": "ID=40953 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n"
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000203": [
|
|
{
|
|
"time": 638,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 1106,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
},
|
|
{
|
|
"time": 1106,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 1330,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 5000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1331,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 2000000,
|
|
"acknowledgement": 5000001
|
|
},
|
|
{
|
|
"time": 1554,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 2000001
|
|
},
|
|
{
|
|
"time": 1623,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": "220 Willkommen bei filius.de",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1846,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 2000029
|
|
},
|
|
{
|
|
"time": 1901,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": "HELO 192.168.0.20",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1902,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000029,
|
|
"acknowledgement": 5000018
|
|
},
|
|
{
|
|
"time": 1957,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": "250 Hello 192.168.0.20",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2180,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000018,
|
|
"acknowledgement": 2000051
|
|
},
|
|
{
|
|
"time": 2236,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": "MAIL FROM: <anna@filius.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000018,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2236,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000051,
|
|
"acknowledgement": 5000045
|
|
},
|
|
{
|
|
"time": 2292,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": "250 Sender OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000051,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2514,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000045,
|
|
"acknowledgement": 2000064
|
|
},
|
|
{
|
|
"time": 2570,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": "RCPT TO:<niemand@andere.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000045,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2570,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000064,
|
|
"acknowledgement": 5000072
|
|
},
|
|
{
|
|
"time": 2626,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": "250 Recipient OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000064,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2849,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000072,
|
|
"acknowledgement": 2000080
|
|
},
|
|
{
|
|
"time": 2904,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": "DATA",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000072,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 2904,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000080,
|
|
"acknowledgement": 5000076
|
|
},
|
|
{
|
|
"time": 2960,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": "354 End data with <CR><LF>.<CR><LF>",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000080,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3182,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000076,
|
|
"acknowledgement": 2000115
|
|
},
|
|
{
|
|
"time": 3237,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": "From: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000076,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3238,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000115,
|
|
"acknowledgement": 5000168
|
|
},
|
|
{
|
|
"time": 3293,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": "250 Mail queued for delivery",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000115,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3515,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000168,
|
|
"acknowledgement": 2000143
|
|
},
|
|
{
|
|
"time": 3521,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 3571,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 5000168,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3576,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000143,
|
|
"acknowledgement": 5000172
|
|
},
|
|
{
|
|
"time": 3632,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": "221 Server beendet Verbindung.",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000143,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3742,
|
|
"source": "02:00:00:00:02:12",
|
|
"destination": "02:00:00:00:02:13",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.10",
|
|
"targetIp": "192.168.0.30"
|
|
},
|
|
{
|
|
"time": 3743,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:12",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 62746,
|
|
"destinationPort": 53,
|
|
"payload": "ID=3243 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n"
|
|
},
|
|
{
|
|
"time": 3853,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000172,
|
|
"acknowledgement": 2000173
|
|
},
|
|
{
|
|
"time": 3854,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 2000173,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3909,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 5000172,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3909,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 62333,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000174,
|
|
"acknowledgement": 5000173
|
|
},
|
|
{
|
|
"time": 3965,
|
|
"source": "02:00:00:00:02:12",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 62746,
|
|
"payload": "ID=3243 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n"
|
|
},
|
|
{
|
|
"time": 3966,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.31"
|
|
},
|
|
{
|
|
"time": 4075,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 62333,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 5000173,
|
|
"acknowledgement": 2000174
|
|
},
|
|
{
|
|
"time": 4187,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.31",
|
|
"targetIp": "192.168.0.30"
|
|
},
|
|
{
|
|
"time": 4187,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 7000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4409,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 4000000,
|
|
"acknowledgement": 7000001
|
|
},
|
|
{
|
|
"time": 4409,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000001,
|
|
"acknowledgement": 4000001
|
|
},
|
|
{
|
|
"time": 4636,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": "220 Willkommen bei andere.de",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4636,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000001,
|
|
"acknowledgement": 4000029
|
|
},
|
|
{
|
|
"time": 4692,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": "HELO 192.168.0.30",
|
|
"tcpFlags": "P",
|
|
"sequence": 7000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4913,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000029,
|
|
"acknowledgement": 7000018
|
|
},
|
|
{
|
|
"time": 4968,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": "250 Hello 192.168.0.30",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4969,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000018,
|
|
"acknowledgement": 4000051
|
|
},
|
|
{
|
|
"time": 5024,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": "MAIL FROM: <anna@filius.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 7000018,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5245,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000051,
|
|
"acknowledgement": 7000045
|
|
},
|
|
{
|
|
"time": 5301,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": "250 Sender OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000051,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5301,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000045,
|
|
"acknowledgement": 4000064
|
|
},
|
|
{
|
|
"time": 5356,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": "RCPT TO:<niemand@andere.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 7000045,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5578,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000064,
|
|
"acknowledgement": 7000072
|
|
},
|
|
{
|
|
"time": 5633,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": "250 Recipient OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000064,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5634,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000072,
|
|
"acknowledgement": 4000080
|
|
},
|
|
{
|
|
"time": 5689,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": "DATA",
|
|
"tcpFlags": "P",
|
|
"sequence": 7000072,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5910,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000080,
|
|
"acknowledgement": 7000076
|
|
},
|
|
{
|
|
"time": 5966,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": "354 End data with <CR><LF>.<CR><LF>",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000080,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5966,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000076,
|
|
"acknowledgement": 4000115
|
|
},
|
|
{
|
|
"time": 6021,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": "From: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 7000076,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6243,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000115,
|
|
"acknowledgement": 7000168
|
|
},
|
|
{
|
|
"time": 6298,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": "250 Mail queued for delivery",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000115,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6299,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000168,
|
|
"acknowledgement": 4000143
|
|
},
|
|
{
|
|
"time": 6354,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 7000168,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6522,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.31",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 6577,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000143,
|
|
"acknowledgement": 7000172
|
|
},
|
|
{
|
|
"time": 6966,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": "221 Server beendet Verbindung.",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000143,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6967,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000172,
|
|
"acknowledgement": 4000173
|
|
},
|
|
{
|
|
"time": 7022,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 9000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7022,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 7000172,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7077,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 6000000,
|
|
"acknowledgement": 9000001
|
|
},
|
|
{
|
|
"time": 7188,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 4000173,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7188,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000173,
|
|
"acknowledgement": 4000174
|
|
},
|
|
{
|
|
"time": 7243,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000174,
|
|
"acknowledgement": 7000173
|
|
},
|
|
{
|
|
"time": 7299,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000001,
|
|
"acknowledgement": 6000001
|
|
},
|
|
{
|
|
"time": 7350,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": "220 Willkommen bei filius.de",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7572,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000001,
|
|
"acknowledgement": 6000029
|
|
},
|
|
{
|
|
"time": 7627,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": "HELO 192.168.0.31",
|
|
"tcpFlags": "P",
|
|
"sequence": 9000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7627,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000029,
|
|
"acknowledgement": 9000018
|
|
},
|
|
{
|
|
"time": 7682,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": "250 Hello 192.168.0.31",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7904,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000018,
|
|
"acknowledgement": 6000051
|
|
},
|
|
{
|
|
"time": 7959,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": "MAIL FROM: <>",
|
|
"tcpFlags": "P",
|
|
"sequence": 9000018,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7959,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000051,
|
|
"acknowledgement": 9000031
|
|
},
|
|
{
|
|
"time": 8014,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": "250 Sender OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000051,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 8236,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000031,
|
|
"acknowledgement": 6000064
|
|
},
|
|
{
|
|
"time": 8291,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": "RCPT TO:<anna@filius.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 9000031,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 8291,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000064,
|
|
"acknowledgement": 9000055
|
|
},
|
|
{
|
|
"time": 8347,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": "250 Recipient OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000064,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 8568,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000055,
|
|
"acknowledgement": 6000080
|
|
},
|
|
{
|
|
"time": 8623,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": "DATA",
|
|
"tcpFlags": "P",
|
|
"sequence": 9000055,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 8623,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000080,
|
|
"acknowledgement": 9000059
|
|
},
|
|
{
|
|
"time": 8679,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": "354 End data with <CR><LF>.<CR><LF>",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000080,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 8900,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000059,
|
|
"acknowledgement": 6000115
|
|
},
|
|
{
|
|
"time": 8956,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": "From: <noreply@andere.de>\nTo: Anna Muster <anna@filius.de>\nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 9000059,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 8956,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000115,
|
|
"acknowledgement": 9000525
|
|
},
|
|
{
|
|
"time": 9011,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": "250 Mail queued for delivery",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000115,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9232,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000525,
|
|
"acknowledgement": 6000143
|
|
},
|
|
{
|
|
"time": 9288,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 9000525,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9288,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000143,
|
|
"acknowledgement": 9000529
|
|
},
|
|
{
|
|
"time": 9343,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": "221 Server beendet Verbindung.",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000143,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9565,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000529,
|
|
"acknowledgement": 6000173
|
|
},
|
|
{
|
|
"time": 9565,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 6000173,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9620,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 9000529,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9620,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000174,
|
|
"acknowledgement": 9000530
|
|
},
|
|
{
|
|
"time": 9786,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000530,
|
|
"acknowledgement": 6000174
|
|
},
|
|
{
|
|
"time": 12334,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 11000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 12335,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 10000000,
|
|
"acknowledgement": 11000001
|
|
},
|
|
{
|
|
"time": 12556,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 11000001,
|
|
"acknowledgement": 10000001
|
|
},
|
|
{
|
|
"time": 12575,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": "220 Willkommen bei filius.de",
|
|
"tcpFlags": "P",
|
|
"sequence": 10000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 12797,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 11000001,
|
|
"acknowledgement": 10000029
|
|
},
|
|
{
|
|
"time": 12852,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": "HELO 192.168.0.20",
|
|
"tcpFlags": "P",
|
|
"sequence": 11000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 12853,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 10000029,
|
|
"acknowledgement": 11000018
|
|
},
|
|
{
|
|
"time": 12908,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": "250 Hello 192.168.0.20",
|
|
"tcpFlags": "P",
|
|
"sequence": 10000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 13130,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 11000018,
|
|
"acknowledgement": 10000051
|
|
},
|
|
{
|
|
"time": 13185,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": "MAIL FROM: <anna@filius.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 11000018,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 13185,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 10000051,
|
|
"acknowledgement": 11000045
|
|
},
|
|
{
|
|
"time": 13241,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": "250 Sender OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 10000051,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 13462,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 11000045,
|
|
"acknowledgement": 10000064
|
|
},
|
|
{
|
|
"time": 13517,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": "RCPT TO:<jemand@nirgendwo.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 11000045,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 13517,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 10000064,
|
|
"acknowledgement": 11000074
|
|
},
|
|
{
|
|
"time": 13573,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": "250 Recipient OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 10000064,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 13794,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 11000074,
|
|
"acknowledgement": 10000080
|
|
},
|
|
{
|
|
"time": 13849,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": "DATA",
|
|
"tcpFlags": "P",
|
|
"sequence": 11000074,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 13850,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 10000080,
|
|
"acknowledgement": 11000078
|
|
},
|
|
{
|
|
"time": 13905,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": "354 End data with <CR><LF>.<CR><LF>",
|
|
"tcpFlags": "P",
|
|
"sequence": 10000080,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 14126,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 11000078,
|
|
"acknowledgement": 10000115
|
|
},
|
|
{
|
|
"time": 14181,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": "From: Anna Muster <anna@filius.de>\nTo: <jemand@nirgendwo.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 11000078,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 14182,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 10000115,
|
|
"acknowledgement": 11000172
|
|
},
|
|
{
|
|
"time": 14237,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": "250 Mail queued for delivery",
|
|
"tcpFlags": "P",
|
|
"sequence": 10000115,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 14458,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 11000172,
|
|
"acknowledgement": 10000143
|
|
},
|
|
{
|
|
"time": 14460,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:12",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 53558,
|
|
"destinationPort": 53,
|
|
"payload": "ID=35053 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnirgendwo.de. MX IN\n"
|
|
},
|
|
{
|
|
"time": 14514,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 11000172,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 14515,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 10000143,
|
|
"acknowledgement": 11000176
|
|
},
|
|
{
|
|
"time": 14571,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": "221 Server beendet Verbindung.",
|
|
"tcpFlags": "P",
|
|
"sequence": 10000143,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 14682,
|
|
"source": "02:00:00:00:02:12",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 53558,
|
|
"payload": "ID=35053 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
},
|
|
{
|
|
"time": 14792,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 11000176,
|
|
"acknowledgement": 10000173
|
|
},
|
|
{
|
|
"time": 14792,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 10000173,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 14847,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 11000176,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 14847,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 65366,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 10000174,
|
|
"acknowledgement": 11000177
|
|
},
|
|
{
|
|
"time": 15013,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 65366,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 11000177,
|
|
"acknowledgement": 10000174
|
|
},
|
|
{
|
|
"time": 25335,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 13000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 25335,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 1000000,
|
|
"acknowledgement": 13000001
|
|
},
|
|
{
|
|
"time": 25556,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000001,
|
|
"acknowledgement": 1000001
|
|
},
|
|
{
|
|
"time": 25639,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK POP3 server ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 25860,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000001,
|
|
"acknowledgement": 1000022
|
|
},
|
|
{
|
|
"time": 25916,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": "USER anna",
|
|
"tcpFlags": "P",
|
|
"sequence": 13000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 25916,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000022,
|
|
"acknowledgement": 13000010
|
|
},
|
|
{
|
|
"time": 25971,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK enter password",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000022,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 26193,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000010,
|
|
"acknowledgement": 1000040
|
|
},
|
|
{
|
|
"time": 26248,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": "PASS geheim",
|
|
"tcpFlags": "P",
|
|
"sequence": 13000010,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 26248,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000040,
|
|
"acknowledgement": 13000021
|
|
},
|
|
{
|
|
"time": 26304,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK Mailbox locked and ready",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000040,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 26525,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000021,
|
|
"acknowledgement": 1000068
|
|
},
|
|
{
|
|
"time": 26580,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": "STAT",
|
|
"tcpFlags": "P",
|
|
"sequence": 13000021,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 26581,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000068,
|
|
"acknowledgement": 13000025
|
|
},
|
|
{
|
|
"time": 26636,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK 4 1054",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000068,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 26857,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000025,
|
|
"acknowledgement": 1000078
|
|
},
|
|
{
|
|
"time": 26912,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": "LIST",
|
|
"tcpFlags": "P",
|
|
"sequence": 13000025,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 26912,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000078,
|
|
"acknowledgement": 13000029
|
|
},
|
|
{
|
|
"time": 26968,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK 4 1054\n0 80\n1 89\n2 441\n3 444\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000078,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 27189,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000029,
|
|
"acknowledgement": 1000111
|
|
},
|
|
{
|
|
"time": 27244,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": "RETR 0",
|
|
"tcpFlags": "P",
|
|
"sequence": 13000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 27244,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000111,
|
|
"acknowledgement": 13000035
|
|
},
|
|
{
|
|
"time": 27300,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000111,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 27521,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000035,
|
|
"acknowledgement": 1000233
|
|
},
|
|
{
|
|
"time": 27576,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": "DELE 0",
|
|
"tcpFlags": "P",
|
|
"sequence": 13000035,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 27577,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000233,
|
|
"acknowledgement": 13000041
|
|
},
|
|
{
|
|
"time": 27632,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK message marked for delete",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000233,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 27853,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000041,
|
|
"acknowledgement": 1000262
|
|
},
|
|
{
|
|
"time": 27908,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": "RETR 1",
|
|
"tcpFlags": "P",
|
|
"sequence": 13000041,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 27909,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000262,
|
|
"acknowledgement": 13000047
|
|
},
|
|
{
|
|
"time": 27964,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000262,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 28185,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000047,
|
|
"acknowledgement": 1000414
|
|
},
|
|
{
|
|
"time": 28241,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": "DELE 1",
|
|
"tcpFlags": "P",
|
|
"sequence": 13000047,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 28241,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000414,
|
|
"acknowledgement": 13000053
|
|
},
|
|
{
|
|
"time": 28296,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK message marked for delete",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000414,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 28518,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000053,
|
|
"acknowledgement": 1000443
|
|
},
|
|
{
|
|
"time": 28573,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": "RETR 2",
|
|
"tcpFlags": "P",
|
|
"sequence": 13000053,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 28573,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000443,
|
|
"acknowledgement": 13000059
|
|
},
|
|
{
|
|
"time": 28628,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK message follows \nFrom: <noreply@andere.de>\nTo: Anna Muster <anna@filius.de>\nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000443,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 28850,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000059,
|
|
"acknowledgement": 1000925
|
|
},
|
|
{
|
|
"time": 28905,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": "DELE 2",
|
|
"tcpFlags": "P",
|
|
"sequence": 13000059,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 28905,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000925,
|
|
"acknowledgement": 13000065
|
|
},
|
|
{
|
|
"time": 28960,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK message marked for delete",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000925,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 29182,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000065,
|
|
"acknowledgement": 1000954
|
|
},
|
|
{
|
|
"time": 29237,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": "RETR 3",
|
|
"tcpFlags": "P",
|
|
"sequence": 13000065,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 29237,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000954,
|
|
"acknowledgement": 13000071
|
|
},
|
|
{
|
|
"time": 29292,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK message follows \nFrom: <noreply@filius.de>\nTo: Anna Muster <anna@filius.de>\nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009jemand@nirgendwo.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Anna Muster <anna@filius.de>\nTo: <jemand@nirgendwo.de>\nSubject: Hallo?\n\nIst da wer?",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000954,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 29513,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000071,
|
|
"acknowledgement": 1001440
|
|
},
|
|
{
|
|
"time": 29569,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": "DELE 3",
|
|
"tcpFlags": "P",
|
|
"sequence": 13000071,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 29569,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1001440,
|
|
"acknowledgement": 13000077
|
|
},
|
|
{
|
|
"time": 29624,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK message marked for delete",
|
|
"tcpFlags": "P",
|
|
