feat(core): the packet capture's table after Java's Lauscher, measured against Java's own tables
captureRows.ts builds Java's rows per frame (Lauscher.datenVorbereiten): Ethernet; ARP, ICMP or IP; TCP or UDP; the data with Java's protocol recognition; with addresses and ports or ports only. The comment stays structured; captureCommentText says it with given words and numbers. ScenarioNetwork writes Java's finished tables per card (Lauscher.getDaten, German locale); all runtime runs are recorded again, NatRun has ttlOut. expectSameCaptures compares both views for every frame. Fixed where the engine differed: an ARP request's target MAC is the broadcast address, an ICMP error's identifier and sequence number are 0 (RFC 792), and host unreachable from a router carries the packet as forwarded. Not taken: Java's lower-case broadcast address in a reply to 0.0.0.0, and the typo 'Exeeded'. RIP keeps its recordings: Java's staggered router start now gives a different startup on this machine. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Claude Opus 5.5
@@ -10,13 +10,13 @@ import { dirname, join } from 'node:path';
|
||||
import { fileURLToPath } from 'node:url';
|
||||
import { describe, expect, it } from 'vitest';
|
||||
import { icmpMessage, type NetworkRuntimeEngine } from '../src/index.js';
|
||||
import { expectSameCaptures, withClientPortText, GAP_TOLERANCE_MILLISECONDS, gaps, javaFrames, watchedEngine, type JavaFrame } from './javaRun.js';
|
||||
import { expectSameCaptures, withClientPortText, GAP_TOLERANCE_MILLISECONDS, gaps, javaFrames, watchedEngine, type JavaFrame, type JavaTables } from './javaRun.js';
|
||||
import type { Scenario } from './scenario.js';
|
||||
|
||||
const scenarioDirectory = join(dirname(fileURLToPath(import.meta.url)), 'scenarios');
|
||||
const HOST = '00000000-0000-0000-0000-000000000301';
|
||||
|
||||
interface JavaRun {
|
||||
interface JavaRun extends JavaTables {
|
||||
frames: Record<string, JavaFrame[]>;
|
||||
events: [number, string][];
|
||||
}
|
||||
@@ -117,7 +117,7 @@ describe('ARP as Java FILIUS runs it', () => {
|
||||
expect(actual[index]?.text, `frame #${index + 1}`).toBe(expected[index]?.text);
|
||||
expect(Math.abs(actual[index]!.gap - expected[index]!.gap), `gap before frame #${index + 1}`).toBeLessThanOrEqual(GAP_TOLERANCE_MILLISECONDS);
|
||||
}
|
||||
expectSameCaptures(engine, scenario, java.frames, { text: withClientPortText });
|
||||
expectSameCaptures(engine, scenario, java.frames, { text: withClientPortText, tables: java });
|
||||
});
|
||||
}
|
||||
});
|
||||
|
||||
@@ -0,0 +1,150 @@
|
||||
// The capture table's rules that no Java run of the oracle shows
|
||||
// (Lauscher.datenVorbereiten, classifyApplicationLayerProtocol); the rest is
|
||||
// compared with Java's own tables in the *Java.test.ts files (javaRun.ts).
|
||||
|
||||
import { describe, expect, it } from 'vitest';
|
||||
import {
|
||||
captureCommentText,
|
||||
captureRows,
|
||||
icmpMessage,
|
||||
TCP_FLAG,
|
||||
type CapturedFrame,
|
||||
type CaptureRow,
|
||||
type EthernetFrame,
|
||||
type IPv4Packet,
|
||||
} from '../src/index.js';
|
||||
|
||||
const WORDS = { protocol: 'Protocol', searchForMac: 'Search for MAC', macIs: 'MAC is' };
|
||||
const plain = (value: number) => String(value);
|
||||
|
||||
function captured(packet: IPv4Packet, number = 1): CapturedFrame {
|
||||
const frame: EthernetFrame = { identity: number, sourceMacAddress: '02:00:00:00:00:01', destinationMacAddress: '02:00:00:00:00:02', payload: { kind: 'ipv4', packet } };
|
||||
return { number, timeMilliseconds: 10 * number, frame };
|
||||
}
|
||||
|
||||
function udp(text: string, sourcePort: number, destinationPort: number): IPv4Packet {
|
||||
return {
|
||||
identity: 7,
|
||||
senderIPAddress: '10.0.0.1',
|
||||
receiverIPAddress: '10.0.0.2',
|
||||
timeToLive: 64,
|
||||
protocol: 'udp',
|
||||
payload: { kind: 'udp', datagram: { sourcePort, destinationPort, payload: new TextEncoder().encode(text) } },
|
||||
};
|
||||
}
|
||||
|
||||
function tcp(text: string, sourcePort: number, destinationPort: number, flags: number = TCP_FLAG.acknowledgement): IPv4Packet {
|
||||
return {
|
||||
identity: 8,
|
||||
senderIPAddress: '10.0.0.1',
|
||||
receiverIPAddress: '10.0.0.2',
|
||||
timeToLive: 64,
|
||||
protocol: 'tcp',
|
||||
payload: {
|
||||
kind: 'tcp',
|
||||
segment: { sourcePort, destinationPort, sequenceNumber: 1000, acknowledgementNumber: 2000, flags, payload: new TextEncoder().encode(text) },
|
||||
},
|
||||
};
|
||||
}
|
||||
|
||||
/** The protocol of the data row, or undefined without one. */
|
||||
function applicationProtocol(packet: IPv4Packet): string | undefined {
|
||||
return captureRows([captured(packet)], { withAddresses: true }).find((row) => row.layer === 'application')?.protocol;
|
||||
}
|
||||
|
||||
const comments = (rows: CaptureRow[]) => rows.map((row) => captureCommentText(row.comment, WORDS, plain));
|
||||
|
||||
describe('capture table', () => {
|
||||
it("names the data's protocol as Java does, by markers, ports and words", () => {
|
||||
expect(applicationProtocol(tcp('x//0x40//y', 6346, 6346))).toBe('GNT');
|
||||
expect(applicationProtocol(tcp('+ok 2 messages', 110, 50000))).toBe('POP3');
|
||||
expect(applicationProtocol(tcp('retr 1', 50000, 110))).toBe('POP3');
|
||||
expect(applicationProtocol(tcp('noop', 50000, 110))).toBe('POP3');
|
||||
expect(applicationProtocol(tcp('hello', 50000, 110))).toBe('');
|
||||
expect(applicationProtocol(tcp('250 OK', 25, 50000))).toBe('SMTP');
|
||||
expect(applicationProtocol(tcp('anything', 50000, 25))).toBe('SMTP');
|
||||
expect(applicationProtocol(udp('ID=1 QR=0 RCODE=0', 50000, 53))).toBe('DNS');
|
||||
expect(applicationProtocol(udp('DHCPDISCOVER', 68, 67))).toBe('DHCP');
|
||||
expect(applicationProtocol(udp('table', 521, 520))).toBe('RIP');
|
||||
expect(applicationProtocol(udp('table', 520, 520))).toBe('');
|
||||
expect(applicationProtocol(tcp('GET / HTTP/1.1', 50000, 80))).toBe('HTTP');
|
||||
expect(applicationProtocol(tcp('GET /', 50000, 80))).toBe('');
|
||||
expect(applicationProtocol(tcp('<html>', 80, 50000))).toBe('HTTP');
|
||||
// GNT comes first, then POP3, SMTP, DNS, DHCP, RIP, HTTP.
|
||||
expect(applicationProtocol(udp('DHCP ID=1 QR=0 RCODE=0', 68, 67))).toBe('DNS');
|
||||
});
|
||||
|
||||
it('shows data only when Java trims them to something, and without ends in the layered view', () => {
|
||||
expect(applicationProtocol(udp(' \t\n', 9, 9))).toBeUndefined();
|
||||
expect(applicationProtocol(tcp('', 50000, 80))).toBeUndefined();
|
||||
const withAddresses = captureRows([captured(udp(' x ', 5000, 9))], { withAddresses: true });
|
||||
const layered = captureRows([captured(udp(' x ', 5000, 9))], { withAddresses: false });
|
||||
expect(withAddresses.map((row) => [row.source, row.destination])).toEqual([
|
||||
['02:00:00:00:00:01', '02:00:00:00:00:02'],
|
||||
['10.0.0.1', '10.0.0.2'],
|
||||
['10.0.0.1:5000', '10.0.0.2:9'],
|
||||
['10.0.0.1:5000', '10.0.0.2:9'],
|
||||
]);
|
||||
expect(layered.map((row) => [row.source, row.destination]).slice(2)).toEqual([
|
||||
['5000', '9'],
|
||||
[null, null],
|
||||
]);
|
||||
expect(comments(layered)).toEqual(['0x800', 'Protocol: 17, TTL: 64', '', ' x ']);
|
||||
});
|
||||
|
||||
it('marks a SYN, else a FIN, and an acknowledgement only with its flag', () => {
|
||||
const segmentComment = (flags: number) => comments(captureRows([captured(tcp('', 1, 2, flags))], { withAddresses: true }))[2];
|
||||
expect(segmentComment(TCP_FLAG.synchronize)).toBe('SYN, SEQ: 1000');
|
||||
expect(segmentComment(TCP_FLAG.synchronize | TCP_FLAG.finish | TCP_FLAG.acknowledgement)).toBe('SYN, SEQ: 1000, ACK: 2000');
|
||||
expect(segmentComment(TCP_FLAG.finish | TCP_FLAG.acknowledgement)).toBe('FIN, SEQ: 1000, ACK: 2000');
|
||||
expect(segmentComment(TCP_FLAG.push | TCP_FLAG.reset)).toBe('SEQ: 1000');
|
||||
expect(captureCommentText({ kind: 'tcp', flag: undefined, sequence: 1234567, acknowledgement: 1000 }, WORDS, (value) => value.toLocaleString('de-DE'))).toBe(
|
||||
'SEQ: 1.234.567, ACK: 1.000',
|
||||
);
|
||||
});
|
||||
|
||||
it('writes an ICMP error with the packet it carries, also an ICMP one inside', () => {
|
||||
const echo: IPv4Packet = {
|
||||
identity: 3,
|
||||
senderIPAddress: '10.0.0.1',
|
||||
receiverIPAddress: '10.0.0.9',
|
||||
timeToLive: 1,
|
||||
protocol: 'icmp',
|
||||
payload: { kind: 'icmp', message: icmpMessage('echoRequest', { identifier: 4, sequenceNumber: 5 }) },
|
||||
};
|
||||
const error: IPv4Packet = {
|
||||
identity: 6,
|
||||
senderIPAddress: '10.0.0.254',
|
||||
receiverIPAddress: '10.0.0.1',
|
||||
timeToLive: 64,
|
||||
protocol: 'icmp',
|
||||
payload: { kind: 'icmp', message: icmpMessage('timeExceeded', { embeddedOriginalPacket: echo }) },
|
||||
};
|
||||
const rows = captureRows([captured(error)], { withAddresses: true });
|
||||
expect(rows.map((row) => [row.protocol, row.layer])).toEqual([
|
||||
['', 'networkAccess'],
|
||||
['ICMP', 'internet'],
|
||||
]);
|
||||
expect(comments(rows)[1]).toBe(
|
||||
'ICMP Time Exceeded (poof), TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: ' +
|
||||
'[id=3; ttl=1; protocol=1; sender=10.0.0.1; target=10.0.0.9; icmpType=8; icmpCode=0; identifier=4; seqNr=5]',
|
||||
);
|
||||
const unreachable = { ...error, payload: { kind: 'icmp' as const, message: icmpMessage('destinationNetworkUnreachable', { embeddedOriginalPacket: udp('x', 1, 2) }) } };
|
||||
expect(comments(captureRows([captured(unreachable)], { withAddresses: true }))[1]).toBe(
|
||||
'ICMP Network Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=7, ttl=64, protocol=17, dest=10.0.0.2, src=10.0.0.1]',
|
||||
);
|
||||
});
|
||||
|
||||
it('keeps the frame number and time on each of its rows', () => {
|
||||
const rows = captureRows([captured(udp('a', 1, 2), 4), captured(udp('', 1, 2), 9)], { withAddresses: true });
|
||||
expect(rows.map((row) => [row.number, row.timeMilliseconds])).toEqual([
|
||||
[4, 40],
|
||||
[4, 40],
|
||||
[4, 40],
|
||||
[4, 40],
|
||||
[9, 90],
|
||||
[9, 90],
|
||||
[9, 90],
|
||||
]);
|
||||
});
|
||||
});
|
||||
@@ -16,12 +16,12 @@ import { dirname, join } from 'node:path';
|
||||
import { fileURLToPath } from 'node:url';
|
||||
import { describe, expect, it } from 'vitest';
|
||||
import { stableMacAddress } from '../src/index.js';
|
||||
import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, javaFrames, watchedEngine, type JavaFrame, type SeenFrame } from './javaRun.js';
|
||||
import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, javaFrames, watchedEngine, type JavaFrame, type SeenFrame, type JavaTables } from './javaRun.js';
|
||||
import { type Scenario } from './scenario.js';
|
||||
|
||||
const scenarioDirectory = join(dirname(fileURLToPath(import.meta.url)), 'scenarios');
|
||||
|
||||
interface JavaRun {
|
||||
interface JavaRun extends JavaTables {
|
||||
frames: Record<string, JavaFrame[]>;
|
||||
devices: Record<string, [string, string, string, string]>;
|
||||
}
|
||||
@@ -89,7 +89,7 @@ describe('DHCP as Java FILIUS runs it', () => {
|
||||
// Each card's capture, with one client: of two that start together, Java's
|
||||
// log loses the DISCOVER of the one that sends second, and which sends
|
||||
// first varies (javaRun.ts).
