feat(core): the packet capture's table after Java's Lauscher, measured against Java's own tables
captureRows.ts builds Java's rows per frame (Lauscher.datenVorbereiten): Ethernet; ARP, ICMP or IP; TCP or UDP; the data with Java's protocol recognition; with addresses and ports or ports only. The comment stays structured; captureCommentText says it with given words and numbers. ScenarioNetwork writes Java's finished tables per card (Lauscher.getDaten, German locale); all runtime runs are recorded again, NatRun has ttlOut. expectSameCaptures compares both views for every frame. Fixed where the engine differed: an ARP request's target MAC is the broadcast address, an ICMP error's identifier and sequence number are 0 (RFC 792), and host unreachable from a router carries the packet as forwarded. Not taken: Java's lower-case broadcast address in a reply to 0.0.0.0, and the typo 'Exeeded'. RIP keeps its recordings: Java's staggered router start now gives a different startup on this machine. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Claude Opus 5.5
+4
-2
File diff suppressed because one or more lines are too long
@@ -16,6 +16,7 @@ export * from './runtime/snapshot.js';
|
||||
export * from './runtime/speed.js';
|
||||
export * from './runtime/trace.js';
|
||||
export * from './runtime/capture.js';
|
||||
export * from './runtime/captureRows.js';
|
||||
export * from './util/equal.js';
|
||||
export * from './util/javaIp.js';
|
||||
export * from './util/swiftString.js';
|
||||
|
||||
@@ -0,0 +1,214 @@
|
||||
// The packet capture's table as Java FILIUS shows it
|
||||
// (filius.rahmenprogramm.nachrichten.Lauscher.datenVorbereiten): per frame a
|
||||
// row for each layer it carries — Ethernet; then ARP, ICMP or IP; for IP the
|
||||
// TCP or UDP segment; and its data, when there are any. Seven columns: number,
|
||||
// time, source, destination, protocol, layer, comment.
|
||||
//
|
||||
// The comment stays structured, so that the editor can say it in the
|
||||
// viewer's language and format its numbers (Java: the words of its message
|
||||
// bundle, the numbers with the locale's grouping); captureCommentText says it
|
||||
// with given words, as Java does. The time is the frame's simulation time;
|
||||
// Java shows its wall clock.
|
||||
//
|
||||
// Departures from Java: "ICMP Time Exceeded (poof)", where Java misspells
|
||||
// "Exeeded"; an IP packet carries only TCP, UDP or ICMP here, so Java's row
|
||||
// for an unknown transport protocol (all empty) does not occur.
|
||||
|
||||
import type { CapturedFrame } from './capture.js';
|
||||
import { IPV4_PROTOCOL, TCP_FLAG, type ArpPacket, type IcmpMessage, type IPv4Packet } from './packets.js';
|
||||
|
||||
/** Java's four layers (Lauscher.PROTOKOLL_SCHICHTEN): network access, internet, transport, application. */
|
||||
export type CaptureLayer = 'networkAccess' | 'internet' | 'transport' | 'application';
|
||||
|
||||
export type CaptureComment =
|
||||
/** The Ethernet frame's type (EthernetFrame.IP, .ARP). */
|
||||
| { readonly kind: 'ethernetType'; readonly type: '0x800' | '0x806' }
|
||||
/** "Protocol: 17, TTL: 64". */
|
||||
| { readonly kind: 'ipProtocol'; readonly protocol: number; readonly timeToLive: number }
|
||||
/** "Search for MAC <target IP>" or "MAC is <sender MAC>", then the packet. */
|
||||
| { readonly kind: 'arp'; readonly operation: 'request' | 'reply'; readonly address: string; readonly packet: string }
|
||||
/** "SYN" or "FIN", then "SEQ: …" and, with the ACK flag, "ACK: …". */
|
||||
| { readonly kind: 'tcp'; readonly flag: 'SYN' | 'FIN' | undefined; readonly sequence: number; readonly acknowledgement: number | undefined }
|
||||
| { readonly kind: 'udp' }
|
||||
/** The ICMP message, its TTL, identifier, sequence number and the packet it carries. */
|
||||
| {
|
||||
readonly kind: 'icmp';
|
||||
readonly message: string;
|
||||
readonly timeToLive: number;
|
||||
readonly identifier: number;
|
||||
readonly sequenceNumber: number;
|
||||
readonly payload: string | undefined;
|
||||
}
|
||||
/** A segment's data, as text. */
|
||||
| { readonly kind: 'data'; readonly text: string };
|
||||
|
||||
export interface CaptureRow {
|
||||
readonly number: number;
|
||||
readonly timeMilliseconds: number;
|
||||
/** Null where Java leaves the cell empty (the data row without addresses). */
|
||||
readonly source: string | null;
|
||||
readonly destination: string | null;
|
||||
/** "" for Ethernet (Lauscher.ETHERNET) and data Java does not recognise. */
|
||||
readonly protocol: string;
|
||||
readonly layer: CaptureLayer;
|
||||
readonly comment: CaptureComment;
|
||||
}
|
||||
|
||||
/**
|
||||
* The rows of a card's frames. `withAddresses`: a segment's ends as
|
||||
* address:port, also on its data row (the data exchange window); else ports
|
||||
* only, and the data row without ends (the layered view).
|
||||
*/
|
||||
export function captureRows(frames: readonly CapturedFrame[], options: { withAddresses: boolean }): CaptureRow[] {
|
||||
const rows: CaptureRow[] = [];
|
||||
for (const { number, timeMilliseconds, frame } of frames) {
|
||||
const row = (source: string | null, destination: string | null, protocol: string, layer: CaptureLayer, comment: CaptureComment) =>
|
||||
rows.push({ number, timeMilliseconds, source, destination, protocol, layer, comment });
|
||||
const payload = frame.payload;
|
||||
row(frame.sourceMacAddress, frame.destinationMacAddress, '', 'networkAccess', { kind: 'ethernetType', type: payload.kind === 'arp' ? '0x806' : '0x800' });
|
||||
if (payload.kind === 'arp') {
|
||||
const arp = payload.packet;
|
||||
row(arp.senderIPAddress, arp.targetIPAddress, 'ARP', 'internet', {
|
||||
kind: 'arp',
|
||||
operation: arp.operation,
|
||||
address: arp.operation === 'request' ? arp.targetIPAddress : arp.senderMacAddress,
|
||||
packet: arpText(arp),
|
||||
});
|
||||
continue;
|
||||
}
|
||||
const packet = payload.packet;
|
||||
if (packet.payload.kind === 'icmp') {
|
||||
const message = packet.payload.message;
|
||||
row(packet.senderIPAddress, packet.receiverIPAddress, 'ICMP', 'internet', {
|
||||
kind: 'icmp',
|
||||
message: ICMP_MESSAGES[message.kind],
|
||||
timeToLive: packet.timeToLive,
|
||||
identifier: message.identifier,
|
||||
sequenceNumber: message.sequenceNumber,
|
||||
payload: message.embeddedOriginalPacket === undefined ? undefined : packetText(message.embeddedOriginalPacket),
|
||||
});
|
||||
continue;
|
||||
}
|
||||
row(packet.senderIPAddress, packet.receiverIPAddress, 'IP', 'internet', { kind: 'ipProtocol', protocol: IPV4_PROTOCOL[packet.protocol], timeToLive: packet.timeToLive });
|
||||
const segment = packet.payload.kind === 'tcp' ? packet.payload.segment : packet.payload.datagram;
|
||||
const end = (address: string, port: number) => (options.withAddresses ? `${address}:${port}` : String(port));
|
||||
const source = end(packet.senderIPAddress, segment.sourcePort);
|
||||
const destination = end(packet.receiverIPAddress, segment.destinationPort);
|
||||
if (packet.payload.kind === 'tcp') {
|
||||
const tcp = packet.payload.segment;
|
||||
const flag = (tcp.flags & TCP_FLAG.synchronize) !== 0 ? 'SYN' : (tcp.flags & TCP_FLAG.finish) !== 0 ? 'FIN' : undefined;
|
||||
const acknowledgement = (tcp.flags & TCP_FLAG.acknowledgement) !== 0 ? tcp.acknowledgementNumber : undefined;
|
||||
row(source, destination, 'TCP', 'transport', { kind: 'tcp', flag, sequence: tcp.sequenceNumber, acknowledgement });
|
||||
} else {
|
||||
row(source, destination, 'UDP', 'transport', { kind: 'udp' });
|
||||
}
|
||||
const text = new TextDecoder().decode(segment.payload);
|
||||
if (javaTrim(text) === '') continue;
|
||||
const protocol = applicationProtocol(text, segment.sourcePort, segment.destinationPort);
|
||||
row(options.withAddresses ? source : null, options.withAddresses ? destination : null, protocol, 'application', { kind: 'data', text });
|
||||
}
|
||||
return rows;
|
||||
}
|
||||
|
||||
/** The words Java's message bundle has for the comments (rp_lauscher_msg12–14). */
|
||||
export interface CaptureCommentWords {
|
||||
/** rp_lauscher_msg12 (English bundle: "Protocol") */
|
||||
readonly protocol: string;
|
||||
/** rp_lauscher_msg13 (English bundle: "Search for MAC") */
|
||||
readonly searchForMac: string;
|
||||
/** rp_lauscher_msg14 (English bundle: "MAC is") */
|
||||
readonly macIs: string;
|
||||
}
|
||||
|
||||
/** The comment as Java writes it, with these words and this number format (Java: the locale's grouping). */
|
||||
export function captureCommentText(comment: CaptureComment, words: CaptureCommentWords, formatNumber: (value: number) => string): string {
|
||||
switch (comment.kind) {
|
||||
case 'ethernetType':
|
||||
return comment.type;
|
||||
case 'ipProtocol':
|
||||
return `${words.protocol}: ${comment.protocol}, TTL: ${comment.timeToLive}`;
|
||||
case 'arp':
|
||||
return `${comment.operation === 'request' ? words.searchForMac : words.macIs} ${comment.address} ${comment.packet}`;
|
||||
case 'tcp': {
|
||||
const sequence = `SEQ: ${formatNumber(comment.sequence)}`;
|
||||
const acknowledgement = comment.acknowledgement === undefined ? '' : `, ACK: ${formatNumber(comment.acknowledgement)}`;
|
||||
return `${comment.flag === undefined ? '' : `${comment.flag}, `}${sequence}${acknowledgement}`;
|
||||
}
|
||||
case 'udp':
|
||||
return '';
|
||||
case 'icmp':
|
||||
return (
|
||||
`${comment.message}, TTL: ${comment.timeToLive}, Identifier: ${comment.identifier}, Seq.-No.: ${comment.sequenceNumber}` +
|
||||
(comment.payload === undefined ? '' : `, Payload: ${comment.payload}`)
|
||||
);
|
||||
case 'data':
|
||||
return comment.text;
|
||||
}
|
||||
}
|
||||
|
||||
const ICMP_MESSAGES: Record<IcmpMessage['kind'], string> = {
|
||||
echoReply: 'ICMP Echo Reply (pong)',
|
||||
destinationNetworkUnreachable: 'ICMP Network Unreachable',
|
||||
destinationHostUnreachable: 'ICMP Host Unreachable',
|
||||
echoRequest: 'ICMP Echo Request (ping)',
|
||||
timeExceeded: 'ICMP Time Exceeded (poof)',
|
||||
};
|
||||
|
||||
const ICMP_TYPE_CODE: Record<IcmpMessage['kind'], [number, number]> = {
|
||||
echoReply: [0, 0],
|
||||
destinationNetworkUnreachable: [3, 0],
|
||||
destinationHostUnreachable: [3, 1],
|
||||
echoRequest: [8, 0],
|
||||
timeExceeded: [11, 0],
|
||||
};
|
||||
|
||||
/** ArpPaket.toString. */
|
||||
function arpText(arp: ArpPacket): string {
|
||||
return `[op=${arp.operation === 'request' ? 'REQUEST' : 'REPLY'}, sender=${arp.senderMacAddress}|${arp.senderIPAddress}, target=${arp.targetMacAddress}|${arp.targetIPAddress}]`;
|
||||
}
|
||||
|
||||
/** IpPaket.toString, IcmpPaket.toString for an ICMP packet: the packet an ICMP error carries. */
|
||||
function packetText(packet: IPv4Packet): string {
|
||||
if (packet.payload.kind !== 'icmp') {
|
||||
return `[id=${packet.identity}, ttl=${packet.timeToLive}, protocol=${IPV4_PROTOCOL[packet.protocol]}, dest=${packet.receiverIPAddress}, src=${packet.senderIPAddress}]`;
|
||||
}
|
||||
const message = packet.payload.message;
|
||||
const [type, code] = ICMP_TYPE_CODE[message.kind];
|
||||
const carried = message.embeddedOriginalPacket === undefined ? '' : `, payload:${packetText(message.embeddedOriginalPacket)}`;
|
||||
return (
|
||||
`[id=${packet.identity}; ttl=${packet.timeToLive}; protocol=1; sender=${packet.senderIPAddress}; target=${packet.receiverIPAddress}; ` +
|
||||
`icmpType=${type}; icmpCode=${code}; identifier=${message.identifier}; seqNr=${message.sequenceNumber}${carried}]`
|
||||
);
|
||||
}
|
||||
|
||||
/** Java's String.trim: cuts characters up to U+0020 at both ends. */
|
||||
function javaTrim(text: string): string {
|
||||
let start = 0;
|
||||
let end = text.length;
|
||||
while (start < end && text.charCodeAt(start) <= 0x20) start += 1;
|
||||
while (end > start && text.charCodeAt(end - 1) <= 0x20) end -= 1;
|
||||
return text.slice(start, end);
|
||||
}
|
||||
|
||||
function startsWithIgnoringCase(text: string, prefix: string): boolean {
|
||||
return text.slice(0, prefix.length).toLowerCase() === prefix.toLowerCase();
|
||||
}
|
||||
|
||||
const POP3_COMMANDS = ['USER ', 'PASS ', 'STAT ', 'LIST ', 'RETR ', 'DELE ', 'NOOP', 'RSET', 'QUIT', 'TOP'];
|
||||
|
||||
/** Lauscher.classifyApplicationLayerProtocol: the protocol a segment's data belong to, "" when Java does not know. */
|
||||
function applicationProtocol(text: string, sourcePort: number, destinationPort: number): string {
|
||||
if (['//0x00//', '//0x01//', '//0x80//', '//0x81//', '//0x40//'].some((marker) => text.includes(marker))) return 'GNT';
|
||||
if (
|
||||
(sourcePort === 110 && (startsWithIgnoringCase(text, '+OK') || startsWithIgnoringCase(text, '-ERR'))) ||
|
||||
(destinationPort === 110 && POP3_COMMANDS.some((command) => startsWithIgnoringCase(text, command)))
|
||||
) {
|
||||
return 'POP3';
|
||||
}
|
||||
if ((sourcePort === 25 && ['1', '2', '3', '4', '5'].some((digit) => text.startsWith(digit))) || destinationPort === 25) return 'SMTP';
|
||||
if (text.includes('ID=') && text.includes('QR=') && text.includes('RCODE=')) return 'DNS';
|
||||
if (text.includes('DHCP')) return 'DHCP';
|
||||
if ((sourcePort === 521 && destinationPort === 520) || (sourcePort === 520 && destinationPort === 521)) return 'RIP';
|
||||
if ((destinationPort === 80 && text.toLowerCase().includes('http/')) || sourcePort === 80) return 'HTTP';
|
||||
return '';
|
||||
}
|
||||
@@ -3716,13 +3716,13 @@ export class NetworkRuntimeEngine {
|
||||
return this.stateValue.arpCachesByNodeId.get(nodeId)?.get(ipAddress)?.macAddress;
|
||||
}
|
||||
|
||||
/** One ARP request for `targetIPAddress`, broadcast from the interface. */
|
||||
/** One ARP request for `targetIPAddress`, broadcast from the interface; its target MAC the broadcast address, as Java's (ARP.sendeARPBroadcast; Swift, and swiftArp: zeros). */
|
||||
private sendArpRequest(nodeId: Id, networkInterface: NetworkInterface, targetIPAddress: string): void {
|
||||
const request: ArpPacket = {
|
||||
operation: 'request',
|
||||
senderMacAddress: networkInterface.macAddress,
|
||||
senderIPAddress: networkInterface.ipAddress,
|
||||
targetMacAddress: UNSPECIFIED_MAC_ADDRESS,
|
||||
targetMacAddress: this.swiftArp ? UNSPECIFIED_MAC_ADDRESS : ETHERNET_BROADCAST_MAC_ADDRESS,
|
||||
targetIPAddress,
|
||||
};
|
||||
const frame: EthernetFrame = {
|
||||
@@ -4210,7 +4210,7 @@ export class NetworkRuntimeEngine {
|
||||
const answered = () =>
|
||||
(this.stateValue.icmpObservationsByNodeId.get(fromNodeId) ?? [])
|
||||
.slice(observationCount)
|
||||
.some((observation) => observation.message.identifier === identifier && observation.message.sequenceNumber === sequenceNumber);
|
||||
.some((observation) => answersEcho(observation.message, identifier, sequenceNumber));
|
||||
let sent: IPv4DeliveryResult | undefined;
|
||||
let sentAt = this.stateValue.currentTimeMilliseconds;
|
||||
const handedOn = this.sendIPv4PacketWithOptions(fromNodeId, packet, sourceInterface.portId, true, 'sent', {
|
||||
@@ -4229,9 +4229,7 @@ export class NetworkRuntimeEngine {
|
||||
}
|
||||
const result = sent ?? handedOn;
|
||||
const newObservations = (this.stateValue.icmpObservationsByNodeId.get(fromNodeId) ?? []).slice(observationCount);
|
||||
const observation = newObservations.findLast(
|
||||
(candidate) => candidate.message.identifier === identifier && candidate.message.sequenceNumber === sequenceNumber,
|
||||
);
|
||||
const observation = newObservations.findLast((candidate) => answersEcho(candidate.message, identifier, sequenceNumber));
|
||||
if (observation !== undefined) {
|
||||
switch (observation.message.kind) {
|
||||
case 'echoReply':
|
||||
@@ -4533,11 +4531,12 @@ export class NetworkRuntimeEngine {
|
||||
detail: 'TTL decremented',
|
||||
});
|
||||
// Java: a router whose ARP finds no one answers host unreachable; for
|
||||
// ICMP only an echo request (ICMP.sendUnicastToNextHop).
