julian.kiedaisch/mdg-filius
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(core): the packet capture's table after Java's Lauscher, measured against Java's own tables

Browse Source 
captureRows.ts builds Java's rows per frame (Lauscher.datenVorbereiten):
Ethernet; ARP, ICMP or IP; TCP or UDP; the data with Java's protocol
recognition; with addresses and ports or ports only. The comment stays
structured; captureCommentText says it with given words and numbers.

ScenarioNetwork writes Java's finished tables per card (Lauscher.getDaten,
German locale); all runtime runs are recorded again, NatRun has ttlOut.
expectSameCaptures compares both views for every frame. Fixed where the
engine differed: an ARP request's target MAC is the broadcast address,
an ICMP error's identifier and sequence number are 0 (RFC 792), and host
unreachable from a router carries the packet as forwarded. Not taken:
Java's lower-case broadcast address in a reply to 0.0.0.0, and the typo
'Exeeded'. RIP keeps its recordings: Java's staggered router start now
gives a different startup on this machine.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
julian.kiedaisch
2026-10-01 15:11:05 +00:00
co-authored by Claude Opus 5.5
parent 0a34f3a4c4
commit 21a404693c
55 changed files with 37423 additions and 1321 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/core/test/scenarios/dns-java-mail.java.json
+488 -20
View File
@@ -2,7 +2,7 @@
"frames": {
"00000000-0000-0000-0000-000000000101": [
{
"time": 725,
"time": 726,
"source": "02:00:00:00:01:11",
"destination": "FF:FF:FF:FF:FF:FF",
"arp": 1,
@@ -10,7 +10,7 @@
"targetIp": "192.168.0.10"
},
{
"time": 958,
"time": 961,
"source": "02:00:00:00:01:12",
"destination": "02:00:00:00:01:11",
"arp": 2,
@@ -18,31 +18,31 @@
"targetIp": "192.168.0.20"
},
{
"time": 961,
"time": 964,
"source": "02:00:00:00:01:11",
"destination": "02:00:00:00:01:12",
"sourceIp": "192.168.0.20",
"destinationIp": "192.168.0.10",
"protocol": 17,
"sourcePort": 55842,
"sourcePort": 62914,
"destinationPort": 53,
"payload": "ID=4405 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
"payload": "ID=4538 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
},
{
"time": 1191,
"time": 1193,
"source": "02:00:00:00:01:12",
"destination": "02:00:00:00:01:11",
"sourceIp": "192.168.0.10",
"destinationIp": "192.168.0.20",
"protocol": 17,
"sourcePort": 53,
"destinationPort": 55842,
"payload": "ID=4405 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
"destinationPort": 62914,
"payload": "ID=4538 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
}
],
"00000000-0000-0000-0000-000000000102": [
{
"time": 846,
"time": 849,
"source": "02:00:00:00:01:11",
"destination": "FF:FF:FF:FF:FF:FF",
"arp": 1,
@@ -50,7 +50,7 @@
"targetIp": "192.168.0.10"
},
{
"time": 847,
"time": 850,
"source": "02:00:00:00:01:12",
"destination": "02:00:00:00:01:11",
"arp": 2,
@@ -58,31 +58,31 @@
"targetIp": "192.168.0.20"
},
{
"time": 1074,
"time": 1077,
"source": "02:00:00:00:01:11",
"destination": "02:00:00:00:01:12",
"sourceIp": "192.168.0.20",
"destinationIp": "192.168.0.10",
"protocol": 17,
"sourcePort": 55842,
"sourcePort": 62914,
"destinationPort": 53,
"payload": "ID=4405 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
"payload": "ID=4538 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
},
{
"time": 1079,
"time": 1082,
"source": "02:00:00:00:01:12",
"destination": "02:00:00:00:01:11",
"sourceIp": "192.168.0.10",
"destinationIp": "192.168.0.20",
"protocol": 17,
"sourcePort": 53,
"destinationPort": 55842,
"payload": "ID=4405 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
"destinationPort": 62914,
"payload": "ID=4538 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
}
],
"00000000-0000-0000-0000-000000000103": [
{
"time": 845,
"time": 849,
"source": "02:00:00:00:01:11",
"destination": "FF:FF:FF:FF:FF:FF",
"arp": 1,
@@ -92,7 +92,7 @@
],
"00000000-0000-0000-0000-000000000104": [
{
"time": 845,
"time": 849,
"source": "02:00:00:00:01:11",
"destination": "FF:FF:FF:FF:FF:FF",
"arp": 1,
@@ -101,13 +101,481 @@
}
]
},
"rows": {
"00000000-0000-0000-0000-000000000101": [
[
"1",
"02:00:00:00:01:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"1",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
],
[
"2",
"02:00:00:00:01:12",
"02:00:00:00:01:11",
"",
"Netzzugang",
"0x806"
],
[
"2",
"192.168.0.10",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
],
[
"3",
"02:00:00:00:01:11",
"02:00:00:00:01:12",
"",
"Netzzugang",
"0x800"
],
[
"3",
"192.168.0.20",