|
||||
if (clients.length === 1) expectSameCaptures(engine.engine, scenario, java.frames, { text: (text) => text.replace(LINK_LOCAL, '169.254.1.x') });
|
||||
if (clients.length === 1) expectSameCaptures(engine.engine, scenario, java.frames, { text: (text) => text.replace(LINK_LOCAL, '169.254.1.x'), tables: java });
|
||||
const linkLocal = (devices: Record<string, string[]>) =>
|
||||
Object.fromEntries(Object.entries(devices).map(([node, device]) => [node, device.map((value) => value.replace(LINK_LOCAL, '169.254.1.x'))]));
|
||||
expect(linkLocal(engine.devices)).toEqual(linkLocal(java.devices));
|
||||
|
||||
@@ -16,14 +16,14 @@ import { dirname, join } from 'node:path';
|
||||
import { fileURLToPath } from 'node:url';
|
||||
import { describe, expect, it } from 'vitest';
|
||||
import type { DnsAddressResolution, NetworkRuntimeEngine } from '../src/index.js';
|
||||
import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, gaps, javaFrames, watchedEngine, type JavaFrame, type SeenFrame } from './javaRun.js';
|
||||
import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, gaps, javaFrames, watchedEngine, type JavaFrame, type SeenFrame, type JavaTables } from './javaRun.js';
|
||||
import type { Scenario } from './scenario.js';
|
||||
|
||||
const scenarioDirectory = join(dirname(fileURLToPath(import.meta.url)), 'scenarios');
|
||||
const CLIENT = '00000000-0000-0000-0000-000000000101';
|
||||
const LOST_CLIENT = '00000000-0000-0000-0000-000000000104';
|
||||
|
||||
interface JavaRun {
|
||||
interface JavaRun extends JavaTables {
|
||||
frames: Record<string, JavaFrame[]>;
|
||||
events: [number, string][];
|
||||
}
|
||||
@@ -122,7 +122,7 @@ describe('DNS as Java FILIUS runs it', () => {
|
||||
expect(actual[index]?.text, `frame #${index + 1}`).toBe(expected[index]?.text);
|
||||
expect(Math.abs(actual[index]!.gap - expected[index]!.gap), `gap before frame #${index + 1}`).toBeLessThanOrEqual(GAP_TOLERANCE_MILLISECONDS);
|
||||
}
|
||||
expectSameCaptures(engine, scenario, java.frames, { text: (text) => normalized([{ time: 0, text }])[0]!.text, until });
|
||||
expectSameCaptures(engine, scenario, java.frames, { text: (text) => normalized([{ time: 0, text }])[0]!.text, until, tables: java });
|
||||
});
|
||||
}
|
||||
}
|
||||
|
||||
@@ -22,7 +22,15 @@
|
||||
// (engine.test.ts checks that: one cable's delay is below this tolerance).
|
||||
|
||||
import { expect } from 'vitest';
|
||||
import { NetworkRuntimeEngine, TCP_FLAG, type EthernetFrame } from '../src/index.js';
|
||||
import {
|
||||
captureCommentText,
|
||||
captureRows,
|
||||
NetworkRuntimeEngine,
|
||||
TCP_FLAG,
|
||||
type CapturedFrame,
|
||||
type CaptureLayer,
|
||||
type EthernetFrame,
|
||||
} from '../src/index.js';
|
||||
import { snapshotOf, type Scenario } from './scenario.js';
|
||||
|
||||
export const GAP_TOLERANCE_MILLISECONDS = 120;
|
||||
@@ -177,15 +185,21 @@ export function expectSameCaptures(
|
||||
until?: number | undefined;
|
||||
tolerance?: number;
|
||||
starts?: { java: number; engine: number };
|
||||
/** Java's tables of the cards (ScenarioNetwork.writeRows), compared for the frames compared. */
|
||||
tables?: JavaTables;
|
||||
/** Placeholders in a table cell, beyond those of tableCell. */
|
||||
cell?: (text: string) => string;
|
||||
} = {},
|
||||
): void {
|
||||
const text = options.text ?? ((each: string) => each);
|
||||
const engineByCard = new Map<string, SeenFrame[]>();
|
||||
const capturedByCard = new Map<string, readonly CapturedFrame[]>();
|
||||
for (const node of scenario.nodes) {
|
||||
if (node.kind === 'networkSwitch') continue;
|
||||
node.ports.forEach((port, index) => {
|
||||
const frames = engine.capture.frames(port.id).map((each) => ({ time: each.timeMilliseconds, text: text(engineText(each.frame)) }));
|
||||
engineByCard.set(index === 0 ? node.id : `${node.id}#${index}`, frames);
|
||||
const card = index === 0 ? node.id : `${node.id}#${index}`;
|
||||
capturedByCard.set(card, engine.capture.frames(port.id));
|
||||
engineByCard.set(card, capturedByCard.get(card)!.map((each) => ({ time: each.timeMilliseconds, text: text(engineText(each.frame)) })));
|
||||
});
|
||||
}
|
||||
const javaByCard = new Map(Object.entries(java).map(([card, frames]) => [card, frames.map((frame) => ({ time: frame.time, text: text(javaText(frame)) }))]));
|
||||
@@ -198,7 +212,29 @@ export function expectSameCaptures(
|
||||
const normalized = options.normalized ?? ((frames: SeenFrame[]) => frames);
|
||||
const window = (frames: SeenFrame[], start: number) =>
|
||||
frames.filter((frame) => frame.time - start >= from && frame.time - start < until).map((frame) => ({ time: frame.time - start, text: frame.text }));
|
||||
const inWindow = (time: number, start: number) => time - start >= from && time - start < until;
|
||||
for (const [card, javaList] of javaByCard) {
|
||||
if (options.tables !== undefined) {
|
||||
// The rows of the frames in the window, frame by frame.
|
||||
const javaNumbers = javaList.flatMap((frame, index) => (inWindow(frame.time, javaStart) ? [index + 1] : []));
|
||||
const engineFrames = capturedByCard.get(card)!.filter((each) => inWindow(each.timeMilliseconds, engineStart));
|
||||
for (const [view, withAddresses] of [['rows', true], ['layeredRows', false]] as const) {
|
||||
const javaRows = options.tables[view]?.[card];
|
||||
if (javaRows === undefined) continue;
|
||||
const engineRows = captureRows(engineFrames, { withAddresses });
|
||||
const cell = (value: string | null) => (value === null ? null : (options.cell ?? ((each: string) => each))(tableCell(value)));
|
||||
for (const [index, number] of javaNumbers.entries()) {
|
||||
const frame = engineFrames[index];
|
||||
const expectedRows = javaRows.filter((row) => row[0] === String(number)).map((row) => row.slice(1).map(cell));
|
||||
// A frame a test added where Java errs (JAVA_BUGS) has no table of Java's.
|
||||
if (expectedRows.length === 0 && number > Math.max(0, ...javaRows.map((row) => Number(row[0])))) continue;
|
||||
const actualRows = engineRows
|
||||
.filter((row) => row.number === frame?.number)
|
||||
.map((row) => [row.source, row.destination, row.protocol, JAVA_LAYERS[row.layer], captureCommentText(row.comment, JAVA_WORDS, javaNumber)].map(cell));
|
||||
expect(actualRows, `${card} ${view} of frame #${index + 1}`).toEqual(expectedRows);
|
||||
}
|
||||
}
|
||||
}
|
||||
const expected = normalized(window(javaList, javaStart));
|
||||
const actual = normalized(window(engineByCard.get(card)!, engineStart));
|
||||
for (let index = 0; index < Math.max(expected.length, actual.length); index += 1) {
|
||||
@@ -214,3 +250,36 @@ export function expectSameCaptures(
|
||||
export function withClientPortText(text: string): string {
|
||||
return text.replace(/:(\d{5})\b/g, (whole, port: string) => (Number(port) >= 49_152 ? ':client' : whole));
|
||||
}
|
||||
|
||||
/** Java's capture tables per card: number, source, destination, protocol, layer, comment (ScenarioNetwork.writeRows). */
|
||||
export interface JavaTables {
|
||||
rows?: Record<string, (string | null)[][]>;
|
||||
layeredRows?: Record<string, (string | null)[][]>;
|
||||
}
|
||||
|
||||
/** Java's layer names and comment words: its German message bundle, the locale it runs in (Locale.GERMANY). */
|
||||
const JAVA_LAYERS: Record<CaptureLayer, string> = { networkAccess: 'Netzzugang', internet: 'Vermittlung', transport: 'Transport', application: 'Anwendung' };
|
||||
const JAVA_WORDS = { protocol: 'Protokoll', searchForMac: 'Suche nach MAC f\u00fcr', macIs: 'MAC ist' };
|
||||
|
||||
/** NumberFormat for Locale.GERMANY: groups of three digits with dots. */
|
||||
function javaNumber(value: number): string {
|
||||
return String(value).replace(/\B(?=(\d{3})+(?!\d))/g, '.');
|
||||
}
|
||||
|
||||
/**
|
||||
* Placeholders every test needs in a table cell: free ports, DNS message IDs,
|
||||
* IP packet IDs, link-local addresses. And two departures from Java: its ARP
|
||||
* reply to 0.0.0.0 writes the broadcast address in lower case
|
||||
* (ARP.sendArpReply), everything else in upper case — the engine always in
|
||||
* upper case (better than Java where nothing depends on it); and Java
|
||||
* misspells "ICMP Time Exeeded" (a typo, not taken).
|
||||
*/
|
||||
function tableCell(text: string): string {
|
||||
return withClientPortText(text)
|
||||
.replaceAll('ff:ff:ff:ff:ff:ff', 'FF:FF:FF:FF:FF:FF')
|
||||
.replace('ICMP Time Exeeded (poof)', 'ICMP Time Exceeded (poof)')
|
||||
.replace(/^(\d{5})$/, (whole, port: string) => (Number(port) >= 49_152 ? 'client' : whole))
|
||||
.replace(/ID=\d+/g, 'ID=x')
|
||||
.replace(/\[id=\d+/g, '[id=x')
|
||||
.replace(/169\.254\.1\.\d+/g, '169.254.1.x');
|
||||
}
|
||||
|
||||
@@ -22,7 +22,7 @@ import { dirname, join } from 'node:path';
|
||||
import { fileURLToPath } from 'node:url';
|
||||
import { describe, expect, it } from 'vitest';
|
||||
import type { Id, IPv4DeliveryResult, NetworkRuntimeEngine } from '../src/index.js';
|
||||
import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, javaFrames, watchedEngine, type JavaFrame, type SeenFrame } from './javaRun.js';
|
||||
import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, javaFrames, watchedEngine, type JavaFrame, type SeenFrame, type JavaTables } from './javaRun.js';
|
||||
import type { Scenario } from './scenario.js';
|
||||
|
||||
const scenarioDirectory = join(dirname(fileURLToPath(import.meta.url)), 'scenarios');
|
||||
@@ -49,7 +49,7 @@ function bySender(frames: readonly SeenFrame[]): Map<string, SeenFrame[]> {
|
||||
return result;
|
||||
}
|
||||
|
||||
interface JavaRun {
|
||||
interface JavaRun extends JavaTables {
|
||||
frames: Record<string, JavaFrame[]>;
|
||||
events: [number, string][];
|
||||
nat: string[];
|
||||
@@ -60,13 +60,17 @@ type Call = (label: string, run: () => string) => void;
|
||||
const text = (value: string) => new TextEncoder().encode(value);
|
||||
const decode = (value: Uint8Array | undefined) => (value === undefined ? 'null' : new TextDecoder().decode(value));
|
||||
|
||||
const ICMP_CODES: Record<string, string> = { timeExceeded: '11/0', destinationNetworkUnreachable: '3/0', destinationHostUnreachable: '3/1' };
|
||||
|
||||
/** A ping in Java's words: the answer's type and code and its sender, or null. */
|
||||
function ping(engine: NetworkRuntimeEngine, from: Id, target: string, sequenceNumber: number): string {
|
||||
const result: IPv4DeliveryResult = engine.sendIcmpEcho(from, target, { sequenceNumber });
|
||||
if (result.type === 'icmpError') return `ICMP ${result.kind}`;
|
||||
const reply = (engine.state.icmpObservationsByNodeId.get(from) ?? []).find(
|
||||
(observation) => observation.message.kind === 'echoReply' && observation.message.sequenceNumber === sequenceNumber,
|
||||
);
|
||||
function ping(engine: NetworkRuntimeEngine, from: Id, target: string, sequenceNumber: number, timeToLive = 64): string {
|
||||
const result: IPv4DeliveryResult = engine.sendIcmpEcho(from, target, { sequenceNumber, timeToLive });
|
||||
const observations = engine.state.icmpObservationsByNodeId.get(from) ?? [];
|
||||
if (result.type === 'icmpError') {
|
||||
const error = observations.findLast((observation) => observation.message.kind === result.kind);
|
||||
return error === undefined ? `ICMP ${result.kind}` : `ICMP ${ICMP_CODES[result.kind]} from ${error.packet.senderIPAddress}`;
|
||||
}
|
||||
const reply = observations.find((observation) => observation.message.kind === 'echoReply' && observation.message.sequenceNumber === sequenceNumber);
|
||||
return reply === undefined ? 'null' : `ICMP 0/0 from ${reply.packet.senderIPAddress}`;
|
||||
}
|
||||
|
||||
@@ -131,6 +135,7 @@ const STORIES: Record<string, (engine: NetworkRuntimeEngine, call: Call) => void
|
||||
},
|
||||
tcpOut: (engine, call) => tcpExchange(engine, call, SERVER, LAN_PC, '42.0.0.20', 80),
|
||||
forward: (engine, call) => tcpExchange(engine, call, LAN_PC, SERVER, '42.0.0.10', 8080),
|
||||
ttlOut: (engine, call) => call('sendProbe 42.0.0.20', () => ping(engine, LAN_PC, '42.0.0.20', 1, 1)),
|
||||
pingWan: (engine, call) => {
|
||||
call('sendProbe 42.0.0.10', () => ping(engine, SERVER, '42.0.0.10', 1));
|
||||
call('sendProbe 192.168.0.10', () => ping(engine, SERVER, '192.168.0.10', 2));
|
||||
@@ -259,6 +264,7 @@ describe('NAT as Java FILIUS runs it', () => {
|
||||
// A card's own list keeps its order.
|
||||
expectSameCaptures(engine, scenario, java.frames, {
|
||||
normalized: withPlaceholders,
|
||||
tables: measured,
|
||||
tolerance: TCP_STORIES.has(name) ? TCP_TOLERANCE_MILLISECONDS : GAP_TOLERANCE_MILLISECONDS,
|
||||
});
|
||||
|
||||
|
||||
@@ -285,6 +285,31 @@ const scenarioNames = readdirSync(scenarioDirectory)
|
||||
*/
|
||||
const SWIFT_ERRORS: Record<string, (expected: Record<string, unknown>) => Record<string, unknown>> = {};
|
||||
|
||||
const ECHO_KINDS = new Set(['echoRequest', 'echoReply']);
|
||||
|
||||
/**
|
||||
* Java instead of Swift in every scenario: an ICMP error's identifier and
|
||||
* sequence number are 0 (RFC 792: unused; Java's sendeICMP), where Swift
|
||||
* copies them from the echo request it is about. Measured with Java FILIUS
|
||||
* (the capture tables of arpJava and natJava).
|
||||
*/
|
||||
function withJavaIcmpErrors(expected: Record<string, unknown>): Record<string, unknown> {
|
||||
type Header = [string, string];
|
||||
const headers = (fields: Header[]): Header[] => {
|
||||
const kind = fields.find(([name]) => name === 'kind')?.[1];
|
||||
if (kind === undefined || ECHO_KINDS.has(kind)) return fields;
|
||||
return fields.map(([name, value]) => [name, name === 'identifier' || name === 'sequence' ? '0' : value]);
|
||||
};
|
||||
const traces = (expected.traces as { before: Header[]; after: Header[] }[]).map((trace) => ({ ...trace, before: headers(trace.before), after: headers(trace.after) }));
|
||||
const observation = (item: { kind?: string }) => (item.kind === undefined || ECHO_KINDS.has(item.kind) ? item : { ...item, identifier: 0, sequence: 0 });
|
||||
const observations = Object.fromEntries(
|
||||
Object.entries(expected.icmpObservations as Record<string, { kind: string }[]>).map(([node, items]) => [node, items.map(observation)]),
|
||||
);
|
||||
// A traceroute's result is its observations (other results are lists too: a switch's table).