"sequence": 1001440,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 29846,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000077,
|
|
"acknowledgement": 1001469
|
|
},
|
|
{
|
|
"time": 29901,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 13000077,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 29901,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1001469,
|
|
"acknowledgement": 13000081
|
|
},
|
|
{
|
|
"time": 29957,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": "+OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 1001469,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 30178,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000081,
|
|
"acknowledgement": 1001472
|
|
},
|
|
{
|
|
"time": 30178,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 1001472,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 30233,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 13000081,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 30233,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:11",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 110,
|
|
"destinationPort": 56326,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1001473,
|
|
"acknowledgement": 13000082
|
|
},
|
|
{
|
|
"time": 30399,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 56326,
|
|
"destinationPort": 110,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 13000082,
|
|
"acknowledgement": 1001473
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000204": [
|
|
{
|
|
"time": 638,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 1106,
|
|
"source": "02:00:00:00:02:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.30"
|
|
},
|
|
{
|
|
"time": 3632,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 4076,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.30",
|
|
"targetIp": "192.168.0.31"
|
|
},
|
|
{
|
|
"time": 4076,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.31",
|
|
"targetIp": "192.168.0.30"
|
|
},
|
|
{
|
|
"time": 4298,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 7000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4298,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 4000000,
|
|
"acknowledgement": 7000001
|
|
},
|
|
{
|
|
"time": 4520,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000001,
|
|
"acknowledgement": 4000001
|
|
},
|
|
{
|
|
"time": 4525,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": "220 Willkommen bei andere.de",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4747,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000001,
|
|
"acknowledgement": 4000029
|
|
},
|
|
{
|
|
"time": 4802,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": "HELO 192.168.0.30",
|
|
"tcpFlags": "P",
|
|
"sequence": 7000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4802,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000029,
|
|
"acknowledgement": 7000018
|
|
},
|
|
{
|
|
"time": 4858,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": "250 Hello 192.168.0.30",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5079,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000018,
|
|
"acknowledgement": 4000051
|
|
},
|
|
{
|
|
"time": 5134,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": "MAIL FROM: <anna@filius.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 7000018,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5135,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000051,
|
|
"acknowledgement": 7000045
|
|
},
|
|
{
|
|
"time": 5190,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": "250 Sender OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000051,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5412,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000045,
|
|
"acknowledgement": 4000064
|
|
},
|
|
{
|
|
"time": 5467,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": "RCPT TO:<niemand@andere.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 7000045,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5467,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000064,
|
|
"acknowledgement": 7000072
|
|
},
|
|
{
|
|
"time": 5523,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": "250 Recipient OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000064,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5744,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000072,
|
|
"acknowledgement": 4000080
|
|
},
|
|
{
|
|
"time": 5799,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": "DATA",
|
|
"tcpFlags": "P",
|
|
"sequence": 7000072,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5800,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000080,
|
|
"acknowledgement": 7000076
|
|
},
|
|
{
|
|
"time": 5855,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": "354 End data with <CR><LF>.<CR><LF>",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000080,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6077,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000076,
|
|
"acknowledgement": 4000115
|
|
},
|
|
{
|
|
"time": 6132,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": "From: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 7000076,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6133,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000115,
|
|
"acknowledgement": 7000168
|
|
},
|
|
{
|
|
"time": 6188,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": "250 Mail queued for delivery",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000115,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6409,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000168,
|
|
"acknowledgement": 4000143
|
|
},
|
|
{
|
|
"time": 6411,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.31",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 6464,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 7000168,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6467,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000143,
|
|
"acknowledgement": 7000172
|
|
},
|
|
{
|
|
"time": 6633,
|
|
"source": "02:00:00:00:02:12",
|
|
"destination": "02:00:00:00:02:14",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.10",
|
|
"targetIp": "192.168.0.31"
|
|
},
|
|
{
|
|
"time": 6633,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:12",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 58459,
|
|
"destinationPort": 53,
|
|
"payload": "ID=47846 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
|
|
},
|
|
{
|
|
"time": 6855,
|
|
"source": "02:00:00:00:02:12",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 58459,
|
|
"payload": "ID=47846 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n"
|
|
},
|
|
{
|
|
"time": 6856,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": "221 Server beendet Verbindung.",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000143,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6911,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 9000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7077,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000172,
|
|
"acknowledgement": 4000173
|
|
},
|
|
{
|
|
"time": 7078,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 4000173,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7133,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 7000172,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7133,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 64673,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000174,
|
|
"acknowledgement": 7000173
|
|
},
|
|
{
|
|
"time": 7188,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 6000000,
|
|
"acknowledgement": 9000001
|
|
},
|
|
{
|
|
"time": 7188,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000001,
|
|
"acknowledgement": 6000001
|
|
},
|
|
{
|
|
"time": 7299,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 64673,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 7000173,
|
|
"acknowledgement": 4000174
|
|
},
|
|
{
|
|
"time": 7461,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": "220 Willkommen bei filius.de",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7461,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000001,
|
|
"acknowledgement": 6000029
|
|
},
|
|
{
|
|
"time": 7516,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": "HELO 192.168.0.31",
|
|
"tcpFlags": "P",
|
|
"sequence": 9000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7738,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000029,
|
|
"acknowledgement": 9000018
|
|
},
|
|
{
|
|
"time": 7793,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": "250 Hello 192.168.0.31",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000029,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7793,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000018,
|
|
"acknowledgement": 6000051
|
|
},
|
|
{
|
|
"time": 7848,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": "MAIL FROM: <>",
|
|
"tcpFlags": "P",
|
|
"sequence": 9000018,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 8070,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000051,
|
|
"acknowledgement": 9000031
|
|
},
|
|
{
|
|
"time": 8125,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": "250 Sender OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000051,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 8125,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000031,
|
|
"acknowledgement": 6000064
|
|
},
|
|
{
|
|
"time": 8180,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": "RCPT TO:<anna@filius.de>",
|
|
"tcpFlags": "P",
|
|
"sequence": 9000031,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 8402,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000064,
|
|
"acknowledgement": 9000055
|
|
},
|
|
{
|
|
"time": 8457,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": "250 Recipient OK",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000064,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 8457,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000055,
|
|
"acknowledgement": 6000080
|
|
},
|
|
{
|
|
"time": 8513,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": "DATA",
|
|
"tcpFlags": "P",
|
|
"sequence": 9000055,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 8734,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000080,
|
|
"acknowledgement": 9000059
|
|
},
|
|
{
|
|
"time": 8789,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": "354 End data with <CR><LF>.<CR><LF>",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000080,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 8790,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000059,
|
|
"acknowledgement": 6000115
|
|
},
|
|
{
|
|
"time": 8845,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": "From: <noreply@andere.de>\nTo: Anna Muster <anna@filius.de>\nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 9000059,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9066,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000115,
|
|
"acknowledgement": 9000525
|
|
},
|
|
{
|
|
"time": 9122,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": "250 Mail queued for delivery",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000115,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9122,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000525,
|
|
"acknowledgement": 6000143
|
|
},
|
|
{
|
|
"time": 9177,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": "QUIT",
|
|
"tcpFlags": "P",
|
|
"sequence": 9000525,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9399,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000143,
|
|
"acknowledgement": 9000529
|
|
},
|
|
{
|
|
"time": 9454,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": "221 Server beendet Verbindung.",
|
|
"tcpFlags": "P",
|
|
"sequence": 6000143,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9454,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000529,
|
|
"acknowledgement": 6000173
|
|
},
|
|
{
|
|
"time": 9509,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 9000529,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9676,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 6000173,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9676,
|
|
"source": "02:00:00:00:02:14",
|
|
"destination": "02:00:00:00:02:13",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.30",
|
|
"protocol": 6,
|
|
"sourcePort": 50936,
|
|
"destinationPort": 25,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 9000530,
|
|
"acknowledgement": 6000174
|
|
},
|
|
{
|
|
"time": 9731,
|
|
"source": "02:00:00:00:02:13",
|
|
"destination": "02:00:00:00:02:14",
|
|
"sourceIp": "192.168.0.30",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 25,
|
|
"destinationPort": 50936,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 6000174,
|
|
"acknowledgement": 9000530
|
|
}
|
|
]
|
|
},
|
|
"rows": {
|
|
"00000000-0000-0000-0000-000000000201": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20:52531",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20:52531",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=43842 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:52531",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:52531",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=43842 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 5.000.000"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000, ACK: 5.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 2.000.029"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.20"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.029, ACK: 5.000.018"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.029"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.20"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.018, ACK: 2.000.051"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.018"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.051, ACK: 5.000.045"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.051"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.045, ACK: 2.000.064"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.045"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<niemand@andere.de>"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.064, ACK: 5.000.072"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.064"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.072, ACK: 2.000.080"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.072"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.080, ACK: 5.000.076"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.080"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.076, ACK: 2.000.115"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.076"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.115, ACK: 5.000.168"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.115"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.168, ACK: 2.000.143"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.168"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.143, ACK: 5.000.172"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.143"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.172, ACK: 2.000.173"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 5.000.172"
|
|
],
|
|
[
|
|
"38",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.173"
|
|
],
|
|
[
|
|
"39",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.173, ACK: 2.000.174"
|
|
],
|
|
[
|
|
"40",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.174, ACK: 5.000.173"
|
|
],
|
|
[
|
|
"41",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"42",
|
|
"02:00:00:00:02:14",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.31",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"43",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20:57606",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20:57606",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=60054 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"44",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:57606",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:57606",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=60054 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"45",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 11.000.000"
|
|
],
|
|
[
|
|
"46",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 10.000.000, ACK: 11.000.001"
|
|
],
|
|
[
|
|
"47",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.001, ACK: 10.000.001"
|
|
],
|
|
[
|
|
"48",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.001"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
"49",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.001, ACK: 10.000.029"
|
|
],
|
|
[
|
|
"50",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.001"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.20"
|
|
],
|
|
[
|
|
"51",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.029, ACK: 11.000.018"
|
|
],
|
|
[
|
|
"52",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.029"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.20"
|
|
],
|
|
[
|
|
"53",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.018, ACK: 10.000.051"
|
|
],
|
|
[
|
|
"54",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.018"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
"55",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.051, ACK: 11.000.045"
|
|
],
|
|
[
|
|
"56",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.051"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"57",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.045, ACK: 10.000.064"
|
|
],
|
|
[
|
|
"58",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.045"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<jemand@nirgendwo.de>"
|
|
],
|
|
[
|
|
"59",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.064, ACK: 11.000.074"
|
|
],
|
|
[
|
|
"60",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.064"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"61",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.074, ACK: 10.000.080"
|
|
],
|
|
[
|
|
"62",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.074"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"63",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.080, ACK: 11.000.078"
|
|
],
|
|
[
|
|
"64",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.080"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"65",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.078, ACK: 10.000.115"
|
|
],
|
|
[
|
|
"66",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.078"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Anna Muster <anna@filius.de>\nTo: <jemand@nirgendwo.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"67",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.115, ACK: 11.000.172"
|
|
],
|
|
[
|
|
"68",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.115"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"69",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"69",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"69",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.172, ACK: 10.000.143"
|
|
],
|
|
[
|
|
"70",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.172"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"71",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"71",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"71",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.143, ACK: 11.000.176"
|
|
],
|
|
[
|
|
"72",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"72",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"72",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.143"
|
|
],
|
|
[
|
|
"72",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"73",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"73",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"73",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.176, ACK: 10.000.173"
|
|
],
|
|
[
|
|
"74",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"74",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"74",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 11.000.176"
|
|
],
|
|
[
|
|
"75",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"75",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"75",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 10.000.173"
|
|
],
|
|
[
|
|
"76",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"76",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"76",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.177, ACK: 10.000.174"
|
|
],
|
|
[
|
|
"77",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"77",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"77",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.174, ACK: 11.000.177"
|
|
],
|
|
[
|
|
"78",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"78",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"78",
|
|
"192.168.0.20:56276",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"78",
|
|
"192.168.0.20:56276",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=40953 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"79",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"79",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"79",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:56276",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"79",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:56276",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=40953 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"80",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"80",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"80",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 13.000.000"
|
|
],
|
|
[
|
|
"81",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"81",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"81",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 13.000.001"
|
|
],
|
|
[
|
|
"82",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"82",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"82",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"83",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"83",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"83",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"83",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"84",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"84",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"84",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.001, ACK: 1.000.022"
|
|
],
|
|
[
|
|
"85",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"85",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"85",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.001"
|
|
],
|
|
[
|
|
"85",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"86",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"86",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"86",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022, ACK: 13.000.010"
|
|
],
|
|
[
|
|
"87",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"87",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"87",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022"
|
|
],
|
|
[
|
|
"87",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"88",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"88",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"88",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.010, ACK: 1.000.040"
|
|
],
|
|
[
|
|
"89",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"89",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"89",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.010"
|
|
],
|
|
[
|
|
"89",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"90",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"90",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"90",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040, ACK: 13.000.021"
|
|
],
|
|
[
|
|
"91",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"91",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"91",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040"
|
|
],
|
|
[
|
|
"91",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"92",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"92",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"92",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.021, ACK: 1.000.068"
|
|
],
|
|
[
|
|
"93",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"93",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"93",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.021"
|
|
],
|
|
[
|
|
"93",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"",
|
|
"Anwendung",
|
|
"STAT"
|
|
],
|
|
[
|
|
"94",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"94",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"94",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068, ACK: 13.000.025"
|
|
],
|
|
[
|
|
"95",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"95",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"95",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068"
|
|
],
|
|
[
|
|
"95",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 4 1054"
|
|
],
|
|
[
|
|
"96",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"96",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"96",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.025, ACK: 1.000.078"
|
|
],
|
|
[
|
|
"97",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"97",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"97",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.025"
|
|
],
|
|
[
|
|
"97",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"",
|
|
"Anwendung",
|
|
"LIST"
|
|
],
|
|
[
|
|
"98",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"98",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"98",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.078, ACK: 13.000.029"
|
|
],
|
|
[
|
|
"99",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"99",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"99",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.078"
|
|
],
|
|
[
|
|
"99",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 4 1054\n0 80\n1 89\n2 441\n3 444\n"
|
|
],
|
|
[
|
|
"100",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"100",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"100",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.029, ACK: 1.000.111"
|
|
],
|
|
[
|
|
"101",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"101",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"101",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.029"
|
|
],
|
|
[
|
|
"101",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 0"
|
|
],
|
|
[
|
|
"102",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"102",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"102",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.111, ACK: 13.000.035"
|
|
],
|
|
[
|
|
"103",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"103",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"103",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.111"
|
|
],
|
|
[
|
|
"103",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile"
|
|
],
|
|
[
|
|
"104",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"104",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"104",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.035, ACK: 1.000.233"
|
|
],
|
|
[
|
|
"105",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"105",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"105",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.035"
|
|
],
|
|
[
|
|
"105",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 0"
|
|
],
|
|
[
|
|
"106",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"106",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"106",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.233, ACK: 13.000.041"
|
|
],
|
|
[
|
|
"107",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"107",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"107",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.233"
|
|
],
|
|
[
|
|
"107",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"108",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"108",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"108",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.041, ACK: 1.000.262"
|
|
],
|
|
[
|
|
"109",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"109",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"109",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.041"
|
|
],
|
|
[
|
|
"109",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 1"
|
|
],
|
|
[
|
|
"110",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"110",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"110",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.262, ACK: 13.000.047"
|
|
],
|
|
[
|
|
"111",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"111",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"111",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.262"
|
|
],
|
|
[
|
|
"111",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?"