|
||||
// ICMP only an echo request (ICMP.sendUnicastToNextHop). The error carries
|
||||
// the packet as the router forwarded it, its TTL lowered (measured).
|
||||
const echoOrNotIcmp = packet.payload.kind !== 'icmp' || packet.payload.message.kind === 'echoRequest';
|
||||
const result = this.sendIPv4PacketWithOptions(nodeId, forwarded, undefined, false, 'forwarded', {
|
||||
onUnresolved: () => {
|
||||
if (echoOrNotIcmp) this.emitIcmpError(nodeId, networkInterface, 'destinationHostUnreachable', packet);
|
||||
if (echoOrNotIcmp) this.emitIcmpError(nodeId, networkInterface, 'destinationHostUnreachable', forwarded);
|
||||
},
|
||||
onFinished: finished,
|
||||
});
|
||||
@@ -4646,11 +4645,8 @@ export class NetworkRuntimeEngine {
|
||||
protocol: 'icmp',
|
||||
payload: {
|
||||
kind: 'icmp',
|
||||
message: icmpMessage(kind, {
|
||||
identifier: icmpIdentifier(originalPacket),
|
||||
sequenceNumber: icmpSequenceNumber(originalPacket),
|
||||
embeddedOriginalPacket: embeddedOriginal(originalPacket),
|
||||
}),
|
||||
// Identifier and sequence number unused, 0 (RFC 792, Java's sendeICMP for errors).
|
||||
message: icmpMessage(kind, { embeddedOriginalPacket: embeddedOriginal(originalPacket) }),
|
||||
},
|
||||
};
|
||||
this.recordTrace({
|
||||
@@ -4672,11 +4668,7 @@ export class NetworkRuntimeEngine {
|
||||
kind: IcmpMessageKind,
|
||||
originalPacket: IPv4Packet,
|
||||
): void {
|
||||
const message = icmpMessage(kind, {
|
||||
identifier: icmpIdentifier(originalPacket),
|
||||
sequenceNumber: icmpSequenceNumber(originalPacket),
|
||||
embeddedOriginalPacket: embeddedOriginal(originalPacket),
|
||||
});
|
||||
const message = icmpMessage(kind, { embeddedOriginalPacket: embeddedOriginal(originalPacket) });
|
||||
const packet: IPv4Packet = {
|
||||
identity: this.allocatePacketIdentity(),
|
||||
senderIPAddress: this.networkInterfaces(nodeId)[0]?.ipAddress ?? UNSPECIFIED_IP_ADDRESS,
|
||||
@@ -5010,13 +5002,13 @@ function embeddedOriginal(packet: IPv4Packet): IPv4Packet {
|
||||
return packet;
|
||||
}
|
||||
|
||||
function icmpIdentifier(packet: IPv4Packet): number {
|
||||
return packet.payload.kind === 'icmp' ? packet.payload.message.identifier : 0;
|
||||
/** The echo reply to an echo request, or an error about it (it carries the request). */
|
||||
function answersEcho(message: IcmpMessage, identifier: number, sequenceNumber: number): boolean {
|
||||
if (message.kind === 'echoReply') return message.identifier === identifier && message.sequenceNumber === sequenceNumber;
|
||||
const carried = message.embeddedOriginalPacket?.payload;
|
||||
return carried?.kind === 'icmp' && carried.message.kind === 'echoRequest' && carried.message.identifier === identifier && carried.message.sequenceNumber === sequenceNumber;
|
||||
}
|
||||
|
||||
function icmpSequenceNumber(packet: IPv4Packet): number {
|
||||
return packet.payload.kind === 'icmp' ? packet.payload.message.sequenceNumber : 0;
|
||||
}
|
||||
|
||||
export function ethernetHeaders(frame: EthernetFrame): HeaderField[] {
|
||||
return [
|
||||
|
||||
@@ -10,13 +10,13 @@ import { dirname, join } from 'node:path';
|
||||
import { fileURLToPath } from 'node:url';
|
||||
import { describe, expect, it } from 'vitest';
|
||||
import { icmpMessage, type NetworkRuntimeEngine } from '../src/index.js';
|
||||
import { expectSameCaptures, withClientPortText, GAP_TOLERANCE_MILLISECONDS, gaps, javaFrames, watchedEngine, type JavaFrame } from './javaRun.js';
|
||||
import { expectSameCaptures, withClientPortText, GAP_TOLERANCE_MILLISECONDS, gaps, javaFrames, watchedEngine, type JavaFrame, type JavaTables } from './javaRun.js';
|
||||
import type { Scenario } from './scenario.js';
|
||||
|
||||
const scenarioDirectory = join(dirname(fileURLToPath(import.meta.url)), 'scenarios');
|
||||
const HOST = '00000000-0000-0000-0000-000000000301';
|
||||
|
||||
interface JavaRun {
|
||||
interface JavaRun extends JavaTables {
|
||||
frames: Record<string, JavaFrame[]>;
|
||||
events: [number, string][];
|
||||
}
|
||||
@@ -117,7 +117,7 @@ describe('ARP as Java FILIUS runs it', () => {
|
||||
expect(actual[index]?.text, `frame #${index + 1}`).toBe(expected[index]?.text);
|
||||
expect(Math.abs(actual[index]!.gap - expected[index]!.gap), `gap before frame #${index + 1}`).toBeLessThanOrEqual(GAP_TOLERANCE_MILLISECONDS);
|
||||
}
|
||||
expectSameCaptures(engine, scenario, java.frames, { text: withClientPortText });
|
||||
expectSameCaptures(engine, scenario, java.frames, { text: withClientPortText, tables: java });
|
||||
});
|
||||
}
|
||||
});
|
||||
|
||||
@@ -0,0 +1,150 @@
|
||||
// The capture table's rules that no Java run of the oracle shows
|
||||
// (Lauscher.datenVorbereiten, classifyApplicationLayerProtocol); the rest is
|
||||
// compared with Java's own tables in the *Java.test.ts files (javaRun.ts).
|
||||
|
||||
import { describe, expect, it } from 'vitest';
|
||||
import {
|
||||
captureCommentText,
|
||||
captureRows,
|
||||
icmpMessage,
|
||||
TCP_FLAG,
|
||||
type CapturedFrame,
|
||||
type CaptureRow,
|
||||
type EthernetFrame,
|
||||
type IPv4Packet,
|
||||
} from '../src/index.js';
|
||||
|
||||
const WORDS = { protocol: 'Protocol', searchForMac: 'Search for MAC', macIs: 'MAC is' };
|
||||
const plain = (value: number) => String(value);
|
||||
|
||||
function captured(packet: IPv4Packet, number = 1): CapturedFrame {
|
||||
const frame: EthernetFrame = { identity: number, sourceMacAddress: '02:00:00:00:00:01', destinationMacAddress: '02:00:00:00:00:02', payload: { kind: 'ipv4', packet } };
|
||||
return { number, timeMilliseconds: 10 * number, frame };
|
||||
}
|
||||
|
||||
function udp(text: string, sourcePort: number, destinationPort: number): IPv4Packet {
|
||||
return {
|
||||
identity: 7,
|
||||
senderIPAddress: '10.0.0.1',
|
||||
receiverIPAddress: '10.0.0.2',
|
||||
timeToLive: 64,
|
||||
protocol: 'udp',
|
||||
payload: { kind: 'udp', datagram: { sourcePort, destinationPort, payload: new TextEncoder().encode(text) } },
|
||||
};
|
||||
}
|
||||
|
||||
function tcp(text: string, sourcePort: number, destinationPort: number, flags: number = TCP_FLAG.acknowledgement): IPv4Packet {
|
||||
return {
|
||||
identity: 8,
|
||||
senderIPAddress: '10.0.0.1',
|
||||
receiverIPAddress: '10.0.0.2',
|
||||
timeToLive: 64,
|
||||
protocol: 'tcp',
|
||||
payload: {
|
||||
kind: 'tcp',
|
||||
segment: { sourcePort, destinationPort, sequenceNumber: 1000, acknowledgementNumber: 2000, flags, payload: new TextEncoder().encode(text) },
|
||||
},
|
||||
};
|
||||
}
|
||||
|
||||
/** The protocol of the data row, or undefined without one. */
|
||||
function applicationProtocol(packet: IPv4Packet): string | undefined {
|
||||
return captureRows([captured(packet)], { withAddresses: true }).find((row) => row.layer === 'application')?.protocol;
|
||||
}
|
||||
|
||||
const comments = (rows: CaptureRow[]) => rows.map((row) => captureCommentText(row.comment, WORDS, plain));
|
||||
|
||||
describe('capture table', () => {
|
||||
it("names the data's protocol as Java does, by markers, ports and words", () => {
|
||||
expect(applicationProtocol(tcp('x//0x40//y', 6346, 6346))).toBe('GNT');
|
||||
expect(applicationProtocol(tcp('+ok 2 messages', 110, 50000))).toBe('POP3');
|
||||
expect(applicationProtocol(tcp('retr 1', 50000, 110))).toBe('POP3');
|
||||
expect(applicationProtocol(tcp('noop', 50000, 110))).toBe('POP3');
|
||||
expect(applicationProtocol(tcp('hello', 50000, 110))).toBe('');
|
||||
expect(applicationProtocol(tcp('250 OK', 25, 50000))).toBe('SMTP');
|
||||
expect(applicationProtocol(tcp('anything', 50000, 25))).toBe('SMTP');
|
||||
expect(applicationProtocol(udp('ID=1 QR=0 RCODE=0', 50000, 53))).toBe('DNS');
|
||||
expect(applicationProtocol(udp('DHCPDISCOVER', 68, 67))).toBe('DHCP');
|
||||
expect(applicationProtocol(udp('table', 521, 520))).toBe('RIP');
|
||||
expect(applicationProtocol(udp('table', 520, 520))).toBe('');
|
||||
expect(applicationProtocol(tcp('GET / HTTP/1.1', 50000, 80))).toBe('HTTP');
|
||||
expect(applicationProtocol(tcp('GET /', 50000, 80))).toBe('');
|
||||
expect(applicationProtocol(tcp('<html>', 80, 50000))).toBe('HTTP');
|
||||
// GNT comes first, then POP3, SMTP, DNS, DHCP, RIP, HTTP.
|
||||
expect(applicationProtocol(udp('DHCP ID=1 QR=0 RCODE=0', 68, 67))).toBe('DNS');
|
||||
});
|
||||
|
||||
it('shows data only when Java trims them to something, and without ends in the layered view', () => {
|
||||
expect(applicationProtocol(udp(' \t\n', 9, 9))).toBeUndefined();
|
||||
expect(applicationProtocol(tcp('', 50000, 80))).toBeUndefined();
|
||||
const withAddresses = captureRows([captured(udp(' x ', 5000, 9))], { withAddresses: true });
|
||||
const layered = captureRows([captured(udp(' x ', 5000, 9))], { withAddresses: false });
|
||||
expect(withAddresses.map((row) => [row.source, row.destination])).toEqual([
|
||||
['02:00:00:00:00:01', '02:00:00:00:00:02'],
|
||||
['10.0.0.1', '10.0.0.2'],
|
||||
['10.0.0.1:5000', '10.0.0.2:9'],
|
||||
['10.0.0.1:5000', '10.0.0.2:9'],
|
||||
]);
|
||||
expect(layered.map((row) => [row.source, row.destination]).slice(2)).toEqual([
|
||||
['5000', '9'],
|
||||
[null, null],
|
||||
]);
|
||||
expect(comments(layered)).toEqual(['0x800', 'Protocol: 17, TTL: 64', '', ' x ']);
|
||||
});
|
||||
|
||||
it('marks a SYN, else a FIN, and an acknowledgement only with its flag', () => {
|
||||
const segmentComment = (flags: number) => comments(captureRows([captured(tcp('', 1, 2, flags))], { withAddresses: true }))[2];
|
||||
expect(segmentComment(TCP_FLAG.synchronize)).toBe('SYN, SEQ: 1000');
|
||||
expect(segmentComment(TCP_FLAG.synchronize | TCP_FLAG.finish | TCP_FLAG.acknowledgement)).toBe('SYN, SEQ: 1000, ACK: 2000');
|
||||
expect(segmentComment(TCP_FLAG.finish | TCP_FLAG.acknowledgement)).toBe('FIN, SEQ: 1000, ACK: 2000');
|
||||
expect(segmentComment(TCP_FLAG.push | TCP_FLAG.reset)).toBe('SEQ: 1000');
|
||||
expect(captureCommentText({ kind: 'tcp', flag: undefined, sequence: 1234567, acknowledgement: 1000 }, WORDS, (value) => value.toLocaleString('de-DE'))).toBe(
|
||||
'SEQ: 1.234.567, ACK: 1.000',
|
||||
);
|
||||
});
|
||||
|
||||
it('writes an ICMP error with the packet it carries, also an ICMP one inside', () => {
|
||||
const echo: IPv4Packet = {
|
||||
identity: 3,
|
||||
senderIPAddress: '10.0.0.1',
|
||||
receiverIPAddress: '10.0.0.9',
|
||||
timeToLive: 1,
|
||||
protocol: 'icmp',
|
||||
payload: { kind: 'icmp', message: icmpMessage('echoRequest', { identifier: 4, sequenceNumber: 5 }) },
|
||||
};
|
||||
const error: IPv4Packet = {
|
||||
identity: 6,
|
||||
senderIPAddress: '10.0.0.254',
|
||||
receiverIPAddress: '10.0.0.1',
|
||||
timeToLive: 64,
|
||||
protocol: 'icmp',
|
||||
payload: { kind: 'icmp', message: icmpMessage('timeExceeded', { embeddedOriginalPacket: echo }) },
|
||||
};
|
||||
const rows = captureRows([captured(error)], { withAddresses: true });
|
||||
expect(rows.map((row) => [row.protocol, row.layer])).toEqual([
|
||||
['', 'networkAccess'],
|
||||
['ICMP', 'internet'],
|
||||
]);
|
||||
expect(comments(rows)[1]).toBe(
|
||||
'ICMP Time Exceeded (poof), TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: ' +
|
||||
'[id=3; ttl=1; protocol=1; sender=10.0.0.1; target=10.0.0.9; icmpType=8; icmpCode=0; identifier=4; seqNr=5]',
|
||||
);
|
||||
const unreachable = { ...error, payload: { kind: 'icmp' as const, message: icmpMessage('destinationNetworkUnreachable', { embeddedOriginalPacket: udp('x', 1, 2) }) } };
|
||||
expect(comments(captureRows([captured(unreachable)], { withAddresses: true }))[1]).toBe(
|
||||
'ICMP Network Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=7, ttl=64, protocol=17, dest=10.0.0.2, src=10.0.0.1]',
|
||||
);
|
||||
});
|
||||
|
||||
it('keeps the frame number and time on each of its rows', () => {
|
||||
const rows = captureRows([captured(udp('a', 1, 2), 4), captured(udp('', 1, 2), 9)], { withAddresses: true });
|
||||
expect(rows.map((row) => [row.number, row.timeMilliseconds])).toEqual([
|
||||
[4, 40],
|
||||
[4, 40],
|
||||
[4, 40],
|
||||
[4, 40],
|
||||
[9, 90],
|
||||
[9, 90],
|
||||
[9, 90],
|
||||
]);
|
||||
});
|
||||
});
|
||||
@@ -16,12 +16,12 @@ import { dirname, join } from 'node:path';
|
||||
import { fileURLToPath } from 'node:url';
|
||||
import { describe, expect, it } from 'vitest';
|
||||
import { stableMacAddress } from '../src/index.js';
|
||||
import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, javaFrames, watchedEngine, type JavaFrame, type SeenFrame } from './javaRun.js';
|
||||
import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, javaFrames, watchedEngine, type JavaFrame, type SeenFrame, type JavaTables } from './javaRun.js';
|
||||
import { type Scenario } from './scenario.js';
|
||||
|
||||
const scenarioDirectory = join(dirname(fileURLToPath(import.meta.url)), 'scenarios');
|
||||
|
||||
interface JavaRun {
|
||||
interface JavaRun extends JavaTables {
|
||||
frames: Record<string, JavaFrame[]>;
|
||||
devices: Record<string, [string, string, string, string]>;
|
||||
}
|
||||
@@ -89,7 +89,7 @@ describe('DHCP as Java FILIUS runs it', () => {
|
||||
// Each card's capture, with one client: of two that start together, Java's
|
||||
// log loses the DISCOVER of the one that sends second, and which sends
|
||||
// first varies (javaRun.ts).