|
||||
const results = (expected.results as unknown[]).map((result) => (Array.isArray(result) ? (result as { kind?: string }[]).map(observation) : result));
|
||||
return { ...expected, traces, icmpObservations: observations, results };
|
||||
}
|
||||
|
||||
/**
|
||||
* Scenarios where the engine follows Java instead of Swift; the Java
|
||||
* comparisons check that behaviour (dhcpJava.test.ts, tcpJava.test.ts,
|
||||
@@ -319,6 +344,14 @@ describe('same result as the Swift engine', () => {
|
||||
}
|
||||
});
|
||||
|
||||
it('corrects ICMP errors where Swift has them', () => {
|
||||
const corrected = scenarioNames.filter((name) => {
|
||||
const expected = JSON.parse(readFileSync(join(scenarioDirectory, `${name}.swift.json`), 'utf8')) as Record<string, unknown>;
|
||||
return JSON.stringify(withJavaIcmpErrors(expected)) !== JSON.stringify(expected);
|
||||
});
|
||||
expect(corrected.length).toBeGreaterThan(0);
|
||||
});
|
||||
|
||||
it('has scenarios with Swift results', () => {
|
||||
expect(scenarioNames.length).toBeGreaterThan(0);
|
||||
});
|
||||
@@ -334,7 +367,7 @@ describe('same result as the Swift engine', () => {
|
||||
for (const [name, { trace, reason }] of Object.entries(SWIFT_UNTIL_TRACE)) {
|
||||
it(`${name} matches Swift until trace #${trace}, then follows Java: ${reason}`, () => {
|
||||
const scenario = JSON.parse(readFileSync(join(scenarioDirectory, `${name}.scenario.json`), 'utf8')) as Scenario;
|
||||
const swift = JSON.parse(readFileSync(join(scenarioDirectory, `${name}.swift.json`), 'utf8')) as Record<string, unknown>;
|
||||
const swift = withJavaIcmpErrors(JSON.parse(readFileSync(join(scenarioDirectory, `${name}.swift.json`), 'utf8')) as Record<string, unknown>);
|
||||
const actual = run(scenario);
|
||||
const expectedTraces = swift.traces as unknown[];
|
||||
const actualTraces = actual.traces as unknown[];
|
||||
@@ -349,7 +382,7 @@ describe('same result as the Swift engine', () => {
|
||||
it(name, () => {
|
||||
const scenario = JSON.parse(readFileSync(join(scenarioDirectory, `${name}.scenario.json`), 'utf8')) as Scenario;
|
||||
const swift = JSON.parse(readFileSync(join(scenarioDirectory, `${name}.swift.json`), 'utf8')) as Record<string, unknown>;
|
||||
const expected = SWIFT_ERRORS[name]?.(swift) ?? swift;
|
||||
const expected = withJavaIcmpErrors(SWIFT_ERRORS[name]?.(swift) ?? swift);
|
||||
const actual = run(scenario);
|
||||
|
||||
// Traces first and one by one: the first difference is the one that matters.
|
||||
|
||||
@@ -32,7 +32,7 @@ import { dirname, join } from 'node:path';
|
||||
import { fileURLToPath } from 'node:url';
|
||||
import { describe, expect, it } from 'vitest';
|
||||
import { RIP_FIRST_BEACON_DELAY_MILLISECONDS, RIP_INFINITY, RIP_TIMEOUT_MILLISECONDS, stableMacAddress, type Id, type IPv4DeliveryResult, type NetworkRuntimeEngine } from '../src/index.js';
|
||||
import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, javaFrames, watchedEngine, type JavaFrame, type SeenFrame } from './javaRun.js';
|
||||
import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, javaFrames, watchedEngine, type JavaFrame, type SeenFrame, type JavaTables } from './javaRun.js';
|
||||
import type { Scenario } from './scenario.js';
|
||||
|
||||
const scenarioDirectory = join(dirname(fileURLToPath(import.meta.url)), 'scenarios');
|
||||
@@ -56,7 +56,7 @@ function bySender(frames: readonly SeenFrame[], shift: number): Map<string, Seen
|
||||
return result;
|
||||
}
|
||||
|
||||
interface JavaRun {
|
||||
interface JavaRun extends JavaTables {
|
||||
frames: Record<string, JavaFrame[]>;
|
||||
events: [number, string][];
|
||||
tables: [number, Id, string][];
|
||||
@@ -170,7 +170,7 @@ describe('RIP as Java FILIUS runs it', () => {
|
||||
}
|
||||
|
||||
// Each card's capture, after the startup.
|
||||
expectSameCaptures(engine, scenario, java.frames, { from: STARTUP_MILLISECONDS, until: better, starts: { java: offset, engine: 0 } });
|
||||
expectSameCaptures(engine, scenario, java.frames, { from: STARTUP_MILLISECONDS, until: better, starts: { java: offset, engine: 0 }, tables: java });
|
||||
|
||||
// Each router's table: the same state when the startup is over, then the same changes at about the same times.
|
||||
for (const router of routers) {
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
{
|
||||
"time": 747,
|
||||
"time": 717,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "10.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 3497,
|
||||
"time": 3467,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -20,7 +20,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
{
|
||||
"time": 869,
|
||||
"time": 837,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -28,7 +28,7 @@
|
||||
"targetIp": "10.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 3609,
|
||||
"time": 3578,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -39,13 +39,157 @@
|
||||
"00000000-0000-0000-0000-000000000302#1": [],
|
||||
"00000000-0000-0000-0000-000000000303": []
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302#1": [],
|
||||
"00000000-0000-0000-0000-000000000303": []
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302#1": [],
|
||||
"00000000-0000-0000-0000-000000000303": []
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
743,
|
||||
712,
|
||||
"sendProbe 10.0.0.9 called"
|
||||
],
|
||||
[
|
||||
6253,
|
||||
6222,
|
||||
"sendProbe 10.0.0.9 returned ICMP 3/1 from 127.0.0.1"
|
||||
]
|
||||
]
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
{
|
||||
"time": 716,
|
||||
"time": 717,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "10.0.0.1"
|
||||
},
|
||||
{
|
||||
"time": 953,
|
||||
"time": 951,
|
||||
"source": "02:00:00:00:03:21",
|
||||
"destination": "02:00:00:00:03:11",
|
||||
"arp": 2,
|
||||
@@ -18,7 +18,7 @@
|
||||
"targetIp": "10.0.0.2"
|
||||
},
|
||||
{
|
||||
"time": 957,
|
||||
"time": 954,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "02:00:00:00:03:21",
|
||||
"icmp": 8,
|
||||
@@ -28,7 +28,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 6682,
|
||||
"time": 6681,
|
||||
"source": "02:00:00:00:03:21",
|
||||
"destination": "02:00:00:00:03:11",
|
||||
"icmp": 3,
|
||||
@@ -40,7 +40,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
{
|
||||
"time": 839,
|
||||
"time": 838,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -48,7 +48,7 @@
|
||||
"targetIp": "10.0.0.1"
|
||||
},
|
||||
{
|
||||
"time": 841,
|
||||
"time": 839,
|
||||
"source": "02:00:00:00:03:21",
|
||||
"destination": "02:00:00:00:03:11",
|
||||
"arp": 2,
|
||||
@@ -56,7 +56,7 @@
|
||||
"targetIp": "10.0.0.2"
|
||||
},
|
||||
{
|
||||
"time": 1069,
|
||||
"time": 1068,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "02:00:00:00:03:21",
|
||||
"icmp": 8,
|
||||
@@ -66,7 +66,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 6571,
|
||||
"time": 6569,
|
||||
"source": "02:00:00:00:03:21",
|
||||
"destination": "02:00:00:00:03:11",
|
||||
"icmp": 3,
|
||||
@@ -78,7 +78,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302#1": [
|
||||
{
|
||||
"time": 1070,
|
||||
"time": 1068,
|
||||
"source": "02:00:00:00:03:22",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -86,7 +86,7 @@
|
||||
"targetIp": "20.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 3820,
|
||||
"time": 3818,
|
||||
"source": "02:00:00:00:03:22",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -96,7 +96,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000303": [
|
||||
{
|
||||
"time": 1125,
|
||||
"time": 1124,
|
||||
"source": "02:00:00:00:03:22",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -104,7 +104,7 @@
|
||||
"targetIp": "20.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 3876,
|
||||
"time": 3874,
|
||||
"source": "02:00:00:00:03:22",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -113,13 +113,417 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"20.0.0.9",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=63; protocol=1; sender=10.0.0.2; target=20.0.0.9; icmpType=8; icmpCode=0; identifier=1; seqNr=1]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"20.0.0.9",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=63; protocol=1; sender=10.0.0.2; target=20.0.0.9; icmpType=8; icmpCode=0; identifier=1; seqNr=1]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302#1": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000303": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"20.0.0.9",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=63; protocol=1; sender=10.0.0.2; target=20.0.0.9; icmpType=8; icmpCode=0; identifier=1; seqNr=1]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"20.0.0.9",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=63; protocol=1; sender=10.0.0.2; target=20.0.0.9; icmpType=8; icmpCode=0; identifier=1; seqNr=1]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302#1": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000303": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
711,
|
||||
712,
|
||||
"sendProbe 20.0.0.9 called"
|
||||
],
|
||||
[
|
||||
3707,
|
||||
3705,
|
||||
"sendProbe 20.0.0.9 returned null"
|
||||
]
|
||||
]
|
||||
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "10.0.0.1"
|
||||
},
|
||||
{
|
||||
"time": 950,
|
||||
"time": 952,
|
||||
"source": "02:00:00:00:03:21",
|
||||
"destination": "02:00:00:00:03:11",
|
||||
"arp": 2,
|
||||
@@ -28,7 +28,7 @@
|
||||
"sequence": 2
|
||||
},
|
||||
{
|
||||
"time": 1012,
|
||||
"time": 1013,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "02:00:00:00:03:21",
|
||||
"icmp": 8,
|
||||
@@ -48,7 +48,7 @@
|
||||
"sequence": 0
|
||||
},
|
||||
{
|
||||
"time": 6904,
|
||||
"time": 6905,
|
||||
"source": "02:00:00:00:03:21",
|
||||
"destination": "02:00:00:00:03:11",
|
||||
"icmp": 0,
|
||||
@@ -60,7 +60,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
{
|
||||
"time": 837,
|
||||
"time": 838,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -68,7 +68,7 @@
|
||||
"targetIp": "10.0.0.1"
|
||||
},
|
||||
{
|
||||
"time": 839,
|
||||
"time": 840,
|
||||
"source": "02:00:00:00:03:21",
|
||||
"destination": "02:00:00:00:03:11",
|
||||
"arp": 2,
|
||||
@@ -86,7 +86,7 @@
|
||||
"sequence": 2
|
||||
},
|
||||
{
|
||||
"time": 1123,
|
||||
"time": 1124,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "02:00:00:00:03:21",
|
||||
"icmp": 8,
|
||||
@@ -96,7 +96,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 6569,
|
||||
"time": 6570,
|
||||
"source": "02:00:00:00:03:21",
|
||||
"destination": "02:00:00:00:03:11",
|
||||
"icmp": 3,
|
||||
@@ -118,7 +118,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302#1": [
|
||||
{
|
||||
"time": 1068,
|
||||
"time": 1069,
|
||||
"source": "02:00:00:00:03:22",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -126,7 +126,7 @@
|
||||
"targetIp": "20.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 3818,
|
||||
"time": 3819,
|
||||
"source": "02:00:00:00:03:22",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -160,7 +160,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 6792,
|
||||
"time": 6793,
|
||||
"source": "02:00:00:00:03:13",
|
||||
"destination": "02:00:00:00:03:22",
|
||||
"icmp": 0,
|
||||
@@ -180,7 +180,7 @@
|
||||
"targetIp": "20.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 3874,
|
||||
"time": 3875,
|
||||
"source": "02:00:00:00:03:22",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -188,7 +188,7 @@
|
||||
"targetIp": "20.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 6625,
|
||||
"time": 6626,
|
||||
"source": "02:00:00:00:03:22",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -196,7 +196,7 @@
|
||||
"targetIp": "20.0.0.2"
|
||||
},
|
||||
{
|
||||
"time": 6625,
|
||||
"time": 6626,
|
||||
"source": "02:00:00:00:03:13",
|
||||
"destination": "02:00:00:00:03:22",
|
||||
"arp": 2,
|
||||
@@ -225,6 +225,794 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"20.0.0.9",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 2, Seq.-No.: 2"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=63; protocol=1; sender=10.0.0.2; target=20.0.0.9; icmpType=8; icmpCode=0; identifier=2; seqNr=2]"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"20.0.0.2",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"20.0.0.9",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 2, Seq.-No.: 2"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=63; protocol=1; sender=10.0.0.2; target=20.0.0.9; icmpType=8; icmpCode=0; identifier=2; seqNr=2]"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"20.0.0.2",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302#1": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"20.0.0.1",
|
||||
"20.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:13",
|
||||
"02:00:00:00:03:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"20.0.0.2",
|
||||
"20.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:03:22",
|
||||
"02:00:00:00:03:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:03:13",
|
||||
"02:00:00:00:03:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"20.0.0.2",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000303": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"20.0.0.1",
|
||||
"20.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:13",
|
||||
"02:00:00:00:03:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"20.0.0.2",
|
||||
"20.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:03:22",
|
||||
"02:00:00:00:03:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:03:13",
|
||||
"02:00:00:00:03:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"20.0.0.2",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"20.0.0.9",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 2, Seq.-No.: 2"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=63; protocol=1; sender=10.0.0.2; target=20.0.0.9; icmpType=8; icmpCode=0; identifier=2; seqNr=2]"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"20.0.0.2",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"20.0.0.9",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 2, Seq.-No.: 2"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=63; protocol=1; sender=10.0.0.2; target=20.0.0.9; icmpType=8; icmpCode=0; identifier=2; seqNr=2]"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"20.0.0.2",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302#1": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"20.0.0.1",
|
||||
"20.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:13",
|
||||
"02:00:00:00:03:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"20.0.0.2",
|
||||
"20.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:03:22",
|
||||
"02:00:00:00:03:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:03:13",
|
||||
"02:00:00:00:03:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"20.0.0.2",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000303": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"20.0.0.1",
|
||||
"20.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"20.0.0.1",
|
||||
"20.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:13",
|
||||
"02:00:00:00:03:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"20.0.0.2",
|
||||
"20.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:03:22",
|
||||
"02:00:00:00:03:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:03:13",
|
||||
"02:00:00:00:03:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"20.0.0.2",
|
||||
"10.0.0.2",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
713,
|
||||
@@ -235,11 +1023,11 @@
|
||||
"sendeICMP 20.0.0.9 returned "
|
||||
],
|
||||
[
|
||||
955,
|
||||
956,
|
||||
"sendProbe 20.0.0.2 called"
|
||||
],
|
||||
[
|
||||
3762,
|
||||
3763,
|
||||
"sendProbe 20.0.0.2 returned null"
|
||||
]
|
||||
]
|
||||
|
||||
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
{
|
||||
"time": 731,
|
||||
"time": 720,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "10.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 3481,
|
||||
"time": 3470,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -18,7 +18,7 @@
|
||||
"targetIp": "10.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 6237,
|
||||
"time": 6226,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -26,7 +26,7 @@
|
||||
"targetIp": "10.0.0.1"
|
||||
},
|
||||
{
|
||||
"time": 6460,
|
||||
"time": 6449,
|
||||
"source": "02:00:00:00:03:21",
|
||||
"destination": "02:00:00:00:03:11",
|
||||
"arp": 2,
|
||||
@@ -34,20 +34,20 @@
|
||||
"targetIp": "10.0.0.2"
|
||||
},
|
||||
{
|
||||
"time": 6460,
|
||||
"time": 6450,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "02:00:00:00:03:21",
|
||||
"sourceIp": "10.0.0.2",
|
||||
"destinationIp": "20.0.0.2",
|
||||
"protocol": 17,
|
||||
"sourcePort": 55273,
|
||||
"sourcePort": 59870,
|
||||
"destinationPort": 9,
|
||||
"payload": "dahinter"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
{
|
||||
"time": 852,
|
||||
"time": 843,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -55,7 +55,7 @@
|
||||
"targetIp": "10.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 3593,
|
||||
"time": 3582,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -63,7 +63,7 @@
|
||||
"targetIp": "10.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 6348,
|
||||
"time": 6338,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -71,7 +71,7 @@
|
||||
"targetIp": "10.0.0.1"
|
||||
},
|
||||
{
|
||||
"time": 6349,
|
||||
"time": 6338,
|
||||
"source": "02:00:00:00:03:21",
|
||||
"destination": "02:00:00:00:03:11",
|
||||
"arp": 2,
|
||||
@@ -79,20 +79,20 @@
|
||||
"targetIp": "10.0.0.2"
|
||||
},
|
||||
{
|
||||
"time": 6574,
|
||||
"time": 6563,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "02:00:00:00:03:21",
|
||||
"sourceIp": "10.0.0.2",
|
||||
"destinationIp": "20.0.0.2",
|
||||
"protocol": 17,
|
||||
"sourcePort": 55273,
|
||||
"sourcePort": 59870,
|
||||
"destinationPort": 9,
|
||||
"payload": "dahinter"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302#1": [
|
||||
{
|
||||
"time": 6574,
|
||||
"time": 6563,
|
||||
"source": "02:00:00:00:03:22",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -100,7 +100,7 @@
|
||||
"targetIp": "20.0.0.2"
|
||||
},
|
||||
{
|
||||
"time": 6685,
|
||||
"time": 6674,
|
||||
"source": "02:00:00:00:03:13",
|
||||
