feat(core): recursive DNS server after Java, measured with Java FILIUS
The resolver runs on the events now (a query, its dnsQueryTimeout, its answer at the socket); the blocking resolveDns waits for it, and a recursive server uses it: its own records, else the zone's name server from its records, else its own DNS server, else a referral (DNSServer.answerWithRemoteData). DnsRun plays five stories on the new dns-recursive network. Measured and not taken: a server that is its zone's name server asks itself, which asks itself again, without end (the client times out, then every level floods its own DNS server); Java guards only the step through its own DNS server. The core asks itself in neither step. That story is compared up to the client's query (JAVA_UNTIL). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Claude Opus 5.5
@@ -1,6 +1,8 @@
|
||||
// DNS as Java FILIUS runs it. tools/java-oracle's DnsRun called a client's
|
||||
// resolver on dns-lan's network in Java FILIUS and wrote every frame each
|
||||
// card saw and what the call returned (dns-java-<story>.java.json). The
|
||||
// card saw and what the call returned (dns-java-<story>.java.json); on
|
||||
// dns-recursive's, where the server resolves recursively, likewise
|
||||
// (dns-recursive-java-<story>.java.json). The
|
||||
// engine makes the same call: the frames must come in the same order, with
|
||||
// the same content, at about the same distance from each other (javaRun.ts),
|
||||
// the call must return the same, after about as long.
|
||||
@@ -26,12 +28,43 @@ interface JavaRun {
|
||||
events: [number, string][];
|
||||
}
|
||||
|
||||
const STORIES: Record<string, (engine: NetworkRuntimeEngine) => DnsAddressResolution> = {
|
||||
address: (engine) => engine.resolveDnsAddress(CLIENT, 'web.filius.de'),
|
||||
mail: (engine) => engine.resolveDnsMailServer(CLIENT, 'filius.de'),
|
||||
referral: (engine) => engine.resolveDnsAddress(CLIENT, 'www.schule.de'),
|
||||
unknown: (engine) => engine.resolveDnsAddress(CLIENT, 'x.unbekannt.org'),
|
||||
noServer: (engine) => engine.resolveDnsAddress(LOST_CLIENT, 'web.filius.de'),
|
||||
type Story = (engine: NetworkRuntimeEngine) => DnsAddressResolution;
|
||||
|
||||
/** Per scenario the stories DnsRun played on it. */
|
||||
const RUNS: Record<string, Record<string, Story>> = {
|
||||
'dns-lan': {
|
||||
address: (engine) => engine.resolveDnsAddress(CLIENT, 'web.filius.de'),
|
||||
mail: (engine) => engine.resolveDnsMailServer(CLIENT, 'filius.de'),
|
||||
referral: (engine) => engine.resolveDnsAddress(CLIENT, 'www.schule.de'),
|
||||
unknown: (engine) => engine.resolveDnsAddress(CLIENT, 'x.unbekannt.org'),
|
||||
noServer: (engine) => engine.resolveDnsAddress(LOST_CLIENT, 'web.filius.de'),
|
||||
},
|
||||
'dns-recursive': {
|
||||
address: (engine) => engine.resolveDnsAddress(CLIENT, 'web.filius.de'),
|
||||
referral: (engine) => engine.resolveDnsAddress(CLIENT, 'www.schule.de'),
|
||||
unknown: (engine) => engine.resolveDnsAddress(CLIENT, 'x.unbekannt.org'),
|
||||
unknownInZone: (engine) => engine.resolveDnsAddress(CLIENT, 'nix.schule.de'),
|
||||
unknownInOwnZone: (engine) => engine.resolveDnsAddress(CLIENT, 'nix.filius.de'),
|
||||
},
|
||||
};
|
||||
|
||||
/** The recording of a story: dns-java-<story> for dns-lan, <scenario>-java-<story> else. */
|
||||
function recording(scenarioName: string, story: string): string {
|
||||
return scenarioName === 'dns-lan' ? `dns-java-${story}.java.json` : `${scenarioName}-java-${story}.java.json`;
|
||||
}
|
||||
|
||||
/**
|
||||
* Where Java errs, per scenario and story: compared up to the frames Java
|
||||
* sends before its error shows, not the result (engine.test.ts has the rest).