|
||||
if (clients.length === 1) expectSameCaptures(engine.engine, scenario, java.frames, { text: (text) => text.replace(LINK_LOCAL, '169.254.1.x') });
|
||||
if (clients.length === 1) expectSameCaptures(engine.engine, scenario, java.frames, { text: (text) => text.replace(LINK_LOCAL, '169.254.1.x'), tables: java });
|
||||
const linkLocal = (devices: Record<string, string[]>) =>
|
||||
Object.fromEntries(Object.entries(devices).map(([node, device]) => [node, device.map((value) => value.replace(LINK_LOCAL, '169.254.1.x'))]));
|
||||
expect(linkLocal(engine.devices)).toEqual(linkLocal(java.devices));
|
||||
|
||||
@@ -16,14 +16,14 @@ import { dirname, join } from 'node:path';
|
||||
import { fileURLToPath } from 'node:url';
|
||||
import { describe, expect, it } from 'vitest';
|
||||
import type { DnsAddressResolution, NetworkRuntimeEngine } from '../src/index.js';
|
||||
import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, gaps, javaFrames, watchedEngine, type JavaFrame, type SeenFrame } from './javaRun.js';
|
||||
import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, gaps, javaFrames, watchedEngine, type JavaFrame, type SeenFrame, type JavaTables } from './javaRun.js';
|
||||
import type { Scenario } from './scenario.js';
|
||||
|
||||
const scenarioDirectory = join(dirname(fileURLToPath(import.meta.url)), 'scenarios');
|
||||
const CLIENT = '00000000-0000-0000-0000-000000000101';
|
||||
const LOST_CLIENT = '00000000-0000-0000-0000-000000000104';
|
||||
|
||||
interface JavaRun {
|
||||
interface JavaRun extends JavaTables {
|
||||
frames: Record<string, JavaFrame[]>;
|
||||
events: [number, string][];
|
||||
}
|
||||
@@ -122,7 +122,7 @@ describe('DNS as Java FILIUS runs it', () => {
|
||||
expect(actual[index]?.text, `frame #${index + 1}`).toBe(expected[index]?.text);
|
||||
expect(Math.abs(actual[index]!.gap - expected[index]!.gap), `gap before frame #${index + 1}`).toBeLessThanOrEqual(GAP_TOLERANCE_MILLISECONDS);
|
||||
}
|
||||
expectSameCaptures(engine, scenario, java.frames, { text: (text) => normalized([{ time: 0, text }])[0]!.text, until });
|
||||
expectSameCaptures(engine, scenario, java.frames, { text: (text) => normalized([{ time: 0, text }])[0]!.text, until, tables: java });
|
||||
});
|
||||
}
|
||||
}
|
||||
|
||||
@@ -22,7 +22,15 @@
|
||||
// (engine.test.ts checks that: one cable's delay is below this tolerance).
|
||||
|
||||
import { expect } from 'vitest';
|
||||
import { NetworkRuntimeEngine, TCP_FLAG, type EthernetFrame } from '../src/index.js';
|
||||
import {
|
||||
captureCommentText,
|
||||
captureRows,
|
||||
NetworkRuntimeEngine,
|
||||
TCP_FLAG,
|
||||
type CapturedFrame,
|
||||
type CaptureLayer,
|
||||
type EthernetFrame,
|
||||
} from '../src/index.js';
|
||||
import { snapshotOf, type Scenario } from './scenario.js';
|
||||
|
||||
export const GAP_TOLERANCE_MILLISECONDS = 120;
|
||||
@@ -177,15 +185,21 @@ export function expectSameCaptures(
|
||||
until?: number | undefined;
|
||||
tolerance?: number;
|
||||
starts?: { java: number; engine: number };
|
||||
/** Java's tables of the cards (ScenarioNetwork.writeRows), compared for the frames compared. */
|
||||
tables?: JavaTables;
|
||||
/** Placeholders in a table cell, beyond those of tableCell. */
|
||||
cell?: (text: string) => string;
|
||||
} = {},
|
||||
): void {
|
||||
const text = options.text ?? ((each: string) => each);
|
||||
const engineByCard = new Map<string, SeenFrame[]>();
|
||||
const capturedByCard = new Map<string, readonly CapturedFrame[]>();
|
||||
for (const node of scenario.nodes) {
|
||||
if (node.kind === 'networkSwitch') continue;
|
||||
node.ports.forEach((port, index) => {
|
||||
const frames = engine.capture.frames(port.id).map((each) => ({ time: each.timeMilliseconds, text: text(engineText(each.frame)) }));
|
||||
engineByCard.set(index === 0 ? node.id : `${node.id}#${index}`, frames);
|
||||
const card = index === 0 ? node.id : `${node.id}#${index}`;
|
||||
capturedByCard.set(card, engine.capture.frames(port.id));
|
||||
engineByCard.set(card, capturedByCard.get(card)!.map((each) => ({ time: each.timeMilliseconds, text: text(engineText(each.frame)) })));
|
||||
});
|
||||
}
|
||||
const javaByCard = new Map(Object.entries(java).map(([card, frames]) => [card, frames.map((frame) => ({ time: frame.time, text: text(javaText(frame)) }))]));
|
||||
@@ -198,7 +212,29 @@ export function expectSameCaptures(
|
||||
const normalized = options.normalized ?? ((frames: SeenFrame[]) => frames);
|
||||
const window = (frames: SeenFrame[], start: number) =>
|
||||
frames.filter((frame) => frame.time - start >= from && frame.time - start < until).map((frame) => ({ time: frame.time - start, text: frame.text }));
|
||||
const inWindow = (time: number, start: number) => time - start >= from && time - start < until;
|
||||
for (const [card, javaList] of javaByCard) {
|
||||
if (options.tables !== undefined) {
|
||||
// The rows of the frames in the window, frame by frame.
|
||||
const javaNumbers = javaList.flatMap((frame, index) => (inWindow(frame.time, javaStart) ? [index + 1] : []));
|
||||
const engineFrames = capturedByCard.get(card)!.filter((each) => inWindow(each.timeMilliseconds, engineStart));
|
||||
for (const [view, withAddresses] of [['rows', true], ['layeredRows', false]] as const) {
|
||||
const javaRows = options.tables[view]?.[card];
|
||||
if (javaRows === undefined) continue;
|
||||
const engineRows = captureRows(engineFrames, { withAddresses });
|
||||
const cell = (value: string | null) => (value === null ? null : (options.cell ?? ((each: string) => each))(tableCell(value)));
|
||||
for (const [index, number] of javaNumbers.entries()) {
|
||||
const frame = engineFrames[index];
|
||||
const expectedRows = javaRows.filter((row) => row[0] === String(number)).map((row) => row.slice(1).map(cell));
|
||||
// A frame a test added where Java errs (JAVA_BUGS) has no table of Java's.
|
||||
if (expectedRows.length === 0 && number > Math.max(0, ...javaRows.map((row) => Number(row[0])))) continue;
|
||||
const actualRows = engineRows
|
||||
.filter((row) => row.number === frame?.number)
|
||||
.map((row) => [row.source, row.destination, row.protocol, JAVA_LAYERS[row.layer], captureCommentText(row.comment, JAVA_WORDS, javaNumber)].map(cell));
|
||||
expect(actualRows, `${card} ${view} of frame #${index + 1}`).toEqual(expectedRows);
|
||||
}
|
||||
}
|
||||
}
|
||||
const expected = normalized(window(javaList, javaStart));
|
||||
const actual = normalized(window(engineByCard.get(card)!, engineStart));
|
||||
for (let index = 0; index < Math.max(expected.length, actual.length); index += 1) {
|
||||
@@ -214,3 +250,36 @@ export function expectSameCaptures(
|
||||
export function withClientPortText(text: string): string {
|
||||
return text.replace(/:(\d{5})\b/g, (whole, port: string) => (Number(port) >= 49_152 ? ':client' : whole));
|
||||
}
|
||||
|
||||
/** Java's capture tables per card: number, source, destination, protocol, layer, comment (ScenarioNetwork.writeRows). */
|
||||
export interface JavaTables {
|
||||
rows?: Record<string, (string | null)[][]>;
|
||||
layeredRows?: Record<string, (string | null)[][]>;
|
||||
}
|
||||
|
||||
/** Java's layer names and comment words: its German message bundle, the locale it runs in (Locale.GERMANY). */
|
||||
const JAVA_LAYERS: Record<CaptureLayer, string> = { networkAccess: 'Netzzugang', internet: 'Vermittlung', transport: 'Transport', application: 'Anwendung' };
|
||||
const JAVA_WORDS = { protocol: 'Protokoll', searchForMac: 'Suche nach MAC f\u00fcr', macIs: 'MAC ist' };
|
||||
|
||||
/** NumberFormat for Locale.GERMANY: groups of three digits with dots. */
|
||||
function javaNumber(value: number): string {
|
||||
return String(value).replace(/\B(?=(\d{3})+(?!\d))/g, '.');
|
||||
}
|
||||
|
||||
/**
|
||||
* Placeholders every test needs in a table cell: free ports, DNS message IDs,
|
||||
* IP packet IDs, link-local addresses. And two departures from Java: its ARP
|
||||
* reply to 0.0.0.0 writes the broadcast address in lower case
|
||||
* (ARP.sendArpReply), everything else in upper case — the engine always in
|
||||
* upper case (better than Java where nothing depends on it); and Java
|
||||
* misspells "ICMP Time Exeeded" (a typo, not taken).
|
||||
*/
|
||||
function tableCell(text: string): string {
|
||||
return withClientPortText(text)
|
||||
.replaceAll('ff:ff:ff:ff:ff:ff', 'FF:FF:FF:FF:FF:FF')
|
||||
.replace('ICMP Time Exeeded (poof)', 'ICMP Time Exceeded (poof)')
|
||||
.replace(/^(\d{5})$/, (whole, port: string) => (Number(port) >= 49_152 ? 'client' : whole))
|
||||
.replace(/ID=\d+/g, 'ID=x')
|
||||
.replace(/\[id=\d+/g, '[id=x')
|
||||
.replace(/169\.254\.1\.\d+/g, '169.254.1.x');
|
||||
}
|
||||
|
||||
@@ -22,7 +22,7 @@ import { dirname, join } from 'node:path';
|
||||
import { fileURLToPath } from 'node:url';
|
||||
import { describe, expect, it } from 'vitest';
|
||||
import type { Id, IPv4DeliveryResult, NetworkRuntimeEngine } from '../src/index.js';
|
||||
import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, javaFrames, watchedEngine, type JavaFrame, type SeenFrame } from './javaRun.js';
|
||||
import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, javaFrames, watchedEngine, type JavaFrame, type SeenFrame, type JavaTables } from './javaRun.js';
|
||||
import type { Scenario } from './scenario.js';
|
||||
|
||||
const scenarioDirectory = join(dirname(fileURLToPath(import.meta.url)), 'scenarios');
|
||||
@@ -49,7 +49,7 @@ function bySender(frames: readonly SeenFrame[]): Map<string, SeenFrame[]> {
|
||||
return result;
|
||||
}
|
||||
|
||||
interface JavaRun {
|
||||
interface JavaRun extends JavaTables {
|
||||
frames: Record<string, JavaFrame[]>;
|
||||
events: [number, string][];
|
||||
nat: string[];
|
||||
@@ -60,13 +60,17 @@ type Call = (label: string, run: () => string) => void;
|
||||
const text = (value: string) => new TextEncoder().encode(value);
|
||||
const decode = (value: Uint8Array | undefined) => (value === undefined ? 'null' : new TextDecoder().decode(value));
|
||||
|
||||
const ICMP_CODES: Record<string, string> = { timeExceeded: '11/0', destinationNetworkUnreachable: '3/0', destinationHostUnreachable: '3/1' };
|
||||
|
||||
/** A ping in Java's words: the answer's type and code and its sender, or null. */
|
||||
function ping(engine: NetworkRuntimeEngine, from: Id, target: string, sequenceNumber: number): string {
|
||||
const result: IPv4DeliveryResult = engine.sendIcmpEcho(from, target, { sequenceNumber });
|
||||
if (result.type === 'icmpError') return `ICMP ${result.kind}`;
|
||||
const reply = (engine.state.icmpObservationsByNodeId.get(from) ?? []).find(
|
||||
(observation) => observation.message.kind === 'echoReply' && observation.message.sequenceNumber === sequenceNumber,
|
||||
);
|
||||
function ping(engine: NetworkRuntimeEngine, from: Id, target: string, sequenceNumber: number, timeToLive = 64): string {
|
||||
const result: IPv4DeliveryResult = engine.sendIcmpEcho(from, target, { sequenceNumber, timeToLive });
|
||||
const observations = engine.state.icmpObservationsByNodeId.get(from) ?? [];
|
||||
if (result.type === 'icmpError') {
|
||||
const error = observations.findLast((observation) => observation.message.kind === result.kind);
|
||||
return error === undefined ? `ICMP ${result.kind}` : `ICMP ${ICMP_CODES[result.kind]} from ${error.packet.senderIPAddress}`;
|
||||
}
|
||||
const reply = observations.find((observation) => observation.message.kind === 'echoReply' && observation.message.sequenceNumber === sequenceNumber);
|
||||
return reply === undefined ? 'null' : `ICMP 0/0 from ${reply.packet.senderIPAddress}`;
|
||||
}
|
||||
|
||||
@@ -131,6 +135,7 @@ const STORIES: Record<string, (engine: NetworkRuntimeEngine, call: Call) => void
|
||||
},
|
||||
tcpOut: (engine, call) => tcpExchange(engine, call, SERVER, LAN_PC, '42.0.0.20', 80),
|
||||
forward: (engine, call) => tcpExchange(engine, call, LAN_PC, SERVER, '42.0.0.10', 8080),
|
||||
ttlOut: (engine, call) => call('sendProbe 42.0.0.20', () => ping(engine, LAN_PC, '42.0.0.20', 1, 1)),
|
||||
pingWan: (engine, call) => {
|
||||
call('sendProbe 42.0.0.10', () => ping(engine, SERVER, '42.0.0.10', 1));
|
||||
call('sendProbe 192.168.0.10', () => ping(engine, SERVER, '192.168.0.10', 2));
|
||||
@@ -259,6 +264,7 @@ describe('NAT as Java FILIUS runs it', () => {
|
||||
// A card's own list keeps its order.
|
||||
expectSameCaptures(engine, scenario, java.frames, {
|
||||
normalized: withPlaceholders,
|
||||
tables: measured,
|
||||
tolerance: TCP_STORIES.has(name) ? TCP_TOLERANCE_MILLISECONDS : GAP_TOLERANCE_MILLISECONDS,
|
||||
});
|
||||
|
||||
|
||||
@@ -285,6 +285,31 @@ const scenarioNames = readdirSync(scenarioDirectory)
|
||||
*/
|
||||
const SWIFT_ERRORS: Record<string, (expected: Record<string, unknown>) => Record<string, unknown>> = {};
|
||||
|
||||
const ECHO_KINDS = new Set(['echoRequest', 'echoReply']);
|
||||
|
||||
/**
|
||||
* Java instead of Swift in every scenario: an ICMP error's identifier and
|
||||
* sequence number are 0 (RFC 792: unused; Java's sendeICMP), where Swift
|
||||
* copies them from the echo request it is about. Measured with Java FILIUS
|
||||
* (the capture tables of arpJava and natJava).
|
||||
*/
|
||||
function withJavaIcmpErrors(expected: Record<string, unknown>): Record<string, unknown> {
|
||||
type Header = [string, string];
|
||||
const headers = (fields: Header[]): Header[] => {
|
||||
const kind = fields.find(([name]) => name === 'kind')?.[1];
|
||||
if (kind === undefined || ECHO_KINDS.has(kind)) return fields;
|
||||
return fields.map(([name, value]) => [name, name === 'identifier' || name === 'sequence' ? '0' : value]);
|
||||
};
|
||||
const traces = (expected.traces as { before: Header[]; after: Header[] }[]).map((trace) => ({ ...trace, before: headers(trace.before), after: headers(trace.after) }));
|
||||
const observation = (item: { kind?: string }) => (item.kind === undefined || ECHO_KINDS.has(item.kind) ? item : { ...item, identifier: 0, sequence: 0 });
|
||||
const observations = Object.fromEntries(
|
||||
Object.entries(expected.icmpObservations as Record<string, { kind: string }[]>).map(([node, items]) => [node, items.map(observation)]),
|
||||
);
|
||||
// A traceroute's result is its observations (other results are lists too: a switch's table).
|
||||
const results = (expected.results as unknown[]).map((result) => (Array.isArray(result) ? (result as { kind?: string }[]).map(observation) : result));
|
||||
return { ...expected, traces, icmpObservations: observations, results };
|
||||
}
|
||||
|
||||
/**
|
||||
* Scenarios where the engine follows Java instead of Swift; the Java
|
||||
* comparisons check that behaviour (dhcpJava.test.ts, tcpJava.test.ts,
|
||||
@@ -319,6 +344,14 @@ describe('same result as the Swift engine', () => {
|
||||
}
|
||||
});
|
||||
|
||||
it('corrects ICMP errors where Swift has them', () => {
|
||||
const corrected = scenarioNames.filter((name) => {
|
||||
const expected = JSON.parse(readFileSync(join(scenarioDirectory, `${name}.swift.json`), 'utf8')) as Record<string, unknown>;
|
||||
return JSON.stringify(withJavaIcmpErrors(expected)) !== JSON.stringify(expected);
|
||||
});
|
||||
expect(corrected.length).toBeGreaterThan(0);
|
||||
});
|
||||
|
||||
it('has scenarios with Swift results', () => {
|
||||
expect(scenarioNames.length).toBeGreaterThan(0);
|
||||
});
|
||||
@@ -334,7 +367,7 @@ describe('same result as the Swift engine', () => {
|
||||
for (const [name, { trace, reason }] of Object.entries(SWIFT_UNTIL_TRACE)) {
|
||||
it(`${name} matches Swift until trace #${trace}, then follows Java: ${reason}`, () => {
|
||||
const scenario = JSON.parse(readFileSync(join(scenarioDirectory, `${name}.scenario.json`), 'utf8')) as Scenario;
|
||||
const swift = JSON.parse(readFileSync(join(scenarioDirectory, `${name}.swift.json`), 'utf8')) as Record<string, unknown>;
|
||||
const swift = withJavaIcmpErrors(JSON.parse(readFileSync(join(scenarioDirectory, `${name}.swift.json`), 'utf8')) as Record<string, unknown>);
|
||||
const actual = run(scenario);
|
||||
const expectedTraces = swift.traces as unknown[];
|
||||
const actualTraces = actual.traces as unknown[];
|
||||
@@ -349,7 +382,7 @@ describe('same result as the Swift engine', () => {
|
||||
it(name, () => {
|
||||
const scenario = JSON.parse(readFileSync(join(scenarioDirectory, `${name}.scenario.json`), 'utf8')) as Scenario;
|
||||
const swift = JSON.parse(readFileSync(join(scenarioDirectory, `${name}.swift.json`), 'utf8')) as Record<string, unknown>;
|
||||
const expected = SWIFT_ERRORS[name]?.(swift) ?? swift;
|
||||
const expected = withJavaIcmpErrors(SWIFT_ERRORS[name]?.(swift) ?? swift);
|
||||
const actual = run(scenario);
|
||||
|
||||
// Traces first and one by one: the first difference is the one that matters.