"192.168.0.10",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"3",
"192.168.0.20:62914",
"192.168.0.10:53",
"UDP",
"Transport",
""
],
[
"3",
"192.168.0.20:62914",
"192.168.0.10:53",
"DNS",
"Anwendung",
"ID=4538 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
],
[
"4",
"02:00:00:00:01:12",
"02:00:00:00:01:11",
"",
"Netzzugang",
"0x800"
],
[
"4",
"192.168.0.10",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"4",
"192.168.0.10:53",
"192.168.0.20:62914",
"UDP",
"Transport",
""
],
[
"4",
"192.168.0.10:53",
"192.168.0.20:62914",
"DNS",
"Anwendung",
"ID=4538 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
]
],
"00000000-0000-0000-0000-000000000102": [
[
"1",
"02:00:00:00:01:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"1",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
],
[
"2",
"02:00:00:00:01:12",
"02:00:00:00:01:11",
"",
"Netzzugang",
"0x806"
],
[
"2",
"192.168.0.10",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
],
[
"3",
"02:00:00:00:01:11",
"02:00:00:00:01:12",
"",
"Netzzugang",
"0x800"
],
[
"3",
"192.168.0.20",
"192.168.0.10",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"3",
"192.168.0.20:62914",
"192.168.0.10:53",
"UDP",
"Transport",
""
],
[
"3",
"192.168.0.20:62914",
"192.168.0.10:53",
"DNS",
"Anwendung",
"ID=4538 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
],
[
"4",
"02:00:00:00:01:12",
"02:00:00:00:01:11",
"",
"Netzzugang",
"0x800"
],
[
"4",
"192.168.0.10",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"4",
"192.168.0.10:53",
"192.168.0.20:62914",
"UDP",
"Transport",
""
],
[
"4",
"192.168.0.10:53",
"192.168.0.20:62914",
"DNS",
"Anwendung",
"ID=4538 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
]
],
"00000000-0000-0000-0000-000000000103": [
[
"1",
"02:00:00:00:01:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"1",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
]
],
"00000000-0000-0000-0000-000000000104": [
[
"1",
"02:00:00:00:01:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"1",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
]
]
},
"layeredRows": {
"00000000-0000-0000-0000-000000000101": [
[
"1",
"02:00:00:00:01:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"1",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
],
[
"2",
"02:00:00:00:01:12",
"02:00:00:00:01:11",
"",
"Netzzugang",
"0x806"
],
[
"2",
"192.168.0.10",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
],
[
"3",
"02:00:00:00:01:11",
"02:00:00:00:01:12",
"",
"Netzzugang",
"0x800"
],
[
"3",
"192.168.0.20",
"192.168.0.10",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"3",
"62914",
"53",
"UDP",
"Transport",
""
],
[
"3",
null,
null,
"DNS",
"Anwendung",
"ID=4538 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
],
[
"4",
"02:00:00:00:01:12",
"02:00:00:00:01:11",
"",
"Netzzugang",
"0x800"
],
[
"4",
"192.168.0.10",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"4",
"53",
"62914",
"UDP",
"Transport",
""
],
[
"4",
null,
null,
"DNS",
"Anwendung",
"ID=4538 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
]
],
"00000000-0000-0000-0000-000000000102": [
[
"1",
"02:00:00:00:01:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"1",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
],
[
"2",
"02:00:00:00:01:12",
"02:00:00:00:01:11",
"",
"Netzzugang",
"0x806"
],
[
"2",
"192.168.0.10",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
],
[
"3",
"02:00:00:00:01:11",
"02:00:00:00:01:12",
"",
"Netzzugang",
"0x800"
],
[
"3",
"192.168.0.20",
"192.168.0.10",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"3",
"62914",
"53",
"UDP",
"Transport",
""
],
[
"3",
null,
null,
"DNS",
"Anwendung",
"ID=4538 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
],
[
"4",
"02:00:00:00:01:12",
"02:00:00:00:01:11",
"",
"Netzzugang",
"0x800"
],
[
"4",
"192.168.0.10",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"4",
"53",
"62914",
"UDP",
"Transport",
""
],
[
"4",
null,
null,
"DNS",
"Anwendung",
"ID=4538 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
]
],
"00000000-0000-0000-0000-000000000103": [
[
"1",
"02:00:00:00:01:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"1",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
]
],
"00000000-0000-0000-0000-000000000104": [
[
"1",
"02:00:00:00:01:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"1",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
]
]
},
"events": [
[
714,
715,
"holeIPAdresseMailServer filius.de called"
],
[
1191,
1194,
"holeIPAdresseMailServer filius.de returned 192.168.0.31"
]
]