"destination": "02:00:00:00:03:22",
|
||||
"arp": 2,
|
||||
@@ -108,20 +108,20 @@
|
||||
"targetIp": "20.0.0.1"
|
||||
},
|
||||
{
|
||||
"time": 6685,
|
||||
"time": 6675,
|
||||
"source": "02:00:00:00:03:22",
|
||||
"destination": "02:00:00:00:03:13",
|
||||
"sourceIp": "10.0.0.2",
|
||||
"destinationIp": "20.0.0.2",
|
||||
"protocol": 17,
|
||||
"sourcePort": 55273,
|
||||
"sourcePort": 59870,
|
||||
"destinationPort": 9,
|
||||
"payload": "dahinter"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000303": [
|
||||
{
|
||||
"time": 6629,
|
||||
"time": 6619,
|
||||
"source": "02:00:00:00:03:22",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -129,7 +129,7 @@
|
||||
"targetIp": "20.0.0.2"
|
||||
},
|
||||
{
|
||||
"time": 6629,
|
||||
"time": 6619,
|
||||
"source": "02:00:00:00:03:13",
|
||||
"destination": "02:00:00:00:03:22",
|
||||
"arp": 2,
|
||||
@@ -137,33 +137,693 @@
|
||||
"targetIp": "20.0.0.1"
|
||||
},
|
||||
{
|
||||
"time": 6741,
|
||||
"time": 6730,
|
||||
"source": "02:00:00:00:03:22",
|
||||
"destination": "02:00:00:00:03:13",
|
||||
"sourceIp": "10.0.0.2",
|
||||
"destinationIp": "20.0.0.2",
|
||||
"protocol": 17,
|
||||
"sourcePort": 55273,
|
||||
"sourcePort": 59870,
|
||||
"destinationPort": 9,
|
||||
"payload": "dahinter"
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"10.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.2:59870",
|
||||
"20.0.0.2:9",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.2:59870",
|
||||
"20.0.0.2:9",
|
||||
"",
|
||||
"Anwendung",
|
||||
"dahinter"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"10.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.2:59870",
|
||||
"20.0.0.2:9",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.2:59870",
|
||||
"20.0.0.2:9",
|
||||
"",
|
||||
"Anwendung",
|
||||
"dahinter"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302#1": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"20.0.0.1",
|
||||
"20.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:13",
|
||||
"02:00:00:00:03:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"20.0.0.2",
|
||||
"20.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:22",
|
||||
"02:00:00:00:03:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 63"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2:59870",
|
||||
"20.0.0.2:9",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2:59870",
|
||||
"20.0.0.2:9",
|
||||
"",
|
||||
"Anwendung",
|
||||
"dahinter"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000303": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"20.0.0.1",
|
||||
"20.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:13",
|
||||
"02:00:00:00:03:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"20.0.0.2",
|
||||
"20.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:22",
|
||||
"02:00:00:00:03:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 63"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2:59870",
|
||||
"20.0.0.2:9",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2:59870",
|
||||
"20.0.0.2:9",
|
||||
"",
|
||||
"Anwendung",
|
||||
"dahinter"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"10.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"59870",
|
||||
"9",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"5",
|
||||
null,
|
||||
null,
|
||||
"",
|
||||
"Anwendung",
|
||||
"dahinter"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"10.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:21",
|
||||
"02:00:00:00:03:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.1",
|
||||
"10.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:03:11",
|
||||
"02:00:00:00:03:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"59870",
|
||||
"9",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"5",
|
||||
null,
|
||||
null,
|
||||
"",
|
||||
"Anwendung",
|
||||
"dahinter"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302#1": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"20.0.0.1",
|
||||
"20.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:13",
|
||||
"02:00:00:00:03:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"20.0.0.2",
|
||||
"20.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:22",
|
||||
"02:00:00:00:03:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 63"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"59870",
|
||||
"9",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
null,
|
||||
null,
|
||||
"",
|
||||
"Anwendung",
|
||||
"dahinter"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000303": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:22",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"20.0.0.1",
|
||||
"20.0.0.2",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:13",
|
||||
"02:00:00:00:03:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"20.0.0.2",
|
||||
"20.0.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:22",
|
||||
"02:00:00:00:03:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"20.0.0.2",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 63"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"59870",
|
||||
"9",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
null,
|
||||
null,
|
||||
"",
|
||||
"Anwendung",
|
||||
"dahinter"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
723,
|
||||
711,
|
||||
"senden verloren called"
|
||||
],
|
||||
[
|
||||
727,
|
||||
716,
|
||||
"senden verloren returned "
|
||||
],
|
||||
[
|
||||
727,
|
||||
716,
|
||||
"senden dahinter called"
|
||||
],
|
||||
[
|
||||
6237,
|
||||
6226,
|
||||
"senden dahinter returned "
|
||||
]
|
||||
]
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
{
|
||||
"time": 723,
|
||||
"time": 721,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "10.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 3473,
|
||||
"time": 3471,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -18,7 +18,7 @@
|
||||
"targetIp": "10.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 6229,
|
||||
"time": 6226,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -26,7 +26,7 @@
|
||||
"targetIp": "10.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 8979,
|
||||
"time": 8977,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -36,7 +36,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
{
|
||||
"time": 843,
|
||||
"time": 844,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -44,7 +44,7 @@
|
||||
"targetIp": "10.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 3584,
|
||||
"time": 3583,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -52,7 +52,7 @@
|
||||
"targetIp": "10.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 6340,
|
||||
"time": 6338,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -60,7 +60,7 @@
|
||||
"targetIp": "10.0.0.9"
|
||||
},
|
||||
{
|
||||
"time": 9090,
|
||||
"time": 9088,
|
||||
"source": "02:00:00:00:03:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -71,21 +71,293 @@
|
||||
"00000000-0000-0000-0000-000000000302#1": [],
|
||||
"00000000-0000-0000-0000-000000000303": []
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302#1": [],
|
||||
"00000000-0000-0000-0000-000000000303": []
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000301": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:03:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"10.0.0.2",
|
||||
"10.0.0.9",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000302#1": [],
|
||||
"00000000-0000-0000-0000-000000000303": []
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
713,
|
||||
"senden eins called"
|
||||
],
|
||||
[
|
||||
718,
|
||||
717,
|
||||
"senden eins returned "
|
||||
],
|
||||
[
|
||||
718,
|
||||
717,
|
||||
"senden zwei called"
|
||||
],
|
||||
[
|
||||
6229,
|
||||
6226,
|
||||
"senden zwei returned "
|
||||
]
|
||||
]
|
||||
|
||||
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
{
|
||||
"time": 723,
|
||||
"time": 726,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 956,
|
||||
"time": 960,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
@@ -18,31 +18,31 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 959,
|
||||
"time": 962,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 57362,
|
||||
"sourcePort": 57366,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=38187 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
"payload": "ID=5913 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1188,
|
||||
"time": 1191,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 57362,
|
||||
"payload": "ID=38187 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
"destinationPort": 57366,
|
||||
"payload": "ID=5913 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
{
|
||||
"time": 844,
|
||||
"time": 848,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -50,7 +50,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 845,
|
||||
"time": 849,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
@@ -58,31 +58,31 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 1072,
|
||||
"time": 1075,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 57362,
|
||||
"sourcePort": 57366,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=38187 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
"payload": "ID=5913 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1077,
|
||||
"time": 1079,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 57362,
|
||||
"payload": "ID=38187 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
"destinationPort": 57366,
|
||||
"payload": "ID=5913 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
{
|
||||
"time": 844,
|
||||
"time": 848,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -92,7 +92,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
{
|
||||
"time": 844,
|
||||
"time": 848,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -101,13 +101,481 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:57366",
|
||||
"192.168.0.10:53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:57366",
|
||||
"192.168.0.10:53",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=5913 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:57366",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:57366",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=5913 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:57366",
|
||||
"192.168.0.10:53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:57366",
|
||||
"192.168.0.10:53",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=5913 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:57366",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:57366",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=5913 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"57366",
|
||||
"53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=5913 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"53",
|
||||
"57366",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=5913 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"57366",
|
||||
"53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=5913 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"53",
|
||||
"57366",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=5913 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
712,
|
||||
716,
|
||||
"holeIPAdresse web.filius.de called"
|
||||
],
|
||||
[
|
||||
1189,
|
||||
1191,
|
||||
"holeIPAdresse web.filius.de returned 192.168.0.30"
|
||||
]
|
||||
]
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
{
|
||||
"time": 725,
|
||||
"time": 726,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 958,
|
||||
"time": 961,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
@@ -18,31 +18,31 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 961,
|
||||
"time": 964,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 55842,
|
||||
"sourcePort": 62914,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=4405 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
|
||||
"payload": "ID=4538 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1191,
|
||||
"time": 1193,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 55842,
|
||||
"payload": "ID=4405 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
|
||||
"destinationPort": 62914,
|
||||
"payload": "ID=4538 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
{
|
||||
"time": 846,
|
||||
"time": 849,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -50,7 +50,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 847,
|
||||
"time": 850,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
@@ -58,31 +58,31 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 1074,
|
||||
"time": 1077,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 55842,
|
||||
"sourcePort": 62914,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=4405 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
|
||||
"payload": "ID=4538 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1079,
|
||||
"time": 1082,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 55842,
|
||||
"payload": "ID=4405 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
|
||||
"destinationPort": 62914,
|
||||
"payload": "ID=4538 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
{
|
||||
"time": 845,
|
||||
"time": 849,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -92,7 +92,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
{
|
||||
"time": 845,
|
||||
"time": 849,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -101,13 +101,481 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:62914",
|
||||
"192.168.0.10:53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:62914",
|
||||
"192.168.0.10:53",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=4538 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:62914",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:62914",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=4538 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:62914",
|
||||
"192.168.0.10:53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:62914",
|
||||
"192.168.0.10:53",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=4538 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:62914",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:62914",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=4538 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"62914",
|
||||
"53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=4538 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"53",
|
||||
"62914",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=4538 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"62914",
|
||||
"53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=4538 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"53",
|
||||
"62914",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=4538 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
714,
|
||||
715,
|
||||
"holeIPAdresseMailServer filius.de called"
|
||||
],
|
||||
[
|
||||
1191,
|
||||
1194,
|
||||
"holeIPAdresseMailServer filius.de returned 192.168.0.31"
|
||||
]
|
||||
]
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
{
|
||||
"time": 844,
|
||||
"time": 852,
|
||||
"source": "02:00:00:00:01:14",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "192.168.0.99"
|
||||
},
|
||||
{
|
||||
"time": 3585,
|
||||
"time": 3592,
|
||||
"source": "02:00:00:00:01:14",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -20,7 +20,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
{
|
||||
"time": 844,
|
||||
"time": 852,
|
||||
"source": "02:00:00:00:01:14",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -28,7 +28,7 @@
|
||||
"targetIp": "192.168.0.99"
|
||||
},
|
||||
{
|
||||
"time": 3585,
|
||||
"time": 3592,
|
||||
"source": "02:00:00:00:01:14",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -38,7 +38,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
{
|
||||
"time": 844,
|
||||
"time": 852,
|
||||
"source": "02:00:00:00:01:14",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -46,7 +46,7 @@
|
||||
"targetIp": "192.168.0.99"
|
||||
},
|
||||
{
|
||||
"time": 3585,
|
||||
"time": 3592,
|
||||
"source": "02:00:00:00:01:14",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -56,7 +56,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
{
|
||||
"time": 723,
|
||||
"time": 730,
|
||||
"source": "02:00:00:00:01:14",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -64,7 +64,7 @@
|
||||
"targetIp": "192.168.0.99"
|
||||
},
|
||||
{
|
||||
"time": 3473,
|
||||
"time": 3480,
|
||||
"source": "02:00:00:00:01:14",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -73,13 +73,289 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:14",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.21",
|
||||
"192.168.0.99",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:01:14|192.168.0.21, target=FF:FF:FF:FF:FF:FF|192.168.0.99]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
713,
|
||||
718,
|
||||
"holeIPAdresse web.filius.de called"
|
||||
],
|
||||
[
|
||||
14470,
|
||||
14477,
|
||||
"holeIPAdresse web.filius.de failed TimeOutException"
|
||||
]
|
||||
]
|
||||
|
||||
File diff suppressed because it is too large
Load Diff
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
{
|
||||
"time": 726,
|
||||
"time": 725,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 960,
|
||||
"time": 958,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
@@ -18,31 +18,31 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 963,
|
||||
"time": 961,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 56964,
|
||||
"sourcePort": 58719,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=54840 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nx.unbekannt.org. A IN\n"
|
||||
"payload": "ID=44820 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nx.unbekannt.org. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1192,
|
||||
"time": 1190,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 56964,
|
||||
"payload": "ID=54840 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
"destinationPort": 58719,
|
||||
"payload": "ID=44820 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
{
|
||||
"time": 848,
|
||||
"time": 845,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -50,7 +50,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 849,