|
||||
*
|
||||
* dns-recursive/unknownInOwnZone: the server's own zone names itself as its
|
||||
* name server, and Java's server asks it — itself, which asks itself again,
|
||||
* without end; the client times out, then every level falls back to .11. The
|
||||
* engine asks neither itself nor, here, anyone but .11. Compared up to the
|
||||
* client's query.
|
||||
*/
|
||||
const JAVA_UNTIL: Record<string, (java: JavaRun) => number> = {
|
||||
'dns-recursive/unknownInOwnZone': (java) => Math.min(...Object.values(java.frames).flat().filter((frame) => frame.destinationPort === 53).map((frame) => frame.time)) + 1,
|
||||
};
|
||||
|
||||
/** Java's words for the result: the address, null, or the exception. */
|
||||
@@ -53,35 +86,43 @@ function normalized(frames: readonly SeenFrame[]): SeenFrame[] {
|
||||
}));
|
||||
}
|
||||
|
||||
/** Stories the engine does not play like Java yet, with the reason; each must still differ from Java. */
|
||||
const NOT_YET_LIKE_JAVA: Record<string, string> = {};
|
||||
|
||||
describe('DNS as Java FILIUS runs it', () => {
|
||||
const scenario = JSON.parse(readFileSync(join(scenarioDirectory, 'dns-lan.scenario.json'), 'utf8')) as Scenario;
|
||||
it('cuts only where Java goes on with its error', () => {
|
||||
for (const [key, until] of Object.entries(JAVA_UNTIL)) {
|
||||
const [scenarioName, story] = key.split('/') as [string, string];
|
||||
const java = JSON.parse(readFileSync(join(scenarioDirectory, recording(scenarioName, story)), 'utf8')) as JavaRun;
|
||||
expect(Object.values(java.frames).flat().some((frame) => frame.time >= until(java)), key).toBe(true);
|
||||
}
|
||||
});
|
||||
|
||||
for (const [name, story] of Object.entries(STORIES)) {
|
||||
it(name, () => {
|
||||
const java = JSON.parse(readFileSync(join(scenarioDirectory, `dns-java-${name}.java.json`), 'utf8')) as JavaRun;
|
||||
const { engine, frames } = watchedEngine(scenario);
|
||||
engine.handle({ type: 'advance', toMilliseconds: 500 });
|
||||
const called = engine.state.currentTimeMilliseconds;
|
||||
const result = story(engine);
|
||||
const returned = engine.state.currentTimeMilliseconds;
|
||||
for (const [scenarioName, stories] of Object.entries(RUNS)) {
|
||||
const scenario = JSON.parse(readFileSync(join(scenarioDirectory, `${scenarioName}.scenario.json`), 'utf8')) as Scenario;
|
||||
for (const [name, story] of Object.entries(stories)) {
|
||||
it(`${scenarioName}: ${name}`, () => {
|
||||
const java = JSON.parse(readFileSync(join(scenarioDirectory, recording(scenarioName, name)), 'utf8')) as JavaRun;
|
||||
const { engine, frames } = watchedEngine(scenario);
|
||||
engine.handle({ type: 'advance', toMilliseconds: 500 });
|
||||
const called = engine.state.currentTimeMilliseconds;
|
||||
const result = story(engine);
|
||||
const returned = engine.state.currentTimeMilliseconds;
|
||||
|
||||
const [[javaCalled], [javaReturned, javaOutcome]] = java.events as [[number, string], [number, string]];
|
||||
expect(`${javaOutcome.split(' ').slice(-2).join(' ')}`).toBe(javaResult(result).split(' ').slice(-2).join(' '));
|
||||
|
||||
const expected = gaps(normalized(javaFrames(java.frames)));
|
||||
const actual = gaps(normalized(frames()));
|
||||
if (name in NOT_YET_LIKE_JAVA) {
|
||||
expect(JSON.stringify(actual), NOT_YET_LIKE_JAVA[name]).not.toBe(JSON.stringify(expected));
|
||||
return;
|
||||
}
|
||||
expect(Math.abs(returned - called - (javaReturned - javaCalled)), 'duration of the call').toBeLessThanOrEqual(GAP_TOLERANCE_MILLISECONDS);
|
||||
for (let index = 0; index < Math.max(expected.length, actual.length); index += 1) {
|
||||
expect(actual[index]?.text, `frame #${index + 1}`).toBe(expected[index]?.text);
|
||||