|
|
],
|
|
[
|
|
"112",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"112",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"112",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.047, ACK: 1.000.414"
|
|
],
|
|
[
|
|
"113",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"113",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"113",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.047"
|
|
],
|
|
[
|
|
"113",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 1"
|
|
],
|
|
[
|
|
"114",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"114",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"114",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.414, ACK: 13.000.053"
|
|
],
|
|
[
|
|
"115",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"115",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"115",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.414"
|
|
],
|
|
[
|
|
"115",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"116",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"116",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"116",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.053, ACK: 1.000.443"
|
|
],
|
|
[
|
|
"117",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"117",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"117",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.053"
|
|
],
|
|
[
|
|
"117",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 2"
|
|
],
|
|
[
|
|
"118",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"118",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"118",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.443, ACK: 13.000.059"
|
|
],
|
|
[
|
|
"119",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"119",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"119",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.443"
|
|
],
|
|
[
|
|
"119",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: <noreply@andere.de>\nTo: Anna Muster <anna@filius.de>\nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?"
|
|
],
|
|
[
|
|
"120",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"120",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"120",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.059, ACK: 1.000.925"
|
|
],
|
|
[
|
|
"121",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"121",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"121",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.059"
|
|
],
|
|
[
|
|
"121",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 2"
|
|
],
|
|
[
|
|
"122",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"122",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"122",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.925, ACK: 13.000.065"
|
|
],
|
|
[
|
|
"123",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"123",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"123",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.925"
|
|
],
|
|
[
|
|
"123",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"124",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"124",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"124",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.065, ACK: 1.000.954"
|
|
],
|
|
[
|
|
"125",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"125",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"125",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.065"
|
|
],
|
|
[
|
|
"125",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 3"
|
|
],
|
|
[
|
|
"126",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"126",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"126",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.954, ACK: 13.000.071"
|
|
],
|
|
[
|
|
"127",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"127",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"127",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.954"
|
|
],
|
|
[
|
|
"127",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: <noreply@filius.de>\nTo: Anna Muster <anna@filius.de>\nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009jemand@nirgendwo.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Anna Muster <anna@filius.de>\nTo: <jemand@nirgendwo.de>\nSubject: Hallo?\n\nIst da wer?"
|
|
],
|
|
[
|
|
"128",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"128",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"128",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.071, ACK: 1.001.440"
|
|
],
|
|
[
|
|
"129",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"129",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"129",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.071"
|
|
],
|
|
[
|
|
"129",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 3"
|
|
],
|
|
[
|
|
"130",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"130",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"130",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.440, ACK: 13.000.077"
|
|
],
|
|
[
|
|
"131",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"131",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"131",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.440"
|
|
],
|
|
[
|
|
"131",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"132",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"132",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"132",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.077, ACK: 1.001.469"
|
|
],
|
|
[
|
|
"133",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"133",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"133",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.077"
|
|
],
|
|
[
|
|
"133",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"134",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"134",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"134",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.469, ACK: 13.000.081"
|
|
],
|
|
[
|
|
"135",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"135",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"135",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.469"
|
|
],
|
|
[
|
|
"135",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"136",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"136",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"136",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.081, ACK: 1.001.472"
|
|
],
|
|
[
|
|
"137",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"137",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"137",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 13.000.081"
|
|
],
|
|
[
|
|
"138",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"138",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"138",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.001.472"
|
|
],
|
|
[
|
|
"139",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"139",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"139",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.082, ACK: 1.001.473"
|
|
],
|
|
[
|
|
"140",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"140",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"140",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.473, ACK: 13.000.082"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000202": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20:52531",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20:52531",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=43842 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:52531",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:52531",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=43842 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.10",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:13|192.168.0.30]"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.30:62746",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.30:62746",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=3243 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.10",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.10:53",
|
|
"192.168.0.30:62746",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.10:53",
|
|
"192.168.0.30:62746",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=3243 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:14",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.31",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.10",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:14|192.168.0.31]"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.31",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.31:58459",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.31:58459",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=47846 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.10",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.10:53",
|
|
"192.168.0.31:58459",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.10:53",
|
|
"192.168.0.31:58459",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=47846 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20:57606",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20:57606",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=60054 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:57606",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:57606",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=60054 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30:53558",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30:53558",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=35053 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnirgendwo.de. MX IN\n"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.10",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.10:53",
|
|
"192.168.0.30:53558",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.10:53",
|
|
"192.168.0.30:53558",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=35053 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20:56276",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20:56276",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=40953 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:56276",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:56276",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=40953 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000203": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 5.000.000"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000, ACK: 5.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 2.000.029"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.20"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.029, ACK: 5.000.018"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.029"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.20"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.018, ACK: 2.000.051"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.018"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.051, ACK: 5.000.045"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.051"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.045, ACK: 2.000.064"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.045"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<niemand@andere.de>"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.064, ACK: 5.000.072"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.064"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.072, ACK: 2.000.080"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.072"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.080, ACK: 5.000.076"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.080"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.076, ACK: 2.000.115"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.076"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.115, ACK: 5.000.168"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.115"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.168, ACK: 2.000.143"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.168"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.143, ACK: 5.000.172"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.143"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.10",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:13|192.168.0.30]"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30:62746",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30:62746",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=3243 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.172, ACK: 2.000.173"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.173"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 5.000.172"
|
|
],
|
|
[
|
|
"38",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.174, ACK: 5.000.173"
|
|
],
|
|
[
|
|
"39",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.10",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.10:53",
|
|
"192.168.0.30:62746",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.10:53",
|
|
"192.168.0.30:62746",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=3243 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n"
|
|
],
|
|
[
|
|
"40",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"41",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.20:62333",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.173, ACK: 2.000.174"
|
|
],
|
|
[
|
|
"42",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:14 [op=REPLY, sender=02:00:00:00:02:14|192.168.0.31, target=02:00:00:00:02:13|192.168.0.30]"
|
|
],
|
|
[
|
|
"43",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 7.000.000"
|
|
],
|
|
[
|
|
"44",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000, ACK: 7.000.001"
|
|
],
|
|
[
|
|
"45",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.001, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"46",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei andere.de"
|
|
],
|
|
[
|
|
"47",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.001, ACK: 4.000.029"
|
|
],
|
|
[
|
|
"48",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.001"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.30"
|
|
],
|
|
[
|
|
"49",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.029, ACK: 7.000.018"
|
|
],
|
|
[
|
|
"50",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.029"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.30"
|
|
],
|
|
[
|
|
"51",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.018, ACK: 4.000.051"
|
|
],
|
|
[
|
|
"52",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.018"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
"53",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.051, ACK: 7.000.045"
|
|
],
|
|
[
|
|
"54",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.051"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"55",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.045, ACK: 4.000.064"
|
|
],
|
|
[
|
|
"56",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.045"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<niemand@andere.de>"
|
|
],
|
|
[
|
|
"57",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.064, ACK: 7.000.072"
|
|
],
|
|
[
|
|
"58",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.064"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"59",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.072, ACK: 4.000.080"
|
|
],
|
|
[
|
|
"60",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.072"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"61",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.080, ACK: 7.000.076"
|
|
],
|
|
[
|
|
"62",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.080"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"63",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.076, ACK: 4.000.115"
|
|
],
|
|
[
|
|
"64",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.076"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"65",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.115, ACK: 7.000.168"
|
|
],
|
|
[
|
|
"66",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.115"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"67",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.168, ACK: 4.000.143"
|
|
],
|
|
[
|
|
"68",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.168"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"69",
|
|
"02:00:00:00:02:14",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"69",
|
|
"192.168.0.31",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"70",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.143, ACK: 7.000.172"
|
|
],
|
|
[
|
|
"71",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"71",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"71",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.143"
|
|
],
|
|
[
|
|
"71",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"72",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"72",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"72",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.172, ACK: 4.000.173"
|
|
],
|
|
[
|
|
"73",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"73",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"73",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 9.000.000"
|
|
],
|
|
[
|
|
"74",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"74",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"74",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 7.000.172"
|
|
],
|
|
[
|
|
"75",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"75",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"75",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 6.000.000, ACK: 9.000.001"
|
|
],
|
|
[
|
|
"76",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"76",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"76",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.173"
|
|
],
|
|
[
|
|
"77",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"77",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"77",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.173, ACK: 4.000.174"
|
|
],
|
|
[
|
|
"78",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"78",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"78",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.174, ACK: 7.000.173"
|
|
],
|
|
[
|
|
"79",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"79",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"79",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.001, ACK: 6.000.001"
|
|
],
|
|
[
|
|
"80",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"80",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"80",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.001"
|
|
],
|
|
[
|
|
"80",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
"81",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"81",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"81",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.001, ACK: 6.000.029"
|
|
],
|
|
[
|
|
"82",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"82",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"82",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.001"
|
|
],
|
|
[
|
|
"82",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.31"
|
|
],
|
|
[
|
|
"83",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"83",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"83",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.029, ACK: 9.000.018"
|
|
],
|
|
[
|
|
"84",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"84",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"84",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.029"
|
|
],
|
|
[
|
|
"84",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.31"
|
|
],
|
|
[
|
|
"85",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"85",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"85",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.018, ACK: 6.000.051"
|
|
],
|
|
[
|
|
"86",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"86",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"86",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.018"
|
|
],
|
|
[
|
|
"86",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <>"
|
|
],
|
|
[
|
|
"87",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"87",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"87",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.051, ACK: 9.000.031"
|
|
],
|
|
[
|
|
"88",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"88",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"88",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.051"
|
|
],
|
|
[
|
|
"88",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"89",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"89",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"89",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.031, ACK: 6.000.064"
|
|
],
|
|
[
|
|
"90",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"90",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"90",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.031"
|
|
],
|
|
[
|
|
"90",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<anna@filius.de>"
|
|
],
|
|
[
|
|
"91",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"91",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"91",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.064, ACK: 9.000.055"
|
|
],
|
|
[
|
|
"92",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"92",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"92",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.064"
|
|
],
|
|
[
|
|
"92",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"93",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"93",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"93",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.055, ACK: 6.000.080"
|
|
],
|
|
[
|
|
"94",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"94",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"94",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.055"
|
|
],
|
|
[
|
|
"94",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"95",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"95",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"95",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.080, ACK: 9.000.059"
|
|
],
|
|
[
|
|
"96",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"96",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"96",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.080"
|
|
],
|
|
[
|
|
"96",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"97",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"97",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"97",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.059, ACK: 6.000.115"
|
|
],
|
|
[
|
|
"98",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"98",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"98",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.059"
|
|
],
|
|
[
|
|