|
||||
"time": 847,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
@@ -58,31 +58,31 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 1076,
|
||||
"time": 1074,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 56964,
|
||||
"sourcePort": 58719,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=54840 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nx.unbekannt.org. A IN\n"
|
||||
"payload": "ID=44820 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nx.unbekannt.org. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1081,
|
||||
"time": 1079,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 56964,
|
||||
"payload": "ID=54840 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
"destinationPort": 58719,
|
||||
"payload": "ID=44820 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
{
|
||||
"time": 848,
|
||||
"time": 845,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -92,7 +92,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
{
|
||||
"time": 848,
|
||||
"time": 846,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -101,13 +101,481 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:58719",
|
||||
"192.168.0.10:53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:58719",
|
||||
"192.168.0.10:53",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=44820 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nx.unbekannt.org. A IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:58719",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:58719",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=44820 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:58719",
|
||||
"192.168.0.10:53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:58719",
|
||||
"192.168.0.10:53",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=44820 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nx.unbekannt.org. A IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:58719",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:58719",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=44820 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"58719",
|
||||
"53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=44820 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nx.unbekannt.org. A IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"53",
|
||||
"58719",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=44820 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"58719",
|
||||
"53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=44820 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nx.unbekannt.org. A IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"53",
|
||||
"58719",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=44820 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
716,
|
||||
712,
|
||||
"holeIPAdresse x.unbekannt.org called"
|
||||
],
|
||||
[
|
||||
1192,
|
||||
1191,
|
||||
"holeIPAdresse x.unbekannt.org returned null"
|
||||
]
|
||||
]
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
{
|
||||
"time": 727,
|
||||
"time": 731,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 963,
|
||||
"time": 967,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
@@ -18,31 +18,31 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 965,
|
||||
"time": 969,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 60119,
|
||||
"sourcePort": 64893,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=56151 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
"payload": "ID=54574 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1196,
|
||||
"time": 1199,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 60119,
|
||||
"payload": "ID=56151 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
"destinationPort": 64893,
|
||||
"payload": "ID=54574 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
{
|
||||
"time": 850,
|
||||
"time": 853,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -50,7 +50,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 851,
|
||||
"time": 855,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
@@ -58,31 +58,31 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 1079,
|
||||
"time": 1083,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 60119,
|
||||
"sourcePort": 64893,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=56151 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
"payload": "ID=54574 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1084,
|
||||
"time": 1088,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 60119,
|
||||
"payload": "ID=56151 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
"destinationPort": 64893,
|
||||
"payload": "ID=54574 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
{
|
||||
"time": 850,
|
||||
"time": 853,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -92,7 +92,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
{
|
||||
"time": 850,
|
||||
"time": 853,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -101,13 +101,481 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:64893",
|
||||
"192.168.0.10:53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:64893",
|
||||
"192.168.0.10:53",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=54574 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:64893",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:64893",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=54574 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:64893",
|
||||
"192.168.0.10:53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:64893",
|
||||
"192.168.0.10:53",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=54574 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:64893",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:53",
|
||||
"192.168.0.20:64893",
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=54574 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"64893",
|
||||
"53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=54574 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"53",
|
||||
"64893",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=54574 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"64893",
|
||||
"53",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"3",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=54574 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 17, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"53",
|
||||
"64893",
|
||||
"UDP",
|
||||
"Transport",
|
||||
""
|
||||
],
|
||||
[
|
||||
"4",
|
||||
null,
|
||||
null,
|
||||
"DNS",
|
||||
"Anwendung",
|
||||
"ID=54574 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
717,
|
||||
720,
|
||||
"holeIPAdresse web.filius.de called"
|
||||
],
|
||||
[
|
||||
1197,
|
||||
1200,
|
||||
"holeIPAdresse web.filius.de returned 192.168.0.30"
|
||||
]
|
||||
]
|
||||
|
||||
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000501": [
|
||||
{
|
||||
"time": 717,
|
||||
"time": 720,
|
||||
"source": "02:00:00:00:05:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "192.168.0.1"
|
||||
},
|
||||
{
|
||||
"time": 837,
|
||||
"time": 839,
|
||||
"source": "02:00:00:00:05:22",
|
||||
"destination": "02:00:00:00:05:11",
|
||||
"arp": 2,
|
||||
@@ -18,7 +18,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 841,
|
||||
"time": 842,
|
||||
"source": "02:00:00:00:05:11",
|
||||
"destination": "02:00:00:00:05:22",
|
||||
"icmp": 8,
|
||||
@@ -28,7 +28,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 1409,
|
||||
"time": 1410,
|
||||
"source": "02:00:00:00:05:22",
|
||||
"destination": "02:00:00:00:05:11",
|
||||
"icmp": 0,
|
||||
@@ -40,7 +40,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000502": [
|
||||
{
|
||||
"time": 903,
|
||||
"time": 904,
|
||||
"source": "02:00:00:00:05:21",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -48,7 +48,7 @@
|
||||
"targetIp": "42.0.0.20"
|
||||
},
|
||||
{
|
||||
"time": 1130,
|
||||
"time": 1131,
|
||||
"source": "02:00:00:00:05:41",
|
||||
"destination": "02:00:00:00:05:21",
|
||||
"arp": 2,
|
||||
@@ -56,7 +56,7 @@
|
||||
"targetIp": "42.0.0.10"
|
||||
},
|
||||
{
|
||||
"time": 1130,
|
||||
"time": 1131,
|
||||
"source": "02:00:00:00:05:21",
|
||||
"destination": "02:00:00:00:05:41",
|
||||
"icmp": 8,
|
||||
@@ -66,7 +66,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 1352,
|
||||
"time": 1354,
|
||||
"source": "02:00:00:00:05:41",
|
||||
"destination": "02:00:00:00:05:21",
|
||||
"icmp": 0,
|
||||
@@ -78,7 +78,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000502#1": [
|
||||
{
|
||||
"time": 780,
|
||||
"time": 782,
|
||||
"source": "02:00:00:00:05:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -86,7 +86,7 @@
|
||||
"targetIp": "192.168.0.1"
|
||||
},
|
||||
{
|
||||
"time": 782,
|
||||
"time": 783,
|
||||
"source": "02:00:00:00:05:22",
|
||||
"destination": "02:00:00:00:05:11",
|
||||
"arp": 2,
|
||||
@@ -94,7 +94,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 898,
|
||||
"time": 900,
|
||||
"source": "02:00:00:00:05:11",
|
||||
"destination": "02:00:00:00:05:22",
|
||||
"icmp": 8,
|
||||
@@ -104,7 +104,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 1353,
|
||||
"time": 1354,
|
||||
"source": "02:00:00:00:05:22",
|
||||
"destination": "02:00:00:00:05:11",
|
||||
"icmp": 0,
|
||||
@@ -116,7 +116,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000504": [
|
||||
{
|
||||
"time": 1018,
|
||||
"time": 1020,
|
||||
"source": "02:00:00:00:05:21",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -124,7 +124,7 @@
|
||||
"targetIp": "42.0.0.20"
|
||||
},
|
||||
{
|
||||
"time": 1018,
|
||||
"time": 1020,
|
||||
"source": "02:00:00:00:05:41",
|
||||
"destination": "02:00:00:00:05:21",
|
||||
"arp": 2,
|
||||
@@ -132,7 +132,7 @@
|
||||
"targetIp": "42.0.0.10"
|
||||
},
|
||||
{
|
||||
"time": 1241,
|
||||
"time": 1243,
|
||||
"source": "02:00:00:00:05:21",
|
||||
"destination": "02:00:00:00:05:41",
|
||||
"icmp": 8,
|
||||
@@ -142,7 +142,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 1241,
|
||||
"time": 1243,
|
||||
"source": "02:00:00:00:05:41",
|
||||
"destination": "02:00:00:00:05:21",
|
||||
"icmp": 0,
|
||||
@@ -154,7 +154,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000505": [
|
||||
{
|
||||
"time": 1018,
|
||||
"time": 1020,
|
||||
"source": "02:00:00:00:05:21",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -163,13 +163,581 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000501": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.10",
|
||||
"192.168.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:05:11|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.1",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:22 [op=REPLY, sender=02:00:00:00:05:22|192.168.0.1, target=02:00:00:00:05:11|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:11",
|
||||
"02:00:00:00:05:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"42.0.0.20",
|
||||
"192.168.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000502": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:21",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 42.0.0.20 [op=REQUEST, sender=02:00:00:00:05:21|42.0.0.10, target=FF:FF:FF:FF:FF:FF|42.0.0.20]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:41 [op=REPLY, sender=02:00:00:00:05:41|42.0.0.20, target=02:00:00:00:05:21|42.0.0.10]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:21",
|
||||
"02:00:00:00:05:41",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000502#1": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.10",
|
||||
"192.168.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:05:11|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.1",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:22 [op=REPLY, sender=02:00:00:00:05:22|192.168.0.1, target=02:00:00:00:05:11|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:11",
|
||||
"02:00:00:00:05:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"42.0.0.20",
|
||||
"192.168.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000504": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:21",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 42.0.0.20 [op=REQUEST, sender=02:00:00:00:05:21|42.0.0.10, target=FF:FF:FF:FF:FF:FF|42.0.0.20]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:41 [op=REPLY, sender=02:00:00:00:05:41|42.0.0.20, target=02:00:00:00:05:21|42.0.0.10]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:21",
|
||||
"02:00:00:00:05:41",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000505": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:21",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 42.0.0.20 [op=REQUEST, sender=02:00:00:00:05:21|42.0.0.10, target=FF:FF:FF:FF:FF:FF|42.0.0.20]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000501": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.10",
|
||||
"192.168.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:05:11|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.1",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:22 [op=REPLY, sender=02:00:00:00:05:22|192.168.0.1, target=02:00:00:00:05:11|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:11",
|
||||
"02:00:00:00:05:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"42.0.0.20",
|
||||
"192.168.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000502": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:21",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 42.0.0.20 [op=REQUEST, sender=02:00:00:00:05:21|42.0.0.10, target=FF:FF:FF:FF:FF:FF|42.0.0.20]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:41 [op=REPLY, sender=02:00:00:00:05:41|42.0.0.20, target=02:00:00:00:05:21|42.0.0.10]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:21",
|
||||
"02:00:00:00:05:41",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000502#1": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.10",
|
||||
"192.168.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:05:11|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.1",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:22 [op=REPLY, sender=02:00:00:00:05:22|192.168.0.1, target=02:00:00:00:05:11|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:11",
|
||||
"02:00:00:00:05:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"42.0.0.20",
|
||||
"192.168.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000504": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:21",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 42.0.0.20 [op=REQUEST, sender=02:00:00:00:05:21|42.0.0.10, target=FF:FF:FF:FF:FF:FF|42.0.0.20]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:41 [op=REPLY, sender=02:00:00:00:05:41|42.0.0.20, target=02:00:00:00:05:21|42.0.0.10]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:21",
|
||||
"02:00:00:00:05:41",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000505": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:21",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 42.0.0.20 [op=REQUEST, sender=02:00:00:00:05:21|42.0.0.10, target=FF:FF:FF:FF:FF:FF|42.0.0.20]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
713,
|
||||
716,
|
||||
"sendProbe 42.0.0.20 called"
|
||||
],
|
||||
[
|
||||
1410,
|
||||
1411,
|
||||
"sendProbe 42.0.0.20 returned ICMP 0/0 from 42.0.0.20"
|
||||
]
|
||||
],
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
"00000000-0000-0000-0000-000000000501": [],
|
||||
"00000000-0000-0000-0000-000000000502": [
|
||||
{
|
||||
"time": 851,
|
||||
"time": 840,
|
||||
"source": "02:00:00:00:05:41",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -11,7 +11,7 @@
|
||||
"targetIp": "42.0.0.10"
|
||||
},
|
||||
{
|
||||
"time": 853,
|
||||
"time": 842,
|
||||
"source": "02:00:00:00:05:21",
|
||||
"destination": "02:00:00:00:05:41",
|
||||
"arp": 2,
|
||||
@@ -19,7 +19,7 @@
|
||||
"targetIp": "42.0.0.20"
|
||||
},
|
||||
{
|
||||
"time": 1083,
|
||||
"time": 1071,
|
||||
"source": "02:00:00:00:05:41",
|
||||
"destination": "02:00:00:00:05:21",
|
||||
"icmp": 8,
|
||||
@@ -29,7 +29,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 1083,
|
||||
"time": 1071,
|
||||
"source": "02:00:00:00:05:21",
|
||||
"destination": "02:00:00:00:05:41",
|
||||
"icmp": 0,
|
||||
@@ -39,7 +39,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 1308,
|
||||
"time": 1295,
|
||||
"source": "02:00:00:00:05:41",
|
||||
"destination": "02:00:00:00:05:21",
|
||||
"icmp": 8,
|
||||
@@ -52,7 +52,7 @@
|
||||
"00000000-0000-0000-0000-000000000502#1": [],
|
||||
"00000000-0000-0000-0000-000000000504": [
|
||||
{
|
||||
"time": 729,
|
||||
"time": 718,
|
||||
"source": "02:00:00:00:05:41",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -60,7 +60,7 @@
|
||||
"targetIp": "42.0.0.10"
|
||||
},
|
||||
{
|
||||
"time": 965,
|
||||
"time": 954,
|
||||
"source": "02:00:00:00:05:21",
|
||||
"destination": "02:00:00:00:05:41",
|
||||
"arp": 2,
|
||||
@@ -68,7 +68,7 @@
|
||||
"targetIp": "42.0.0.20"
|
||||
},
|
||||
{
|
||||
"time": 969,
|
||||
"time": 958,
|
||||
"source": "02:00:00:00:05:41",
|
||||
"destination": "02:00:00:00:05:21",
|
||||
"icmp": 8,
|
||||
@@ -78,7 +78,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 1194,
|
||||
"time": 1182,
|
||||
"source": "02:00:00:00:05:21",
|
||||
"destination": "02:00:00:00:05:41",
|
||||
"icmp": 0,
|
||||
@@ -88,7 +88,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 1196,
|
||||
"time": 1184,
|
||||
"source": "02:00:00:00:05:41",
|
||||
"destination": "02:00:00:00:05:21",
|
||||
"icmp": 8,
|
||||
@@ -100,7 +100,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000505": [
|
||||
{
|
||||
"time": 851,
|
||||
"time": 840,
|
||||
"source": "02:00:00:00:05:41",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -109,21 +109,393 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000501": [],
|
||||
"00000000-0000-0000-0000-000000000502": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:41",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 42.0.0.10 [op=REQUEST, sender=02:00:00:00:05:41|42.0.0.20, target=FF:FF:FF:FF:FF:FF|42.0.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:21",
|
||||
