From 495c449ef23519cf7969cf4db8ce3edc476e2e60 Mon Sep 17 00:00:00 2001 From: Julian Kiedaisch Date: Fri, 2 Oct 2026 08:03:10 +0000 Subject: [PATCH] feat(core): the command line's network commands ping, host, nslookup, arp and netstat after Java, measured against Java TerminalRun types lines into Java's command line on terminal-net at set times; the engine types the same lines. New in the engine: an ICMP echo in a program's thread (the first ICMP message after the send, whatever it is), Java's route choice, the ARP table with Java's broadcast row, DNS in a program's thread, ICMP broadcasts of a node's own network, and an ARP wait that ends after what else happens at that millisecond. Departures from Java: an echo is answered from the address asked (RFC 792), network unreachable carries the packet with its sender, ping names the host and takes only -b before it, arp and netstat list in the order learned, netstat lists a UDP server's listening socket only. Co-Authored-By: Claude Opus 5.5 --- CHANGES.md | 7 +- packages/core/src/runtime/apps/terminal.ts | 246 +- .../core/src/runtime/apps/terminalTexts.ts | 2 + packages/core/src/runtime/engine.ts | 212 +- .../scenarios/terminal-java-arp.java.json | 2206 ++++++ .../scenarios/terminal-java-dns.java.json | 5025 +++++++++++++ .../terminal-java-dnsTimeout.java.json | 2191 ++++++ .../terminal-java-interrupt.java.json | 1718 +++++ .../scenarios/terminal-java-netstat.java.json | 2241 ++++++ .../terminal-java-pingBroadcast.java.json | 6283 +++++++++++++++++ .../terminal-java-pingErrors.java.json | 2041 ++++++ .../scenarios/terminal-java-pingLan.java.json | 1076 +++ .../terminal-java-pingNobody.java.json | 3946 +++++++++++ .../terminal-java-pingRouted.java.json | 3242 +++++++++ .../terminal-java-pingSelf.java.json | 210 + .../terminal-java-pingUnreachable.java.json | 2436 +++++++ .../test/scenarios/terminal-net.scenario.json | 202 + packages/core/test/terminal.test.ts | 5 + packages/core/test/terminalJava.test.ts | 411 ++ tools/java-oracle/README.md | 68 + tools/java-oracle/run.sh | 14 +- tools/java-oracle/src/TerminalRun.java | 254 + 22 files changed, 33994 insertions(+), 42 deletions(-) create mode 100644 packages/core/test/scenarios/terminal-java-arp.java.json create mode 100644 packages/core/test/scenarios/terminal-java-dns.java.json create mode 100644 packages/core/test/scenarios/terminal-java-dnsTimeout.java.json create mode 100644 packages/core/test/scenarios/terminal-java-interrupt.java.json create mode 100644 packages/core/test/scenarios/terminal-java-netstat.java.json create mode 100644 packages/core/test/scenarios/terminal-java-pingBroadcast.java.json create mode 100644 packages/core/test/scenarios/terminal-java-pingErrors.java.json create mode 100644 packages/core/test/scenarios/terminal-java-pingLan.java.json create mode 100644 packages/core/test/scenarios/terminal-java-pingNobody.java.json create mode 100644 packages/core/test/scenarios/terminal-java-pingRouted.java.json create mode 100644 packages/core/test/scenarios/terminal-java-pingSelf.java.json create mode 100644 packages/core/test/scenarios/terminal-java-pingUnreachable.java.json create mode 100644 packages/core/test/scenarios/terminal-net.scenario.json create mode 100644 packages/core/test/terminalJava.test.ts create mode 100644 tools/java-oracle/src/TerminalRun.java diff --git a/CHANGES.md b/CHANGES.md index ffff33b..0f36366 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -13,7 +13,7 @@ Swift-Pfade relativ zu `filius-ipad/ios/FiliusPad/TopologyEditor/` (Stand | `src/model/link.ts`, `src/model/graph.ts` | `Model/TopologyLink.swift`, `Model/TopologyGraph.swift` | übertragen, bisher nur die Daten (Abfragen folgen mit dem Editor) | | `src/model/documentation.ts` | `Model/TopologyDocumentation.swift` | übertragen; FNV-Kennung mit BigInt, gegen die IDs aus dem Swift-Import geprüft | | `src/runtime/config.ts` | `State/TopologyEditorState.swift` (Laufzeit-Konfigurationen, WLAN eines Rechners, DHCP, Portweiterleitung, Remote Link ohne LAN-Transport, Programme und ihre Konfiguration, Firewall, DNS-Einträge aus `State/TopologyDNSResolver.swift`, E-Mail-Konten und -Nachrichten aus `State/TopologyEmail.swift`); dazu Echo-Server- und Client-Konfiguration, die Swift nicht speichert | übertragen; Java-Beschriftungen der Oberfläche weggelassen | -| `src/runtime/engine.ts` | `State/TopologyNetworkRuntimeEngine.swift` Z. ~313–3585, ~4472–5187 (UDP), ~4753–4850 | übertragen: Warteschlange, Uhr, Ethernet, Switch, ARP, IPv4, ICMP, Routing, Firewall, UDP-Sockets (binden, freie Ports nach Javas Zufall, senden samt Broadcast, zustellen, empfangen mit Wartezeit, schließen), TCP (Z. ~5187–5913: Server- und Client-Sockets, Handschlag mit Ergebnis, Segmente zu 1460 Byte bis zum PSH, höchstens drei Versuche, Abbau über alle Java-Zustände samt `TIME_WAIT`; seit F2.3c nach Javas `TCPSocket` an Java-Filius gemessen: je Versuch und für `TIME_WAIT` 3 RTT nach der Geschwindigkeit (8250 ms bei 90 %, Swift fest 7500 bzw. 2500 ms), der Zeitablauf zählt ab der Übergabe des Segments, vor ARP; ein Segment beendet `TIME_WAIT`; die Gegenseite schließt beim FIN von selbst; nicht bestätigte Daten schließen mit FIN statt sofort; der angenommene Socket hat die Startnummer des Listeners, der Listener eine neue. seit F2.3e wie Java: SYN+ACK und FIN gehen nie ein zweites Mal hinaus; der Server gibt einen Handschlag nach 3 RTT auf und schließt mit FIN; nach dem FIN wartet ein Socket höchstens fünfmal 3 RTT, jedes Segment beendet eine Wartezeit, dann CLOSED (Java lässt den Zustand stehen). Abweichend von Java: drei SYN statt einem, weil Javas Wiederholungsschleife nach dem ersten Zeitablauf abbricht, und ein wiederholtes SYN in `SYN_RCVD` bekommt das SYN+ACK noch einmal, statt den Socket zu schließen), DHCP (Z. ~5913–6694: Server mit festen Zuordnungen, Adressbereich, Angeboten, Leases und Sperrliste; Client seit F2.3b nach Javas `DHCPClient` neu gebaut und an Java-Filius gemessen: je Versuch eine Nachricht, eine Antwort, die nicht passt, wird gelesen und verworfen; die ARP-Prüfung wartet eine RTT, eine Antwort für die Adresse beendet sie sofort, dann DECLINE; nach einem Zeitablauf wiederholt der Zustand seine Nachricht, nach dem fünften nimmt der Client eine Link-Local-Adresse `169.254.1.x/16` (ARP-Probe, ARP-Reply an alle) und gibt keine alte Adresse zurück; Swift sendete doppelt, wartete nicht auf ARP und kehrte nach zehn Versuchen zur alten Adresse zurück. Abweichend von Java: Nach fünf belegten Link-Local-Adressen gibt der Client auf (Java sucht endlos), und ein ARP-Paket für eine andere Adresse beendet die Prüfung nicht. Seit F2.3d befördert ein Kabel einen Frame nach dem anderen wie Javas `SimplexVerbindung` (ein Frame wartet im Ausgangspuffer, bis der vorige angekommen ist, und erscheint im Protokoll, wenn er losgeht); Swift schickt alle zugleich, die Option `swiftCables` behält das für den Swift-Vergleich. Die RTT der DHCP-Zeiten (Warten, Angebote, Sperrliste) folgt wie in Java der Geschwindigkeit (50 Kabel, 2750 ms bei 90 %); Swift rechnet fest mit 2500 ms. ARP