"98",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: <noreply@andere.de>\nTo: Anna Muster <anna@filius.de>\nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"99",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"99",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"99",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.115, ACK: 9.000.525"
|
|
],
|
|
[
|
|
"100",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"100",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"100",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.115"
|
|
],
|
|
[
|
|
"100",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"101",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"101",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"101",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.525, ACK: 6.000.143"
|
|
],
|
|
[
|
|
"102",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"102",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"102",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.525"
|
|
],
|
|
[
|
|
"102",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"103",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"103",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"103",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.143, ACK: 9.000.529"
|
|
],
|
|
[
|
|
"104",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"104",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"104",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.143"
|
|
],
|
|
[
|
|
"104",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"105",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"105",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"105",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.529, ACK: 6.000.173"
|
|
],
|
|
[
|
|
"106",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"106",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"106",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 6.000.173"
|
|
],
|
|
[
|
|
"107",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"107",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"107",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 9.000.529"
|
|
],
|
|
[
|
|
"108",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"108",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"108",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.174, ACK: 9.000.530"
|
|
],
|
|
[
|
|
"109",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"109",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"109",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.530, ACK: 6.000.174"
|
|
],
|
|
[
|
|
"110",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"110",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"110",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 11.000.000"
|
|
],
|
|
[
|
|
"111",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"111",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"111",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 10.000.000, ACK: 11.000.001"
|
|
],
|
|
[
|
|
"112",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"112",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"112",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.001, ACK: 10.000.001"
|
|
],
|
|
[
|
|
"113",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"113",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"113",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.001"
|
|
],
|
|
[
|
|
"113",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
"114",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"114",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"114",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.001, ACK: 10.000.029"
|
|
],
|
|
[
|
|
"115",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"115",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"115",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.001"
|
|
],
|
|
[
|
|
"115",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.20"
|
|
],
|
|
[
|
|
"116",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"116",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"116",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.029, ACK: 11.000.018"
|
|
],
|
|
[
|
|
"117",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"117",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"117",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.029"
|
|
],
|
|
[
|
|
"117",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.20"
|
|
],
|
|
[
|
|
"118",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"118",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"118",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.018, ACK: 10.000.051"
|
|
],
|
|
[
|
|
"119",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"119",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"119",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.018"
|
|
],
|
|
[
|
|
"119",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
"120",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"120",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"120",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.051, ACK: 11.000.045"
|
|
],
|
|
[
|
|
"121",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"121",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"121",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.051"
|
|
],
|
|
[
|
|
"121",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"122",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"122",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"122",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.045, ACK: 10.000.064"
|
|
],
|
|
[
|
|
"123",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"123",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"123",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.045"
|
|
],
|
|
[
|
|
"123",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<jemand@nirgendwo.de>"
|
|
],
|
|
[
|
|
"124",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"124",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"124",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.064, ACK: 11.000.074"
|
|
],
|
|
[
|
|
"125",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"125",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"125",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.064"
|
|
],
|
|
[
|
|
"125",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"126",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"126",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"126",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.074, ACK: 10.000.080"
|
|
],
|
|
[
|
|
"127",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"127",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"127",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.074"
|
|
],
|
|
[
|
|
"127",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"128",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"128",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"128",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.080, ACK: 11.000.078"
|
|
],
|
|
[
|
|
"129",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"129",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"129",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.080"
|
|
],
|
|
[
|
|
"129",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"130",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"130",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"130",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.078, ACK: 10.000.115"
|
|
],
|
|
[
|
|
"131",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"131",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"131",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.078"
|
|
],
|
|
[
|
|
"131",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Anna Muster <anna@filius.de>\nTo: <jemand@nirgendwo.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"132",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"132",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"132",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.115, ACK: 11.000.172"
|
|
],
|
|
[
|
|
"133",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"133",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"133",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.115"
|
|
],
|
|
[
|
|
"133",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"134",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"134",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"134",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.172, ACK: 10.000.143"
|
|
],
|
|
[
|
|
"135",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"135",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"135",
|
|
"192.168.0.30:53558",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"135",
|
|
"192.168.0.30:53558",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=35053 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnirgendwo.de. MX IN\n"
|
|
],
|
|
[
|
|
"136",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"136",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"136",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.172"
|
|
],
|
|
[
|
|
"136",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"137",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"137",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"137",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.143, ACK: 11.000.176"
|
|
],
|
|
[
|
|
"138",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"138",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"138",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.143"
|
|
],
|
|
[
|
|
"138",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"139",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"139",
|
|
"192.168.0.10",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"139",
|
|
"192.168.0.10:53",
|
|
"192.168.0.30:53558",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"139",
|
|
"192.168.0.10:53",
|
|
"192.168.0.30:53558",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=35053 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
],
|
|
[
|
|
"140",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"140",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"140",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.176, ACK: 10.000.173"
|
|
],
|
|
[
|
|
"141",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"141",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"141",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 10.000.173"
|
|
],
|
|
[
|
|
"142",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"142",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"142",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 11.000.176"
|
|
],
|
|
[
|
|
"143",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"143",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"143",
|
|
"192.168.0.30:25",
|
|
"192.168.0.20:65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.174, ACK: 11.000.177"
|
|
],
|
|
[
|
|
"144",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"144",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"144",
|
|
"192.168.0.20:65366",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.177, ACK: 10.000.174"
|
|
],
|
|
[
|
|
"145",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"145",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"145",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 13.000.000"
|
|
],
|
|
[
|
|
"146",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"146",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"146",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 13.000.001"
|
|
],
|
|
[
|
|
"147",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"147",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"147",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"148",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"148",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"148",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"148",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"149",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"149",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"149",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.001, ACK: 1.000.022"
|
|
],
|
|
[
|
|
"150",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"150",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"150",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.001"
|
|
],
|
|
[
|
|
"150",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"151",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"151",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"151",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022, ACK: 13.000.010"
|
|
],
|
|
[
|
|
"152",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"152",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"152",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022"
|
|
],
|
|
[
|
|
"152",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"153",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"153",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"153",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.010, ACK: 1.000.040"
|
|
],
|
|
[
|
|
"154",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"154",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"154",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.010"
|
|
],
|
|
[
|
|
"154",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"155",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"155",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"155",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040, ACK: 13.000.021"
|
|
],
|
|
[
|
|
"156",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"156",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"156",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040"
|
|
],
|
|
[
|
|
"156",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"157",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"157",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"157",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.021, ACK: 1.000.068"
|
|
],
|
|
[
|
|
"158",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"158",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"158",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.021"
|
|
],
|
|
[
|
|
"158",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"",
|
|
"Anwendung",
|
|
"STAT"
|
|
],
|
|
[
|
|
"159",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"159",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"159",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068, ACK: 13.000.025"
|
|
],
|
|
[
|
|
"160",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"160",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"160",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068"
|
|
],
|
|
[
|
|
"160",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 4 1054"
|
|
],
|
|
[
|
|
"161",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"161",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"161",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.025, ACK: 1.000.078"
|
|
],
|
|
[
|
|
"162",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"162",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"162",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.025"
|
|
],
|
|
[
|
|
"162",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"",
|
|
"Anwendung",
|
|
"LIST"
|
|
],
|
|
[
|
|
"163",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"163",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"163",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.078, ACK: 13.000.029"
|
|
],
|
|
[
|
|
"164",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"164",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"164",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.078"
|
|
],
|
|
[
|
|
"164",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 4 1054\n0 80\n1 89\n2 441\n3 444\n"
|
|
],
|
|
[
|
|
"165",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"165",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"165",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.029, ACK: 1.000.111"
|
|
],
|
|
[
|
|
"166",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"166",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"166",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.029"
|
|
],
|
|
[
|
|
"166",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 0"
|
|
],
|
|
[
|
|
"167",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"167",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"167",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.111, ACK: 13.000.035"
|
|
],
|
|
[
|
|
"168",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"168",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"168",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.111"
|
|
],
|
|
[
|
|
"168",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile"
|
|
],
|
|
[
|
|
"169",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"169",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"169",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.035, ACK: 1.000.233"
|
|
],
|
|
[
|
|
"170",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"170",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"170",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.035"
|
|
],
|
|
[
|
|
"170",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 0"
|
|
],
|
|
[
|
|
"171",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"171",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"171",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.233, ACK: 13.000.041"
|
|
],
|
|
[
|
|
"172",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"172",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"172",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.233"
|
|
],
|
|
[
|
|
"172",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"173",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"173",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"173",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.041, ACK: 1.000.262"
|
|
],
|
|
[
|
|
"174",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"174",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"174",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.041"
|
|
],
|
|
[
|
|
"174",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 1"
|
|
],
|
|
[
|
|
"175",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"175",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"175",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.262, ACK: 13.000.047"
|
|
],
|
|
[
|
|
"176",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"176",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"176",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.262"
|
|
],
|
|
[
|
|
"176",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?"
|
|
],
|
|
[
|
|
"177",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"177",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"177",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.047, ACK: 1.000.414"
|
|
],
|
|
[
|
|
"178",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"178",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"178",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.047"
|
|
],
|
|
[
|
|
"178",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 1"
|
|
],
|
|
[
|
|
"179",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"179",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"179",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.414, ACK: 13.000.053"
|
|
],
|
|
[
|
|
"180",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"180",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"180",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.414"
|
|
],
|
|
[
|
|
"180",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"181",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"181",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"181",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.053, ACK: 1.000.443"
|
|
],
|
|
[
|
|
"182",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"182",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"182",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.053"
|
|
],
|
|
[
|
|
"182",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 2"
|
|
],
|
|
[
|
|
"183",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"183",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"183",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.443, ACK: 13.000.059"
|
|
],
|
|
[
|
|
"184",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"184",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"184",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.443"
|
|
],
|
|
[
|
|
"184",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: <noreply@andere.de>\nTo: Anna Muster <anna@filius.de>\nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?"
|
|
],
|
|
[
|
|
"185",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"185",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"185",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.059, ACK: 1.000.925"
|
|
],
|
|
[
|
|
"186",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"186",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"186",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.059"
|
|
],
|
|
[
|
|
"186",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 2"
|
|
],
|
|
[
|
|
"187",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"187",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"187",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.925, ACK: 13.000.065"
|
|
],
|
|
[
|
|
"188",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"188",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"188",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.925"
|
|
],
|
|
[
|
|
"188",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"189",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"189",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"189",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.065, ACK: 1.000.954"
|
|
],
|
|
[
|
|
"190",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"190",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"190",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.065"
|
|
],
|
|
[
|
|
"190",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 3"
|
|
],
|
|
[
|
|
"191",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"191",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"191",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.954, ACK: 13.000.071"
|
|
],
|
|
[
|
|
"192",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"192",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"192",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.954"
|
|
],
|
|
[
|
|
"192",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: <noreply@filius.de>\nTo: Anna Muster <anna@filius.de>\nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009jemand@nirgendwo.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Anna Muster <anna@filius.de>\nTo: <jemand@nirgendwo.de>\nSubject: Hallo?\n\nIst da wer?"