"02:00:00:00:05:41",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:21 [op=REPLY, sender=02:00:00:00:05:21|42.0.0.10, target=02:00:00:00:05:41|42.0.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:21",
|
||||
"02:00:00:00:05:41",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"42.0.0.20",
|
||||
"192.168.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 2"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000502#1": [],
|
||||
"00000000-0000-0000-0000-000000000504": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:41",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 42.0.0.10 [op=REQUEST, sender=02:00:00:00:05:41|42.0.0.20, target=FF:FF:FF:FF:FF:FF|42.0.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:21",
|
||||
"02:00:00:00:05:41",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:21 [op=REPLY, sender=02:00:00:00:05:21|42.0.0.10, target=02:00:00:00:05:41|42.0.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:21",
|
||||
"02:00:00:00:05:41",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"42.0.0.20",
|
||||
"192.168.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 2"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000505": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:41",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 42.0.0.10 [op=REQUEST, sender=02:00:00:00:05:41|42.0.0.20, target=FF:FF:FF:FF:FF:FF|42.0.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000501": [],
|
||||
"00000000-0000-0000-0000-000000000502": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:41",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 42.0.0.10 [op=REQUEST, sender=02:00:00:00:05:41|42.0.0.20, target=FF:FF:FF:FF:FF:FF|42.0.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:21",
|
||||
"02:00:00:00:05:41",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:21 [op=REPLY, sender=02:00:00:00:05:21|42.0.0.10, target=02:00:00:00:05:41|42.0.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:21",
|
||||
"02:00:00:00:05:41",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"42.0.0.20",
|
||||
"192.168.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 2"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000502#1": [],
|
||||
"00000000-0000-0000-0000-000000000504": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:41",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 42.0.0.10 [op=REQUEST, sender=02:00:00:00:05:41|42.0.0.20, target=FF:FF:FF:FF:FF:FF|42.0.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:21",
|
||||
"02:00:00:00:05:41",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:21 [op=REPLY, sender=02:00:00:00:05:21|42.0.0.10, target=02:00:00:00:05:41|42.0.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:21",
|
||||
"02:00:00:00:05:41",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"42.0.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:05:41",
|
||||
"02:00:00:00:05:21",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"42.0.0.20",
|
||||
"192.168.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 2"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000505": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:41",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"42.0.0.20",
|
||||
"42.0.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 42.0.0.10 [op=REQUEST, sender=02:00:00:00:05:41|42.0.0.20, target=FF:FF:FF:FF:FF:FF|42.0.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
725,
|
||||
713,
|
||||
"sendProbe 42.0.0.10 called"
|
||||
],
|
||||
[
|
||||
1196,
|
||||
1184,
|
||||
"sendProbe 42.0.0.10 returned ICMP 0/0 from 42.0.0.10"
|
||||
],
|
||||
[
|
||||
1196,
|
||||
1184,
|
||||
"sendProbe 192.168.0.10 called"
|
||||
],
|
||||
[
|
||||
3946,
|
||||
3934,
|
||||
"sendProbe 192.168.0.10 returned null"
|
||||
]
|
||||
],
|
||||
|
||||
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,368 @@
|
||||
{
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000501": [
|
||||
{
|
||||
"time": 719,
|
||||
"source": "02:00:00:00:05:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.1"
|
||||
},
|
||||
{
|
||||
"time": 839,
|
||||
"source": "02:00:00:00:05:22",
|
||||
"destination": "02:00:00:00:05:11",
|
||||
"arp": 2,
|
||||
"senderIp": "192.168.0.1",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 843,
|
||||
"source": "02:00:00:00:05:11",
|
||||
"destination": "02:00:00:00:05:22",
|
||||
"icmp": 8,
|
||||
"icmpCode": 0,
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "42.0.0.20",
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 957,
|
||||
"source": "02:00:00:00:05:22",
|
||||
"destination": "02:00:00:00:05:11",
|
||||
"icmp": 11,
|
||||
"icmpCode": 0,
|
||||
"sourceIp": "192.168.0.1",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"sequence": 0
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000502": [],
|
||||
"00000000-0000-0000-0000-000000000502#1": [
|
||||
{
|
||||
"time": 781,
|
||||
"source": "02:00:00:00:05:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.1"
|
||||
},
|
||||
{
|
||||
"time": 783,
|
||||
"source": "02:00:00:00:05:22",
|
||||
"destination": "02:00:00:00:05:11",
|
||||
"arp": 2,
|
||||
"senderIp": "192.168.0.1",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 901,
|
||||
"source": "02:00:00:00:05:11",
|
||||
"destination": "02:00:00:00:05:22",
|
||||
"icmp": 8,
|
||||
"icmpCode": 0,
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "42.0.0.20",
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 901,
|
||||
"source": "02:00:00:00:05:22",
|
||||
"destination": "02:00:00:00:05:11",
|
||||
"icmp": 11,
|
||||
"icmpCode": 0,
|
||||
"sourceIp": "192.168.0.1",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"sequence": 0
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000504": [],
|
||||
"00000000-0000-0000-0000-000000000505": []
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000501": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.10",
|
||||
"192.168.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:05:11|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.1",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:22 [op=REPLY, sender=02:00:00:00:05:22|192.168.0.1, target=02:00:00:00:05:11|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:11",
|
||||
"02:00:00:00:05:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 1, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.1",
|
||||
"192.168.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Time Exeeded (poof), TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=1; protocol=1; sender=192.168.0.10; target=42.0.0.20; icmpType=8; icmpCode=0; identifier=1; seqNr=1]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000502": [],
|
||||
"00000000-0000-0000-0000-000000000502#1": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.10",
|
||||
"192.168.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:05:11|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.1",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:22 [op=REPLY, sender=02:00:00:00:05:22|192.168.0.1, target=02:00:00:00:05:11|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:11",
|
||||
"02:00:00:00:05:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 1, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.1",
|
||||
"192.168.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Time Exeeded (poof), TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=1; protocol=1; sender=192.168.0.10; target=42.0.0.20; icmpType=8; icmpCode=0; identifier=1; seqNr=1]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000504": [],
|
||||
"00000000-0000-0000-0000-000000000505": []
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000501": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.10",
|
||||
"192.168.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:05:11|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.1",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:22 [op=REPLY, sender=02:00:00:00:05:22|192.168.0.1, target=02:00:00:00:05:11|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:11",
|
||||
"02:00:00:00:05:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 1, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.1",
|
||||
"192.168.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Time Exeeded (poof), TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=1; protocol=1; sender=192.168.0.10; target=42.0.0.20; icmpType=8; icmpCode=0; identifier=1; seqNr=1]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000502": [],
|
||||
"00000000-0000-0000-0000-000000000502#1": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:05:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.10",
|
||||
"192.168.0.1",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:05:11|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.1]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.1",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:05:22 [op=REPLY, sender=02:00:00:00:05:22|192.168.0.1, target=02:00:00:00:05:11|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:05:11",
|
||||
"02:00:00:00:05:22",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.10",
|
||||
"42.0.0.20",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 1, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:05:22",
|
||||
"02:00:00:00:05:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.1",
|
||||
"192.168.0.10",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Time Exeeded (poof), TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=1; protocol=1; sender=192.168.0.10; target=42.0.0.20; icmpType=8; icmpCode=0; identifier=1; seqNr=1]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000504": [],
|
||||
"00000000-0000-0000-0000-000000000505": []
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
715,
|
||||
"sendProbe 42.0.0.20 called"
|
||||
],
|
||||
[
|
||||
959,
|
||||
"sendProbe 42.0.0.20 returned ICMP 11/0 from 192.168.0.1"
|
||||
]
|
||||
],
|
||||
"nat": []
|
||||
}
|
||||
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
{
|
||||
"time": 853,
|
||||
"time": 862,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 854,
|
||||
"time": 863,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:13",
|
||||
"arp": 2,
|
||||
@@ -18,13 +18,13 @@
|
||||
"targetIp": "192.168.0.30"
|
||||
},
|
||||
{
|
||||
"time": 1083,
|
||||
"time": 1091,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.30",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 50448,
|
||||
"sourcePort": 50292,
|
||||
"destinationPort": 81,
|
||||
"payload": null,
|
||||
"tcpFlags": "S",
|
||||
@@ -34,7 +34,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
{
|
||||
"time": 853,
|
||||
"time": 862,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -44,7 +44,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
{
|
||||
"time": 731,
|
||||
"time": 737,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -52,7 +52,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 966,
|
||||
"time": 975,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:13",
|
||||
"arp": 2,
|
||||
@@ -60,13 +60,13 @@
|
||||
"targetIp": "192.168.0.30"
|
||||
},
|
||||
{
|
||||
"time": 968,
|
||||
"time": 977,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.30",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 50448,
|
||||
"sourcePort": 50292,
|
||||
"destinationPort": 81,
|
||||
"payload": null,
|
||||
"tcpFlags": "S",
|
||||
@@ -75,28 +75,300 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:13",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.30",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.30",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:13|192.168.0.30]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:13",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.30",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.30:50292",
|
||||
"192.168.0.10:81",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:13",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.30",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:13",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.30",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.30",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:13|192.168.0.30]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:13",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.30",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.30:50292",
|
||||
"192.168.0.10:81",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:13",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.30",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.30",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:13|192.168.0.30]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:13",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.30",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"50292",
|
||||
"81",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:13",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.30",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:13",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.30",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.30",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:13|192.168.0.30]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:13",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.30",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"50292",
|
||||
"81",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
715,
|
||||
716,
|
||||
"client verbinden called"
|
||||
],
|
||||
[
|
||||
9020,
|
||||
9021,
|
||||
"client verbinden failed TimeOutException"
|
||||
]
|
||||
],
|
||||
"states": {
|
||||
"client": [
|
||||
[
|
||||
714,
|
||||
715,
|
||||
"CLOSED"
|
||||
],
|
||||
[
|
||||
728,
|
||||
734,
|
||||
"SYN_SENT"
|
||||
],
|
||||
[
|
||||
8978,
|
||||
8984,
|
||||
"CLOSED"
|
||||
]
|
||||
]
|
||||
|
||||
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
{
|
||||
"time": 855,
|
||||
"time": 853,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 857,
|
||||
"time": 854,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"arp": 2,
|
||||
@@ -18,13 +18,13 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 1086,
|
||||
"time": 1081,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 63329,
|
||||
"sourcePort": 49334,
|
||||
"destinationPort": 80,
|
||||
"payload": null,
|
||||
"tcpFlags": "S",
|
||||
@@ -32,27 +32,27 @@
|
||||
"acknowledgement": 0
|
||||
},
|
||||
{
|
||||
"time": 1088,
|
||||
"time": 1083,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 6,
|
||||
"sourcePort": 80,
|
||||
"destinationPort": 63329,
|
||||
"destinationPort": 49334,
|
||||
"payload": null,
|
||||
"tcpFlags": "SA",
|
||||
"sequence": 1000000,
|
||||
"acknowledgement": 2000001
|
||||
},
|
||||
{
|
||||
"time": 1311,
|
||||
"time": 1306,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 63329,
|
||||
"sourcePort": 49334,
|
||||
"destinationPort": 80,
|
||||
"payload": null,
|
||||
"tcpFlags": "A",
|
||||
@@ -62,7 +62,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
{
|
||||
"time": 733,
|
||||
"time": 728,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -70,7 +70,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 969,
|
||||
"time": 966,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"arp": 2,
|
||||
@@ -78,13 +78,13 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 972,
|
||||
"time": 968,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 63329,
|
||||
"sourcePort": 49334,
|
||||
"destinationPort": 80,
|
||||
"payload": null,
|
||||
"tcpFlags": "S",
|
||||
@@ -92,27 +92,27 @@
|
||||
"acknowledgement": 0
|
||||
},
|
||||
{
|
||||
"time": 1199,
|
||||
"time": 1194,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 6,
|
||||
"sourcePort": 80,
|
||||
"destinationPort": 63329,
|
||||
"destinationPort": 49334,
|
||||
"payload": null,
|
||||
"tcpFlags": "SA",
|
||||
"sequence": 1000000,
|
||||
"acknowledgement": 2000001
|
||||
},
|
||||
{
|
||||
"time": 1200,
|
||||
"time": 1195,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 63329,
|
||||
"sourcePort": 49334,
|
||||
"destinationPort": 80,
|
||||
"payload": null,
|
||||
"tcpFlags": "A",
|
||||
@@ -120,13 +120,13 @@
|
||||
"acknowledgement": 1000001
|
||||
},
|
||||
{
|
||||
"time": 1719,
|
||||
"time": 1715,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 63329,
|
||||
"sourcePort": 49334,
|
||||
"destinationPort": 80,
|
||||
"payload": null,
|
||||
"tcpFlags": "F",
|
||||
@@ -136,7 +136,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
{
|
||||
"time": 855,
|
||||
"time": 853,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -145,58 +145,570 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:49334",
|
||||
"192.168.0.10:80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 2.000.000"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:80",
|
||||
"192.168.0.20:49334",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.20:49334",
|
||||
"192.168.0.10:80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SEQ: 2.000.001, ACK: 1.000.001"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:49334",
|
||||
"192.168.0.10:80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 2.000.000"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:80",
|
||||
"192.168.0.20:49334",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.20:49334",
|
||||
"192.168.0.10:80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SEQ: 2.000.001, ACK: 1.000.001"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"192.168.0.20:49334",
|
||||
"192.168.0.10:80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 2.000.001"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"49334",
|
||||
"80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 2.000.000"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"80",
|
||||
"49334",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"49334",
|
||||
"80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SEQ: 2.000.001, ACK: 1.000.001"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"49334",
|
||||
"80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 2.000.000"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"80",
|
||||
"49334",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"49334",
|
||||