expect(Math.abs(actual[index]!.gap - expected[index]!.gap), `gap before frame #${index + 1}`).toBeLessThanOrEqual(GAP_TOLERANCE_MILLISECONDS);
|
||||
}
|
||||
});
|
||||
let expected = gaps(normalized(javaFrames(java.frames)));
|
||||
let actual = gaps(normalized(frames()));
|
||||
const until = JAVA_UNTIL[`${scenarioName}/${name}`]?.(java);
|
||||
if (until !== undefined) {
|
||||
const count = javaFrames(java.frames).filter((frame) => frame.time < until).length;
|
||||
expected = expected.slice(0, count);
|
||||
actual = actual.slice(0, count);
|
||||
} else {
|
||||
const [[javaCalled], [javaReturned, javaOutcome]] = java.events as [[number, string], [number, string]];
|
||||
expect(`${javaOutcome.split(' ').slice(-2).join(' ')}`).toBe(javaResult(result).split(' ').slice(-2).join(' '));
|
||||
expect(Math.abs(returned - called - (javaReturned - javaCalled)), 'duration of the call').toBeLessThanOrEqual(GAP_TOLERANCE_MILLISECONDS);
|
||||
}
|
||||
for (let index = 0; index < Math.max(expected.length, actual.length); index += 1) {
|
||||
expect(actual[index]?.text, `frame #${index + 1}`).toBe(expected[index]?.text);
|
||||
expect(Math.abs(actual[index]!.gap - expected[index]!.gap), `gap before frame #${index + 1}`).toBeLessThanOrEqual(GAP_TOLERANCE_MILLISECONDS);
|
||||
}
|
||||
});
|
||||
}
|
||||
}
|
||||
});
|
||||
|
||||
@@ -11,7 +11,6 @@ import {
|
||||
decodeDnsMessage,
|
||||
encodeDnsMessage,
|
||||
findApplicableNameServerRecord,
|
||||
NotPortedError,
|
||||
DHCP_DYNAMIC_LEASE_LIFETIME_MILLISECONDS,
|
||||
deviceConfiguration,
|
||||
dhcpServerConfiguration,
|
||||
@@ -1668,6 +1667,7 @@ describe('DNS', () => {
|
||||
expect(engine.resolveDnsAddress(client, 'web.filius.de')).toEqual({ type: 'resolved', address: '10.30.0.9' });
|
||||
// ARP there and back, then the query and its answer: four cables each way through the switch.
|
||||
expect(engine.state.currentTimeMilliseconds - called).toBe(4 * 110);
|
||||
expect(engine.state.pendingEvents.some((event) => event.kind.kind === 'dnsQueryTimeout')).toBe(false);
|
||||
});
|
||||
|
||||
it("answers behind a datagram of its own whose ARP fails: Java's UDP thread sends one after the other", () => {
|
||||
@@ -1722,8 +1722,76 @@ describe('DNS', () => {
|
||||
expect([...engine.state.socketsById.values()].filter((socket) => socket.nodeId === client)).toEqual([]);
|
||||
});
|
||||
|
||||
it('does not answer recursively yet', () => {
|
||||
expect(() => lan({ '10.30.0.2': [] }, true)).toThrow(NotPortedError);
|
||||
it('answers every question of a query, one after the other', () => {
|
||||
const { engine, client } = lan({ '10.30.0.2': ['web.filius.de A 10.30.0.9', 'mail.filius.de A 10.30.0.10'] });
|
||||
const socket = engine.bindUdpSocket(client, { remoteIPAddress: '10.30.0.2', remotePort: 53 })!;
|
||||
const query = encodeDnsMessage({
|
||||
id: 9,
|
||||
queryResponse: 0,
|
||||
responseCode: 0,
|
||||
questions: [
|
||||
{ name: 'web.filius.de.', type: 'A', questionClass: 'IN' },
|
||||
{ name: 'mail.filius.de.', type: 'A', questionClass: 'IN' },
|
||||
],
|
||||
answers: [],
|
||||
authority: [],
|
||||
additional: [],
|
||||
});
|
||||
engine.sendUdp(socket, new TextEncoder().encode(query));
|
||||
const response = decodeDnsMessage(new TextDecoder().decode(engine.receiveUdp(socket, 10_000)!.datagram.payload));
|
||||
|
||||
expect(response.answers.map((record) => record.data)).toEqual(['10.30.0.9', '10.30.0.10']);
|
||||
});
|
||||
|
||||
it('forgets the DNS queries that wait on stop', () => {
|
||||
const records = { '10.30.0.2': ['schule.de NS ns.schule.de.', 'ns.schule.de A 10.30.0.3'] };
|
||||
const { engine, client } = lan(records, true);
|
||||
// The client gives up; the server still waits for .3, which runs no DNS server, when the simulation stops.