|
|
],
|
|
[
|
|
"193",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"193",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"193",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.071, ACK: 1.001.440"
|
|
],
|
|
[
|
|
"194",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"194",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"194",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.071"
|
|
],
|
|
[
|
|
"194",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 3"
|
|
],
|
|
[
|
|
"195",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"195",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"195",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.440, ACK: 13.000.077"
|
|
],
|
|
[
|
|
"196",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"196",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"196",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.440"
|
|
],
|
|
[
|
|
"196",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"197",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"197",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"197",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.077, ACK: 1.001.469"
|
|
],
|
|
[
|
|
"198",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"198",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"198",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.077"
|
|
],
|
|
[
|
|
"198",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"199",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"199",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"199",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.469, ACK: 13.000.081"
|
|
],
|
|
[
|
|
"200",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"200",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"200",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.469"
|
|
],
|
|
[
|
|
"200",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"201",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"201",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"201",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.081, ACK: 1.001.472"
|
|
],
|
|
[
|
|
"202",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"202",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"202",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.001.472"
|
|
],
|
|
[
|
|
"203",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"203",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"203",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 13.000.081"
|
|
],
|
|
[
|
|
"204",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"204",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"204",
|
|
"192.168.0.30:110",
|
|
"192.168.0.20:56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.473, ACK: 13.000.082"
|
|
],
|
|
[
|
|
"205",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"205",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"205",
|
|
"192.168.0.20:56326",
|
|
"192.168.0.30:110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.082, ACK: 1.001.473"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000204": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:14 [op=REPLY, sender=02:00:00:00:02:14|192.168.0.31, target=02:00:00:00:02:13|192.168.0.30]"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 7.000.000"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000, ACK: 7.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.001, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei andere.de"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.001, ACK: 4.000.029"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.001"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.30"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.029, ACK: 7.000.018"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.029"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.30"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.018, ACK: 4.000.051"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.018"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.051, ACK: 7.000.045"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.051"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.045, ACK: 4.000.064"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.045"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<niemand@andere.de>"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.064, ACK: 7.000.072"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.064"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.072, ACK: 4.000.080"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.072"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.080, ACK: 7.000.076"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.080"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.076, ACK: 4.000.115"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.076"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.115, ACK: 7.000.168"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.115"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.168, ACK: 4.000.143"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:14",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.31",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.168"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.143, ACK: 7.000.172"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.10",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:14|192.168.0.31]"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.31",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.31:58459",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.31:58459",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=47846 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.10",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.10:53",
|
|
"192.168.0.31:58459",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.10:53",
|
|
"192.168.0.31:58459",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=47846 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.143"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"38",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 9.000.000"
|
|
],
|
|
[
|
|
"39",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.172, ACK: 4.000.173"
|
|
],
|
|
[
|
|
"40",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.173"
|
|
],
|
|
[
|
|
"41",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 7.000.172"
|
|
],
|
|
[
|
|
"42",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.31:25",
|
|
"192.168.0.30:64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.174, ACK: 7.000.173"
|
|
],
|
|
[
|
|
"43",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 6.000.000, ACK: 9.000.001"
|
|
],
|
|
[
|
|
"44",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.001, ACK: 6.000.001"
|
|
],
|
|
[
|
|
"45",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.30:64673",
|
|
"192.168.0.31:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.173, ACK: 4.000.174"
|
|
],
|
|
[
|
|
"46",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.001"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
"47",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.001, ACK: 6.000.029"
|
|
],
|
|
[
|
|
"48",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.001"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.31"
|
|
],
|
|
[
|
|
"49",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.029, ACK: 9.000.018"
|
|
],
|
|
[
|
|
"50",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.029"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.31"
|
|
],
|
|
[
|
|
"51",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.018, ACK: 6.000.051"
|
|
],
|
|
[
|
|
"52",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.018"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <>"
|
|
],
|
|
[
|
|
"53",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.051, ACK: 9.000.031"
|
|
],
|
|
[
|
|
"54",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.051"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"55",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.031, ACK: 6.000.064"
|
|
],
|
|
[
|
|
"56",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.031"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<anna@filius.de>"
|
|
],
|
|
[
|
|
"57",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.064, ACK: 9.000.055"
|
|
],
|
|
[
|
|
"58",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.064"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"59",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.055, ACK: 6.000.080"
|
|
],
|
|
[
|
|
"60",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.055"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"61",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.080, ACK: 9.000.059"
|
|
],
|
|
[
|
|
"62",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.080"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"63",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.059, ACK: 6.000.115"
|
|
],
|
|
[
|
|
"64",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.059"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: <noreply@andere.de>\nTo: Anna Muster <anna@filius.de>\nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"65",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.115, ACK: 9.000.525"
|
|
],
|
|
[
|
|
"66",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.115"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"67",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.525, ACK: 6.000.143"
|
|
],
|
|
[
|
|
"68",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.525"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"69",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"69",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"69",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.143, ACK: 9.000.529"
|
|
],
|
|
[
|
|
"70",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.143"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"71",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"71",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"71",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.529, ACK: 6.000.173"
|
|
],
|
|
[
|
|
"72",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"72",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"72",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 9.000.529"
|
|
],
|
|
[
|
|
"73",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"73",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"73",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 6.000.173"
|
|
],
|
|
[
|
|
"74",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"74",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"74",
|
|
"192.168.0.31:50936",
|
|
"192.168.0.30:25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.530, ACK: 6.000.174"
|
|
],
|
|
[
|
|
"75",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"75",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"75",
|
|
"192.168.0.30:25",
|
|
"192.168.0.31:50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.174, ACK: 9.000.530"
|
|
]
|
|
]
|
|
},
|
|
"layeredRows": {
|
|
"00000000-0000-0000-0000-000000000201": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"52531",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"3",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=43842 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"53",
|
|
"52531",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"4",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=43842 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 5.000.000"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000, ACK: 5.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"10",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 2.000.029"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001"
|
|
],
|
|
[
|
|
"12",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.20"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.029, ACK: 5.000.018"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.029"
|
|
],
|
|
[
|
|
"14",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.20"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.018, ACK: 2.000.051"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.018"
|
|
],
|
|
[
|
|
"16",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.051, ACK: 5.000.045"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.051"
|
|
],
|
|
[
|
|
"18",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.045, ACK: 2.000.064"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.045"
|
|
],
|
|
[
|
|
"20",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<niemand@andere.de>"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.064, ACK: 5.000.072"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.064"
|
|
],
|
|
[
|
|
"22",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.072, ACK: 2.000.080"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.072"
|
|
],
|
|
[
|
|
"24",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.080, ACK: 5.000.076"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.080"
|
|
],
|
|
[
|
|
"26",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.076, ACK: 2.000.115"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.076"
|
|
],
|
|
[
|
|
"28",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.115, ACK: 5.000.168"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.115"
|
|
],
|
|
[
|
|
"30",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.168, ACK: 2.000.143"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.168"
|
|
],
|
|
[
|
|
"32",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.143, ACK: 5.000.172"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.143"
|
|
],
|
|
[
|
|
"35",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.172, ACK: 2.000.173"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 5.000.172"
|
|
],
|
|
[
|
|
"38",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"38",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.173"
|
|
],
|
|
[
|
|
"39",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"39",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.173, ACK: 2.000.174"
|
|
],
|
|
[
|
|
"40",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"40",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.174, ACK: 5.000.173"
|
|
],
|
|
[
|
|
"41",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"42",
|
|
"02:00:00:00:02:14",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.31",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"43",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"43",
|
|
"57606",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"43",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=60054 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"44",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"44",
|
|
"53",
|
|
"57606",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"44",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=60054 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"45",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"45",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 11.000.000"
|
|
],
|
|
[
|
|
"46",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"46",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 10.000.000, ACK: 11.000.001"
|
|
],
|
|
[
|
|
"47",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"47",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.001, ACK: 10.000.001"
|
|
],
|
|
[
|
|
"48",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"48",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.001"
|
|
],
|
|
[
|
|
"48",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
"49",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"49",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.001, ACK: 10.000.029"
|
|
],
|
|
[
|
|
"50",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"50",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.001"
|
|
],
|
|
[
|
|
"50",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.20"
|
|
],
|
|
[
|
|
"51",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"51",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.029, ACK: 11.000.018"
|
|
],
|
|
[
|
|
"52",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"52",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.029"
|
|
],
|
|
[
|
|
"52",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.20"
|
|
],
|
|
[
|
|
"53",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"53",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.018, ACK: 10.000.051"
|
|
],
|
|
[
|
|
"54",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"54",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.018"
|
|
],
|
|
[
|
|
"54",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
"55",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"55",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.051, ACK: 11.000.045"
|
|
],
|
|
[
|
|
"56",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"56",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.051"
|
|
],
|
|
[
|
|
"56",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"57",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"57",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.045, ACK: 10.000.064"
|
|
],
|
|
[
|
|
"58",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"58",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.045"
|
|
],
|
|
[
|
|
"58",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<jemand@nirgendwo.de>"
|
|
],
|
|
[
|
|
"59",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"59",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.064, ACK: 11.000.074"
|
|
],
|
|
[
|
|
"60",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"60",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.064"
|
|
],
|
|
[
|
|
"60",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"61",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"61",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.074, ACK: 10.000.080"
|
|
],
|
|
[
|
|
"62",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"62",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.074"
|
|
],
|
|
[
|
|
"62",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"63",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"63",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.080, ACK: 11.000.078"
|
|
],
|
|
[
|
|
"64",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"64",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.080"
|
|
],
|
|
[
|
|
"64",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"65",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"65",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.078, ACK: 10.000.115"
|
|
],
|
|
[
|
|
"66",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"66",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.078"
|
|
],
|
|
[
|
|
"66",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Anna Muster <anna@filius.de>\nTo: <jemand@nirgendwo.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"67",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"67",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.115, ACK: 11.000.172"
|
|
],
|
|
[
|
|
"68",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"68",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.115"
|
|
],
|
|
[
|
|
"68",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"69",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"69",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"69",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.172, ACK: 10.000.143"
|
|
],
|
|
[
|
|
"70",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"70",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.172"
|
|
],
|
|
[
|
|
"70",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"71",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"71",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"71",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.143, ACK: 11.000.176"
|
|
],
|
|
[
|
|
"72",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"72",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"72",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.143"
|
|
],
|
|
[
|
|
"72",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"73",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"73",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"73",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.176, ACK: 10.000.173"
|
|
],
|
|
[
|
|
"74",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"74",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"74",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 11.000.176"
|
|
],
|
|
[
|
|
"75",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"75",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"75",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 10.000.173"
|
|
],
|
|
[
|
|
"76",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"76",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"76",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.177, ACK: 10.000.174"
|
|
],
|
|
[
|
|
"77",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"77",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"77",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.174, ACK: 11.000.177"
|
|
],
|
|
[
|
|
"78",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"78",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"78",
|
|
"56276",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"78",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=40953 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"79",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"79",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"79",
|
|
"53",
|
|
"56276",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"79",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=40953 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"80",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"80",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"80",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 13.000.000"
|
|
],
|
|
[
|
|
"81",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"81",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"81",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 13.000.001"
|
|
],
|
|
[
|
|
"82",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"82",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"82",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"83",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"83",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"83",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"83",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"84",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"84",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"84",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.001, ACK: 1.000.022"
|
|
],
|
|
[
|
|
"85",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"85",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"85",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.001"
|
|
],
|
|
[
|
|
"85",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"86",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"86",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"86",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022, ACK: 13.000.010"
|
|
],
|
|
[
|
|
"87",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"87",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"87",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022"
|
|
],
|
|
[
|
|
"87",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"88",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"88",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"88",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.010, ACK: 1.000.040"
|
|
],
|
|
[
|
|
"89",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"89",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"89",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.010"
|
|
],
|
|
[
|
|
"89",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"90",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"90",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"90",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040, ACK: 13.000.021"
|
|
],
|
|
[
|
|
"91",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"91",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"91",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040"
|
|
],
|
|
[
|
|
"91",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"92",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"92",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"92",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.021, ACK: 1.000.068"
|
|
],
|
|
[
|
|
"93",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"93",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"93",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.021"
|
|
],
|
|
[
|
|
"93",
|
|
null,
|
|
null,
|
|
"",
|
|
"Anwendung",
|
|
"STAT"
|
|
],
|
|
[
|
|
"94",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"94",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"94",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068, ACK: 13.000.025"
|
|
],
|
|
[
|
|
"95",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"95",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"95",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068"
|
|
],
|
|
[
|
|
"95",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 4 1054"
|
|
],
|
|
[
|
|
"96",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"96",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"96",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.025, ACK: 1.000.078"
|
|
],
|
|
[
|
|
"97",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"97",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"97",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.025"
|
|
],
|
|
[
|
|
"97",
|
|
null,
|
|
null,
|
|
"",
|
|
"Anwendung",
|
|
"LIST"
|
|
],
|
|
[
|
|
"98",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"98",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"98",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.078, ACK: 13.000.029"
|
|
],
|
|
[
|
|
"99",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"99",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"99",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.078"
|
|
],
|
|
[
|
|
"99",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 4 1054\n0 80\n1 89\n2 441\n3 444\n"
|
|
],
|
|
[
|
|
"100",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"100",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"100",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.029, ACK: 1.000.111"
|
|
],
|
|
[
|
|
"101",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"101",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"101",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.029"
|
|
],
|
|
[
|
|
"101",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 0"
|
|
],
|
|
[
|
|
"102",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"102",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"102",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.111, ACK: 13.000.035"
|
|
],
|
|
[
|
|
"103",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"103",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"103",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.111"
|
|
],
|
|
[
|
|
"103",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile"
|
|
],
|
|
[
|
|
"104",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"104",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"104",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.035, ACK: 1.000.233"
|
|
],
|
|
[
|
|
"105",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"105",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"105",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.035"
|
|
],
|
|
[
|
|
"105",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 0"
|
|
],
|
|
[
|
|
"106",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"106",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"106",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.233, ACK: 13.000.041"
|
|
],
|
|
[
|
|
"107",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"107",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"107",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.233"
|
|
],
|
|
[
|
|
"107",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"108",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"108",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"108",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.041, ACK: 1.000.262"
|
|
],
|
|
[
|
|
"109",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"109",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"109",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.041"
|
|
],
|
|
[
|
|
"109",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 1"
|
|
],
|
|
[
|
|
"110",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"110",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"110",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.262, ACK: 13.000.047"
|
|
],
|
|
[
|
|
"111",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"111",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"111",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.262"
|
|
],
|
|
[
|
|
"111",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?"
|
|
],
|
|
[
|
|
"112",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"112",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"112",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.047, ACK: 1.000.414"
|
|
],
|
|
[
|
|
"113",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"113",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"113",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.047"
|
|
],
|
|
[
|
|
"113",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 1"
|
|
],
|
|
[
|
|
"114",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"114",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"114",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.414, ACK: 13.000.053"
|
|
],
|
|
[
|
|
"115",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"115",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"115",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.414"
|
|
],
|
|
[
|
|
"115",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"116",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"116",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"116",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.053, ACK: 1.000.443"
|
|
],
|
|
[
|
|
"117",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"117",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"117",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.053"
|
|
],
|
|
[
|
|
"117",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 2"
|
|
],
|
|
[
|
|
"118",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"118",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"118",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.443, ACK: 13.000.059"
|
|
],
|
|
[
|
|
"119",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"119",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"119",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.443"
|
|
],
|
|
[
|
|
"119",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: <noreply@andere.de>\nTo: Anna Muster <anna@filius.de>\nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?"
|
|
],
|
|
[
|
|
"120",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"120",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"120",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.059, ACK: 1.000.925"
|
|
],
|
|
[
|
|
"121",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"121",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"121",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.059"
|
|
],
|
|
[
|
|
"121",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 2"
|
|
],
|
|
[
|
|
"122",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"122",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"122",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.925, ACK: 13.000.065"
|
|
],
|
|
[
|
|
"123",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"123",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"123",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.925"
|
|
],
|
|
[
|
|
"123",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"124",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"124",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"124",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.065, ACK: 1.000.954"
|
|
],
|
|
[
|
|
"125",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"125",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"125",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.065"
|
|
],
|
|
[
|
|
"125",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 3"
|
|
],
|
|
[
|
|
"126",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"126",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"126",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.954, ACK: 13.000.071"
|
|
],
|
|
[
|
|
"127",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"127",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"127",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.954"
|
|
],
|
|
[
|
|
"127",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: <noreply@filius.de>\nTo: Anna Muster <anna@filius.de>\nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009jemand@nirgendwo.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Anna Muster <anna@filius.de>\nTo: <jemand@nirgendwo.de>\nSubject: Hallo?\n\nIst da wer?"