"80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SEQ: 2.000.001, ACK: 1.000.001"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"49334",
|
||||
"80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 2.000.001"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
216,
|
||||
213,
|
||||
"server oeffnen called"
|
||||
],
|
||||
[
|
||||
718,
|
||||
714,
|
||||
"client verbinden called"
|
||||
],
|
||||
[
|
||||
1218,
|
||||
1215,
|
||||
"client verbinden returned"
|
||||
],
|
||||
[
|
||||
1319,
|
||||
1316,
|
||||
"server oeffnen returned"
|
||||
],
|
||||
[
|
||||
1719,
|
||||
1715,
|
||||
"client schliessen called"
|
||||
],
|
||||
[
|
||||
1719,
|
||||
1715,
|
||||
"client schliessen returned"
|
||||
],
|
||||
[
|
||||
1719,
|
||||
1715,
|
||||
"lost FIN"
|
||||
]
|
||||
],
|
||||
"states": {
|
||||
"client": [
|
||||
[
|
||||
717,
|
||||
714,
|
||||
"CLOSED"
|
||||
],
|
||||
[
|
||||
729,
|
||||
724,
|
||||
"SYN_SENT"
|
||||
],
|
||||
[
|
||||
1201,
|
||||
1195,
|
||||
"ESTABLISHED"
|
||||
],
|
||||
[
|
||||
1719,
|
||||
1716,
|
||||
"FIN_WAIT_1"
|
||||
]
|
||||
],
|
||||
"server": [
|
||||
[
|
||||
1319,
|
||||
1316,
|
||||
"ESTABLISHED"
|
||||
]
|
||||
]
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
{
|
||||
"time": 849,
|
||||
"time": 862,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 850,
|
||||
"time": 863,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"arp": 2,
|
||||
@@ -18,13 +18,13 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 1078,
|
||||
"time": 1091,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 59631,
|
||||
"sourcePort": 58231,
|
||||
"destinationPort": 80,
|
||||
"payload": null,
|
||||
"tcpFlags": "S",
|
||||
@@ -32,27 +32,27 @@
|
||||
"acknowledgement": 0
|
||||
},
|
||||
{
|
||||
"time": 1079,
|
||||
"time": 1094,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 6,
|
||||
"sourcePort": 80,
|
||||
"destinationPort": 59631,
|
||||
"destinationPort": 58231,
|
||||
"payload": null,
|
||||
"tcpFlags": "SA",
|
||||
"sequence": 1000000,
|
||||
"acknowledgement": 2000001
|
||||
},
|
||||
{
|
||||
"time": 1303,
|
||||
"time": 1318,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 59631,
|
||||
"sourcePort": 58231,
|
||||
"destinationPort": 80,
|
||||
"payload": null,
|
||||
"tcpFlags": "A",
|
||||
@@ -60,13 +60,13 @@
|
||||
"acknowledgement": 1000001
|
||||
},
|
||||
{
|
||||
"time": 1827,
|
||||
"time": 1839,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 59631,
|
||||
"sourcePort": 58231,
|
||||
"destinationPort": 80,
|
||||
"payload": null,
|
||||
"tcpFlags": "F",
|
||||
@@ -74,28 +74,28 @@
|
||||
"acknowledgement": 0
|
||||
},
|
||||
{
|
||||
"time": 1828,
|
||||
"time": 1839,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 6,
|
||||
"sourcePort": 80,
|
||||
"destinationPort": 59631,
|
||||
"destinationPort": 58231,
|
||||
"payload": null,
|
||||
"tcpFlags": "A",
|
||||
"sequence": 1000001,
|
||||
"acknowledgement": 2000002
|
||||
},
|
||||
{
|
||||
"time": 1883,
|
||||
"time": 1895,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 6,
|
||||
"sourcePort": 80,
|
||||
"destinationPort": 59631,
|
||||
"destinationPort": 58231,
|
||||
"payload": null,
|
||||
"tcpFlags": "F",
|
||||
"sequence": 1000001,
|
||||
@@ -104,7 +104,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
{
|
||||
"time": 729,
|
||||
"time": 740,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -112,7 +112,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 962,
|
||||
"time": 975,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"arp": 2,
|
||||
@@ -120,13 +120,13 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 964,
|
||||
"time": 978,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 59631,
|
||||
"sourcePort": 58231,
|
||||
"destinationPort": 80,
|
||||
"payload": null,
|
||||
"tcpFlags": "S",
|
||||
@@ -134,27 +134,27 @@
|
||||
"acknowledgement": 0
|
||||
},
|
||||
{
|
||||
"time": 1191,
|
||||
"time": 1206,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 6,
|
||||
"sourcePort": 80,
|
||||
"destinationPort": 59631,
|
||||
"destinationPort": 58231,
|
||||
"payload": null,
|
||||
"tcpFlags": "SA",
|
||||
"sequence": 1000000,
|
||||
"acknowledgement": 2000001
|
||||
},
|
||||
{
|
||||
"time": 1191,
|
||||
"time": 1206,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 59631,
|
||||
"sourcePort": 58231,
|
||||
"destinationPort": 80,
|
||||
"payload": null,
|
||||
"tcpFlags": "A",
|
||||
@@ -162,13 +162,13 @@
|
||||
"acknowledgement": 1000001
|
||||
},
|
||||
{
|
||||
"time": 1716,
|
||||
"time": 1728,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 59631,
|
||||
"sourcePort": 58231,
|
||||
"destinationPort": 80,
|
||||
"payload": null,
|
||||
"tcpFlags": "F",
|
||||
@@ -176,14 +176,14 @@
|
||||
"acknowledgement": 0
|
||||
},
|
||||
{
|
||||
"time": 1939,
|
||||
"time": 1950,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 6,
|
||||
"sourcePort": 80,
|
||||
"destinationPort": 59631,
|
||||
"destinationPort": 58231,
|
||||
"payload": null,
|
||||
"tcpFlags": "A",
|
||||
"sequence": 1000001,
|
||||
@@ -192,7 +192,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
{
|
||||
"time": 849,
|
||||
"time": 862,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -201,66 +201,770 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:58231",
|
||||
"192.168.0.10:80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 2.000.000"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:80",
|
||||
"192.168.0.20:58231",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.20:58231",
|
||||
"192.168.0.10:80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SEQ: 2.000.001, ACK: 1.000.001"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"192.168.0.20:58231",
|
||||
"192.168.0.10:80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 2.000.001"
|
||||
],
|
||||
[
|
||||
"7",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"7",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"7",
|
||||
"192.168.0.10:80",
|
||||
"192.168.0.20:58231",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SEQ: 1.000.001, ACK: 2.000.002"
|
||||
],
|
||||
[
|
||||
"8",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"8",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"8",
|
||||
"192.168.0.10:80",
|
||||
"192.168.0.20:58231",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 1.000.001"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:58231",
|
||||
"192.168.0.10:80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 2.000.000"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:80",
|
||||
"192.168.0.20:58231",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.20:58231",
|
||||
"192.168.0.10:80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SEQ: 2.000.001, ACK: 1.000.001"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"192.168.0.20:58231",
|
||||
"192.168.0.10:80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 2.000.001"
|
||||
],
|
||||
[
|
||||
"7",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"7",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"7",
|
||||
"192.168.0.10:80",
|
||||
"192.168.0.20:58231",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SEQ: 1.000.001, ACK: 2.000.002"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"58231",
|
||||
"80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 2.000.000"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"80",
|
||||
"58231",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"58231",
|
||||
"80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SEQ: 2.000.001, ACK: 1.000.001"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"58231",
|
||||
"80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 2.000.001"
|
||||
],
|
||||
[
|
||||
"7",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"7",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"7",
|
||||
"80",
|
||||
"58231",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SEQ: 1.000.001, ACK: 2.000.002"
|
||||
],
|
||||
[
|
||||
"8",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"8",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"8",
|
||||
"80",
|
||||
"58231",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 1.000.001"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"58231",
|
||||
"80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 2.000.000"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"80",
|
||||
"58231",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"58231",
|
||||
"80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SEQ: 2.000.001, ACK: 1.000.001"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"6",
|
||||
"58231",
|
||||
"80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 2.000.001"
|
||||
],
|
||||
[
|
||||
"7",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"7",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"7",
|
||||
"80",
|
||||
"58231",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SEQ: 1.000.001, ACK: 2.000.002"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
214,
|
||||
226,
|
||||
"server oeffnen called"
|
||||
],
|
||||
[
|
||||
714,
|
||||
727,
|
||||
"client verbinden called"
|
||||
],
|
||||
[
|
||||
1215,
|
||||
1227,
|
||||
"client verbinden returned"
|
||||
],
|
||||
[
|
||||
1317,
|
||||
1329,
|
||||
"server oeffnen returned"
|
||||
],
|
||||
[
|
||||
1715,
|
||||
1728,
|
||||
"client schliessen called"
|
||||
],
|
||||
[
|
||||
1715,
|
||||
1728,
|
||||
"client schliessen returned"
|
||||
],
|
||||
[
|
||||
1883,
|
||||
1895,
|
||||
"lost FIN"
|
||||
]
|
||||
],
|
||||
"states": {
|
||||
"client": [
|
||||
[
|
||||
714,
|
||||
726,
|
||||
"CLOSED"
|
||||
],
|
||||
[
|
||||
724,
|
||||
736,
|
||||
"SYN_SENT"
|
||||
],
|
||||
[
|
||||
1191,
|
||||
1208,
|
||||
"ESTABLISHED"
|
||||
],
|
||||
[
|
||||
1716,
|
||||
1728,
|
||||
"FIN_WAIT_1"
|
||||
],
|
||||
[
|
||||
1940,
|
||||
1951,
|
||||
"FIN_WAIT_2"
|
||||
]
|
||||
],
|
||||
"server": [
|
||||
[
|
||||
1317,
|
||||
1329,
|
||||
"ESTABLISHED"
|
||||
],
|
||||
[
|
||||
1829,
|
||||
1840,
|
||||
"LAST_ACK"
|
||||
]
|
||||
]
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
{
|
||||
"time": 850,
|
||||
"time": 854,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 852,
|
||||
"time": 855,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"arp": 2,
|
||||
@@ -18,13 +18,13 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 1079,
|
||||
"time": 1083,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 52891,
|
||||
"sourcePort": 52105,
|
||||
"destinationPort": 80,
|
||||
"payload": null,
|
||||
"tcpFlags": "S",
|
||||
@@ -32,28 +32,28 @@
|
||||
"acknowledgement": 0
|
||||
},
|
||||
{
|
||||
"time": 1081,
|
||||
"time": 1085,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 6,
|
||||
"sourcePort": 80,
|
||||
"destinationPort": 52891,
|
||||
"destinationPort": 52105,
|
||||
"payload": null,
|
||||
"tcpFlags": "SA",
|
||||
"sequence": 1000000,
|
||||
"acknowledgement": 2000001
|
||||
},
|
||||
{
|
||||
"time": 17582,
|
||||
"time": 17585,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 6,
|
||||
"sourcePort": 80,
|
||||
"destinationPort": 52891,
|
||||
"destinationPort": 52105,
|
||||
"payload": null,
|
||||
"tcpFlags": "F",
|
||||
"sequence": 1000001,
|
||||
@@ -62,7 +62,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
{
|
||||
"time": 728,
|
||||
"time": 733,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -70,7 +70,7 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 963,
|
||||
"time": 967,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"arp": 2,
|
||||
@@ -78,13 +78,13 @@
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 966,
|
||||
"time": 969,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 6,
|
||||
"sourcePort": 52891,
|
||||
"sourcePort": 52105,
|
||||
"destinationPort": 80,
|
||||
"payload": null,
|
||||
"tcpFlags": "S",
|
||||
@@ -92,14 +92,14 @@
|
||||
"acknowledgement": 0
|
||||
},
|
||||
{
|
||||
"time": 17694,
|
||||
"time": 17697,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 6,
|
||||
"sourcePort": 80,
|
||||
"destinationPort": 52891,
|
||||
"destinationPort": 52105,
|
||||
"payload": null,
|
||||
"tcpFlags": "F",
|
||||
"sequence": 1000001,
|
||||
@@ -108,7 +108,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
{
|
||||
"time": 850,
|
||||
"time": 854,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -116,14 +116,14 @@
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 17696,
|
||||
"time": 17697,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 6,
|
||||
"sourcePort": 80,
|
||||
"destinationPort": 52891,
|
||||
"destinationPort": 52105,
|
||||
"payload": null,
|
||||
"tcpFlags": "F",
|
||||
"sequence": 1000001,
|
||||
@@ -131,9 +131,473 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:52105",
|
||||
"192.168.0.10:80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 2.000.000"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:80",
|
||||
"192.168.0.20:52105",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.10:80",
|
||||
"192.168.0.20:52105",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 1.000.001"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20:52105",
|
||||
"192.168.0.10:80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 2.000.000"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10:80",
|
||||
"192.168.0.20:52105",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 1.000.001"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10:80",
|
||||
"192.168.0.20:52105",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 1.000.001"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"52105",
|
||||
"80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 2.000.000"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"80",
|
||||
"52105",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"5",
|
||||
"80",
|
||||
"52105",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 1.000.001"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:01:12",
|
||||
"02:00:00:00:01:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"52105",
|
||||
"80",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"SYN, SEQ: 2.000.000"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"80",
|
||||
"52105",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 1.000.001"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:01:12",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.0.20",
|
||||
"192.168.0.10",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:01:11",
|
||||
"02:00:00:00:01:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.0.10",
|
||||
"192.168.0.20",
|
||||
"IP",
|
||||
"Vermittlung",
|
||||
"Protokoll: 6, TTL: 64"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"80",
|
||||
"52105",
|
||||
"TCP",
|
||||
"Transport",
|
||||
"FIN, SEQ: 1.000.001"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
213,
|
||||
214,
|
||||
"server oeffnen called"
|
||||
],
|
||||
[
|
||||
@@ -141,48 +605,44 @@
|
||||
"client verbinden called"
|
||||
],
|
||||
[
|
||||
1081,
|
||||
1085,
|
||||
"lost SYN+ACK"
|
||||
],
|
||||
[
|
||||
9019,
|
||||
9020,
|
||||
"client verbinden failed TimeOutException"
|
||||
],
|
||||
[
|
||||
17626,
|
||||
17628,
|
||||
"server oeffnen returned"
|
||||
]
|
||||
],
|
||||
"states": {
|
||||
"server": [
|
||||
[
|
||||
215,
|
||||
"CLOSED"
|
||||
],
|
||||
[
|
||||
217,
|
||||
216,
|
||||
"LISTEN"
|
||||
],
|
||||
[
|
||||
1081,
|
||||
1086,
|
||||
"SYN_RCVD"
|
||||
],
|
||||
[
|
||||
17582,
|
||||
17586,
|
||||
"FIN_WAIT_1"
|
||||
]
|
||||
],
|
||||
"client": [
|
||||
[
|
||||
713,
|
||||
714,
|
||||
"CLOSED"
|
||||
],
|
||||
[
|
||||
724,
|
||||
728,
|
||||
"SYN_SENT"
|
||||
],
|
||||
[
|
||||
8974,
|
||||
8979,
|
||||
"CLOSED"
|
||||
]
|
||||
]
|
||||
|
||||
@@ -5,7 +5,7 @@
|
||||
"00000000-0000-0000-0000-000000000603": [],
|
||||
"00000000-0000-0000-0000-000000000605": [
|
||||
{
|
||||
"time": 717,
|
||||
"time": 718,
|
||||
"source": "02:00:00:00:06:15",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -22,6 +22,84 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000601": [],
|
||||
"00000000-0000-0000-0000-000000000602": [],
|
||||
"00000000-0000-0000-0000-000000000603": [],
|
||||
"00000000-0000-0000-0000-000000000605": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:15",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.14",
|
||||
"192.168.1.11",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.11 [op=REQUEST, sender=02:00:00:00:06:15|192.168.1.14, target=FF:FF:FF:FF:FF:FF|192.168.1.11]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:15",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.14",
|
||||
"192.168.1.11",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.11 [op=REQUEST, sender=02:00:00:00:06:15|192.168.1.14, target=FF:FF:FF:FF:FF:FF|192.168.1.11]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000601": [],
|
||||
"00000000-0000-0000-0000-000000000602": [],
|
||||
"00000000-0000-0000-0000-000000000603": [],
|
||||
"00000000-0000-0000-0000-000000000605": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:15",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.14",
|
||||
"192.168.1.11",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.11 [op=REQUEST, sender=02:00:00:00:06:15|192.168.1.14, target=FF:FF:FF:FF:FF:FF|192.168.1.11]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:15",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.14",
|
||||
"192.168.1.11",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.11 [op=REQUEST, sender=02:00:00:00:06:15|192.168.1.14, target=FF:FF:FF:FF:FF:FF|192.168.1.11]"
|
||||
]
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
713,
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000601": [
|
||||
{
|
||||
"time": 724,
|
||||
"time": 718,
|
||||
"source": "02:00:00:00:06:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "192.168.1.13"
|
||||
},
|
||||
{
|
||||
"time": 960,
|
||||
"time": 956,
|
||||
"source": "02:00:00:00:06:13",
|
||||
"destination": "02:00:00:00:06:11",
|
||||
"arp": 2,
|
||||
@@ -18,7 +18,7 @@
|
||||
"targetIp": "192.168.1.11"
|
||||
},
|
||||
{
|
||||
"time": 964,
|
||||
"time": 961,
|
||||
"source": "02:00:00:00:06:11",
|
||||
"destination": "02:00:00:00:06:13",
|
||||
"icmp": 8,
|
||||
@@ -28,7 +28,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 1189,