|
||||
expect(engine.resolveDnsAddress(client, 'www.schule.de')).toEqual({ type: 'timedOut' });
|
||||
const snapshot = engine.state.topologySnapshot;
|
||||
engine.handle({ type: 'stop' });
|
||||
engine.handle({ type: 'start', snapshot, seed: 14, initialTimeMilliseconds: 0 });
|
||||
// The sockets are numbered anew: the second takes the number of the server's query socket before.
|
||||
engine.bindUdpSocket(client, { localPort: 7000 });
|
||||
const receiver = engine.bindUdpSocket(client, { localPort: 7001 })!;
|
||||
const sender = engine.bindUdpSocket(uuid(0x1906), { remoteIPAddress: '10.30.0.1', remotePort: 7001 })!;
|
||||
engine.sendUdp(sender, new TextEncoder().encode('still mine'));
|
||||
|
||||
expect(new TextDecoder().decode(engine.receiveUdp(receiver, 10_000)?.datagram.payload)).toBe('still mine');
|
||||
});
|
||||
|
||||
it('asks on for a name it does not know, and answers with what it learns', () => {
|
||||
const { engine, client } = lan(
|
||||
{ '10.30.0.2': ['schule.de NS ns.schule.de.', 'ns.schule.de A 10.30.0.3'], '10.30.0.3': ['www.schule.de A 10.30.0.40'] },
|
||||
true,
|
||||
);
|
||||
const called = engine.state.currentTimeMilliseconds;
|
||||
expect(engine.resolveDnsAddress(client, 'www.schule.de')).toEqual({ type: 'resolved', address: '10.30.0.40' });
|
||||
// ARP, query and answer between client and server, ARP, query and answer between server and .3,
|
||||
// and the answer to the client: eight crossings of the switch, 110 ms each.
|
||||
expect(queries(engine)).toEqual(['DNS query www.schule.de. A', 'DNS query www.schule.de. A']);
|
||||
expect(engine.state.currentTimeMilliseconds - called).toBe(8 * 110);
|
||||
});
|
||||
|
||||
it('asks neither itself as the name server of its own zone nor as its own DNS server: it refers (Java asks itself without end)', () => {
|
||||
const { engine, client } = lan({ '10.30.0.2': ['filius.de NS ns.filius.de.', 'ns.filius.de A 10.30.0.2'] }, true);
|
||||
const called = engine.state.currentTimeMilliseconds;
|
||||
expect(engine.resolveDnsAddress(client, 'nix.filius.de')).toEqual({ type: 'resolved', address: undefined });
|
||||
// The client follows the referral to the server once more: two exchanges, the first with ARP.
|
||||
expect(queries(engine)).toEqual(['DNS query nix.filius.de. A', 'DNS query nix.filius.de. A']);
|
||||
expect(engine.state.currentTimeMilliseconds - called).toBe(4 * 110 + 2 * 110);
|
||||
});
|
||||
|
||||
it('gives up on a name server that does not answer after five round trips, when the client has given up too', () => {
|
||||
const { engine, client } = lan({ '10.30.0.2': ['schule.de NS ns.schule.de.', 'ns.schule.de A 10.30.0.3'] }, true);
|
||||
const called = engine.state.currentTimeMilliseconds;
|
||||
// .3 runs no DNS server.