|
|
],
|
|
[
|
|
"128",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"128",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"128",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.071, ACK: 1.001.440"
|
|
],
|
|
[
|
|
"129",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"129",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"129",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.071"
|
|
],
|
|
[
|
|
"129",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 3"
|
|
],
|
|
[
|
|
"130",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"130",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"130",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.440, ACK: 13.000.077"
|
|
],
|
|
[
|
|
"131",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"131",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"131",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.440"
|
|
],
|
|
[
|
|
"131",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"132",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"132",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"132",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.077, ACK: 1.001.469"
|
|
],
|
|
[
|
|
"133",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"133",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"133",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.077"
|
|
],
|
|
[
|
|
"133",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"134",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"134",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"134",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.469, ACK: 13.000.081"
|
|
],
|
|
[
|
|
"135",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"135",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"135",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.469"
|
|
],
|
|
[
|
|
"135",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"136",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"136",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"136",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.081, ACK: 1.001.472"
|
|
],
|
|
[
|
|
"137",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"137",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"137",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 13.000.081"
|
|
],
|
|
[
|
|
"138",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"138",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"138",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.001.472"
|
|
],
|
|
[
|
|
"139",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"139",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"139",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.082, ACK: 1.001.473"
|
|
],
|
|
[
|
|
"140",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"140",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"140",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.473, ACK: 13.000.082"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000202": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"52531",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"3",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=43842 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"53",
|
|
"52531",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"4",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=43842 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.10",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:13|192.168.0.30]"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"62746",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"8",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=3243 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.10",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"53",
|
|
"62746",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"9",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=3243 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:14",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.31",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.10",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:14|192.168.0.31]"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.31",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"58459",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"13",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=47846 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.10",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"53",
|
|
"58459",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"14",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=47846 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"57606",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"15",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=60054 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"53",
|
|
"57606",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"16",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=60054 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"53558",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"17",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=35053 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnirgendwo.de. MX IN\n"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.10",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"53",
|
|
"53558",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"18",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=35053 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"56276",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"19",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=40953 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"53",
|
|
"56276",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"20",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=40953 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nmail.filius.de. A 3600 192.168.0.30\n"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000203": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 5.000.000"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000, ACK: 5.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001, ACK: 2.000.029"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.20"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.029, ACK: 5.000.018"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.029"
|
|
],
|
|
[
|
|
"11",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.20"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.018, ACK: 2.000.051"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.018"
|
|
],
|
|
[
|
|
"13",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.051, ACK: 5.000.045"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.051"
|
|
],
|
|
[
|
|
"15",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.045, ACK: 2.000.064"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.045"
|
|
],
|
|
[
|
|
"17",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<niemand@andere.de>"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.064, ACK: 5.000.072"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.064"
|
|
],
|
|
[
|
|
"19",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.072, ACK: 2.000.080"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.072"
|
|
],
|
|
[
|
|
"21",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.080, ACK: 5.000.076"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.080"
|
|
],
|
|
[
|
|
"23",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.076, ACK: 2.000.115"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.076"
|
|
],
|
|
[
|
|
"25",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.115, ACK: 5.000.168"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.115"
|
|
],
|
|
[
|
|
"27",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.168, ACK: 2.000.143"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.168"
|
|
],
|
|
[
|
|
"30",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"31",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.143, ACK: 5.000.172"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.143"
|
|
],
|
|
[
|
|
"32",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.10",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:13|192.168.0.30]"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"34",
|
|
"62746",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"34",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=3243 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX IN\n"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.172, ACK: 2.000.173"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.173"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 5.000.172"
|
|
],
|
|
[
|
|
"38",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"38",
|
|
"25",
|
|
"62333",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.174, ACK: 5.000.173"
|
|
],
|
|
[
|
|
"39",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.10",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"39",
|
|
"53",
|
|
"62746",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"39",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=3243 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nandere.de. MX 3600 mail.andere.de.\nmail.andere.de. A 3600 192.168.0.31\n"
|
|
],
|
|
[
|
|
"40",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"41",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"41",
|
|
"62333",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 5.000.173, ACK: 2.000.174"
|
|
],
|
|
[
|
|
"42",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:14 [op=REPLY, sender=02:00:00:00:02:14|192.168.0.31, target=02:00:00:00:02:13|192.168.0.30]"
|
|
],
|
|
[
|
|
"43",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"43",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 7.000.000"
|
|
],
|
|
[
|
|
"44",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"44",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000, ACK: 7.000.001"
|
|
],
|
|
[
|
|
"45",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"45",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.001, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"46",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"46",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"46",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei andere.de"
|
|
],
|
|
[
|
|
"47",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"47",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.001, ACK: 4.000.029"
|
|
],
|
|
[
|
|
"48",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"48",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.001"
|
|
],
|
|
[
|
|
"48",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.30"
|
|
],
|
|
[
|
|
"49",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"49",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.029, ACK: 7.000.018"
|
|
],
|
|
[
|
|
"50",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"50",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.029"
|
|
],
|
|
[
|
|
"50",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.30"
|
|
],
|
|
[
|
|
"51",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"51",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.018, ACK: 4.000.051"
|
|
],
|
|
[
|
|
"52",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"52",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.018"
|
|
],
|
|
[
|
|
"52",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
"53",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"53",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.051, ACK: 7.000.045"
|
|
],
|
|
[
|
|
"54",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"54",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.051"
|
|
],
|
|
[
|
|
"54",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"55",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"55",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.045, ACK: 4.000.064"
|
|
],
|
|
[
|
|
"56",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"56",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.045"
|
|
],
|
|
[
|
|
"56",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<niemand@andere.de>"
|
|
],
|
|
[
|
|
"57",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"57",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.064, ACK: 7.000.072"
|
|
],
|
|
[
|
|
"58",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"58",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.064"
|
|
],
|
|
[
|
|
"58",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"59",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"59",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.072, ACK: 4.000.080"
|
|
],
|
|
[
|
|
"60",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"60",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.072"
|
|
],
|
|
[
|
|
"60",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"61",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"61",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.080, ACK: 7.000.076"
|
|
],
|
|
[
|
|
"62",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"62",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.080"
|
|
],
|
|
[
|
|
"62",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"63",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"63",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.076, ACK: 4.000.115"
|
|
],
|
|
[
|
|
"64",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"64",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.076"
|
|
],
|
|
[
|
|
"64",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"65",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"65",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.115, ACK: 7.000.168"
|
|
],
|
|
[
|
|
"66",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"66",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.115"
|
|
],
|
|
[
|
|
"66",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"67",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"67",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.168, ACK: 4.000.143"
|
|
],
|
|
[
|
|
"68",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"68",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.168"
|
|
],
|
|
[
|
|
"68",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"69",
|
|
"02:00:00:00:02:14",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"69",
|
|
"192.168.0.31",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"70",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"70",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.143, ACK: 7.000.172"
|
|
],
|
|
[
|
|
"71",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"71",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"71",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.143"
|
|
],
|
|
[
|
|
"71",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"72",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"72",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"72",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.172, ACK: 4.000.173"
|
|
],
|
|
[
|
|
"73",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"73",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"73",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 9.000.000"
|
|
],
|
|
[
|
|
"74",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"74",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"74",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 7.000.172"
|
|
],
|
|
[
|
|
"75",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"75",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"75",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 6.000.000, ACK: 9.000.001"
|
|
],
|
|
[
|
|
"76",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"76",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"76",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.173"
|
|
],
|
|
[
|
|
"77",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"77",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"77",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.173, ACK: 4.000.174"
|
|
],
|
|
[
|
|
"78",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"78",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"78",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.174, ACK: 7.000.173"
|
|
],
|
|
[
|
|
"79",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"79",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"79",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.001, ACK: 6.000.001"
|
|
],
|
|
[
|
|
"80",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"80",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"80",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.001"
|
|
],
|
|
[
|
|
"80",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
"81",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"81",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"81",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.001, ACK: 6.000.029"
|
|
],
|
|
[
|
|
"82",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"82",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"82",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.001"
|
|
],
|
|
[
|
|
"82",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.31"
|
|
],
|
|
[
|
|
"83",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"83",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"83",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.029, ACK: 9.000.018"
|
|
],
|
|
[
|
|
"84",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"84",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"84",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.029"
|
|
],
|
|
[
|
|
"84",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.31"
|
|
],
|
|
[
|
|
"85",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"85",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"85",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.018, ACK: 6.000.051"
|
|
],
|
|
[
|
|
"86",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"86",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"86",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.018"
|
|
],
|
|
[
|
|
"86",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <>"
|
|
],
|
|
[
|
|
"87",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"87",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"87",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.051, ACK: 9.000.031"
|
|
],
|
|
[
|
|
"88",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"88",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"88",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.051"
|
|
],
|
|
[
|
|
"88",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"89",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"89",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"89",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.031, ACK: 6.000.064"
|
|
],
|
|
[
|
|
"90",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"90",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"90",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.031"
|
|
],
|
|
[
|
|
"90",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<anna@filius.de>"
|
|
],
|
|
[
|
|
"91",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"91",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"91",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.064, ACK: 9.000.055"
|
|
],
|
|
[
|
|
"92",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"92",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"92",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.064"
|
|
],
|
|
[
|
|
"92",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"93",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"93",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"93",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.055, ACK: 6.000.080"
|
|
],
|
|
[
|
|
"94",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"94",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"94",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.055"
|
|
],
|
|
[
|
|
"94",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"95",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"95",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"95",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.080, ACK: 9.000.059"
|
|
],
|
|
[
|
|
"96",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"96",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"96",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.080"
|
|
],
|
|
[
|
|
"96",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"97",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"97",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"97",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.059, ACK: 6.000.115"
|
|
],
|
|
[
|
|
"98",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"98",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"98",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.059"
|
|
],
|
|
[
|
|
"98",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: <noreply@andere.de>\nTo: Anna Muster <anna@filius.de>\nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"99",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"99",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"99",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.115, ACK: 9.000.525"
|
|
],
|
|
[
|
|
"100",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"100",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"100",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.115"
|
|
],
|
|
[
|
|
"100",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"101",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"101",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"101",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.525, ACK: 6.000.143"
|
|
],
|
|
[
|
|
"102",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"102",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"102",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.525"
|
|
],
|
|
[
|
|
"102",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"103",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"103",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"103",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.143, ACK: 9.000.529"
|
|
],
|
|
[
|
|
"104",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"104",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"104",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.143"
|
|
],
|
|
[
|
|
"104",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"105",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"105",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"105",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.529, ACK: 6.000.173"
|
|
],
|
|
[
|
|
"106",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"106",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"106",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 6.000.173"
|
|
],
|
|
[
|
|
"107",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"107",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"107",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 9.000.529"
|
|
],
|
|
[
|
|
"108",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"108",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"108",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.174, ACK: 9.000.530"
|
|
],
|
|
[
|
|
"109",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"109",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"109",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.530, ACK: 6.000.174"
|
|
],
|
|
[
|
|
"110",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"110",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"110",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 11.000.000"
|
|
],
|
|
[
|
|
"111",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"111",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"111",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 10.000.000, ACK: 11.000.001"
|
|
],
|
|
[
|
|
"112",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"112",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"112",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.001, ACK: 10.000.001"
|
|
],
|
|
[
|
|
"113",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"113",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"113",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.001"
|
|
],
|
|
[
|
|
"113",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
"114",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"114",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"114",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.001, ACK: 10.000.029"
|
|
],
|
|
[
|
|
"115",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"115",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"115",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.001"
|
|
],
|
|
[
|
|
"115",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.20"
|
|
],
|
|
[
|
|
"116",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"116",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"116",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.029, ACK: 11.000.018"
|
|
],
|
|
[
|
|
"117",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"117",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"117",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.029"
|
|
],
|
|
[
|
|
"117",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.20"
|
|
],
|
|
[
|
|
"118",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"118",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"118",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.018, ACK: 10.000.051"
|
|
],
|
|
[
|
|
"119",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"119",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"119",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.018"
|
|
],
|
|
[
|
|
"119",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
"120",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"120",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"120",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.051, ACK: 11.000.045"
|
|
],
|
|
[
|
|
"121",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"121",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"121",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.051"
|
|
],
|
|
[
|
|
"121",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"122",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"122",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"122",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.045, ACK: 10.000.064"
|
|
],
|
|
[
|
|
"123",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"123",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"123",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.045"
|
|
],
|
|
[
|
|
"123",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<jemand@nirgendwo.de>"
|
|
],
|
|
[
|
|
"124",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"124",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"124",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.064, ACK: 11.000.074"
|
|
],
|
|
[
|
|
"125",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"125",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"125",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.064"
|
|
],
|
|
[
|
|
"125",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"126",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"126",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"126",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.074, ACK: 10.000.080"
|
|
],
|
|
[
|
|
"127",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"127",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"127",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.074"
|
|
],
|
|
[
|
|
"127",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"128",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"128",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"128",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.080, ACK: 11.000.078"
|
|
],
|
|
[
|
|
"129",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"129",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"129",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.080"
|
|
],
|
|
[
|
|
"129",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"130",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"130",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"130",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.078, ACK: 10.000.115"
|
|
],
|
|
[
|
|
"131",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"131",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"131",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.078"
|
|
],
|
|
[
|
|
"131",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Anna Muster <anna@filius.de>\nTo: <jemand@nirgendwo.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"132",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"132",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"132",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.115, ACK: 11.000.172"
|
|
],
|
|
[
|
|
"133",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"133",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"133",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.115"
|
|
],
|
|
[
|
|
"133",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"134",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"134",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"134",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.172, ACK: 10.000.143"
|
|
],
|
|
[
|
|
"135",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"135",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"135",
|
|
"53558",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"135",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=35053 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnirgendwo.de. MX IN\n"
|
|
],
|
|
[
|
|
"136",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"136",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"136",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.172"
|
|
],
|
|
[
|
|
"136",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"137",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"137",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"137",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.143, ACK: 11.000.176"
|
|
],
|
|
[
|
|
"138",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"138",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"138",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.143"
|
|
],
|
|
[
|
|
"138",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"139",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"139",
|
|
"192.168.0.10",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"139",
|
|
"53",
|
|
"53558",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"139",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=35053 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
],
|
|
[
|
|
"140",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"140",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"140",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.176, ACK: 10.000.173"
|
|
],
|
|
[
|
|
"141",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"141",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"141",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 10.000.173"
|
|
],
|
|
[
|
|
"142",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"142",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"142",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 11.000.176"
|
|
],
|
|
[
|
|
"143",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"143",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"143",
|
|
"25",
|
|
"65366",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 10.000.174, ACK: 11.000.177"
|
|
],
|
|
[
|
|
"144",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"144",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"144",
|
|
"65366",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 11.000.177, ACK: 10.000.174"
|
|
],
|
|
[
|
|
"145",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"145",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"145",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 13.000.000"
|
|
],
|
|
[
|
|
"146",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"146",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"146",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 13.000.001"
|
|
],
|
|
[
|
|
"147",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"147",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"147",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"148",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"148",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"148",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"148",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK POP3 server ready"
|
|
],
|
|
[
|
|
"149",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"149",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"149",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.001, ACK: 1.000.022"
|
|
],
|
|
[
|
|
"150",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"150",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"150",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.001"
|
|
],
|
|
[
|
|
"150",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"USER anna"
|
|
],
|
|
[
|
|
"151",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"151",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"151",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022, ACK: 13.000.010"
|
|
],
|
|
[
|
|
"152",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"152",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"152",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.022"
|
|
],
|
|
[
|
|
"152",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK enter password"
|
|
],
|
|
[
|
|
"153",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"153",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"153",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.010, ACK: 1.000.040"
|
|
],
|
|
[
|
|
"154",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"154",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"154",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.010"
|
|
],
|
|
[
|
|
"154",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"PASS geheim"
|
|
],
|
|
[
|
|
"155",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"155",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"155",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040, ACK: 13.000.021"
|
|
],
|
|
[
|
|
"156",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"156",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"156",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.040"
|
|
],
|
|
[
|
|
"156",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
"157",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"157",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"157",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.021, ACK: 1.000.068"
|
|
],
|
|
[
|
|
"158",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"158",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"158",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.021"
|
|
],
|
|
[
|
|
"158",
|
|
null,
|
|
null,
|
|
"",
|
|
"Anwendung",
|
|
"STAT"
|
|
],
|
|
[
|
|
"159",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"159",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"159",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068, ACK: 13.000.025"
|
|
],
|
|
[
|
|
"160",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"160",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"160",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.068"
|
|
],
|
|
[
|
|
"160",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 4 1054"
|
|
],
|
|
[
|
|
"161",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"161",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"161",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.025, ACK: 1.000.078"
|
|
],
|
|
[
|
|
"162",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"162",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"162",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.025"
|
|
],
|
|
[
|
|
"162",
|
|
null,
|
|
null,
|
|
"",
|
|
"Anwendung",
|
|
"LIST"
|
|
],
|
|
[
|
|
"163",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"163",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"163",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.078, ACK: 13.000.029"
|
|
],
|
|
[
|
|
"164",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"164",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"164",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.078"
|
|
],
|
|
[
|
|
"164",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK 4 1054\n0 80\n1 89\n2 441\n3 444\n"
|
|
],
|
|
[
|
|
"165",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"165",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"165",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.029, ACK: 1.000.111"
|
|
],
|
|
[
|
|
"166",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"166",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"166",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.029"
|
|
],
|
|
[
|
|
"166",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 0"
|
|
],
|
|
[
|
|
"167",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"167",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"167",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.111, ACK: 13.000.035"
|
|
],
|
|
[
|
|
"168",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"168",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"168",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.111"
|
|
],
|
|
[
|
|
"168",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile"
|
|
],
|
|
[
|
|
"169",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"169",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"169",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.035, ACK: 1.000.233"
|
|
],
|
|
[
|
|
"170",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"170",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"170",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.035"
|
|
],
|
|
[
|
|
"170",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 0"
|
|
],
|
|
[
|
|
"171",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"171",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"171",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.233, ACK: 13.000.041"
|
|
],
|
|
[
|
|
"172",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"172",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"172",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.233"
|
|
],
|
|
[
|
|
"172",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"173",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"173",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"173",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.041, ACK: 1.000.262"
|
|
],
|
|
[
|
|
"174",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"174",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"174",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.041"
|
|
],
|
|
[
|
|
"174",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 1"
|
|
],
|
|
[
|
|
"175",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"175",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"175",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.262, ACK: 13.000.047"
|
|
],
|
|
[
|
|
"176",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"176",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"176",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.262"
|
|
],
|
|
[
|
|
"176",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?"
