===== DF-3205 T5: xid / reserved-port determinism (6 sequential calls) =====
 | DF3205 T5: 6/6 sequential krpc_call ok; xid sequence + client reserved ports are on the attacker server stdout (baseline expect 0xffffff00+n ascending, fixed expect random)
attacker: mode=dump port=7771 blind=0
attacker: REQ #1 len=60 xid=0xffffff01 from 127.0.0.1:1023 (blind prediction for this call: 0xffffff00 differ)
attacker: REQ #2 len=60 xid=0xffffff02 from 127.0.0.1:1023 (blind prediction for this call: 0xffffff01 differ)
attacker: REQ #3 len=60 xid=0xffffff03 from 127.0.0.1:1023 (blind prediction for this call: 0xffffff02 differ)
attacker: REQ #4 len=60 xid=0xffffff04 from 127.0.0.1:1023 (blind prediction for this call: 0xffffff03 differ)
attacker: REQ #5 len=60 xid=0xffffff05 from 127.0.0.1:1023 (blind prediction for this call: 0xffffff04 differ)
attacker: REQ #6 len=60 xid=0xffffff06 from 127.0.0.1:1023 (blind prediction for this call: 0xffffff05 differ)

===== DF-3205 T1: wrong-origin (127.0.0.2) spoof acceptance =====
 | DF3205 T1: krpc_call err=0 payload='ATTA' (ATTACKER-PAYLOAD => reply from 127.0.0.2 ACCEPTED; SERVER-PAYLOAD => fix rejected the wrong-origin spoof)
attacker: mode=spoofsrc port=7771 blind=0
attacker: REQ #1 len=60 xid=0xffffff07 from 127.0.0.1:1023 (blind prediction for this call: 0xffffff00 differ)
attacker: spoof sent from 127.0.0.2

===== DF-3205 T4: portmap GETPORT spoof end-to-end (sniffed xid) =====
 | DF3205 T4: krpc_portmap err=0 port bytes ca fe (baseline: ca fe = attacker-chosen; fixed: 77 77 = follow-up legit answer)
attacker: mode=pmap port=111 blind=0
attacker: REQ #1 len=76 xid=0xffffff08 from 127.0.0.1:1023 (blind prediction for this call: 0xffffff00 differ)

DF-3205 BASELINE RUN DONE