|
||||
expect(engine.resolveDnsAddress(client, 'www.schule.de')).toEqual({ type: 'timedOut' });
|
||||
expect(engine.state.currentTimeMilliseconds - called).toBe(5 * 2_750);
|
||||
// The server's own wait ends later, then it refers the client, which no longer listens.
|
||||
engine.handle({ type: 'advance', toMilliseconds: engine.state.currentTimeMilliseconds + 5 * 2_750 });
|
||||
expect(engine.state.packetTraces.filter((trace) => trace.detail === 'DNS response')).toHaveLength(1);
|
||||
expect([...engine.state.socketsById.values()].filter((socket) => socket.nodeId === client)).toEqual([]);
|
||||
});
|
||||
});
|
||||
|
||||
|
||||
@@ -0,0 +1,114 @@
|
||||
{
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
{
|
||||
"time": 727,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.20",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 963,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 965,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 60119,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=56151 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1196,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 60119,
|
||||
"payload": "ID=56151 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
{
|
||||
"time": 850,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.20",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 851,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 1079,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 60119,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=56151 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1084,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 60119,
|
||||
"payload": "ID=56151 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
{
|
||||
"time": 850,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.20",
|
||||
"targetIp": "192.168.0.10"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
{
|
||||
"time": 850,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.20",
|
||||
"targetIp": "192.168.0.10"
|
||||
}
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
717,
|
||||
"holeIPAdresse web.filius.de called"
|
||||
],
|
||||
[
|
||||
1197,
|
||||
"holeIPAdresse web.filius.de returned 192.168.0.30"
|
||||
]
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,206 @@
|
||||
{
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
{
|
||||
"time": 727,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.20",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 961,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 963,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 51710,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=39889 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1196,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.11"
|
||||
},
|
||||
{
|
||||
"time": 1645,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 51710,
|
||||
"payload": "ID=39889 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A 3600 192.168.0.40\n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
{
|
||||
"time": 848,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.20",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 849,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 1076,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 51710,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=39889 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1085,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.11"
|
||||
},
|
||||
{
|
||||
"time": 1308,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"arp": 2,
|
||||
"senderIp": "192.168.0.11",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 1308,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:13",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.11",
|
||||
"protocol": 17,
|
||||
"sourcePort": 52403,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=12187 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1533,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.11",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 52403,
|
||||
"payload": "ID=12187 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A 3600 192.168.0.40\n"
|
||||
},
|
||||
{
|
||||
"time": 1534,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 51710,
|
||||
"payload": "ID=39889 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A 3600 192.168.0.40\n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
{
|
||||
"time": 848,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.20",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 1196,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.11"
|
||||
},
|
||||
{
|
||||
"time": 1196,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"arp": 2,
|
||||
"senderIp": "192.168.0.11",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 1420,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:13",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.11",
|
||||
"protocol": 17,
|
||||
"sourcePort": 52403,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=12187 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1421,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.11",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 52403,
|
||||
"payload": "ID=12187 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A 3600 192.168.0.40\n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
{
|
||||
"time": 848,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.20",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 1196,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.11"
|
||||
}
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
716,
|
||||
"holeIPAdresse www.schule.de called"
|
||||
],
|
||||
[
|
||||
1645,
|
||||
"holeIPAdresse www.schule.de returned 192.168.0.40"
|
||||
]
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,206 @@
|
||||
{