|
||||
"time": 1186,
|
||||
"source": "02:00:00:00:06:13",
|
||||
"destination": "02:00:00:00:06:11",
|
||||
"icmp": 0,
|
||||
@@ -40,7 +40,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000602": [
|
||||
{
|
||||
"time": 846,
|
||||
"time": 843,
|
||||
"source": "02:00:00:00:06:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -50,7 +50,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000603": [
|
||||
{
|
||||
"time": 846,
|
||||
"time": 843,
|
||||
"source": "02:00:00:00:06:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -58,7 +58,7 @@
|
||||
"targetIp": "192.168.1.13"
|
||||
},
|
||||
{
|
||||
"time": 848,
|
||||
"time": 845,
|
||||
"source": "02:00:00:00:06:13",
|
||||
"destination": "02:00:00:00:06:11",
|
||||
"arp": 2,
|
||||
@@ -66,7 +66,7 @@
|
||||
"targetIp": "192.168.1.11"
|
||||
},
|
||||
{
|
||||
"time": 1077,
|
||||
"time": 1074,
|
||||
"source": "02:00:00:00:06:11",
|
||||
"destination": "02:00:00:00:06:13",
|
||||
"icmp": 8,
|
||||
@@ -76,7 +76,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 1077,
|
||||
"time": 1074,
|
||||
"source": "02:00:00:00:06:13",
|
||||
"destination": "02:00:00:00:06:11",
|
||||
"icmp": 0,
|
||||
@@ -88,13 +88,319 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000605": []
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000601": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.13",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.13 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.13]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:13",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.13",
|
||||
"192.168.1.11",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:06:13 [op=REPLY, sender=02:00:00:00:06:13|192.168.1.13, target=02:00:00:00:06:11|192.168.1.11]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:06:11",
|
||||
"02:00:00:00:06:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.1.11",
|
||||
"192.168.1.13",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:06:13",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.1.13",
|
||||
"192.168.1.11",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000602": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.13",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.13 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.13]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000603": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.13",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.13 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.13]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:13",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.13",
|
||||
"192.168.1.11",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:06:13 [op=REPLY, sender=02:00:00:00:06:13|192.168.1.13, target=02:00:00:00:06:11|192.168.1.11]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:06:11",
|
||||
"02:00:00:00:06:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.1.11",
|
||||
"192.168.1.13",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:06:13",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.1.13",
|
||||
"192.168.1.11",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000605": []
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000601": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.13",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.13 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.13]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:13",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.13",
|
||||
"192.168.1.11",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:06:13 [op=REPLY, sender=02:00:00:00:06:13|192.168.1.13, target=02:00:00:00:06:11|192.168.1.11]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:06:11",
|
||||
"02:00:00:00:06:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.1.11",
|
||||
"192.168.1.13",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:06:13",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.1.13",
|
||||
"192.168.1.11",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000602": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.13",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.13 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.13]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000603": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.13",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.13 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.13]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:13",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.13",
|
||||
"192.168.1.11",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:06:13 [op=REPLY, sender=02:00:00:00:06:13|192.168.1.13, target=02:00:00:00:06:11|192.168.1.11]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:06:11",
|
||||
"02:00:00:00:06:13",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.1.11",
|
||||
"192.168.1.13",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:06:13",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.1.13",
|
||||
"192.168.1.11",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000605": []
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
719,
|
||||
713,
|
||||
"sendProbe 192.168.1.13 called"
|
||||
],
|
||||
[
|
||||
1190,
|
||||
1187,
|
||||
"sendProbe 192.168.1.13 returned ICMP 0/0 from 192.168.1.13"
|
||||
]
|
||||
]
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000601": [
|
||||
{
|
||||
"time": 720,
|
||||
"time": 718,
|
||||
"source": "02:00:00:00:06:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -10,7 +10,7 @@
|
||||
"targetIp": "192.168.1.12"
|
||||
},
|
||||
{
|
||||
"time": 955,
|
||||
"time": 952,
|
||||
"source": "02:00:00:00:06:12",
|
||||
"destination": "02:00:00:00:06:11",
|
||||
"arp": 2,
|
||||
@@ -18,7 +18,7 @@
|
||||
"targetIp": "192.168.1.11"
|
||||
},
|
||||
{
|
||||
"time": 959,
|
||||
"time": 956,
|
||||
"source": "02:00:00:00:06:11",
|
||||
"destination": "02:00:00:00:06:12",
|
||||
"icmp": 8,
|
||||
@@ -28,7 +28,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 1184,
|
||||
"time": 1181,
|
||||
"source": "02:00:00:00:06:12",
|
||||
"destination": "02:00:00:00:06:11",
|
||||
"icmp": 0,
|
||||
@@ -40,7 +40,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000602": [
|
||||
{
|
||||
"time": 842,
|
||||
"time": 839,
|
||||
"source": "02:00:00:00:06:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -48,7 +48,7 @@
|
||||
"targetIp": "192.168.1.12"
|
||||
},
|
||||
{
|
||||
"time": 843,
|
||||
"time": 841,
|
||||
"source": "02:00:00:00:06:12",
|
||||
"destination": "02:00:00:00:06:11",
|
||||
"arp": 2,
|
||||
@@ -56,7 +56,7 @@
|
||||
"targetIp": "192.168.1.11"
|
||||
},
|
||||
{
|
||||
"time": 1072,
|
||||
"time": 1069,
|
||||
"source": "02:00:00:00:06:11",
|
||||
"destination": "02:00:00:00:06:12",
|
||||
"icmp": 8,
|
||||
@@ -66,7 +66,7 @@
|
||||
"sequence": 1
|
||||
},
|
||||
{
|
||||
"time": 1072,
|
||||
"time": 1069,
|
||||
"source": "02:00:00:00:06:12",
|
||||
"destination": "02:00:00:00:06:11",
|
||||
"icmp": 0,
|
||||
@@ -78,7 +78,7 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000603": [
|
||||
{
|
||||
"time": 842,
|
||||
"time": 839,
|
||||
"source": "02:00:00:00:06:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
@@ -88,13 +88,319 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000605": []
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000601": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.12",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.12 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.12]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:12",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.12",
|
||||
"192.168.1.11",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:06:12 [op=REPLY, sender=02:00:00:00:06:12|192.168.1.12, target=02:00:00:00:06:11|192.168.1.11]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:06:11",
|
||||
"02:00:00:00:06:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.1.11",
|
||||
"192.168.1.12",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:06:12",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.1.12",
|
||||
"192.168.1.11",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000602": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.12",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.12 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.12]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:12",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.12",
|
||||
"192.168.1.11",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:06:12 [op=REPLY, sender=02:00:00:00:06:12|192.168.1.12, target=02:00:00:00:06:11|192.168.1.11]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:06:11",
|
||||
"02:00:00:00:06:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.1.11",
|
||||
"192.168.1.12",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:06:12",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.1.12",
|
||||
"192.168.1.11",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000603": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.12",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.12 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.12]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000605": []
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000601": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.12",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.12 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.12]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:12",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.12",
|
||||
"192.168.1.11",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:06:12 [op=REPLY, sender=02:00:00:00:06:12|192.168.1.12, target=02:00:00:00:06:11|192.168.1.11]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:06:11",
|
||||
"02:00:00:00:06:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.1.11",
|
||||
"192.168.1.12",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:06:12",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.1.12",
|
||||
"192.168.1.11",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000602": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.12",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.12 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.12]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:12",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.12",
|
||||
"192.168.1.11",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"MAC ist 02:00:00:00:06:12 [op=REPLY, sender=02:00:00:00:06:12|192.168.1.12, target=02:00:00:00:06:11|192.168.1.11]"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"02:00:00:00:06:11",
|
||||
"02:00:00:00:06:12",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"3",
|
||||
"192.168.1.11",
|
||||
"192.168.1.12",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"02:00:00:00:06:12",
|
||||
"02:00:00:00:06:11",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x800"
|
||||
],
|
||||
[
|
||||
"4",
|
||||
"192.168.1.12",
|
||||
"192.168.1.11",
|
||||
"ICMP",
|
||||
"Vermittlung",
|
||||
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000603": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.12",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.12 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.12]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000605": []
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
715,
|
||||
713,
|
||||
"sendProbe 192.168.1.12 called"
|
||||
],
|
||||
[
|
||||
1185,
|
||||
1183,
|
||||
"sendProbe 192.168.1.12 returned ICMP 0/0 from 192.168.1.12"
|
||||
]
|
||||
]
|
||||
|
||||
@@ -56,6 +56,216 @@
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000605": []
|
||||
},
|
||||
"rows": {
|
||||
"00000000-0000-0000-0000-000000000601": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.14",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.14 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.14]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.11",
|
||||
"192.168.1.14",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.14 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.14]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000602": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.14",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.14 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.14]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.11",
|
||||
"192.168.1.14",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.14 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.14]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000603": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.14",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.14 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.14]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.11",
|
||||
"192.168.1.14",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.14 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.14]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000605": []
|
||||
},
|
||||
"layeredRows": {
|
||||
"00000000-0000-0000-0000-000000000601": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.14",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.14 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.14]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.11",
|
||||
"192.168.1.14",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.14 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.14]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000602": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.14",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.14 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.14]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.11",
|
||||
"192.168.1.14",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.14 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.14]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000603": [
|
||||
[
|
||||
"1",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"1",
|
||||
"192.168.1.11",
|
||||
"192.168.1.14",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.14 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.14]"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"02:00:00:00:06:11",
|
||||
"FF:FF:FF:FF:FF:FF",
|
||||
"",
|
||||
"Netzzugang",
|
||||
"0x806"
|
||||
],
|
||||
[
|
||||
"2",
|
||||
"192.168.1.11",
|
||||
"192.168.1.14",
|
||||
"ARP",
|
||||
"Vermittlung",
|
||||
"Suche nach MAC für 192.168.1.14 [op=REQUEST, sender=02:00:00:00:06:11|192.168.1.11, target=FF:FF:FF:FF:FF:FF|192.168.1.14]"
|
||||
]
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000605": []
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
711,
|
||||
|
||||
@@ -20,7 +20,7 @@ import { fileURLToPath } from 'node:url';
|
||||
import { describe, expect, it } from 'vitest';
|
||||
import { TCP_FLAG, type Id, type NetworkRuntimeEngine, type TcpSegment } from '../src/index.js';
|
||||
import { loseFirst } from './fixtures.js';
|
||||
import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, gaps, javaFrames, watchedEngine, withClientPortText, type JavaFrame, type SeenFrame } from './javaRun.js';
|
||||
import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, gaps, javaFrames, watchedEngine, withClientPortText, type JavaFrame, type SeenFrame, type JavaTables } from './javaRun.js';
|
||||
import type { Scenario } from './scenario.js';
|
||||
|
||||
const scenarioDirectory = join(dirname(fileURLToPath(import.meta.url)), 'scenarios');
|
||||
@@ -34,7 +34,7 @@ const SERVER = '00000000-0000-0000-0000-000000000101';
|
||||
const CLIENT = '00000000-0000-0000-0000-000000000102';
|
||||
const OTHER_CLIENT = '00000000-0000-0000-0000-000000000103';
|
||||
|
||||
interface JavaRun {
|
||||
interface JavaRun extends JavaTables {
|
||||
frames: Record<string, JavaFrame[]>;
|
||||
events: [number, string][];
|
||||
states: Record<string, [number, string][]>;
|
||||
@@ -299,7 +299,7 @@ describe('TCP as Java FILIUS runs it', () => {
|
||||
);
|
||||
}
|
||||
|
||||
expectSameCaptures(engine, scenario, java.frames, { text: withClientPortText, until: CAPTURE_UNTIL[name]?.(measured) });
|
||||
expectSameCaptures(engine, scenario, java.frames, { text: withClientPortText, until: CAPTURE_UNTIL[name]?.(measured), tables: measured });
|
||||
|
||||
const shift = (states: [number, string][], syn: number): [number, string][] => before(states.map(([time, state]) => [time - syn, state]));
|
||||
// From SYN_SENT: Java's first CLOSED is when the socket was made.
|
||||
|
||||
@@ -17,14 +17,14 @@ import { dirname, join } from 'node:path';
|
||||
import { fileURLToPath } from 'node:url';
|
||||
import { describe, expect, it } from 'vitest';
|
||||
import type { Id, NetworkRuntimeEngine } from '../src/index.js';
|
||||
import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, gaps, javaFrames, watchedEngine, type JavaFrame } from './javaRun.js';
|
||||
import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, gaps, javaFrames, watchedEngine, type JavaFrame, type JavaTables } from './javaRun.js';
|
||||
import type { Scenario } from './scenario.js';
|
||||
|
||||
const scenarioDirectory = join(dirname(fileURLToPath(import.meta.url)), 'scenarios');
|
||||
const NOTEBOOK = '00000000-0000-0000-0000-000000000601';
|
||||
const UNCABLED = '00000000-0000-0000-0000-000000000605';
|
||||
|
||||
interface JavaRun {
|
||||
interface JavaRun extends JavaTables {
|
||||
frames: Record<string, JavaFrame[]>;
|
||||
events: [number, string][];
|
||||
}
|
||||
@@ -76,7 +76,7 @@ describe('WLAN as Java FILIUS runs it', () => {
|
||||
expect(actual[index]?.text, `frame #${index + 1}`).toBe(expected[index]?.text);
|
||||
expect(Math.abs(actual[index]!.gap - expected[index]!.gap), `gap before frame #${index + 1}`).toBeLessThanOrEqual(GAP_TOLERANCE_MILLISECONDS);
|
||||
}
|
||||
expectSameCaptures(engine, scenario, java.frames);
|
||||
expectSameCaptures(engine, scenario, java.frames, { tables: java });
|
||||
});
|
||||
}
|
||||
});
|
||||
|
||||
Reference in New Issue
Block a user