|
|
],
|
|
[
|
|
"177",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"177",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"177",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.047, ACK: 1.000.414"
|
|
],
|
|
[
|
|
"178",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"178",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"178",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.047"
|
|
],
|
|
[
|
|
"178",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 1"
|
|
],
|
|
[
|
|
"179",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"179",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"179",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.414, ACK: 13.000.053"
|
|
],
|
|
[
|
|
"180",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"180",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"180",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.414"
|
|
],
|
|
[
|
|
"180",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"181",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"181",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"181",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.053, ACK: 1.000.443"
|
|
],
|
|
[
|
|
"182",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"182",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"182",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.053"
|
|
],
|
|
[
|
|
"182",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 2"
|
|
],
|
|
[
|
|
"183",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"183",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"183",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.443, ACK: 13.000.059"
|
|
],
|
|
[
|
|
"184",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"184",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"184",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.443"
|
|
],
|
|
[
|
|
"184",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: <noreply@andere.de>\nTo: Anna Muster <anna@filius.de>\nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?"
|
|
],
|
|
[
|
|
"185",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"185",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"185",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.059, ACK: 1.000.925"
|
|
],
|
|
[
|
|
"186",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"186",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"186",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.059"
|
|
],
|
|
[
|
|
"186",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 2"
|
|
],
|
|
[
|
|
"187",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"187",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"187",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.925, ACK: 13.000.065"
|
|
],
|
|
[
|
|
"188",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"188",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"188",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.925"
|
|
],
|
|
[
|
|
"188",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"189",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"189",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"189",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.065, ACK: 1.000.954"
|
|
],
|
|
[
|
|
"190",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"190",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"190",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.065"
|
|
],
|
|
[
|
|
"190",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"RETR 3"
|
|
],
|
|
[
|
|
"191",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"191",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"191",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.954, ACK: 13.000.071"
|
|
],
|
|
[
|
|
"192",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"192",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"192",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.954"
|
|
],
|
|
[
|
|
"192",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message follows \nFrom: <noreply@filius.de>\nTo: Anna Muster <anna@filius.de>\nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009jemand@nirgendwo.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Anna Muster <anna@filius.de>\nTo: <jemand@nirgendwo.de>\nSubject: Hallo?\n\nIst da wer?"
|
|
],
|
|
[
|
|
"193",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"193",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"193",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.071, ACK: 1.001.440"
|
|
],
|
|
[
|
|
"194",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"194",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"194",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.071"
|
|
],
|
|
[
|
|
"194",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"DELE 3"
|
|
],
|
|
[
|
|
"195",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"195",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"195",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.440, ACK: 13.000.077"
|
|
],
|
|
[
|
|
"196",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"196",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"196",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.440"
|
|
],
|
|
[
|
|
"196",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK message marked for delete"
|
|
],
|
|
[
|
|
"197",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"197",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"197",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.077, ACK: 1.001.469"
|
|
],
|
|
[
|
|
"198",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"198",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"198",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.077"
|
|
],
|
|
[
|
|
"198",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"199",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"199",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"199",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.469, ACK: 13.000.081"
|
|
],
|
|
[
|
|
"200",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"200",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"200",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.469"
|
|
],
|
|
[
|
|
"200",
|
|
null,
|
|
null,
|
|
"POP3",
|
|
"Anwendung",
|
|
"+OK"
|
|
],
|
|
[
|
|
"201",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"201",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"201",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.081, ACK: 1.001.472"
|
|
],
|
|
[
|
|
"202",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"202",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"202",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.001.472"
|
|
],
|
|
[
|
|
"203",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"203",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"203",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 13.000.081"
|
|
],
|
|
[
|
|
"204",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"204",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"204",
|
|
"110",
|
|
"56326",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.001.473, ACK: 13.000.082"
|
|
],
|
|
[
|
|
"205",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"205",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"205",
|
|
"56326",
|
|
"110",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 13.000.082, ACK: 1.001.473"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000204": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.30",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:02:13",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:02:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:14 [op=REPLY, sender=02:00:00:00:02:14|192.168.0.31, target=02:00:00:00:02:13|192.168.0.30]"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 7.000.000"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000, ACK: 7.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.001, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei andere.de"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.001, ACK: 4.000.029"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.001"
|
|
],
|
|
[
|
|
"11",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.30"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.029, ACK: 7.000.018"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.029"
|
|
],
|
|
[
|
|
"13",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.30"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.018, ACK: 4.000.051"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.018"
|
|
],
|
|
[
|
|
"15",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.051, ACK: 7.000.045"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.051"
|
|
],
|
|
[
|
|
"17",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.045, ACK: 4.000.064"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.045"
|
|
],
|
|
[
|
|
"19",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<niemand@andere.de>"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.064, ACK: 7.000.072"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.064"
|
|
],
|
|
[
|
|
"21",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.072, ACK: 4.000.080"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.072"
|
|
],
|
|
[
|
|
"23",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.080, ACK: 7.000.076"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.080"
|
|
],
|
|
[
|
|
"25",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"26",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"26",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"26",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.076, ACK: 4.000.115"
|
|
],
|
|
[
|
|
"27",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"27",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"27",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.076"
|
|
],
|
|
[
|
|
"27",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"28",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"28",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"28",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.115, ACK: 7.000.168"
|
|
],
|
|
[
|
|
"29",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"29",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"29",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.115"
|
|
],
|
|
[
|
|
"29",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"30",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"30",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"30",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.168, ACK: 4.000.143"
|
|
],
|
|
[
|
|
"31",
|
|
"02:00:00:00:02:14",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"31",
|
|
"192.168.0.31",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"32",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"32",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"32",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.168"
|
|
],
|
|
[
|
|
"32",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"33",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"33",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"33",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.143, ACK: 7.000.172"
|
|
],
|
|
[
|
|
"34",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"34",
|
|
"192.168.0.10",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:14|192.168.0.31]"
|
|
],
|
|
[
|
|
"35",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"35",
|
|
"192.168.0.31",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"35",
|
|
"58459",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"35",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=47846 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
|
|
],
|
|
[
|
|
"36",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"36",
|
|
"192.168.0.10",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"36",
|
|
"53",
|
|
"58459",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"36",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=47846 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"37",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"37",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"37",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.143"
|
|
],
|
|
[
|
|
"37",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"38",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"38",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"38",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 9.000.000"
|
|
],
|
|
[
|
|
"39",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"39",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"39",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.172, ACK: 4.000.173"
|
|
],
|
|
[
|
|
"40",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"40",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"40",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.173"
|
|
],
|
|
[
|
|
"41",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"41",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"41",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 7.000.172"
|
|
],
|
|
[
|
|
"42",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"42",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"42",
|
|
"25",
|
|
"64673",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.174, ACK: 7.000.173"
|
|
],
|
|
[
|
|
"43",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"43",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"43",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 6.000.000, ACK: 9.000.001"
|
|
],
|
|
[
|
|
"44",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"44",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"44",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.001, ACK: 6.000.001"
|
|
],
|
|
[
|
|
"45",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"45",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"45",
|
|
"64673",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 7.000.173, ACK: 4.000.174"
|
|
],
|
|
[
|
|
"46",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"46",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"46",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.001"
|
|
],
|
|
[
|
|
"46",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
"47",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"47",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"47",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.001, ACK: 6.000.029"
|
|
],
|
|
[
|
|
"48",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"48",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"48",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.001"
|
|
],
|
|
[
|
|
"48",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"HELO 192.168.0.31"
|
|
],
|
|
[
|
|
"49",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"49",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"49",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.029, ACK: 9.000.018"
|
|
],
|
|
[
|
|
"50",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"50",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"50",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.029"
|
|
],
|
|
[
|
|
"50",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Hello 192.168.0.31"
|
|
],
|
|
[
|
|
"51",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"51",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"51",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.018, ACK: 6.000.051"
|
|
],
|
|
[
|
|
"52",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"52",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"52",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.018"
|
|
],
|
|
[
|
|
"52",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"MAIL FROM: <>"
|
|
],
|
|
[
|
|
"53",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"53",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"53",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.051, ACK: 9.000.031"
|
|
],
|
|
[
|
|
"54",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"54",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"54",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.051"
|