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
{
|
||||
"time": 729,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.20",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 963,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 965,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 59169,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=28614 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nx.unbekannt.org. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1198,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.11"
|
||||
},
|
||||
{
|
||||
"time": 1645,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 59169,
|
||||
"payload": "ID=28614 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
{
|
||||
"time": 850,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.20",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 851,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 1078,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 59169,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=28614 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nx.unbekannt.org. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1087,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.11"
|
||||
},
|
||||
{
|
||||
"time": 1309,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"arp": 2,
|
||||
"senderIp": "192.168.0.11",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 1309,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:13",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.11",
|
||||
"protocol": 17,
|
||||
"sourcePort": 61822,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=44286 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nx.unbekannt.org. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1533,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.11",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 61822,
|
||||
"payload": "ID=44286 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
},
|
||||
{
|
||||
"time": 1534,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 59169,
|
||||
"payload": "ID=28614 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
{
|
||||
"time": 850,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.20",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 1198,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.11"
|
||||
},
|
||||
{
|
||||
"time": 1198,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"arp": 2,
|
||||
"senderIp": "192.168.0.11",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 1421,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:13",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.11",
|
||||
"protocol": 17,
|
||||
"sourcePort": 61822,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=44286 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nx.unbekannt.org. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1422,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.11",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 61822,
|
||||
"payload": "ID=44286 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
{
|
||||
"time": 850,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.20",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 1198,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.11"
|
||||
}
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
719,
|
||||
"holeIPAdresse x.unbekannt.org called"
|
||||
],
|
||||
[
|
||||
1646,
|
||||
"holeIPAdresse x.unbekannt.org returned null"
|
||||
]
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,173 @@
|
||||
{
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
{
|
||||
"time": 735,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.20",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 969,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 972,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 51431,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=22768 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.filius.de. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 15066,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.11"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
{
|
||||
"time": 857,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.20",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 858,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 1085,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 51431,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=22768 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.filius.de. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 14910,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.11"
|
||||
},
|
||||
{
|
||||
"time": 15276,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"arp": 2,
|
||||
"senderIp": "192.168.0.11",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 15278,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:13",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.11",
|
||||
"protocol": 17,
|
||||
"sourcePort": 52690,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=54566 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.filius.de. A IN\n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
{
|
||||
"time": 856,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.20",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 15066,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.11"
|
||||
},
|
||||
{
|
||||
"time": 15073,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"arp": 2,
|
||||
"senderIp": "192.168.0.11",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 15423,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:13",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.11",
|
||||
"protocol": 17,
|
||||