|
||||
|
||||
@@ -32,7 +32,7 @@ import { dirname, join } from 'node:path';
|
||||
import { fileURLToPath } from 'node:url';
|
||||
import { describe, expect, it } from 'vitest';
|
||||
import { RIP_FIRST_BEACON_DELAY_MILLISECONDS, RIP_INFINITY, RIP_TIMEOUT_MILLISECONDS, stableMacAddress, type Id, type IPv4DeliveryResult, type NetworkRuntimeEngine } from '../src/index.js';
|
||||
import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, javaFrames, watchedEngine, type JavaFrame, type SeenFrame } from './javaRun.js';
|
||||
import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, javaFrames, watchedEngine, type JavaFrame, type SeenFrame, type JavaTables } from './javaRun.js';
|
||||
import type { Scenario } from './scenario.js';
|
||||
|
||||
const scenarioDirectory = join(dirname(fileURLToPath(import.meta.url)), 'scenarios');
|
||||
@@ -56,7 +56,7 @@ function bySender(frames: readonly SeenFrame[], shift: number): Map<string, Seen
|
||||
return result;
|
||||
}
|
||||
|
||||
interface JavaRun {
|
||||
interface JavaRun extends JavaTables {
|
||||
frames: Record<string, JavaFrame[]>;
|
||||
events: [number, string][];
|
||||
tables: [number, Id, string][];
|
||||
@@ -170,7 +170,7 @@ describe('RIP as Java FILIUS runs it', () => {
|
||||
}
|
||||
|
||||
// Each card's capture, after the startup.
|
||||
expectSameCaptures(engine, scenario, java.frames, { from: STARTUP_MILLISECONDS, until: better, starts: { java: offset, engine: 0 } });
|
||||
expectSameCaptures(engine, scenario, java.frames, { from: STARTUP_MILLISECONDS, until: better, starts: { java: offset, engine: 0 }, tables: java });
|
||||
|
||||
// Each router's table: the same state when the startup is over, then the same changes at about the same times.
|
||||
for (const router of routers) {
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
{
|
||||
"time": 747,
|
||||
"time": 717,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "10.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 3497,
|
||||
"time": 3467,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -20,7 +20,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
{
|
||||
"time": 869,
|
||||
"time": 837,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -28,7 +28,7 @@
|
||||
"targetIp": "10.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 3609,
|
||||
"time": 3578,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -39,13 +39,157 @@
|
||||
"00000000-0000-0000-0000-000000000302#1": [],
|
||||
"00000000-0000-0000-0000-000000000303": []
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302#1": [],
|
||||
"00000000-0000-0000-0000-000000000303": []
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302#1": [],
|
||||
"00000000-0000-0000-0000-000000000303": []
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
743,
|
||||
712,
|
||||
"sendProbe 10.0.0.9 called"
|
||||
],
|
||||
[
|
||||
6253,
|
||||
6222,
|
||||
"sendProbe 10.0.0.9 returned ICMP 3/1 from 127.0.0.1"
|
||||
]
|
||||
]
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
{
|
||||
"time": 716,
|
||||
"time": 717,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "10.0.0.1"
|
||||
},
|
||||
{
|
||||
"time": 953,
|
||||
"time": 951,
|
||||
"source": "02:00:00:00:03:21",
|
||||
"destination": "02:00:00:00:03:11",
|
||||
"arp": 2,
|
||||
@@ -18,7 +18,7 @@
|
||||
"targetIp": "10.0.0.2"
|
||||
},
|
||||
{
|
||||
"time": 957,
|
||||
"time": 954,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "02:00:00:00:03:21",
|
||||
"icmp": 8,
|
||||
@@ -28,7 +28,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 6682,
|
||||
"time": 6681,
|
||||
"source": "02:00:00:00:03:21",
|
||||
"destination": "02:00:00:00:03:11",
|
||||
"icmp": 3,
|
||||
@@ -40,7 +40,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
{
|
||||
"time": 839,
|
||||
"time": 838,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -48,7 +48,7 @@
|
||||
"targetIp": "10.0.0.1"
|
||||
},
|
||||
{
|
||||
"time": 841,
|
||||
"time": 839,
|
||||
"source": "02:00:00:00:03:21",
|
||||
"destination": "02:00:00:00:03:11",
|
||||
"arp": 2,
|
||||
@@ -56,7 +56,7 @@
|
||||
"targetIp": "10.0.0.2"
|
||||
},
|
||||
{
|
||||
"time": 1069,
|
||||
"time": 1068,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "02:00:00:00:03:21",
|
||||
"icmp": 8,
|
||||
@@ -66,7 +66,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 6571,
|
||||
"time": 6569,
|
||||
"source": "02:00:00:00:03:21",
|
||||
"destination": "02:00:00:00:03:11",
|
||||
"icmp": 3,
|
||||
@@ -78,7 +78,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302#1": [
|
||||
{
|
||||
"time": 1070,
|
||||
"time": 1068,
|
||||
"source": "02:00:00:00:03:22",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -86,7 +86,7 @@
|
||||
"targetIp": "20.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 3820,
|
||||
"time": 3818,
|
||||
"source": "02:00:00:00:03:22",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -96,7 +96,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000303": [
|
||||
{
|
||||
"time": 1125,
|
||||
"time": 1124,
|
||||
"source": "02:00:00:00:03:22",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -104,7 +104,7 @@
|
||||
"targetIp": "20.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 3876,
|
||||
"time": 3874,
|
||||
"source": "02:00:00:00:03:22",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -113,13 +113,417 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"20.0.0.9",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=63; protocol=1; sender=10.0.0.2; target=20.0.0.9; icmpType=8; icmpCode=0; identifier=1; seqNr=1]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"20.0.0.9",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=63; protocol=1; sender=10.0.0.2; target=20.0.0.9; icmpType=8; icmpCode=0; identifier=1; seqNr=1]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302#1": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000303": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"20.0.0.9",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=63; protocol=1; sender=10.0.0.2; target=20.0.0.9; icmpType=8; icmpCode=0; identifier=1; seqNr=1]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"20.0.0.9",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=63; protocol=1; sender=10.0.0.2; target=20.0.0.9; icmpType=8; icmpCode=0; identifier=1; seqNr=1]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302#1": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000303": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
711,
|
||||
712,
|
||||
"sendProbe 20.0.0.9 called"
|
||||
],
|
||||
[
|
||||
3707,
|
||||
3705,
|
||||
"sendProbe 20.0.0.9 returned null"
|
||||
]
|
||||
]
|
||||
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "10.0.0.1"
|
||||
},
|
||||
{
|
||||
"time": 950,
|
||||
"time": 952,
|
||||
"source": "02:00:00:00:03:21",
|
||||
"destination": "02:00:00:00:03:11",
|
||||
"arp": 2,
|
||||
@@ -28,7 +28,7 @@
|
||||
"sequence": 2
|
||||
},
|
||||
{
|
||||
"time": 1012,
|
||||
"time": 1013,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "02:00:00:00:03:21",
|
||||
"icmp": 8,
|
||||
@@ -48,7 +48,7 @@
|
||||
"sequence": 0
|
||||
},
|
||||
{
|
||||
"time": 6904,
|
||||
"time": 6905,
|
||||
"source": "02:00:00:00:03:21",
|
||||
"destination": "02:00:00:00:03:11",
|
||||
"icmp": 0,
|
||||
@@ -60,7 +60,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
{
|
||||
"time": 837,
|
||||
"time": 838,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -68,7 +68,7 @@
|
||||
"targetIp": "10.0.0.1"
|
||||
},
|
||||
{
|
||||
"time": 839,
|
||||
"time": 840,
|
||||
"source": "02:00:00:00:03:21",
|
||||
"destination": "02:00:00:00:03:11",
|
||||
"arp": 2,
|
||||
@@ -86,7 +86,7 @@
|
||||
"sequence": 2
|
||||
},
|
||||
{
|
||||
"time": 1123,
|
||||
"time": 1124,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "02:00:00:00:03:21",
|
||||
"icmp": 8,
|
||||
@@ -96,7 +96,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 6569,
|
||||
"time": 6570,
|
||||
"source": "02:00:00:00:03:21",
|
||||
"destination": "02:00:00:00:03:11",
|
||||
"icmp": 3,
|
||||
@@ -118,7 +118,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302#1": [
|
||||
{
|
||||
"time": 1068,
|
||||
"time": 1069,
|
||||
"source": "02:00:00:00:03:22",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -126,7 +126,7 @@
|
||||
"targetIp": "20.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 3818,
|
||||
"time": 3819,
|
||||
"source": "02:00:00:00:03:22",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -160,7 +160,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 6792,
|
||||
"time": 6793,
|
||||
"source": "02:00:00:00:03:13",
|
||||
"destination": "02:00:00:00:03:22",
|
||||
"icmp": 0,
|
||||
@@ -180,7 +180,7 @@
|
||||
"targetIp": "20.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 3874,
|
||||
"time": 3875,
|
||||
"source": "02:00:00:00:03:22",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -188,7 +188,7 @@
|
||||
"targetIp": "20.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 6625,
|
||||
"time": 6626,
|
||||
"source": "02:00:00:00:03:22",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -196,7 +196,7 @@
|
||||
"targetIp": "20.0.0.2"
|
||||
},
|
||||
{
|
||||
"time": 6625,
|
||||
"time": 6626,
|
||||
"source": "02:00:00:00:03:13",
|
||||
"destination": "02:00:00:00:03:22",
|
||||
"arp": 2,
|
||||
@@ -225,6 +225,794 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"20.0.0.9",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 2, Seq.-No.: 2"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=63; protocol=1; sender=10.0.0.2; target=20.0.0.9; icmpType=8; icmpCode=0; identifier=2; seqNr=2]"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"20.0.0.2",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"20.0.0.9",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 2, Seq.-No.: 2"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=63; protocol=1; sender=10.0.0.2; target=20.0.0.9; icmpType=8; icmpCode=0; identifier=2; seqNr=2]"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"20.0.0.2",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302#1": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"20.0.0.1",
|
||||
"20.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:13",
|
||||
"02:00:00:00:03:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"20.0.0.2",
|
||||
"20.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:03:22",
|
||||
"02:00:00:00:03:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:03:13",
|
||||
"02:00:00:00:03:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"20.0.0.2",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000303": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"20.0.0.1",
|
||||
"20.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:13",
|
||||
"02:00:00:00:03:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"20.0.0.2",
|
||||
"20.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:03:22",
|
||||
"02:00:00:00:03:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:03:13",
|
||||
"02:00:00:00:03:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"20.0.0.2",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"20.0.0.9",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 2, Seq.-No.: 2"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=63; protocol=1; sender=10.0.0.2; target=20.0.0.9; icmpType=8; icmpCode=0; identifier=2; seqNr=2]"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"20.0.0.2",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"20.0.0.9",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 2, Seq.-No.: 2"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=63; protocol=1; sender=10.0.0.2; target=20.0.0.9; icmpType=8; icmpCode=0; identifier=2; seqNr=2]"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"20.0.0.2",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302#1": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"20.0.0.1",
|
||||
"20.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:13",
|
||||
"02:00:00:00:03:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"20.0.0.2",
|
||||
"20.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:03:22",
|
||||
"02:00:00:00:03:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:03:13",
|
||||
"02:00:00:00:03:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"20.0.0.2",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000303": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"20.0.0.1",
|
||||
"20.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:13",
|
||||
"02:00:00:00:03:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"20.0.0.2",
|
||||
"20.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:03:22",
|
||||
"02:00:00:00:03:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:03:13",
|
||||
"02:00:00:00:03:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"20.0.0.2",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
713,
|
||||
@@ -235,11 +1023,11 @@
|
||||
"sendeICMP 20.0.0.9 returned "
|
||||
],
|
||||
[
|
||||
955,
|
||||
956,
|
||||
"sendProbe 20.0.0.2 called"
|
||||
],
|
||||
[
|
||||
3762,
|
||||
3763,
|
||||
"sendProbe 20.0.0.2 returned null"
|
||||
]
|
||||
]
|
||||
|
||||
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
{
|
||||
"time": 731,
|
||||
"time": 720,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "10.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 3481,
|
||||
"time": 3470,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -18,7 +18,7 @@
|
||||
"targetIp": "10.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 6237,
|
||||
"time": 6226,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -26,7 +26,7 @@
|
||||
"targetIp": "10.0.0.1"
|
||||
},
|
||||
{
|
||||
"time": 6460,
|
||||
"time": 6449,
|
||||
"source": "02:00:00:00:03:21",
|
||||
"destination": "02:00:00:00:03:11",
|
||||
"arp": 2,
|
||||
@@ -34,20 +34,20 @@
|
||||
"targetIp": "10.0.0.2"
|
||||
},
|
||||
{
|
||||
"time": 6460,
|
||||
"time": 6450,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "02:00:00:00:03:21",
|
||||
"sourceIp": "10.0.0.2",
|
||||
"destinationIp": "20.0.0.2",
|
||||
"protocol": 17,
|
||||
"sourcePort": 55273,
|
||||
"sourcePort": 59870,
|
||||
"destinationPort": 9,
|
||||
"payload": "dahinter"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
{
|
||||
"time": 852,
|
||||
"time": 843,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -55,7 +55,7 @@
|
||||
"targetIp": "10.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 3593,
|
||||
"time": 3582,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -63,7 +63,7 @@
|
||||
"targetIp": "10.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 6348,
|
||||
"time": 6338,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -71,7 +71,7 @@
|
||||
"targetIp": "10.0.0.1"
|
||||
},
|
||||
{
|
||||
"time": 6349,
|
||||
"time": 6338,
|
||||
"source": "02:00:00:00:03:21",
|
||||
"destination": "02:00:00:00:03:11",
|
||||
"arp": 2,
|
||||
@@ -79,20 +79,20 @@
|
||||
"targetIp": "10.0.0.2"
|
||||
},
|
||||
{
|
||||
"time": 6574,
|
||||
"time": 6563,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "02:00:00:00:03:21",
|
||||
"sourceIp": "10.0.0.2",
|
||||
"destinationIp": "20.0.0.2",
|
||||
"protocol": 17,
|
||||
"sourcePort": 55273,
|
||||
"sourcePort": 59870,
|
||||
"destinationPort": 9,
|
||||
"payload": "dahinter"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302#1": [
|
||||
{
|
||||
"time": 6574,
|
||||
"time": 6563,
|
||||
"source": "02:00:00:00:03:22",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -100,7 +100,7 @@
|
||||
"targetIp": "20.0.0.2"
|
||||
},
|
||||
{
|
||||
"time": 6685,
|
||||
"time": 6674,
|
||||
"source": "02:00:00:00:03:13",
|
||||
"destination": "02:00:00:00:03:22",
|
||||
"arp": 2,
|
||||
@@ -108,20 +108,20 @@
|
||||
"targetIp": "20.0.0.1"
|
||||
},
|
||||
{
|
||||
"time": 6685,
|
||||
"time": 6675,
|
||||
"source": "02:00:00:00:03:22",
|
||||
"destination": "02:00:00:00:03:13",
|
||||
"sourceIp": "10.0.0.2",
|
||||
"destinationIp": "20.0.0.2",
|
||||
"protocol": 17,
|
||||
"sourcePort": 55273,
|
||||
"sourcePort": 59870,
|
||||
"destinationPort": 9,
|
||||
"payload": "dahinter"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000303": [
|
||||
{
|
||||
"time": 6629,
|
||||
"time": 6619,
|
||||
"source": "02:00:00:00:03:22",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -129,7 +129,7 @@
|
||||
"targetIp": "20.0.0.2"
|
||||
},
|
||||
{
|
||||
"time": 6629,
|
||||
"time": 6619,
|
||||
"source": "02:00:00:00:03:13",
|
||||
"destination": "02:00:00:00:03:22",
|
||||
"arp": 2,
|
||||
@@ -137,33 +137,693 @@
|
||||
"targetIp": "20.0.0.1"
|
||||
},
|
||||
{
|
||||
"time": 6741,
|
||||
"time": 6730,
|
||||
"source": "02:00:00:00:03:22",
|
||||
"destination": "02:00:00:00:03:13",
|
||||
"sourceIp": "10.0.0.2",
|
||||
"destinationIp": "20.0.0.2",
|
||||
"protocol": 17,
|
||||
"sourcePort": 55273,
|
||||
"sourcePort": 59870,
|
||||
"destinationPort": 9,
|
||||
"payload": "dahinter"
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"10.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.2:59870",
|
||||
"20.0.0.2:9",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.2:59870",
|
||||
"20.0.0.2:9",
|
||||
"",
|
||||
"Anwendung",
|
||||
"dahinter"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"10.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.2:59870",
|
||||
"20.0.0.2:9",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.2:59870",
|
||||
"20.0.0.2:9",
|
||||
"",
|
||||
"Anwendung",
|
||||
"dahinter"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302#1": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"20.0.0.1",
|
||||
"20.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:13",
|
||||
"02:00:00:00:03:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"20.0.0.2",
|
||||
"20.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:22",
|
||||
"02:00:00:00:03:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 63"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2:59870",
|
||||
"20.0.0.2:9",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2:59870",
|
||||
"20.0.0.2:9",
|
||||
"",
|
||||
"Anwendung",
|
||||
"dahinter"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000303": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"20.0.0.1",
|
||||
"20.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:13",
|
||||
"02:00:00:00:03:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"20.0.0.2",
|
||||
"20.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:22",
|
||||
"02:00:00:00:03:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 63"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2:59870",
|
||||
"20.0.0.2:9",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2:59870",
|
||||
"20.0.0.2:9",
|
||||
"",
|
||||
"Anwendung",
|
||||
"dahinter"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"10.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"59870",
|
||||
"9",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"5",
|
||||
null,
|
||||
null,
|
||||
"",
|
||||
"Anwendung",
|
||||
"dahinter"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"10.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"59870",
|
||||
"9",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"5",
|
||||
null,
|
||||
null,
|
||||
"",
|
||||
"Anwendung",
|
||||
"dahinter"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302#1": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"20.0.0.1",
|
||||
"20.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:13",
|
||||
"02:00:00:00:03:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"20.0.0.2",
|
||||
"20.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:22",
|
||||
"02:00:00:00:03:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 63"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"59870",
|
||||
"9",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
null,
|
||||
null,
|
||||
"",
|
||||
"Anwendung",
|
||||
"dahinter"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000303": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"20.0.0.1",
|
||||
"20.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:13",
|
||||
"02:00:00:00:03:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"20.0.0.2",
|
||||
"20.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:22",
|
||||
"02:00:00:00:03:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 63"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"59870",
|
||||
"9",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
null,
|
||||
null,
|
||||
"",
|
||||
"Anwendung",
|
||||
"dahinter"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
723,
|
||||
711,
|
||||
"senden verloren called"
|
||||
],
|
||||
[
|
||||
727,
|
||||
716,
|
||||
"senden verloren returned "
|
||||
],
|
||||
[
|
||||
727,
|
||||
716,
|
||||
"senden dahinter called"
|
||||
],
|
||||
[
|
||||
6237,
|
||||
6226,
|
||||
"senden dahinter returned "
|
||||
]
|
||||
]
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
{
|
||||
"time": 723,
|
||||
"time": 721,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "10.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 3473,
|
||||
"time": 3471,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -18,7 +18,7 @@
|
||||
"targetIp": "10.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 6229,
|
||||
"time": 6226,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -26,7 +26,7 @@
|
||||
"targetIp": "10.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 8979,
|
||||
"time": 8977,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -36,7 +36,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
{
|
||||
"time": 843,
|
||||
"time": 844,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -44,7 +44,7 @@
|
||||
"targetIp": "10.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 3584,
|
||||