|
],
|
|
[
|
|
"54",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Sender OK"
|
|
],
|
|
[
|
|
"55",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"55",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"55",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.031, ACK: 6.000.064"
|
|
],
|
|
[
|
|
"56",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"56",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"56",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.031"
|
|
],
|
|
[
|
|
"56",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"RCPT TO:<anna@filius.de>"
|
|
],
|
|
[
|
|
"57",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"57",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"57",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.064, ACK: 9.000.055"
|
|
],
|
|
[
|
|
"58",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"58",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"58",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.064"
|
|
],
|
|
[
|
|
"58",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Recipient OK"
|
|
],
|
|
[
|
|
"59",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"59",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"59",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.055, ACK: 6.000.080"
|
|
],
|
|
[
|
|
"60",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"60",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"60",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.055"
|
|
],
|
|
[
|
|
"60",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"DATA"
|
|
],
|
|
[
|
|
"61",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"61",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"61",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.080, ACK: 9.000.059"
|
|
],
|
|
[
|
|
"62",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"62",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"62",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.080"
|
|
],
|
|
[
|
|
"62",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
"63",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"63",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"63",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.059, ACK: 6.000.115"
|
|
],
|
|
[
|
|
"64",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"64",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"64",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.059"
|
|
],
|
|
[
|
|
"64",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"From: <noreply@andere.de>\nTo: Anna Muster <anna@filius.de>\nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
"65",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"65",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"65",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.115, ACK: 9.000.525"
|
|
],
|
|
[
|
|
"66",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"66",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"66",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.115"
|
|
],
|
|
[
|
|
"66",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"250 Mail queued for delivery"
|
|
],
|
|
[
|
|
"67",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"67",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"67",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.525, ACK: 6.000.143"
|
|
],
|
|
[
|
|
"68",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"68",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"68",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.525"
|
|
],
|
|
[
|
|
"68",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"QUIT"
|
|
],
|
|
[
|
|
"69",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"69",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"69",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.143, ACK: 9.000.529"
|
|
],
|
|
[
|
|
"70",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"70",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"70",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.143"
|
|
],
|
|
[
|
|
"70",
|
|
null,
|
|
null,
|
|
"SMTP",
|
|
"Anwendung",
|
|
"221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
"71",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"71",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"71",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.529, ACK: 6.000.173"
|
|
],
|
|
[
|
|
"72",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"72",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"72",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 9.000.529"
|
|
],
|
|
[
|
|
"73",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"73",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"73",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 6.000.173"
|
|
],
|
|
[
|
|
"74",
|
|
"02:00:00:00:02:14",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"74",
|
|
"192.168.0.31",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"74",
|
|
"50936",
|
|
"25",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 9.000.530, ACK: 6.000.174"
|
|
],
|
|
[
|
|
"75",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"75",
|
|
"192.168.0.30",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"75",
|
|
"25",
|
|
"50936",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 6.000.174, ACK: 9.000.530"
|
|
]
|
|
]
|
|
},
|
|
"events": [
|
|
[
|
|
215,
|
|
"client",
|
|
"null"
|
|
],
|
|
[
|
|
218,
|
|
"server",
|
|
"null"
|
|
],
|
|
[
|
|
221,
|
|
"otherServer",
|
|
"null"
|
|
],
|
|
[
|
|
500,
|
|
"client",
|
|
"call versendeEmail niemand@andere.de | | "
|
|
],
|
|
[
|
|
503,
|
|
"client",
|
|
"----"
|
|
],
|
|
[
|
|
1486,
|
|
"client",
|
|
"Verbindung zu 192.168.0.30:25 hergestellt"
|
|
],
|
|
[
|
|
1623,
|
|
"server",
|
|
"----"
|
|
],
|
|
[
|
|
1846,
|
|
"server",
|
|
"192.168.0.20> 220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
1902,
|
|
"server",
|
|
"192.168.0.20< HELO 192.168.0.20"
|
|
],
|
|
[
|
|
2180,
|
|
"server",
|
|
"192.168.0.20> 250 Hello 192.168.0.20"
|
|
],
|
|
[
|
|
2236,
|
|
"server",
|
|
"192.168.0.20< MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
2514,
|
|
"server",
|
|
"192.168.0.20> 250 Sender OK"
|
|
],
|
|
[
|
|
2570,
|
|
"server",
|
|
"192.168.0.20< RCPT TO:<niemand@andere.de>"
|
|
],
|
|
[
|
|
2849,
|
|
"server",
|
|
"192.168.0.20> 250 Recipient OK"
|
|
],
|
|
[
|
|
2904,
|
|
"server",
|
|
"192.168.0.20< DATA"
|
|
],
|
|
[
|
|
3182,
|
|
"server",
|
|
"192.168.0.20> 354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
3238,
|
|
"server",
|
|
"192.168.0.20< From: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
3515,
|
|
"server",
|
|
"192.168.0.20> 250 Mail queued for delivery"
|
|
],
|
|
[
|
|
3571,
|
|
"server",
|
|
"192.168.0.20< QUIT"
|
|
],
|
|
[
|
|
3743,
|
|
"client",
|
|
"Mail versendet an niemand@andere.de"
|
|
],
|
|
[
|
|
3743,
|
|
"client",
|
|
"null"
|
|
],
|
|
[
|
|
3743,
|
|
"client",
|
|
"Verbindung zu 192.168.0.30:25 getrennt"
|
|
],
|
|
[
|
|
3854,
|
|
"server",
|
|
"192.168.0.20> 221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
3966,
|
|
"server",
|
|
"----"
|
|
],
|
|
[
|
|
4466,
|
|
"server",
|
|
"Verbindung zu 192.168.0.31:25 hergestellt"
|
|
],
|
|
[
|
|
4525,
|
|
"otherServer",
|
|
"----"
|
|
],
|
|
[
|
|
4747,
|
|
"otherServer",
|
|
"192.168.0.30> 220 Willkommen bei andere.de"
|
|
],
|
|
[
|
|
4802,
|
|
"otherServer",
|
|
"192.168.0.30< HELO 192.168.0.30"
|
|
],
|
|
[
|
|
5079,
|
|
"otherServer",
|
|
"192.168.0.30> 250 Hello 192.168.0.30"
|
|
],
|
|
[
|
|
5135,
|
|
"otherServer",
|
|
"192.168.0.30< MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
5412,
|
|
"otherServer",
|
|
"192.168.0.30> 250 Sender OK"
|
|
],
|
|
[
|
|
5467,
|
|
"otherServer",
|
|
"192.168.0.30< RCPT TO:<niemand@andere.de>"
|
|
],
|
|
[
|
|
5744,
|
|
"otherServer",
|
|
"192.168.0.30> 250 Recipient OK"
|
|
],
|
|
[
|
|
5800,
|
|
"otherServer",
|
|
"192.168.0.30< DATA"
|
|
],
|
|
[
|
|
6077,
|
|
"otherServer",
|
|
"192.168.0.30> 354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
6132,
|
|
"otherServer",
|
|
"192.168.0.30< From: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
6409,
|
|
"otherServer",
|
|
"192.168.0.30> 250 Mail queued for delivery"
|
|
],
|
|
[
|
|
6856,
|
|
"otherServer",
|
|
"192.168.0.30< QUIT"
|
|
],
|
|
[
|
|
6856,
|
|
"otherServer",
|
|
"----"
|
|
],
|
|
[
|
|
6967,
|
|
"server",
|
|
"Mail versendet an niemand@andere.de"
|
|
],
|
|
[
|
|
6967,
|
|
"server",
|
|
"null"
|
|
],
|
|
[
|
|
6967,
|
|
"server",
|
|
"Verbindung zu 192.168.0.31:25 getrennt"
|
|
],
|
|
[
|
|
7078,
|
|
"otherServer",
|
|
"192.168.0.30> 221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
7256,
|
|
"otherServer",
|
|
"Verbindung zu 192.168.0.30:25 hergestellt"
|
|
],
|
|
[
|
|
7350,
|
|
"server",
|
|
"----"
|
|
],
|
|
[
|
|
7572,
|
|
"server",
|
|
"192.168.0.31> 220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
7627,
|
|
"server",
|
|
"192.168.0.31< HELO 192.168.0.31"
|
|
],
|
|
[
|
|
7904,
|
|
"server",
|
|
"192.168.0.31> 250 Hello 192.168.0.31"
|
|
],
|
|
[
|
|
7959,
|
|
"server",
|
|
"192.168.0.31< MAIL FROM: <>"
|
|
],
|
|
[
|
|
8236,
|
|
"server",
|
|
"192.168.0.31> 250 Sender OK"
|
|
],
|
|
[
|
|
8291,
|
|
"server",
|
|
"192.168.0.31< RCPT TO:<anna@filius.de>"
|
|
],
|
|
[
|
|
8568,
|
|
"server",
|
|
"192.168.0.31> 250 Recipient OK"
|
|
],
|
|
[
|
|
8623,
|
|
"server",
|
|
"192.168.0.31< DATA"
|
|
],
|
|
[
|
|
8901,
|
|
"server",
|
|
"192.168.0.31> 354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
8956,
|
|
"server",
|
|
"192.168.0.31< From: <noreply@andere.de>\nTo: Anna Muster <anna@filius.de>\nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
9233,
|
|
"server",
|
|
"192.168.0.31> 250 Mail queued for delivery"
|
|
],
|
|
[
|
|
9233,
|
|
"server",
|
|
"E-Mail für anna im Postfach gespeichert."
|
|
],
|
|
[
|
|
9288,
|
|
"server",
|
|
"192.168.0.31< QUIT"
|
|
],
|
|
[
|
|
9454,
|
|
"otherServer",
|
|
"Mail versendet an anna@filius.de"
|
|
],
|
|
[
|
|
9454,
|
|
"otherServer",
|
|
"null"
|
|
],
|
|
[
|
|
9454,
|
|
"otherServer",
|
|
"Verbindung zu 192.168.0.30:25 getrennt"
|
|
],
|
|
[
|
|
9565,
|
|
"server",
|
|
"192.168.0.31> 221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
12000,
|
|
"client",
|
|
"call versendeEmail jemand@nirgendwo.de | | "
|
|
],
|
|
[
|
|
12000,
|
|
"client",
|
|
"----"
|
|
],
|
|
[
|
|
12524,
|
|
"client",
|
|
"Verbindung zu 192.168.0.30:25 hergestellt"
|
|
],
|
|
[
|
|
12575,
|
|
"server",
|
|
"----"
|
|
],
|
|
[
|
|
12797,
|
|
"server",
|
|
"192.168.0.20> 220 Willkommen bei filius.de"
|
|
],
|
|
[
|
|
12853,
|
|
"server",
|
|
"192.168.0.20< HELO 192.168.0.20"
|
|
],
|
|
[
|
|
13130,
|
|
"server",
|
|
"192.168.0.20> 250 Hello 192.168.0.20"
|
|
],
|
|
[
|
|
13185,
|
|
"server",
|
|
"192.168.0.20< MAIL FROM: <anna@filius.de>"
|
|
],
|
|
[
|
|
13462,
|
|
"server",
|
|
"192.168.0.20> 250 Sender OK"
|
|
],
|
|
[
|
|
13517,
|
|
"server",
|
|
"192.168.0.20< RCPT TO:<jemand@nirgendwo.de>"
|
|
],
|
|
[
|
|
13794,
|
|
"server",
|
|
"192.168.0.20> 250 Recipient OK"
|
|
],
|
|
[
|
|
13849,
|
|
"server",
|
|
"192.168.0.20< DATA"
|
|
],
|
|
[
|
|
14126,
|
|
"server",
|
|
"192.168.0.20> 354 End data with <CR><LF>.<CR><LF>"
|
|
],
|
|
[
|
|
14182,
|
|
"server",
|
|
"192.168.0.20< From: Anna Muster <anna@filius.de>\nTo: <jemand@nirgendwo.de>\nSubject: Hallo?\n\nIst da wer?\u000d\n.\u000d\n"
|
|
],
|
|
[
|
|
14459,
|
|
"server",
|
|
"192.168.0.20> 250 Mail queued for delivery"
|
|
],
|
|
[
|
|
14514,
|
|
"server",
|
|
"192.168.0.20< QUIT"
|
|
],
|
|
[
|
|
14681,
|
|
"client",
|
|
"Mail versendet an jemand@nirgendwo.de"
|
|
],
|
|
[
|
|
14681,
|
|
"client",
|
|
"null"
|
|
],
|
|
[
|
|
14681,
|
|
"client",
|
|
"Verbindung zu 192.168.0.30:25 getrennt"
|
|
],
|
|
[
|
|
14683,
|
|
"server",
|
|
"E-Mail für anna im Postfach gespeichert."
|
|
],
|
|
[
|
|
14792,
|
|
"server",
|
|
"192.168.0.20> 221 Server beendet Verbindung."
|
|
],
|
|
[
|
|
25000,
|
|
"client",
|
|
"call emailsAbholenEmails"
|
|
],
|
|
[
|
|
25639,
|
|
"server",
|
|
"----"
|
|
],
|
|
[
|
|
25639,
|
|
"server",
|
|
"192.168.0.20> +OK POP3 server ready"
|
|
],
|
|
[
|
|
25916,
|
|
"server",
|
|
"192.168.0.20< USER anna"
|
|
],
|
|
[
|
|
25917,
|
|
"server",
|
|
"192.168.0.20> +OK enter password"
|
|
],
|
|
[
|
|
26248,
|
|
"server",
|
|
"192.168.0.20< PASS geheim"
|
|
],
|
|
[
|
|
26249,
|
|
"server",
|
|
"192.168.0.20> +OK Mailbox locked and ready"
|
|
],
|
|
[
|
|
26580,
|
|
"server",
|
|
"192.168.0.20< STAT"
|
|
],
|
|
[
|
|
26582,
|
|
"server",
|
|
"192.168.0.20> +OK 4 1054"
|
|
],
|
|
[
|
|
26912,
|
|
"server",
|
|
"192.168.0.20< LIST"
|
|
],
|
|
[
|
|
26913,
|
|
"server",
|
|
"192.168.0.20> +OK 4 1054\n0 80\n1 89\n2 441\n3 444\n"
|
|
],
|
|
[
|
|
27244,
|
|
"server",
|
|
"192.168.0.20< RETR 0"
|
|
],
|
|
[
|
|
27245,
|
|
"server",
|
|
"192.168.0.20> +OK message follows \nFrom: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile"
|
|
],
|
|
[
|
|
27576,
|
|
"server",
|
|
"192.168.0.20< DELE 0"
|
|
],
|
|
[
|
|
27577,
|
|
"server",
|
|
"192.168.0.20> +OK message marked for delete"
|
|
],
|
|
[
|
|
27909,
|
|
"server",
|
|
"192.168.0.20< RETR 1"
|
|
],
|
|
[
|
|
27909,
|
|
"server",
|
|
"192.168.0.20> +OK message follows \nFrom: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?"
|
|
],
|
|
[
|
|
28241,
|
|
"server",
|
|
"192.168.0.20< DELE 1"
|
|
],
|
|
[
|
|
28241,
|
|
"server",
|
|
"192.168.0.20> +OK message marked for delete"
|
|
],
|
|
[
|
|
28573,
|
|
"server",
|
|
"192.168.0.20< RETR 2"
|
|
],
|
|
[
|
|
28574,
|
|
"server",
|
|
"192.168.0.20> +OK message follows \nFrom: <noreply@andere.de>\nTo: Anna Muster <anna@filius.de>\nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?"
|
|
],
|
|
[
|
|
28905,
|
|
"server",
|
|
"192.168.0.20< DELE 2"
|
|
],
|
|
[
|
|
28906,
|
|
"server",
|
|
"192.168.0.20> +OK message marked for delete"
|
|
],
|
|
[
|
|
29237,
|
|
"server",
|
|
"192.168.0.20< RETR 3"
|
|
],
|
|
[
|
|
29237,
|
|
"server",
|
|
"192.168.0.20> +OK message follows \nFrom: <noreply@filius.de>\nTo: Anna Muster <anna@filius.de>\nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009jemand@nirgendwo.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Anna Muster <anna@filius.de>\nTo: <jemand@nirgendwo.de>\nSubject: Hallo?\n\nIst da wer?"
|
|
],
|
|
[
|
|
29569,
|
|
"server",
|
|
"192.168.0.20< DELE 3"
|
|
],
|
|
[
|
|
29569,
|
|
"server",
|
|
"192.168.0.20> +OK message marked for delete"
|
|
],
|
|
[
|
|
29901,
|
|
"server",
|
|
"192.168.0.20< QUIT"
|
|
],
|
|
[
|
|
29901,
|
|
"server",
|
|
"null"
|
|
],
|
|
[
|
|
29901,
|
|
"server",
|
|
"192.168.0.20> +OK"
|
|
],
|
|
[
|
|
30067,
|
|
"client",
|
|
"null"
|
|
]
|
|
],
|
|
"inbox": [
|
|
[
|
|
"From: Bob Beispiel <bob@filius.de>\nTo: <anna@filius.de>\nSubject: Hallo Anna\n\nErste Zeile\nZweite Zeile",
|
|
"true",
|
|
"false"
|
|
],
|
|
[
|
|
"From: Carla <carla@andere.de>\nTo: Anna Muster <anna@filius.de>, <bob@filius.de>\nCc: <chef@filius.de>\nSubject: Termin\n\nMorgen um 10?",
|
|
"true",
|
|
"false"
|
|
],
|
|
[
|
|
"From: <noreply@andere.de>\nTo: Anna Muster <anna@filius.de>\nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009niemand@andere.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.31\n\n______________________________________________________________________\nFrom: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?",
|
|
"true",
|
|
"false"
|
|
],
|
|
[
|
|
"From: <noreply@filius.de>\nTo: Anna Muster <anna@filius.de>\nSubject: Non Delivery Notification\n\nThe mail could not be delivered either because user or mail domain is unknown.\nMessage could not be delivered to the following recipients:\n\u0009jemand@nirgendwo.de\n\nDate: 01.10.26, 19:26\nMail-Server: 192.168.0.30\n\n______________________________________________________________________\nFrom: Anna Muster <anna@filius.de>\nTo: <jemand@nirgendwo.de>\nSubject: Hallo?\n\nIst da wer?",
|
|
"true",
|
|
"false"
|
|
]
|
|
],
|
|
"sent": [
|
|
[
|
|
"From: Anna Muster <anna@filius.de>\nTo: <niemand@andere.de>\nSubject: Hallo?\n\nIst da wer?",
|
|
"true",
|
|
"false"
|
|
],
|
|
[
|
|
"From: Anna Muster <anna@filius.de>\nTo: <jemand@nirgendwo.de>\nSubject: Hallo?\n\nIst da wer?",
|
|
"true",
|
|
"false"
|
|
]
|
|
],
|
|
"accounts": [
|
|
[
|
|
"anna",
|
|
[]
|
|
],
|
|
[
|
|
"bob",
|
|
[]
|
|
]
|
|
],
|
|
"otherAccounts": [
|
|
[
|
|
"carla",
|
|
[]
|
|
]
|
|
]
|
|
}
|