"sourcePort": 52690,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=54566 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.filius.de. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 15434,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.11",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 52690,
|
||||
"payload": "ID=54566 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
{
|
||||
"time": 856,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.20",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 15059,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.11"
|
||||
}
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
724,
|
||||
"holeIPAdresse nix.filius.de called"
|
||||
],
|
||||
[
|
||||
14485,
|
||||
"holeIPAdresse nix.filius.de failed TimeOutException"
|
||||
]
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,342 @@
|
||||
{
|
||||
"frames": {
|
||||
"00000000-0000-0000-0000-000000000101": [
|
||||
{
|
||||
"time": 750,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.20",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 984,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 987,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 64317,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=59872 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1221,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.11"
|
||||
},
|
||||
{
|
||||
"time": 1897,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 64317,
|
||||
"payload": "ID=59872 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nschule.de. NS 3600 ns.schule.de.\nns.schule.de. A 3600 192.168.0.11\n"
|
||||
},
|
||||
{
|
||||
"time": 1899,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.20",
|
||||
"targetIp": "192.168.0.11"
|
||||
},
|
||||
{
|
||||
"time": 2121,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
"senderIp": "192.168.0.11",
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 2121,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:13",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.11",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53912,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=65453 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 2345,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.11",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 53912,
|
||||
"payload": "ID=65453 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000102": [
|
||||
{
|
||||
"time": 871,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.20",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 873,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 1100,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 64317,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=59872 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1109,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.11"
|
||||
},
|
||||
{
|
||||
"time": 1333,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"arp": 2,
|
||||
"senderIp": "192.168.0.11",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 1333,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:13",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.11",
|
||||
"protocol": 17,
|
||||
"sourcePort": 50451,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=16993 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1558,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.11",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 50451,
|
||||
"payload": "ID=16993 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
},
|
||||
{
|
||||
"time": 1558,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:13",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.11",
|
||||
"protocol": 17,
|
||||
"sourcePort": 60605,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=33013 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1783,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.11",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 60605,
|
||||
"payload": "ID=33013 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
},
|
||||
{
|
||||
"time": 1786,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 64317,
|
||||
"payload": "ID=59872 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nschule.de. NS 3600 ns.schule.de.\nns.schule.de. A 3600 192.168.0.11\n"
|
||||
},
|
||||
{
|
||||
"time": 2010,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.20",
|
||||
"targetIp": "192.168.0.11"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000103": [
|
||||
{
|
||||
"time": 871,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.20",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 1221,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.11"
|
||||
},
|
||||
{
|
||||
"time": 1221,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"arp": 2,
|
||||
"senderIp": "192.168.0.11",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 1445,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:13",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.11",
|
||||
"protocol": 17,
|
||||
"sourcePort": 50451,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=16993 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1446,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.11",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 50451,
|
||||
"payload": "ID=16993 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
},
|
||||
{
|
||||
"time": 1670,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "02:00:00:00:01:13",
|
||||
"sourceIp": "192.168.0.10",
|
||||
"destinationIp": "192.168.0.11",
|
||||
"protocol": 17,
|
||||
"sourcePort": 60605,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=33013 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 1671,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "02:00:00:00:01:12",
|
||||
"sourceIp": "192.168.0.11",
|
||||
"destinationIp": "192.168.0.10",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 60605,
|
||||
"payload": "ID=33013 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