"time": 3583,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -52,7 +52,7 @@
|
||||
"targetIp": "10.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 6340,
|
||||
"time": 6338,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -60,7 +60,7 @@
|
||||
"targetIp": "10.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 9090,
|
||||
"time": 9088,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -71,21 +71,293 @@
|
||||
"00000000-0000-0000-0000-000000000302#1": [],
|
||||
"00000000-0000-0000-0000-000000000303": []
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302#1": [],
|
||||
"00000000-0000-0000-0000-000000000303": []
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302#1": [],
|
||||
"00000000-0000-0000-0000-000000000303": []
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
713,
|
||||
"senden eins called"
|
||||
],
|
||||
[
|
||||
718,
|
||||
717,
|
||||
"senden eins returned "
|
||||
],
|
||||
[
|
||||
718,
|
||||
717,
|
||||
"senden zwei called"
|
||||
],
|
||||
[
|
||||
6229,
|
||||
6226,
|
||||
"senden zwei returned "
|
||||
]
|
||||
]
|
||||
|
||||
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
{
|
||||
"time": 723,
|
||||
"time": 726,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 956,
|
||||
"time": 960,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
@@ -18,31 +18,31 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 959,
|
||||
"time": 962,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 57362,
|
||||
"sourcePort": 57366,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=38187 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
"payload": "ID=5913 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1188,
|
||||
"time": 1191,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 57362,
|
||||
"payload": "ID=38187 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
"destinationPort": 57366,
|
||||
"payload": "ID=5913 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
{
|
||||
"time": 844,
|
||||
"time": 848,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -50,7 +50,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 845,
|
||||
"time": 849,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
@@ -58,31 +58,31 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 1072,
|
||||
"time": 1075,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 57362,
|
||||
"sourcePort": 57366,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=38187 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
"payload": "ID=5913 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1077,
|
||||
"time": 1079,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 57362,
|
||||
"payload": "ID=38187 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
"destinationPort": 57366,
|
||||
"payload": "ID=5913 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
{
|
||||
"time": 844,
|
||||
"time": 848,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -92,7 +92,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
{
|
||||
"time": 844,
|
||||
"time": 848,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -101,13 +101,481 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:57366",
|
||||
"192.168.0.10:53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:57366",
|
||||
"192.168.0.10:53",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=5913 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:57366",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:57366",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=5913 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:57366",
|
||||
"192.168.0.10:53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:57366",
|
||||
"192.168.0.10:53",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=5913 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:57366",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:57366",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=5913 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"57366",
|
||||
"53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=5913 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"53",
|
||||
"57366",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=5913 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"57366",
|
||||
"53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=5913 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"53",
|
||||
"57366",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=5913 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
712,
|
||||
716,
|
||||
"holeIPAdresse web.filius.de called"
|
||||
],
|
||||
[
|
||||
1189,
|
||||
1191,
|
||||
"holeIPAdresse web.filius.de returned 192.168.0.30"
|
||||
]
|
||||
]
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
{
|
||||
"time": 725,
|
||||
"time": 726,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 958,
|
||||
"time": 961,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
@@ -18,31 +18,31 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 961,
|
||||
"time": 964,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 55842,
|
||||
"sourcePort": 62914,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=4405 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
|
||||
"payload": "ID=4538 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1191,
|
||||
"time": 1193,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 55842,
|
||||
"payload": "ID=4405 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
|
||||
"destinationPort": 62914,
|
||||
"payload": "ID=4538 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
{
|
||||
"time": 846,
|
||||
"time": 849,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -50,7 +50,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 847,
|
||||
"time": 850,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
@@ -58,31 +58,31 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 1074,
|
||||
"time": 1077,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 55842,
|
||||
"sourcePort": 62914,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=4405 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
|
||||
"payload": "ID=4538 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1079,
|
||||
"time": 1082,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 55842,
|
||||
"payload": "ID=4405 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
|
||||
"destinationPort": 62914,
|
||||
"payload": "ID=4538 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
{
|
||||
"time": 845,
|
||||
"time": 849,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -92,7 +92,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
{
|
||||
"time": 845,
|
||||
"time": 849,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -101,13 +101,481 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:62914",
|
||||
"192.168.0.10:53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:62914",
|
||||
"192.168.0.10:53",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=4538 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:62914",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:62914",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=4538 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:62914",
|
||||
"192.168.0.10:53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:62914",
|
||||
"192.168.0.10:53",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=4538 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:62914",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:62914",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=4538 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"62914",
|
||||
"53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=4538 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"53",
|
||||
"62914",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=4538 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"62914",
|
||||
"53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=4538 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"53",
|
||||
"62914",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=4538 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
714,
|
||||
715,
|
||||
"holeIPAdresseMailServer filius.de called"
|
||||
],
|
||||
[
|
||||
1191,
|
||||
1194,
|
||||
"holeIPAdresseMailServer filius.de returned 192.168.0.31"
|
||||
]
|
||||
]
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
{
|
||||
"time": 844,
|
||||
"time": 852,
|
||||
"source": "02:00:00:00:01:14",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "192.168.0.99"
|
||||
},
|
||||
{
|
||||
"time": 3585,
|
||||
"time": 3592,
|
||||
"source": "02:00:00:00:01:14",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -20,7 +20,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
{
|
||||
"time": 844,
|
||||
"time": 852,
|
||||
"source": "02:00:00:00:01:14",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -28,7 +28,7 @@
|
||||
"targetIp": "192.168.0.99"
|
||||
},
|
||||
{
|
||||
"time": 3585,
|
||||
"time": 3592,
|
||||
"source": "02:00:00:00:01:14",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -38,7 +38,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
{
|
||||
"time": 844,
|
||||
"time": 852,
|
||||
"source": "02:00:00:00:01:14",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -46,7 +46,7 @@
|
||||
"targetIp": "192.168.0.99"
|
||||
},
|
||||
{
|
||||
"time": 3585,
|
||||
"time": 3592,
|
||||
"source": "02:00:00:00:01:14",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -56,7 +56,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
{
|
||||
"time": 723,
|
||||
"time": 730,
|
||||
"source": "02:00:00:00:01:14",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -64,7 +64,7 @@
|
||||
"targetIp": "192.168.0.99"
|
||||
},
|
||||
{
|
||||
"time": 3473,
|
||||
"time": 3480,
|
||||
"source": "02:00:00:00:01:14",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -73,13 +73,289 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
713,
|
||||
718,
|
||||
"holeIPAdresse web.filius.de called"
|
||||
],
|
||||
[
|
||||
14470,
|
||||
14477,
|
||||
"holeIPAdresse web.filius.de failed TimeOutException"
|
||||
]
|
||||
]
|
||||
|
||||
File diff suppressed because it is too large
Load Diff
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
{
|
||||
"time": 726,
|
||||
"time": 725,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 960,
|
||||
"time": 958,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
@@ -18,31 +18,31 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 963,
|
||||
"time": 961,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 56964,
|
||||
"sourcePort": 58719,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=54840 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nx.unbekannt.org. A IN\n"
|
||||
"payload": "ID=44820 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nx.unbekannt.org. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1192,
|
||||
"time": 1190,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 56964,
|
||||
"payload": "ID=54840 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
"destinationPort": 58719,
|
||||
"payload": "ID=44820 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
{
|
||||
"time": 848,
|
||||
"time": 845,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -50,7 +50,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 849,
|
||||
"time": 847,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
@@ -58,31 +58,31 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 1076,
|
||||
"time": 1074,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 56964,
|
||||
"sourcePort": 58719,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=54840 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nx.unbekannt.org. A IN\n"
|
||||
"payload": "ID=44820 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nx.unbekannt.org. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1081,
|
||||
"time": 1079,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 56964,
|
||||
"payload": "ID=54840 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
"destinationPort": 58719,
|
||||
"payload": "ID=44820 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
{
|
||||
"time": 848,
|
||||
"time": 845,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -92,7 +92,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
{
|
||||
"time": 848,
|
||||
"time": 846,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -101,13 +101,481 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:58719",
|
||||
"192.168.0.10:53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:58719",
|
||||
"192.168.0.10:53",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=44820 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nx.unbekannt.org. A IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:58719",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:58719",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=44820 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:58719",
|
||||
"192.168.0.10:53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:58719",
|
||||
"192.168.0.10:53",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=44820 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nx.unbekannt.org. A IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:58719",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:58719",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=44820 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"58719",
|
||||
"53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=44820 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nx.unbekannt.org. A IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"53",
|
||||
"58719",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=44820 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"58719",
|
||||
"53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=44820 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nx.unbekannt.org. A IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"53",
|
||||
"58719",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=44820 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
716,
|
||||
712,
|
||||
"holeIPAdresse x.unbekannt.org called"
|
||||
],
|
||||
[
|
||||
1192,
|
||||
1191,
|
||||
"holeIPAdresse x.unbekannt.org returned null"
|
||||
]
|
||||
]
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
{
|
||||
"time": 727,
|
||||
"time": 731,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 963,
|
||||
"time": 967,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
@@ -18,31 +18,31 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 965,
|
||||
"time": 969,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 60119,
|
||||
"sourcePort": 64893,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=56151 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
"payload": "ID=54574 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1196,
|
||||
"time": 1199,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 60119,
|
||||
"payload": "ID=56151 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
"destinationPort": 64893,
|
||||
"payload": "ID=54574 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
{
|
||||
"time": 850,
|
||||
"time": 853,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -50,7 +50,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 851,
|
||||
"time": 855,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
@@ -58,31 +58,31 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 1079,
|
||||
"time": 1083,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 60119,
|
||||
"sourcePort": 64893,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=56151 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
"payload": "ID=54574 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1084,
|
||||
"time": 1088,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 60119,
|
||||
"payload": "ID=56151 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
"destinationPort": 64893,
|
||||
"payload": "ID=54574 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
{
|
||||
"time": 850,
|
||||
"time": 853,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -92,7 +92,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
{
|
||||
"time": 850,
|
||||
"time": 853,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -101,13 +101,481 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:64893",
|
||||
"192.168.0.10:53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:64893",
|
||||
"192.168.0.10:53",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=54574 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:64893",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:64893",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=54574 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:64893",
|
||||
"192.168.0.10:53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:64893",
|
||||
"192.168.0.10:53",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=54574 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:64893",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:64893",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=54574 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"64893",
|
||||
"53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=54574 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"53",
|
||||
"64893",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=54574 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"64893",
|
||||
"53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=54574 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"53",
|
||||
"64893",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=54574 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
717,
|
||||
720,
|
||||
"holeIPAdresse web.filius.de called"
|
||||
],
|
||||
[
|
||||
1197,
|
||||
1200,
|
||||
"holeIPAdresse web.filius.de returned 192.168.0.30"
|
||||
]
|
||||
]
|
||||
|
||||
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000501": [
|
||||
{
|
||||
"time": 717,
|
||||
"time": 720,
|
||||
"source": "02:00:00:00:05:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "192.168.0.1"
|
||||
},
|
||||
{
|
||||
"time": 837,
|
||||
"time": 839,
|
||||
"source": "02:00:00:00:05:22",
|
||||
"destination": "02:00:00:00:05:11",
|
||||
"arp": 2,
|
||||
@@ -18,7 +18,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 841,
|
||||
"time": 842,
|
||||
"source": "02:00:00:00:05:11",
|
||||
"destination": "02:00:00:00:05:22",
|
||||
"icmp": 8,
|
||||
@@ -28,7 +28,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 1409,
|
||||
"time": 1410,
|
||||
"source": "02:00:00:00:05:22",
|
||||
"destination": "02:00:00:00:05:11",
|
||||
"icmp": 0,
|
||||
@@ -40,7 +40,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000502": [
|
||||
{
|
||||
"time": 903,
|
||||
"time": 904,
|
||||
"source": "02:00:00:00:05:21",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -48,7 +48,7 @@
|
||||
"targetIp": "42.0.0.20"
|
||||
},
|
||||
{
|
||||
"time": 1130,
|
||||
"time": 1131,
|
||||
"source": "02:00:00:00:05:41",
|
||||
"destination": "02:00:00:00:05:21",
|
||||
"arp": 2,
|
||||
@@ -56,7 +56,7 @@
|
||||
"targetIp": "42.0.0.10"
|
||||
},
|
||||
{
|
||||
"time": 1130,
|
||||
"time": 1131,
|
||||
"source": "02:00:00:00:05:21",
|
||||
"destination": "02:00:00:00:05:41",
|
||||
"icmp": 8,
|
||||
@@ -66,7 +66,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 1352,
|
||||
"time": 1354,
|
||||
"source": "02:00:00:00:05:41",
|
||||
"destination": "02:00:00:00:05:21",
|
||||
"icmp": 0,
|
||||
@@ -78,7 +78,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000502#1": [
|
||||
{
|
||||
"time": 780,
|
||||
"time": 782,
|
||||
"source": "02:00:00:00:05:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -86,7 +86,7 @@
|
||||
"targetIp": "192.168.0.1"
|
||||
},
|
||||
{
|
||||
"time": 782,
|
||||
"time": 783,
|
||||
"source": "02:00:00:00:05:22",
|
||||
"destination": "02:00:00:00:05:11",
|
||||
"arp": 2,
|
||||
@@ -94,7 +94,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 898,
|
||||
"time": 900,
|
||||
"source": "02:00:00:00:05:11",
|
||||
"destination": "02:00:00:00:05:22",
|
||||
"icmp": 8,
|
||||
@@ -104,7 +104,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 1353,
|
||||
"time": 1354,
|
||||
"source": "02:00:00:00:05:22",
|
||||
"destination": "02:00:00:00:05:11",
|
||||
"icmp": 0,
|
||||
@@ -116,7 +116,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000504": [
|
||||
{
|
||||
"time": 1018,
|
||||
"time": 1020,
|
||||
"source": "02:00:00:00:05:21",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -124,7 +124,7 @@
|
||||
"targetIp": "42.0.0.20"
|
||||
},
|
||||
{
|
||||
"time": 1018,
|
||||
"time": 1020,
|
||||
"source": "02:00:00:00:05:41",
|
||||
"destination": "02:00:00:00:05:21",
|
||||
"arp": 2,
|
||||
@@ -132,7 +132,7 @@
|
||||
"targetIp": "42.0.0.10"
|
||||
},
|
||||
{
|
||||
"time": 1241,
|
||||
"time": 1243,
|
||||
"source": "02:00:00:00:05:21",
|
||||
"destination": "02:00:00:00:05:41",
|
||||
"icmp": 8,
|
||||
@@ -142,7 +142,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 1241,
|
||||
"time": 1243,
|
||||
"source": "02:00:00:00:05:41",
|
||||
"destination": "02:00:00:00:05:21",
|
||||
"icmp": 0,
|
||||
@@ -154,7 +154,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000505": [
|
||||
{
|
||||
"time": 1018,
|
||||
"time": 1020,
|
||||
"source": "02:00:00:00:05:21",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -163,13 +163,581 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000501": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.10",
|
||||
"192.168.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:05:11|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.1",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:22 [op=REPLY, sender=02:00:00:00:05:22|192.168.0.1, target=02:00:00:00:05:11|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:11",
|
||||
"02:00:00:00:05:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"42.0.0.20",
|
||||
"192.168.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000502": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:21",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 42.0.0.20 [op=REQUEST, sender=02:00:00:00:05:21|42.0.0.10, target=FF:FF:FF:FF:FF:FF|42.0.0.20]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:41 [op=REPLY, sender=02:00:00:00:05:41|42.0.0.20, target=02:00:00:00:05:21|42.0.0.10]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:21",
|
||||
"02:00:00:00:05:41",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000502#1": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.10",
|
||||
"192.168.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:05:11|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.1",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:22 [op=REPLY, sender=02:00:00:00:05:22|192.168.0.1, target=02:00:00:00:05:11|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:11",
|
||||
"02:00:00:00:05:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"42.0.0.20",
|
||||
"192.168.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000504": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:21",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 42.0.0.20 [op=REQUEST, sender=02:00:00:00:05:21|42.0.0.10, target=FF:FF:FF:FF:FF:FF|42.0.0.20]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:41 [op=REPLY, sender=02:00:00:00:05:41|42.0.0.20, target=02:00:00:00:05:21|42.0.0.10]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:21",
|
||||
"02:00:00:00:05:41",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000505": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:21",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 42.0.0.20 [op=REQUEST, sender=02:00:00:00:05:21|42.0.0.10, target=FF:FF:FF:FF:FF:FF|42.0.0.20]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000501": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.10",
|
||||
"192.168.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:05:11|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.1",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:22 [op=REPLY, sender=02:00:00:00:05:22|192.168.0.1, target=02:00:00:00:05:11|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:11",
|
||||
"02:00:00:00:05:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"42.0.0.20",
|
||||
"192.168.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000502": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:21",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 42.0.0.20 [op=REQUEST, sender=02:00:00:00:05:21|42.0.0.10, target=FF:FF:FF:FF:FF:FF|42.0.0.20]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:41 [op=REPLY, sender=02:00:00:00:05:41|42.0.0.20, target=02:00:00:00:05:21|42.0.0.10]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:21",
|
||||
"02:00:00:00:05:41",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000502#1": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.10",
|
||||
"192.168.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:05:11|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.1",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:22 [op=REPLY, sender=02:00:00:00:05:22|192.168.0.1, target=02:00:00:00:05:11|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:11",
|
||||
"02:00:00:00:05:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"42.0.0.20",
|
||||
"192.168.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000504": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:21",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 42.0.0.20 [op=REQUEST, sender=02:00:00:00:05:21|42.0.0.10, target=FF:FF:FF:FF:FF:FF|42.0.0.20]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:41 [op=REPLY, sender=02:00:00:00:05:41|42.0.0.20, target=02:00:00:00:05:21|42.0.0.10]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:21",
|
||||
"02:00:00:00:05:41",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000505": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:21",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 42.0.0.20 [op=REQUEST, sender=02:00:00:00:05:21|42.0.0.10, target=FF:FF:FF:FF:FF:FF|42.0.0.20]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
713,
|
||||
716,
|
||||
"sendProbe 42.0.0.20 called"
|
||||
],
|
||||
[
|
||||
1410,
|
||||
1411,
|
||||
"sendProbe 42.0.0.20 returned ICMP 0/0 from 42.0.0.20"
|
||||
]
|
||||
],
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
"00000000-0000-0000-0000-000000000501": [],
|
||||
"00000000-0000-0000-0000-000000000502": [
|
||||
{
|
||||
"time": 851,
|
||||
"time": 840,
|
||||
"source": "02:00:00:00:05:41",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -11,7 +11,7 @@
|
||||
"targetIp": "42.0.0.10"
|
||||
},
|
||||
{
|
||||
"time": 853,
|
||||
"time": 842,
|
||||
"source": "02:00:00:00:05:21",
|
||||
"destination": "02:00:00:00:05:41",
|
||||
"arp": 2,
|
||||
@@ -19,7 +19,7 @@
|
||||
"targetIp": "42.0.0.20"
|
||||
},
|
||||
{
|
||||
"time": 1083,
|
||||
"time": 1071,
|
||||
"source": "02:00:00:00:05:41",
|
||||
"destination": "02:00:00:00:05:21",
|
||||
"icmp": 8,
|
||||
@@ -29,7 +29,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 1083,
|
||||
"time": 1071,
|
||||
"source": "02:00:00:00:05:21",
|
||||
"destination": "02:00:00:00:05:41",
|
||||
"icmp": 0,
|
||||
@@ -39,7 +39,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 1308,
|
||||
"time": 1295,
|
||||
"source": "02:00:00:00:05:41",
|
||||
"destination": "02:00:00:00:05:21",
|
||||
"icmp": 8,
|
||||
@@ -52,7 +52,7 @@
|
||||
"00000000-0000-0000-0000-000000000502#1": [],
|
||||
"00000000-0000-0000-0000-000000000504": [
|
||||
{
|
||||
"time": 729,
|
||||
"time": 718,
|
||||
"source": "02:00:00:00:05:41",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -60,7 +60,7 @@
|
||||
"targetIp": "42.0.0.10"
|
||||
},
|
||||
{
|
||||
"time": 965,
|
||||
"time": 954,
|
||||
"source": "02:00:00:00:05:21",
|
||||
"destination": "02:00:00:00:05:41",
|
||||
"arp": 2,
|
||||
@@ -68,7 +68,7 @@
|
||||
"targetIp": "42.0.0.20"
|
||||
},
|
||||
{
|
||||
"time": 969,
|
||||
"time": 958,
|
||||
"source": "02:00:00:00:05:41",
|
||||
"destination": "02:00:00:00:05:21",
|
||||
"icmp": 8,
|
||||
@@ -78,7 +78,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 1194,
|
||||
"time": 1182,
|
||||
"source": "02:00:00:00:05:21",
|
||||
"destination": "02:00:00:00:05:41",
|
||||
"icmp": 0,
|
||||
@@ -88,7 +88,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 1196,
|
||||
"time": 1184,
|
||||
"source": "02:00:00:00:05:41",
|
||||
"destination": "02:00:00:00:05:21",
|
||||
"icmp": 8,
|
||||
@@ -100,7 +100,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000505": [
|
||||
{
|
||||
"time": 851,
|
||||
"time": 840,
|
||||
"source": "02:00:00:00:05:41",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -109,21 +109,393 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000501": [],
|
||||
"00000000-0000-0000-0000-000000000502": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:41",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 42.0.0.10 [op=REQUEST, sender=02:00:00:00:05:41|42.0.0.20, target=FF:FF:FF:FF:FF:FF|42.0.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:21",
|
||||
"02:00:00:00:05:41",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:21 [op=REPLY, sender=02:00:00:00:05:21|42.0.0.10, target=02:00:00:00:05:41|42.0.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:21",
|
||||
"02:00:00:00:05:41",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"42.0.0.20",
|
||||
"192.168.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 2"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000502#1": [],
|
||||
"00000000-0000-0000-0000-000000000504": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:41",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 42.0.0.10 [op=REQUEST, sender=02:00:00:00:05:41|42.0.0.20, target=FF:FF:FF:FF:FF:FF|42.0.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:21",
|
||||
"02:00:00:00:05:41",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:21 [op=REPLY, sender=02:00:00:00:05:21|42.0.0.10, target=02:00:00:00:05:41|42.0.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:21",
|
||||
"02:00:00:00:05:41",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"42.0.0.20",
|
||||
"192.168.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 2"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000505": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:41",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 42.0.0.10 [op=REQUEST, sender=02:00:00:00:05:41|42.0.0.20, target=FF:FF:FF:FF:FF:FF|42.0.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000501": [],
|
||||
"00000000-0000-0000-0000-000000000502": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:41",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 42.0.0.10 [op=REQUEST, sender=02:00:00:00:05:41|42.0.0.20, target=FF:FF:FF:FF:FF:FF|42.0.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:21",
|
||||
"02:00:00:00:05:41",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:21 [op=REPLY, sender=02:00:00:00:05:21|42.0.0.10, target=02:00:00:00:05:41|42.0.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:21",
|
||||
"02:00:00:00:05:41",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"42.0.0.20",
|
||||
"192.168.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 2"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000502#1": [],
|
||||
"00000000-0000-0000-0000-000000000504": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:41",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 42.0.0.10 [op=REQUEST, sender=02:00:00:00:05:41|42.0.0.20, target=FF:FF:FF:FF:FF:FF|42.0.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:21",
|
||||
"02:00:00:00:05:41",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:21 [op=REPLY, sender=02:00:00:00:05:21|42.0.0.10, target=02:00:00:00:05:41|42.0.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:21",
|
||||
"02:00:00:00:05:41",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"42.0.0.20",
|
||||
"192.168.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 2"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000505": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:41",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 42.0.0.10 [op=REQUEST, sender=02:00:00:00:05:41|42.0.0.20, target=FF:FF:FF:FF:FF:FF|42.0.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
725,
|
||||
713,
|
||||
"sendProbe 42.0.0.10 called"
|
||||
],
|
||||
[
|
||||
1196,
|
||||
1184,
|
||||
"sendProbe 42.0.0.10 returned ICMP 0/0 from 42.0.0.10"
|
||||
],
|
||||
[
|
||||
1196,
|
||||
1184,
|
||||
"sendProbe 192.168.0.10 called"
|
||||
],
|
||||
[
|
||||
3946,
|
||||
3934,
|
||||
"sendProbe 192.168.0.10 returned null"
|
||||
]
|
||||
],
|
||||
|
||||
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,368 @@
|
||||
{
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000501": [
|
||||
{
|
||||
"time": 719,
|
||||
"source": "02:00:00:00:05:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.1"
|
||||
},
|
||||
{
|
||||
"time": 839,
|
||||
"source": "02:00:00:00:05:22",
|
||||
"destination": "02:00:00:00:05:11",
|
||||
"arp": 2,
|
||||
"senderIp": "192.168.0.1",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 843,
|
||||
"source": "02:00:00:00:05:11",
|
||||
"destination": "02:00:00:00:05:22",
|
||||
"icmp": 8,
|
||||
"icmpCode": 0,
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "42.0.0.20",
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 957,
|
||||
"source": "02:00:00:00:05:22",
|
||||
"destination": "02:00:00:00:05:11",
|
||||
"icmp": 11,
|
||||
"icmpCode": 0,
|
||||
"sourceIp": "192.168.0.1",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"sequence": 0
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000502": [],
|
||||
"00000000-0000-0000-0000-000000000502#1": [
|
||||
{
|
||||
"time": 781,
|
||||
"source": "02:00:00:00:05:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.1"
|
||||
},
|
||||
{
|
||||
"time": 783,
|
||||
"source": "02:00:00:00:05:22",
|
||||
"destination": "02:00:00:00:05:11",
|
||||
"arp": 2,
|
||||
"senderIp": "192.168.0.1",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 901,
|
||||
"source": "02:00:00:00:05:11",
|
||||
"destination": "02:00:00:00:05:22",
|
||||
"icmp": 8,
|
||||
"icmpCode": 0,
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "42.0.0.20",
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 901,
|
||||
"source": "02:00:00:00:05:22",
|
||||
"destination": "02:00:00:00:05:11",
|
||||
"icmp": 11,
|
||||
"icmpCode": 0,
|
||||
"sourceIp": "192.168.0.1",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"sequence": 0
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000504": [],
|
||||
"00000000-0000-0000-0000-000000000505": []
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000501": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.10",
|
||||
"192.168.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:05:11|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.1",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:22 [op=REPLY, sender=02:00:00:00:05:22|192.168.0.1, target=02:00:00:00:05:11|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:11",
|
||||
"02:00:00:00:05:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 1, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.1",
|
||||
"192.168.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Time Exeeded (poof), TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=1; protocol=1; sender=192.168.0.10; target=42.0.0.20; icmpType=8; icmpCode=0; identifier=1; seqNr=1]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000502": [],
|
||||
"00000000-0000-0000-0000-000000000502#1": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.10",
|
||||
"192.168.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:05:11|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.1",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:22 [op=REPLY, sender=02:00:00:00:05:22|192.168.0.1, target=02:00:00:00:05:11|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:11",
|
||||
"02:00:00:00:05:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 1, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.1",
|
||||
"192.168.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Time Exeeded (poof), TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=1; protocol=1; sender=192.168.0.10; target=42.0.0.20; icmpType=8; icmpCode=0; identifier=1; seqNr=1]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000504": [],
|
||||
"00000000-0000-0000-0000-000000000505": []
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000501": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.10",
|
||||
"192.168.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:05:11|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.1",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:22 [op=REPLY, sender=02:00:00:00:05:22|192.168.0.1, target=02:00:00:00:05:11|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:11",
|
||||
"02:00:00:00:05:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 1, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.1",
|
||||
"192.168.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Time Exeeded (poof), TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=1; protocol=1; sender=192.168.0.10; target=42.0.0.20; icmpType=8; icmpCode=0; identifier=1; seqNr=1]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000502": [],
|
||||
"00000000-0000-0000-0000-000000000502#1": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.10",
|
||||
"192.168.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:05:11|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.1",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:22 [op=REPLY, sender=02:00:00:00:05:22|192.168.0.1, target=02:00:00:00:05:11|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:11",
|
||||
"02:00:00:00:05:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 1, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.1",
|
||||
"192.168.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Time Exeeded (poof), TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=1; protocol=1; sender=192.168.0.10; target=42.0.0.20; icmpType=8; icmpCode=0; identifier=1; seqNr=1]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000504": [],
|
||||
"00000000-0000-0000-0000-000000000505": []
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
715,
|
||||
"sendProbe 42.0.0.20 called"
|
||||
],
|
||||
[
|
||||
959,
|
||||
"sendProbe 42.0.0.20 returned ICMP 11/0 from 192.168.0.1"
|
||||
]
|
||||
],
|
||||
"nat": []
|
||||
}
|
||||
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
{
|
||||
"time": 853,
|
||||
"time": 862,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 854,
|
||||
"time": 863,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:13",
|
||||
"arp": 2,
|
||||
@@ -18,13 +18,13 @@
|
||||
"targetIp": "192.168.0.30"
|
||||
},
|
||||
{
|
||||
"time": 1083,
|
||||
"time": 1091,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.30",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 50448,
|
||||
"sourcePort": 50292,
|
||||
"destinationPort": 81,
|
||||
"payload": null,
|
||||
"tcpFlags": "S",
|
||||
@@ -34,7 +34,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
{
|
||||
"time": 853,
|
||||
"time": 862,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -44,7 +44,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
{
|
||||
"time": 731,
|
||||
"time": 737,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -52,7 +52,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 966,
|
||||
"time": 975,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:13",
|
||||
"arp": 2,
|
||||
@@ -60,13 +60,13 @@
|
||||
"targetIp": "192.168.0.30"
|
||||
},
|
||||
{
|
||||
"time": 968,
|
||||
"time": 977,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.30",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 50448,
|
||||
"sourcePort": 50292,
|
||||
"destinationPort": 81,
|
||||
"payload": null,
|
||||
"tcpFlags": "S",
|
||||
@@ -75,28 +75,300 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:13",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.30",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.30",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:13|192.168.0.30]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:13",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.30",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.30:50292",
|
||||
"192.168.0.10:81",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:13",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.30",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:13",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.30",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.30",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:13|192.168.0.30]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:13",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.30",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.30:50292",
|
||||
"192.168.0.10:81",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:13",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.30",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.30",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:13|192.168.0.30]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:13",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.30",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"50292",
|
||||
"81",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:13",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.30",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:13",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.30",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.30",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:13|192.168.0.30]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:13",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.30",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"50292",
|
||||
"81",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
715,
|
||||
716,
|
||||
"client verbinden called"
|
||||
],
|
||||
[
|
||||
9020,
|
||||
9021,
|
||||
"client verbinden failed TimeOutException"
|
||||
]
|
||||
],
|
||||
"states": {
|
||||
"client": [
|
||||
[
|
||||
714,
|
||||
715,
|
||||
"CLOSED"
|
||||
],
|
||||
[
|
||||
728,
|
||||
734,
|
||||
"SYN_SENT"
|
||||
],
|
||||
[
|
||||
8978,
|
||||
8984,
|
||||
"CLOSED"
|
||||
]
|
||||
]
|
||||
|
||||
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
{
|
||||
"time": 855,
|
||||
"time": 853,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 857,
|
||||
"time": 854,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"arp": 2,
|
||||
@@ -18,13 +18,13 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 1086,
|
||||
"time": 1081,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 63329,
|
||||
"sourcePort": 49334,
|
||||
"destinationPort": 80,
|
||||
"payload": null,
|
||||
"tcpFlags": "S",
|
||||
@@ -32,27 +32,27 @@
|
||||
"acknowledgement": 0
|
||||
},
|
||||
{
|
||||
"time": 1088,
|
||||
"time": 1083,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 6,
|
||||
"sourcePort": 80,
|
||||
"destinationPort": 63329,
|
||||
"destinationPort": 49334,
|
||||
"payload": null,
|
||||
"tcpFlags": "SA",
|
||||
"sequence": 1000000,
|
||||
"acknowledgement": 2000001
|
||||
},
|
||||
{
|
||||
"time": 1311,
|
||||
"time": 1306,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 63329,
|
||||
"sourcePort": 49334,
|
||||