},
|
||||
{
|
||||
"time": 2010,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.20",
|
||||
"targetIp": "192.168.0.11"
|
||||
},
|
||||
{
|
||||
"time": 2010,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"arp": 2,
|
||||
"senderIp": "192.168.0.11",
|
||||
"targetIp": "192.168.0.20"
|
||||
},
|
||||
{
|
||||
"time": 2233,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "02:00:00:00:01:13",
|
||||
"sourceIp": "192.168.0.20",
|
||||
"destinationIp": "192.168.0.11",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53912,
|
||||
"destinationPort": 53,
|
||||
"payload": "ID=65453 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
||||
},
|
||||
{
|
||||
"time": 2234,
|
||||
"source": "02:00:00:00:01:13",
|
||||
"destination": "02:00:00:00:01:11",
|
||||
"sourceIp": "192.168.0.11",
|
||||
"destinationIp": "192.168.0.20",
|
||||
"protocol": 17,
|
||||
"sourcePort": 53,
|
||||
"destinationPort": 53912,
|
||||
"payload": "ID=65453 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
||||
}
|
||||
],
|
||||
"00000000-0000-0000-0000-000000000104": [
|
||||
{
|
||||
"time": 871,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.20",
|
||||
"targetIp": "192.168.0.10"
|
||||
},
|
||||
{
|
||||
"time": 1221,
|
||||
"source": "02:00:00:00:01:12",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.10",
|
||||
"targetIp": "192.168.0.11"
|
||||
},
|
||||
{
|
||||
"time": 2010,
|
||||
"source": "02:00:00:00:01:11",
|
||||
"destination": "FF:FF:FF:FF:FF:FF",
|
||||
"arp": 1,
|
||||
"senderIp": "192.168.0.20",
|
||||
"targetIp": "192.168.0.11"
|
||||
}
|
||||
]
|
||||
},
|
||||
"events": [
|
||||
[
|
||||
738,
|
||||
"holeIPAdresse nix.schule.de called"
|
||||
],
|
||||
[
|
||||
2345,
|
||||
"holeIPAdresse nix.schule.de returned null"
|
||||
]
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,142 @@
|
||||
{
|
||||
"seed": 51,
|
||||
"nodes": [
|
||||
{
|
||||
"id": "00000000-0000-0000-0000-000000000101",
|
||||
"kind": "pc",
|
||||
"ports": [
|
||||
{
|
||||
"id": "00000000-0000-0000-0000-000000000111",
|
||||
"label": "eth0"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"id": "00000000-0000-0000-0000-000000000102",
|
||||
"kind": "pc",
|
||||
"ports": [
|
||||
{
|
||||
"id": "00000000-0000-0000-0000-000000000112",
|
||||
"label": "eth0"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"id": "00000000-0000-0000-0000-000000000103",
|
||||
"kind": "pc",
|
||||
"ports": [
|
||||
{
|
||||
"id": "00000000-0000-0000-0000-000000000113",
|
||||
"label": "eth0"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"id": "00000000-0000-0000-0000-000000000104",
|
||||
"kind": "pc",
|
||||
"ports": [
|
||||
{
|
||||
"id": "00000000-0000-0000-0000-000000000114",
|
||||
"label": "eth0"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"id": "00000000-0000-0000-0000-000000000105",
|
||||
"kind": "networkSwitch",
|
||||
"ports": [
|
||||
{
|
||||
"id": "00000000-0000-0000-0000-000000000121",
|
||||
"label": "sw1"
|
||||
},
|
||||
{
|
||||
"id": "00000000-0000-0000-0000-000000000122",
|
||||
"label": "sw2"
|
||||
},
|
||||
{
|
||||
"id": "00000000-0000-0000-0000-000000000123",
|
||||
"label": "sw3"
|
||||
},
|
||||
{
|
||||
"id": "00000000-0000-0000-0000-000000000124",
|
||||
"label": "sw4"
|
||||
},
|
||||
{
|
||||
"id": "00000000-0000-0000-0000-000000000125",
|
||||
"label": "sw5"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"links": [
|
||||
{
|
||||
"id": "00000000-0000-0000-0000-00000000F001",
|
||||
"sourceNode": "00000000-0000-0000-0000-000000000101",
|
||||
"sourcePort": "00000000-0000-0000-0000-000000000111",
|
||||
"targetNode": "00000000-0000-0000-0000-000000000105",
|
||||
"targetPort": "00000000-0000-0000-0000-000000000121"
|
||||
},
|
||||
{
|
||||
"id": "00000000-0000-0000-0000-00000000F002",
|
||||
"sourceNode": "00000000-0000-0000-0000-000000000102",
|
||||
"sourcePort": "00000000-0000-0000-0000-000000000112",
|
||||
"targetNode": "00000000-0000-0000-0000-000000000105",
|
||||
"targetPort": "00000000-0000-0000-0000-000000000122"
|
||||
},
|
||||
{
|
||||
"id": "00000000-0000-0000-0000-00000000F003",
|
||||
"sourceNode": "00000000-0000-0000-0000-000000000103",
|
||||
"sourcePort": "00000000-0000-0000-0000-000000000113",
|
||||
"targetNode": "00000000-0000-0000-0000-000000000105",
|
||||
"targetPort": "00000000-0000-0000-0000-000000000123"
|
||||
},
|
||||
{
|
||||
"id": "00000000-0000-0000-0000-00000000F004",
|
||||
"sourceNode": "00000000-0000-0000-0000-000000000104",
|
||||
"sourcePort": "00000000-0000-0000-0000-000000000114",
|
||||
"targetNode": "00000000-0000-0000-0000-000000000105",
|
||||
"targetPort": "00000000-0000-0000-0000-000000000124"
|
||||
}
|
||||
],
|
||||
"devices": {
|
||||
"00000000-0000-0000-0000-000000000101": {
|
||||
"ip": "192.168.0.20",
|
||||
"mask": "255.255.255.0",
|
||||
"dns": "192.168.0.10"
|
||||
},
|
||||
"00000000-0000-0000-0000-000000000102": {
|
||||
"ip": "192.168.0.10",
|
||||
"mask": "255.255.255.0",
|
||||
"dns": "192.168.0.11"
|
||||
},
|
||||
"00000000-0000-0000-0000-000000000103": {
|
||||
"ip": "192.168.0.11",
|
||||
"mask": "255.255.255.0"
|
||||
},
|
||||
"00000000-0000-0000-0000-000000000104": {
|
||||
"ip": "192.168.0.21",
|
||||
"mask": "255.255.255.0",
|
||||
"dns": "192.168.0.99"
|
||||
}
|
||||
},
|
||||
"dnsServers": {
|
||||
"00000000-0000-0000-0000-000000000102": {
|
||||
"records": [
|
||||
"web.filius.de A 192.168.0.30",
|
||||
"filius.de MX mail.filius.de",
|
||||
"mail.filius.de A 192.168.0.31",
|
||||
"schule.de NS ns.schule.de",
|
||||
"ns.schule.de A 192.168.0.11",
|
||||
"filius.de NS ns.filius.de",
|
||||
"ns.filius.de A 192.168.0.10"
|
||||
],
|
||||
"recursive": true
|
||||
},
|
||||
"00000000-0000-0000-0000-000000000103": {
|
||||
"records": [
|
||||
"www.schule.de A 192.168.0.40"
|
||||
]
|
||||
}
|
||||
},
|
||||
"steps": []
|
||||
}
|
||||
Reference in New Issue
Block a user