"destinationPort": 80,
|
||||
"payload": null,
|
||||
"tcpFlags": "A",
|
||||
@@ -62,7 +62,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
{
|
||||
"time": 733,
|
||||
"time": 728,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -70,7 +70,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 969,
|
||||
"time": 966,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"arp": 2,
|
||||
@@ -78,13 +78,13 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 972,
|
||||
"time": 968,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 63329,
|
||||
"sourcePort": 49334,
|
||||
"destinationPort": 80,
|
||||
"payload": null,
|
||||
"tcpFlags": "S",
|
||||
@@ -92,27 +92,27 @@
|
||||
"acknowledgement": 0
|
||||
},
|
||||
{
|
||||
"time": 1199,
|
||||
"time": 1194,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 6,
|
||||
"sourcePort": 80,
|
||||
"destinationPort": 63329,
|
||||
"destinationPort": 49334,
|
||||
"payload": null,
|
||||
"tcpFlags": "SA",
|
||||
"sequence": 1000000,
|
||||
"acknowledgement": 2000001
|
||||
},
|
||||
{
|
||||
"time": 1200,
|
||||
"time": 1195,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 63329,
|
||||
"sourcePort": 49334,
|
||||
"destinationPort": 80,
|
||||
"payload": null,
|
||||
"tcpFlags": "A",
|
||||
@@ -120,13 +120,13 @@
|
||||
"acknowledgement": 1000001
|
||||
},
|
||||
{
|
||||
"time": 1719,
|
||||
"time": 1715,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 63329,
|
||||
"sourcePort": 49334,
|
||||
"destinationPort": 80,
|
||||
"payload": null,
|
||||
"tcpFlags": "F",
|
||||
@@ -136,7 +136,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
{
|
||||
"time": 855,
|
||||
"time": 853,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -145,58 +145,570 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:49334",
|
||||
"192.168.0.10:80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 2.000.000"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:80",
|
||||
"192.168.0.20:49334",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.20:49334",
|
||||
"192.168.0.10:80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SEQ: 2.000.001, ACK: 1.000.001"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:49334",
|
||||
"192.168.0.10:80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 2.000.000"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:80",
|
||||
"192.168.0.20:49334",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.20:49334",
|
||||
"192.168.0.10:80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SEQ: 2.000.001, ACK: 1.000.001"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"192.168.0.20:49334",
|
||||
"192.168.0.10:80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 2.000.001"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"49334",
|
||||
"80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 2.000.000"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"80",
|
||||
"49334",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"49334",
|
||||
"80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SEQ: 2.000.001, ACK: 1.000.001"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"49334",
|
||||
"80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 2.000.000"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"80",
|
||||
"49334",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"49334",
|
||||
"80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SEQ: 2.000.001, ACK: 1.000.001"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"49334",
|
||||
"80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 2.000.001"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
216,
|
||||
213,
|
||||
"server oeffnen called"
|
||||
],
|
||||
[
|
||||
718,
|
||||
714,
|
||||
"client verbinden called"
|
||||
],
|
||||
[
|
||||
1218,
|
||||
1215,
|
||||
"client verbinden returned"
|
||||
],
|
||||
[
|
||||
1319,
|
||||
1316,
|
||||
"server oeffnen returned"
|
||||
],
|
||||
[
|
||||
1719,
|
||||
1715,
|
||||
"client schliessen called"
|
||||
],
|
||||
[
|
||||
1719,
|
||||
1715,
|
||||
"client schliessen returned"
|
||||
],
|
||||
[
|
||||
1719,
|
||||
1715,
|
||||
"lost FIN"
|
||||
]
|
||||
],
|
||||
"states": {
|
||||
"client": [
|
||||
[
|
||||
717,
|
||||
714,
|
||||
"CLOSED"
|
||||
],
|
||||
[
|
||||
729,
|
||||
724,
|
||||
"SYN_SENT"
|
||||
],
|
||||
[
|
||||
1201,
|
||||
1195,
|
||||
"ESTABLISHED"
|
||||
],
|
||||
[
|
||||
1719,
|
||||
1716,
|
||||
"FIN_WAIT_1"
|
||||
]
|
||||
],
|
||||
"server": [
|
||||
[
|
||||
1319,
|
||||
1316,
|
||||
"ESTABLISHED"
|
||||
]
|
||||
]
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
{
|
||||
"time": 849,
|
||||
"time": 862,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 850,
|
||||
"time": 863,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"arp": 2,
|
||||
@@ -18,13 +18,13 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 1078,
|
||||
"time": 1091,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 59631,
|
||||
"sourcePort": 58231,
|
||||
"destinationPort": 80,
|
||||
"payload": null,
|
||||
"tcpFlags": "S",
|
||||
@@ -32,27 +32,27 @@
|
||||
"acknowledgement": 0
|
||||
},
|
||||
{
|
||||
"time": 1079,
|
||||
"time": 1094,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 6,
|
||||
"sourcePort": 80,
|
||||
"destinationPort": 59631,
|
||||
"destinationPort": 58231,
|
||||
"payload": null,
|
||||
"tcpFlags": "SA",
|
||||
"sequence": 1000000,
|
||||
"acknowledgement": 2000001
|
||||
},
|
||||
{
|
||||
"time": 1303,
|
||||
"time": 1318,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 59631,
|
||||
"sourcePort": 58231,
|
||||
"destinationPort": 80,
|
||||
"payload": null,
|
||||
"tcpFlags": "A",
|
||||
@@ -60,13 +60,13 @@
|
||||
"acknowledgement": 1000001
|
||||
},
|
||||
{
|
||||
"time": 1827,
|
||||
"time": 1839,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 59631,
|
||||
"sourcePort": 58231,
|
||||
"destinationPort": 80,
|
||||
"payload": null,
|
||||
"tcpFlags": "F",
|
||||
@@ -74,28 +74,28 @@
|
||||
"acknowledgement": 0
|
||||
},
|
||||
{
|
||||
"time": 1828,
|
||||
"time": 1839,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 6,
|
||||
"sourcePort": 80,
|
||||
"destinationPort": 59631,
|
||||
"destinationPort": 58231,
|
||||
"payload": null,
|
||||
"tcpFlags": "A",
|
||||
"sequence": 1000001,
|
||||
"acknowledgement": 2000002
|
||||
},
|
||||
{
|
||||
"time": 1883,
|
||||
"time": 1895,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 6,
|
||||
"sourcePort": 80,
|
||||
"destinationPort": 59631,
|
||||
"destinationPort": 58231,
|
||||
"payload": null,
|
||||
"tcpFlags": "F",
|
||||
"sequence": 1000001,
|
||||
@@ -104,7 +104,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
{
|
||||
"time": 729,
|
||||
"time": 740,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -112,7 +112,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 962,
|
||||
"time": 975,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"arp": 2,
|
||||
@@ -120,13 +120,13 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 964,
|
||||
"time": 978,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 59631,
|
||||
"sourcePort": 58231,
|
||||
"destinationPort": 80,
|
||||
"payload": null,
|
||||
"tcpFlags": "S",
|
||||
@@ -134,27 +134,27 @@
|
||||
"acknowledgement": 0
|
||||
},
|
||||
{
|
||||
"time": 1191,
|
||||
"time": 1206,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 6,
|
||||
"sourcePort": 80,
|
||||
"destinationPort": 59631,
|
||||
"destinationPort": 58231,
|
||||
"payload": null,
|
||||
"tcpFlags": "SA",
|
||||
"sequence": 1000000,
|
||||
"acknowledgement": 2000001
|
||||
},
|
||||
{
|
||||
"time": 1191,
|
||||
"time": 1206,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 59631,
|
||||
"sourcePort": 58231,
|
||||
"destinationPort": 80,
|
||||
"payload": null,
|
||||
"tcpFlags": "A",
|
||||
@@ -162,13 +162,13 @@
|
||||
"acknowledgement": 1000001
|
||||
},
|
||||
{
|
||||
"time": 1716,
|
||||
"time": 1728,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 59631,
|
||||
"sourcePort": 58231,
|
||||
"destinationPort": 80,
|
||||
"payload": null,
|
||||
"tcpFlags": "F",
|
||||
@@ -176,14 +176,14 @@
|
||||
"acknowledgement": 0
|
||||
},
|
||||
{
|
||||
"time": 1939,
|
||||
"time": 1950,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 6,
|
||||
"sourcePort": 80,
|
||||
"destinationPort": 59631,
|
||||
"destinationPort": 58231,
|
||||
"payload": null,
|
||||
"tcpFlags": "A",
|
||||
"sequence": 1000001,
|
||||
@@ -192,7 +192,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
{
|
||||
"time": 849,
|
||||
"time": 862,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -201,66 +201,770 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:58231",
|
||||
"192.168.0.10:80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 2.000.000"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:80",
|
||||
"192.168.0.20:58231",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.20:58231",
|
||||
"192.168.0.10:80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SEQ: 2.000.001, ACK: 1.000.001"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"192.168.0.20:58231",
|
||||
"192.168.0.10:80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 2.000.001"
|
||||
],
|
||||
[
|
||||
"7",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"7",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"7",
|
||||
"192.168.0.10:80",
|
||||
"192.168.0.20:58231",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SEQ: 1.000.001, ACK: 2.000.002"
|
||||
],
|
||||
[
|
||||
"8",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"8",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"8",
|
||||
"192.168.0.10:80",
|
||||
"192.168.0.20:58231",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 1.000.001"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:58231",
|
||||
"192.168.0.10:80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 2.000.000"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:80",
|
||||
"192.168.0.20:58231",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.20:58231",
|
||||
"192.168.0.10:80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SEQ: 2.000.001, ACK: 1.000.001"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"192.168.0.20:58231",
|
||||
"192.168.0.10:80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 2.000.001"
|
||||
],
|
||||
[
|
||||
"7",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"7",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"7",
|
||||
"192.168.0.10:80",
|
||||
"192.168.0.20:58231",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SEQ: 1.000.001, ACK: 2.000.002"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"58231",
|
||||
"80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 2.000.000"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"80",
|
||||
"58231",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"58231",
|
||||
"80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SEQ: 2.000.001, ACK: 1.000.001"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"58231",
|
||||
"80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 2.000.001"
|
||||
],
|
||||
[
|
||||
"7",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"7",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"7",
|
||||
"80",
|
||||
"58231",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SEQ: 1.000.001, ACK: 2.000.002"
|
||||
],
|
||||
[
|
||||
"8",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"8",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"8",
|
||||
"80",
|
||||
"58231",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 1.000.001"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"58231",
|
||||
"80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 2.000.000"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"80",
|
||||
"58231",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"58231",
|
||||
"80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SEQ: 2.000.001, ACK: 1.000.001"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"58231",
|
||||
"80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 2.000.001"
|
||||
],
|
||||
[
|
||||
"7",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"7",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"7",
|
||||
"80",
|
||||
"58231",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SEQ: 1.000.001, ACK: 2.000.002"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
214,
|
||||
226,
|
||||
"server oeffnen called"
|
||||
],
|
||||
[
|
||||
714,
|
||||
727,
|
||||
"client verbinden called"
|
||||
],
|
||||
[
|
||||
1215,
|
||||
1227,
|
||||
"client verbinden returned"
|
||||
],
|
||||
[
|
||||
1317,
|
||||
1329,
|
||||
"server oeffnen returned"
|
||||
],
|
||||
[
|
||||
1715,
|
||||
1728,
|
||||
"client schliessen called"
|
||||
],
|
||||
[
|
||||
1715,
|
||||
1728,
|
||||
"client schliessen returned"
|
||||
],
|
||||
[
|
||||
1883,
|
||||
1895,
|
||||
"lost FIN"
|
||||
]
|
||||
],
|
||||
"states": {
|
||||
"client": [
|
||||
[
|
||||
714,
|
||||
726,
|
||||
"CLOSED"
|
||||
],
|
||||
[
|
||||
724,
|
||||
736,
|
||||
"SYN_SENT"
|
||||
],
|
||||
[
|
||||
1191,
|
||||
1208,
|
||||
"ESTABLISHED"
|
||||
],
|
||||
[
|
||||
1716,
|
||||
1728,
|
||||
"FIN_WAIT_1"
|
||||
],
|
||||
[
|
||||
1940,
|
||||
1951,
|
||||
"FIN_WAIT_2"
|
||||
]
|
||||
],
|
||||
"server": [
|
||||
[
|
||||
1317,
|
||||
1329,
|
||||
"ESTABLISHED"
|
||||
],
|
||||
[
|
||||
1829,
|
||||
1840,
|
||||
"LAST_ACK"
|
||||
]
|
||||
]
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
{
|
||||
"time": 850,
|
||||
"time": 854,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 852,
|
||||
"time": 855,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"arp": 2,
|
||||
@@ -18,13 +18,13 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 1079,
|
||||
"time": 1083,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 52891,
|
||||
"sourcePort": 52105,
|
||||
"destinationPort": 80,
|
||||
"payload": null,
|
||||
"tcpFlags": "S",
|
||||
@@ -32,28 +32,28 @@
|
||||
"acknowledgement": 0
|
||||
},
|
||||
{
|
||||
"time": 1081,
|
||||
"time": 1085,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 6,
|
||||
"sourcePort": 80,
|
||||
"destinationPort": 52891,
|
||||
"destinationPort": 52105,
|
||||
"payload": null,
|
||||
"tcpFlags": "SA",
|
||||
"sequence": 1000000,
|
||||
"acknowledgement": 2000001
|
||||
},
|
||||
{
|
||||
"time": 17582,
|
||||
"time": 17585,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 6,
|
||||
"sourcePort": 80,
|
||||
"destinationPort": 52891,
|
||||
"destinationPort": 52105,
|
||||
"payload": null,
|
||||
"tcpFlags": "F",
|
||||
"sequence": 1000001,
|
||||
@@ -62,7 +62,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
{
|
||||
"time": 728,
|
||||
"time": 733,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -70,7 +70,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 963,
|
||||
"time": 967,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"arp": 2,
|
||||
@@ -78,13 +78,13 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 966,
|
||||
"time": 969,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 52891,
|
||||
"sourcePort": 52105,
|
||||
"destinationPort": 80,
|
||||
"payload": null,
|
||||
"tcpFlags": "S",
|
||||
@@ -92,14 +92,14 @@
|
||||
"acknowledgement": 0
|
||||
},
|
||||
{
|
||||
"time": 17694,
|
||||
"time": 17697,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 6,
|
||||
"sourcePort": 80,
|
||||
"destinationPort": 52891,
|
||||
"destinationPort": 52105,
|
||||
"payload": null,
|
||||
"tcpFlags": "F",
|
||||
"sequence": 1000001,
|
||||
@@ -108,7 +108,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
{
|
||||
"time": 850,
|
||||
"time": 854,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -116,14 +116,14 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 17696,
|
||||
"time": 17697,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 6,
|
||||
"sourcePort": 80,
|
||||
"destinationPort": 52891,
|
||||
"destinationPort": 52105,
|
||||
"payload": null,
|
||||
"tcpFlags": "F",
|
||||
"sequence": 1000001,
|
||||
@@ -131,9 +131,473 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:52105",
|
||||
"192.168.0.10:80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 2.000.000"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:80",
|
||||
"192.168.0.20:52105",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.10:80",
|
||||
"192.168.0.20:52105",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 1.000.001"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:52105",
|
||||
"192.168.0.10:80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 2.000.000"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:80",
|
||||
"192.168.0.20:52105",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 1.000.001"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10:80",
|
||||
"192.168.0.20:52105",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 1.000.001"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"52105",
|
||||
"80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 2.000.000"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"80",
|
||||
"52105",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"80",
|
||||
"52105",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 1.000.001"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"52105",
|
||||
"80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 2.000.000"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"80",
|
||||
"52105",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 1.000.001"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"80",
|
||||
"52105",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 1.000.001"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
213,
|
||||
214,
|
||||
"server oeffnen called"
|
||||
],
|
||||
[
|
||||
@@ -141,48 +605,44 @@
|
||||
"client verbinden called"
|
||||
],
|
||||
[
|
||||
1081,
|
||||
1085,
|
||||
"lost SYN+ACK"
|
||||
],
|
||||
[
|
||||
9019,
|
||||
9020,
|
||||
"client verbinden failed TimeOutException"
|
||||
],
|
||||
[
|
||||
17626,
|
||||
17628,
|
||||
"server oeffnen returned"
|
||||
]
|
||||
],
|
||||
"states": {
|
||||
"server": [
|
||||
[
|
||||
215,
|
||||
"CLOSED"
|
||||
],
|
||||
[
|
||||
217,
|
||||
216,
|
||||
"LISTEN"
|
||||
],
|
||||
[
|
||||
1081,
|
||||
1086,
|
||||
"SYN_RCVD"
|
||||
],
|
||||
[
|
||||
17582,
|
||||
17586,
|
||||
"FIN_WAIT_1"
|
||||
]
|
||||
],
|
||||
"client": [
|
||||
[
|
||||
713,
|
||||
714,
|
||||
"CLOSED"
|
||||
],
|
||||
[
|
||||
724,
|
||||
728,
|
||||
"SYN_SENT"
|
||||
],
|
||||
[
|
||||
8974,
|
||||
8979,
|
||||
"CLOSED"
|
||||
]
|
||||
]
|
||||
|
||||
@@ -5,7 +5,7 @@
|
||||
"00000000-0000-0000-0000-000000000603": [],
|
||||
"00000000-0000-0000-0000-000000000605": [
|
||||
{
|
||||
"time": 717,
|
||||
"time": 718,
|
||||
"source": "02:00:00:00:06:15",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -22,6 +22,84 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000601": [],
|
||||
"00000000-0000-0000-0000-000000000602": [],
|
||||
"00000000-0000-0000-0000-000000000603": [],
|
||||
"00000000-0000-0000-0000-000000000605": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:15",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.14",
|
||||
"192.168.1.11",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.11 [op=REQUEST, sender=02:00:00:00:06:15|192.168.1.14, target=FF:FF:FF:FF:FF:FF|192.168.1.11]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:15",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.14",
|
||||
"192.168.1.11",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.11 [op=REQUEST, sender=02:00:00:00:06:15|192.168.1.14, target=FF:FF:FF:FF:FF:FF|192.168.1.11]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000601": [],
|
||||
"00000000-0000-0000-0000-000000000602": [],
|
||||
"00000000-0000-0000-0000-000000000603": [],
|
||||
"00000000-0000-0000-0000-000000000605": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:15",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.14",
|
||||
"192.168.1.11",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.11 [op=REQUEST, sender=02:00:00:00:06:15|192.168.1.14, target=FF:FF:FF:FF:FF:FF|192.168.1.11]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:15",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.14",
|
||||
"192.168.1.11",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.11 [op=REQUEST, sender=02:00:00:00:06:15|192.168.1.14, target=FF:FF:FF:FF:FF:FF|192.168.1.11]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
713,
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000601": [
|
||||
{
|
||||
"time": 724,
|
||||
"time": 718,
|
||||
"source": "02:00:00:00:06:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "192.168.1.13"
|
||||
},
|
||||
{
|
||||
"time": 960,
|
||||
"time": 956,
|
||||
"source": "02:00:00:00:06:13",
|
||||
"destination": "02:00:00:00:06:11",
|
||||
"arp": 2,
|
||||
@@ -18,7 +18,7 @@
|
||||
"targetIp": "192.168.1.11"
|
||||
},
|
||||
{
|
||||
"time": 964,
|
||||
"time": 961,
|
||||
"source": "02:00:00:00:06:11",
|
||||
"destination": "02:00:00:00:06:13",
|
||||
"icmp": 8,
|
||||
@@ -28,7 +28,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 1189,
|
||||
"time": 1186,
|
||||
"source": "02:00:00:00:06:13",
|
||||
"destination": "02:00:00:00:06:11",
|
||||
"icmp": 0,
|
||||
@@ -40,7 +40,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000602": [
|
||||
{
|
||||
"time": 846,
|
||||
"time": 843,
|
||||
"source": "02:00:00:00:06:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -50,7 +50,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000603": [
|
||||
{
|
||||
"time": 846,
|
||||
"time": 843,
|
||||
"source": "02:00:00:00:06:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -58,7 +58,7 @@
|
||||
"targetIp": "192.168.1.13"
|
||||
},
|
||||
{
|
||||
"time": 848,
|
||||
"time": 845,
|
||||
"source": "02:00:00:00:06:13",
|
||||
"destination": "02:00:00:00:06:11",
|
||||
"arp": 2,
|
||||
@@ -66,7 +66,7 @@
|
||||
"targetIp": "192.168.1.11"
|
||||
},
|
||||
{
|
||||
"time": 1077,
|
||||
"time": 1074,
|
||||
"source": "02:00:00:00:06:11",
|
||||
"destination": "02:00:00:00:06:13",
|
||||
"icmp": 8,
|
||||
@@ -76,7 +76,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 1077,
|
||||
"time": 1074,
|
||||
"source": "02:00:00:00:06:13",
|
||||
"destination": "02:00:00:00:06:11",
|
||||
"icmp": 0,
|
||||
@@ -88,13 +88,319 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000605": []
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000601": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.13",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.13 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.13]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:13",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.13",
|
||||
"192.168.1.11",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:06:13 [op=REPLY, sender=02:00:00:00:06:13|192.168.1.13, target=02:00:00:00:06:11|192.168.1.11]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:06:11",
|
||||
"02:00:00:00:06:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.1.11",
|
||||
"192.168.1.13",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:06:13",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.1.13",
|
||||
"192.168.1.11",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000602": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.13",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.13 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.13]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000603": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.13",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.13 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.13]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:13",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.13",
|
||||
"192.168.1.11",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:06:13 [op=REPLY, sender=02:00:00:00:06:13|192.168.1.13, target=02:00:00:00:06:11|192.168.1.11]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:06:11",
|
||||
"02:00:00:00:06:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.1.11",
|
||||
"192.168.1.13",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:06:13",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.1.13",
|
||||
"192.168.1.11",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000605": []
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000601": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.13",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.13 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.13]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:13",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.13",
|
||||
"192.168.1.11",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:06:13 [op=REPLY, sender=02:00:00:00:06:13|192.168.1.13, target=02:00:00:00:06:11|192.168.1.11]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:06:11",
|
||||
"02:00:00:00:06:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.1.11",
|
||||
"192.168.1.13",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:06:13",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.1.13",
|
||||
"192.168.1.11",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000602": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.13",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.13 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.13]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000603": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.13",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.13 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.13]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:13",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.13",
|
||||
"192.168.1.11",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:06:13 [op=REPLY, sender=02:00:00:00:06:13|192.168.1.13, target=02:00:00:00:06:11|192.168.1.11]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:06:11",
|
||||
"02:00:00:00:06:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.1.11",
|
||||
"192.168.1.13",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:06:13",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.1.13",
|
||||
"192.168.1.11",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000605": []
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
719,
|
||||
713,
|
||||
"sendProbe 192.168.1.13 called"
|
||||
],
|
||||
[
|
||||
1190,
|
||||
1187,
|
||||
"sendProbe 192.168.1.13 returned ICMP 0/0 from 192.168.1.13"
|
||||
]
|
||||
]
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000601": [
|
||||
{
|
||||
"time": 720,
|
||||
"time": 718,
|
||||
"source": "02:00:00:00:06:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "192.168.1.12"
|
||||
},
|
||||
{
|
||||
"time": 955,
|
||||
"time": 952,
|
||||
"source": "02:00:00:00:06:12",
|
||||
"destination": "02:00:00:00:06:11",
|
||||
"arp": 2,
|
||||
@@ -18,7 +18,7 @@
|
||||
"targetIp": "192.168.1.11"
|
||||
},
|
||||
{
|
||||
"time": 959,
|
||||
"time": 956,
|
||||
"source": "02:00:00:00:06:11",
|
||||
"destination": "02:00:00:00:06:12",
|
||||
"icmp": 8,
|
||||
@@ -28,7 +28,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 1184,
|
||||
"time": 1181,
|
||||
"source": "02:00:00:00:06:12",
|
||||
"destination": "02:00:00:00:06:11",
|
||||
"icmp": 0,
|
||||
@@ -40,7 +40,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000602": [
|
||||
{
|
||||
"time": 842,
|
||||
"time": 839,
|
||||
"source": "02:00:00:00:06:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -48,7 +48,7 @@
|
||||
"targetIp": "192.168.1.12"
|
||||
},
|
||||
{
|
||||
"time": 843,
|
||||
"time": 841,
|
||||
"source": "02:00:00:00:06:12",
|
||||
"destination": "02:00:00:00:06:11",
|
||||
"arp": 2,
|
||||
@@ -56,7 +56,7 @@
|
||||
"targetIp": "192.168.1.11"
|
||||
},
|
||||
{
|
||||
"time": 1072,
|
||||
"time": 1069,
|
||||
"source": "02:00:00:00:06:11",
|
||||
"destination": "02:00:00:00:06:12",
|
||||
"icmp": 8,
|
||||
@@ -66,7 +66,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 1072,
|
||||
"time": 1069,
|
||||
"source": "02:00:00:00:06:12",
|
||||
"destination": "02:00:00:00:06:11",
|
||||
"icmp": 0,
|
||||
@@ -78,7 +78,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000603": [
|
||||
{
|
||||
"time": 842,
|
||||
"time": 839,
|
||||
"source": "02:00:00:00:06:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -88,13 +88,319 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000605": []
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000601": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.12",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.12 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.12]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:12",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.12",
|
||||
"192.168.1.11",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:06:12 [op=REPLY, sender=02:00:00:00:06:12|192.168.1.12, target=02:00:00:00:06:11|192.168.1.11]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:06:11",
|
||||
"02:00:00:00:06:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.1.11",
|
||||
"192.168.1.12",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:06:12",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.1.12",
|
||||
"192.168.1.11",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000602": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.12",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.12 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.12]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:12",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.12",
|
||||
"192.168.1.11",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:06:12 [op=REPLY, sender=02:00:00:00:06:12|192.168.1.12, target=02:00:00:00:06:11|192.168.1.11]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:06:11",
|
||||
"02:00:00:00:06:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.1.11",
|
||||
"192.168.1.12",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:06:12",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.1.12",
|
||||
"192.168.1.11",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000603": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.12",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.12 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.12]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000605": []
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000601": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.12",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.12 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.12]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:12",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.12",
|
||||
"192.168.1.11",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:06:12 [op=REPLY, sender=02:00:00:00:06:12|192.168.1.12, target=02:00:00:00:06:11|192.168.1.11]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:06:11",
|
||||
"02:00:00:00:06:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.1.11",
|
||||
"192.168.1.12",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:06:12",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.1.12",
|
||||
"192.168.1.11",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000602": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.12",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.12 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.12]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:12",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.12",
|
||||
"192.168.1.11",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:06:12 [op=REPLY, sender=02:00:00:00:06:12|192.168.1.12, target=02:00:00:00:06:11|192.168.1.11]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:06:11",
|
||||
"02:00:00:00:06:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.1.11",
|
||||
"192.168.1.12",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:06:12",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.1.12",
|
||||
"192.168.1.11",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000603": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.12",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.12 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.12]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000605": []
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
715,
|
||||
713,
|
||||
"sendProbe 192.168.1.12 called"
|
||||
],
|
||||
[
|
||||
1185,
|
||||
1183,
|
||||
"sendProbe 192.168.1.12 returned ICMP 0/0 from 192.168.1.12"
|
||||
]
|
||||
]
|
||||
|
||||
@@ -56,6 +56,216 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000605": []
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000601": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.14",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.14 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.14]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.11",
|
||||
"192.168.1.14",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.14 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.14]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000602": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.14",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.14 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.14]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.11",
|
||||
"192.168.1.14",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.14 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.14]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000603": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.14",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.14 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.14]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.11",
|
||||
"192.168.1.14",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.14 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.14]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000605": []
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000601": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.14",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.14 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.14]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.11",
|
||||
"192.168.1.14",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.14 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.14]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000602": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.14",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.14 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.14]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.11",
|
||||
"192.168.1.14",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.14 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.14]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000603": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.14",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.14 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.14]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.11",
|
||||
"192.168.1.14",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.14 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.14]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000605": []
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
711,
|
||||
|
||||
@@ -20,7 +20,7 @@ import { fileURLToPath } from 'node:url';
|
||||
import { describe, expect, it } from 'vitest';
|
||||
import { TCP_FLAG, type Id, type NetworkRuntimeEngine, type TcpSegment } from '../src/index.js';
|
||||
import { loseFirst } from './fixtures.js';
|
||||
import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, gaps, javaFrames, watchedEngine, withClientPortText, type JavaFrame, type SeenFrame } from './javaRun.js';
|
||||
import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, gaps, javaFrames, watchedEngine, withClientPortText, type JavaFrame, type SeenFrame, type JavaTables } from './javaRun.js';
|
||||
import type { Scenario } from './scenario.js';
|
||||
|
||||
const scenarioDirectory = join(dirname(fileURLToPath(import.meta.url)), 'scenarios');
|
||||
@@ -34,7 +34,7 @@ const SERVER = '00000000-0000-0000-0000-000000000101';
|
||||
const CLIENT = '00000000-0000-0000-0000-000000000102';
|
||||
const OTHER_CLIENT = '00000000-0000-0000-0000-000000000103';
|
||||
|
||||
interface JavaRun {
|
||||
interface JavaRun extends JavaTables {
|
||||
frames: Record<string, JavaFrame[]>;
|
||||
events: [number, string][];
|
||||
states: Record<string, [number, string][]>;
|
||||
@@ -299,7 +299,7 @@ describe('TCP as Java FILIUS runs it', () => {
|
||||
);
|
||||
}
|
||||
|
||||
expectSameCaptures(engine, scenario, java.frames, { text: withClientPortText, until: CAPTURE_UNTIL[name]?.(measured) });
|
||||
expectSameCaptures(engine, scenario, java.frames, { text: withClientPortText, until: CAPTURE_UNTIL[name]?.(measured), tables: measured });
|
||||
|
||||
const shift = (states: [number, string][], syn: number): [number, string][] => before(states.map(([time, state]) => [time - syn, state]));
|
||||
// From SYN_SENT: Java's first CLOSED is when the socket was made.
|
||||
|
||||
@@ -17,14 +17,14 @@ import { dirname, join } from 'node:path';
|
||||
import { fileURLToPath } from 'node:url';
|
||||
import { describe, expect, it } from 'vitest';
|
||||
import type { Id, NetworkRuntimeEngine } from '../src/index.js';
|
||||
import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, gaps, javaFrames, watchedEngine, type JavaFrame } from './javaRun.js';
|
||||
import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, gaps, javaFrames, watchedEngine, type JavaFrame, type JavaTables } from './javaRun.js';
|
||||
import type { Scenario } from './scenario.js';
|
||||
|
||||
const scenarioDirectory = join(dirname(fileURLToPath(import.meta.url)), 'scenarios');
|
||||
const NOTEBOOK = '00000000-0000-0000-0000-000000000601';
|
||||
const UNCABLED = '00000000-0000-0000-0000-000000000605';
|
||||
|
||||
interface JavaRun {
|
||||
interface JavaRun extends JavaTables {
|
||||
frames: Record<string, JavaFrame[]>;
|
||||
events: [number, string][];
|
||||
}
|
||||
@@ -76,7 +76,7 @@ describe('WLAN as Java FILIUS runs it', () => {
|
||||
expect(actual[index]?.text, `frame #${index + 1}`).toBe(expected[index]?.text);
|
||||
expect(Math.abs(actual[index]!.gap - expected[index]!.gap), `gap before frame #${index + 1}`).toBeLessThanOrEqual(GAP_TOLERANCE_MILLISECONDS);
|
||||
}
|
||||
expectSameCaptures(engine, scenario, java.frames);
|
||||
expectSameCaptures(engine, scenario, java.frames, { tables: java });
|
||||
});
|
||||
}
|
||||
});
|
||||
|
||||
@@ -476,3 +476,33 @@ Javas Switch prüft seine Tabelle einmal je Sekunde ab dem Start
|
||||
nach der Lernzeit; der Kern genau bei ihr. Das ist gewollt und wird nicht
|
||||
gemessen: Wo Java nur in einem Takt nachsieht, macht der Kern es genauer
|
||||
(Entscheidung 01.10.2026; dasselbe für die NAT-Einträge des Heimrouters).
|
||||
|
||||
## Tabelle des Mitschnitts
|
||||
|
||||
Seit F2.8b schreibt `ScenarioNetwork.writeFrames` neben den Frames Javas
|
||||
fertige Tabelle jeder Karte (`Lauscher.getDaten`): `rows` mit Adresse:Port
|
||||
(das Fenster „Datenaustausch"), `layeredRows` nur mit Ports (die
|
||||
Schichtenansicht); je Zeile Nummer, Quelle, Ziel, Protokoll, Schicht,
|
||||
Bemerkung, ohne die Uhrzeit. Java läuft dabei mit `Locale.GERMANY`
|
||||
(`Information.getLocaleOrDefault`): deutsche Wörter, Tausenderpunkte. Alle
|
||||
Laufzeit-Läufe sind dafür neu aufgenommen (bis auf `dhcp-lan`, s. oben);
|
||||
`NatRun` hat den Ablauf `ttlOut` (Ping mit TTL 1 aus dem LAN: der Heimrouter
|
||||
meldet „Zeit überschritten").
|
||||
|
||||
Gemessen (01.10.2026), wo der Kern abwich:
|
||||
|
||||
* Eine ARP-Anfrage trägt als Ziel-MAC `FF:FF:FF:FF:FF:FF`
|
||||
(`ARP.sendeARPBroadcast`), der Kern trug Nullen (wie Swift).
|
||||
* Eine ICMP-Fehlermeldung trägt Identifier und Sequenznummer 0, der Kern
|
||||
kopierte die des Echos (wie Swift).
|
||||
* „Host nicht erreichbar" vom Router trägt das Paket mit gesenkter TTL (wie
|
||||
er es weitergeleitet hat), der Kern das angekommene.
|
||||
|
||||
Bewusst nicht übernommen: Javas Antwort an `0.0.0.0` schreibt die
|
||||
Broadcast-Adresse klein (`ARP.sendArpReply`), der Kern immer groß; „ICMP
|
||||
Time Exeeded" ist ein Tippfehler.
|
||||
|
||||
RIP: Der Anlauf entscheidet, wie viele Zufallspausen jeder Router zieht
|
||||
(jede Nachricht zieht eine), und der hängt an Javas Startreihenfolge. Eine
|
||||
Aufnahme, deren Anlauf von dem des Kerns (alle Router zugleich) abweicht,
|
||||
liegt danach in allen Zeiten daneben; das Werkzeug wird dann wiederholt.
|
||||
|
||||
@@ -154,7 +154,7 @@ done
|
||||
|
||||
# NAT as Java FILIUS runs it: nat-home's home router between a LAN PC and two
|
||||
# WAN hosts (NatRun); frames, calls and the router's NAT table at the end.
|
||||
for run in pingOut:10000 udpOut:10000 udpTwoRemotes:25000 tcpOut:20000 forward:20000 pingWan:15000; do
|
||||
for run in pingOut:10000 udpOut:10000 udpTwoRemotes:25000 tcpOut:20000 forward:20000 pingWan:15000 ttlOut:10000; do
|
||||
story="${run%%:*}"
|
||||
output="$root/packages/core/test/scenarios/nat-java-$story.java.json"
|
||||
rm -f "$output"
|
||||
|
||||
@@ -15,6 +15,7 @@
|
||||
// forward 42.0.0.20 connects to 42.0.0.10:8080, forwarded to
|
||||
// 192.168.0.10:80; sends, receives, closes
|
||||
// pingWan 42.0.0.20 pings 42.0.0.10, then 192.168.0.10
|
||||
// ttlOut 192.168.0.10 pings 42.0.0.20 with TTL 1: time exceeded
|
||||
|
||||
import filius.software.nat.NatEntry;
|
||||
import filius.software.nat.NatGateway;
|
||||
@@ -194,6 +195,9 @@ public class NatRun {
|
||||
Thread.sleep(200);
|
||||
tcpClient(SERVER, "42.0.0.10", 8080);
|
||||
break;
|
||||
case "ttlOut":
|
||||
call("sendProbe 42.0.0.20", () -> icmp(os(LAN_PC).holeICMP().sendProbe("42.0.0.20", 1, 1, 1)));
|
||||
break;
|
||||
case "pingWan":
|
||||
call("sendProbe 42.0.0.10", () -> icmp(os(SERVER).holeICMP().sendProbe("42.0.0.10", 64, 1, 1)));
|
||||
call("sendProbe 192.168.0.10", () -> icmp(os(SERVER).holeICMP().sendProbe("192.168.0.10", 64, 1, 2)));
|
||||
|
||||
@@ -242,6 +242,32 @@ public class ScenarioNetwork {
|
||||
out.close(']');
|
||||
}
|
||||
out.close('}');
|
||||
writeRows(out, "rows", true);
|
||||
writeRows(out, "layeredRows", false);
|
||||
}
|
||||
|
||||
/**
|
||||
* The packet capture's table of each card as FILIUS shows it
|
||||
* (Lauscher.getDaten): with addresses and ports (`rows`, the data exchange
|
||||
* window) or ports only (`layeredRows`, the layered view). Each row: number,
|
||||
* source, destination, protocol, layer, comment — its time (the wall clock)
|
||||
* left out.
|
||||
*/
|
||||
void writeRows(Json out, String key, boolean withAddresses) {
|
||||
out.key(key).open('{');
|
||||
for (Map.Entry<String, String> entry : macByNode.entrySet()) {
|
||||
out.key(entry.getKey()).open('[');
|
||||
for (Object[] row : Lauscher.getLauscher().getDaten(entry.getValue(), withAddresses, 1)) {
|
||||
out.open('[');
|
||||
for (int column = 0; column < row.length; column++) {
|
||||
if (column == 1) continue;
|
||||
out.string(row[column] == null ? null : String.valueOf(row[column]));
|
||||
}
|
||||
out.close(']');
|
||||
}
|
||||
out.close(']');
|
||||
}
|
||||
out.close('}');
|
||||
}
|
||||
|
||||
/** Each host's address, mask, gateway and DNS server. */
|
||||
|
||||
Reference in New Issue
Block a user