seit F2.4b nach Javas `holeARPTabellenEintrag`, an Java-Filius gemessen: eine Auflösung fragt, wartet eine RTT, fragt ein zweites Mal und gibt nach einer weiteren RTT auf; dann „Host unreachable" beim Absender selbst oder vom Router zurück (bei ICMP nur für Echo-Anfragen); ein wartender Absender wacht nach den übrigen Ereignissen desselben Zeitpunkts auf; der Ping wartet danach eine RTT auf die Antwort. Swift schickt in der Ereignisverarbeitung beide Anfragen zugleich und lässt das Paket ohne Ende warten, wenn die Adresse irgendwo im Netz vorkommt (Wissen, das kein Knoten hat), und blockiert direkte Aufrufe ohne Wartezeit; die Option `swiftArp` behält das für den Swift-Vergleich. Seit F2.4b-2 kehrt ein Senden wie in Java sofort zurück, die Frames reisen, während die Uhr läuft (Swift: der Aufruf kehrt erst zurück, wenn alle Frames angekommen sind; die Option `swiftSends` behält das für den Swift-Vergleich), und UDP und TCP senden über Javas Transport-Thread je Knoten und Protokoll: ein Segment nach dem anderen; solange IP auf ARP wartet, blockiert das nächste `senden`. Wartende Absender kommen in der Reihenfolge an die Reihe, in der sie kamen (Javas Sperre überlässt das dem Zufall). Seit F2.4b-3 geht jedes ankommende Paket wie in Java durch den IP-Thread (UDP, TCP) oder den ICMP-Thread (ICMP) seines Knotens: zustellen, Echo-Reply, weiterleiten, eins nach dem anderen; solange ARP wartet, warten die folgenden. Abweichend von Java weckt eine ARP-Antwort alle, die auf die Adresse warten (Javas `notify` weckt einen beliebigen). DNS seit F2.4a nach Javas `DNSServer`/`Resolver`, an Java-Filius gemessen: Server auf Port 53 mit Einträgen aus dem Modell (die Antwort wiederholt die Frage nicht, RCODE immer 0, ein Verweis mit NS und A im Antwortteil), iterativer Resolver mit 5 RTT je Anfrage, der nur die Server behält, an die er verwiesen wurde; seit F2.4c auf den Ereignissen statt blockierend und mit rekursivem Server nach `DNSServer.answerWithRemoteData` (Nameserver der Zone, dann der eigene DNS-Server, sonst Verweis), abweichend von Java fragt er sich nie selbst (Java endlos). Gateway-NAT seit F2.6 (Z. ~3585–3900) nach Javas `filius.software.nat`, an Java-Filius gemessen: die Übersetzung vor dem IP-Thread (wie Javas NAT-Threads zwischen Karte und Ethernet), ausgehend WAN-Adresse und der Port des Eintrags (ICMP behält die Kennung), eingehend nach Gegenstelle, Port und Protokoll, sonst nach der Portweiterleitung (legt einen dynamischen Eintrag an), ein Ping an die WAN-Adresse beantwortet der Heimrouter, Pakete von außen an das LAN verschwinden, beide Seiten durch die Firewall des Heimrouters, ausgehend TTL 1 bekommt „Zeit überschritten“; dynamische Einträge verfallen nach 300 s mal Javas Verzögerungsfaktor (Swift fest 300 s), aufgefrischt nur eingehend, seit 01.10.2026 genau in diesem Alter (Java findet sie erst bei seiner sekündlichen Prüfung, bis zu 1 s später; so auch der Switch: Javas `checkSAT` prüft jede Sekunde, der Kern verfällt genau zur Lernzeit); der Heimrouter leitet weiter wie ein Router. Abweichend von Java: ein LAN-Endpunkt bekommt für jede neue Gegenstelle einen Eintrag auf demselben WAN-Port (Java behält nur den für die erste, die Antworten weiterer bleiben am Heimrouter hängen). RIP seit F2.5a (Z. ~4700–5090) nach Javas `filius.software.rip`, seit F2.5b an Java-Filius gemessen (die Pause in Javas `float`-Rechnung): eine Route mit 0 Hops je eigenem Netz, die nie verfällt; der erste Beacon nach einer Sekunde, dann alle 25,2–35,2 s aus einem Zufall je Router (Java: ein ungesetzter `Random` je Router; der Kern setzt ihn aus Szenario und Router-ID, `ripSeed`; Swift: ein Zufall für alle); eine Nachricht je Schnittstelle ohne die Routen über sie (Split Horizon); eine neue Route oder mehr Hops vom selben Router senden sofort; eine gelernte Route wird genau nach ihren 75 s auf 16 gesetzt und sofort gemeldet (Java erst beim nächsten eigenen Beacon, bis zu gut 30 s später; Swift bei jedem Ereignis; seit 01.10.2026, vorher wie Java); Nachrichten von jedem Quellport (Swift: nur 521); ein RIP-Router leitet nur nach seiner Tabelle weiter, wenige Hops vor langer Maske. `receiveUdp` kehrt wie Javas `empfangen` zurück, sobald ein Datagramm da ist. Seit der Abnahme F2 nach Javas `ARPThread`: ein Eintrag entsteht nur aus einer Anfrage nach der eigenen Adresse oder aus einer Antwort (Swift: aus jedem Paket; `swiftArp` behält das), ein Paket von der Netzadresse wird verworfen; ein Rechner leitet weiter, wenn seine IP-Weiterleitung an ist (`ipForwardingByNodeId`). Seit F2.8b nach Javas Tabellen gemessen: eine ARP-Anfrage trägt als Ziel-MAC die Broadcast-Adresse (Swift: Nullen; `swiftArp` behält sie), eine ICMP-Fehlermeldung Identifier und Sequenznummer 0 (RFC 792, Java; Swift kopiert die des Echos, ein Ping erkennt die Meldung am eingebetteten Echo), und „Host nicht erreichbar“ vom Router trägt das Paket, wie er es weitergeleitet hat (TTL gesenkt). Die Broadcast-Adresse schreibt sie immer groß (Java in der Antwort an 0.0.0.0 klein). Den Mitschnitt je Karte (`capture.ts`) schreibt sie seit F2.8a dort, wo Java ihn schreibt: beim Abgang auf das Kabel und bei der Ankunft an der Karte. Seit F3.4a läuft die Befehlszeile mit (`terminal`, auf den Dateien des Knotens). Seit F3.3b läuft das E-Mail-Programm mit (`emailClient`), seine gesendeten und abgeholten Mails stehen im Schnappschuss (`emailClientsByNodeId`); ein Programm-Thread kann MX nachschlagen (`resolveDnsMailServerSteps`). Seit F3.3a läuft der E-Mail-Server mit (`emailServer`); was er annimmt oder löscht, steht im Schnappschuss (`emailServersByNodeId`), aus dem es zurück ins Projekt geht; die Uhrzeit für seine Benachrichtigungen kommt aus der Option `wallClock`. Seit F3.2c ändert die Seite `konfig` der Router und Heimrouter die Firewall zur Laufzeit; die Änderung steht im Schnappschuss (`firewallConfiguration`), aus dem sie zurück ins Projekt geht. Seit F3.2b starten Router und Heimrouter ihren Webserver auf Port 80 mit Javas Seiten (Javas Server lauscht wegen eines Wettlaufs in `setAktiv` manchmal nie, der Kern immer; `swiftRouters` lässt ihn für den Swift-Vergleich weg), die Firewall führt ein Protokoll je Knoten (Regeltreffer bei TCP und UDP, verworfenes ICMP), das wie Javas Protokollseite einen Neustart überlebt, eine RIP-Route kennt die öffentliche Adresse des meldenden Routers (`hopPublicIp`), und TCP zählt Sequenznummern und Segmentgröße wie Java in Zeichen (UTF-16-Einheiten) statt in Bytes, ohne ein Zeichenpaar zu zerreißen; Bytes, die kein Text sind, zählen als Bytes. Seit F3.2a schließt ein Programm wie Javas `schliessen()` nur auf Bitte (`requestTcpClose`): Das FIN geht zur selben Zeit, nach dem, was der Programm-Thread noch tut. Seit F3.1 laufen Verbinden, Senden, Empfangen und Annehmen auch als Schritte eines Programm-Threads (`connectTcpSteps`, `sendTcpSteps`, `receiveTcpSteps`, `acceptTcpSteps`, `resolveHostSteps`); die blockierenden Aufrufe sind nur noch eine Hülle darum. Abweichend von Java: Ein Verbindungsaufbau ohne Route scheitert sofort (Javas Socket-Thread stirbt an der `RouteNotFoundException`, `verbinden` wartet ewig), eine Nachricht, die vor dem Schließen ankam, wird noch ausgegeben (Java verwirft sie), und Senden unterscheidet wie Java „nicht verbunden", „unterbrochen" und „Zeitüberschreitung". WLAN seit F2.7 an Java-Filius gemessen: zur Laufzeit ist ein Funkkabel ein Kabel wie jedes andere, und eine SSID verbindet nichts (nach ihr legt nur Javas Editor das Funkkabel, `JHostKonfiguration.updateWifiConnection`); Swifts Verbindung über die SSID zur Laufzeit, auch ohne Kabel (`wirelessAssociations`), nicht übernommen. Klasse statt Werttyp. Noch nicht übertragen (wirft `NotPortedError`): Remote Link | +| `src/runtime/engine.ts` | `State/TopologyNetworkRuntimeEngine.swift` Z. ~313–3585, ~4472–5187 (UDP), ~4753–4850 | übertragen: Warteschlange, Uhr, Ethernet, Switch, ARP, IPv4, ICMP, Routing, Firewall, UDP-Sockets (binden, freie Ports nach Javas Zufall, senden samt Broadcast, zustellen, empfangen mit Wartezeit, schließen), TCP (Z. ~5187–5913: Server- und Client-Sockets, Handschlag mit Ergebnis, Segmente zu 1460 Byte bis zum PSH, höchstens drei Versuche, Abbau über alle Java-Zustände samt `TIME_WAIT`; seit F2.3c nach Javas `TCPSocket` an Java-Filius gemessen: je Versuch und für `TIME_WAIT` 3 RTT nach der Geschwindigkeit (8250 ms bei 90 %, Swift fest 7500 bzw. 2500 ms), der Zeitablauf zählt ab der Übergabe des Segments, vor ARP; ein Segment beendet `TIME_WAIT`; die Gegenseite schließt beim FIN von selbst; nicht bestätigte Daten schließen mit FIN statt sofort; der angenommene Socket hat die Startnummer des Listeners, der Listener eine neue. seit F2.3e wie Java: SYN+ACK und FIN gehen nie ein zweites Mal hinaus; der Server gibt einen Handschlag nach 3 RTT auf und schließt mit FIN; nach dem FIN wartet ein Socket höchstens fünfmal 3 RTT, jedes Segment beendet eine Wartezeit, dann CLOSED (Java lässt den Zustand stehen). Abweichend von Java: drei SYN statt einem, weil Javas Wiederholungsschleife nach dem ersten Zeitablauf abbricht, und ein wiederholtes SYN in `SYN_RCVD` bekommt das SYN+ACK noch einmal, statt den Socket zu schließen), DHCP (Z. ~5913–6694: Server mit festen Zuordnungen, Adressbereich, Angeboten, Leases und Sperrliste; Client seit F2.3b nach Javas `DHCPClient` neu gebaut und an Java-Filius gemessen: je Versuch eine Nachricht, eine Antwort, die nicht passt, wird gelesen und verworfen; die ARP-Prüfung wartet eine RTT, eine Antwort für die Adresse beendet sie sofort, dann DECLINE; nach einem Zeitablauf wiederholt der Zustand seine Nachricht, nach dem fünften nimmt der Client eine Link-Local-Adresse `169.254.1.x/16` (ARP-Probe, ARP-Reply an alle) und gibt keine alte Adresse zurück; Swift sendete doppelt, wartete nicht auf ARP und kehrte nach zehn Versuchen zur alten Adresse zurück. Abweichend von Java: Nach fünf belegten Link-Local-Adressen gibt der Client auf (Java sucht endlos), und ein ARP-Paket für eine andere Adresse beendet die Prüfung nicht. Seit F2.3d befördert ein Kabel einen Frame nach dem anderen wie Javas `SimplexVerbindung` (ein Frame wartet im Ausgangspuffer, bis der vorige angekommen ist, und erscheint im Protokoll, wenn er losgeht); Swift schickt alle zugleich, die Option `swiftCables` behält das für den Swift-Vergleich. Die RTT der DHCP-Zeiten (Warten, Angebote, Sperrliste) folgt wie in Java der Geschwindigkeit (50 Kabel, 2750 ms bei 90 %); Swift rechnet fest mit 2500 ms. ARP seit F2.4b nach Javas `holeARPTabellenEintrag`, an Java-Filius gemessen: eine Auflösung fragt, wartet eine RTT, fragt ein zweites Mal und gibt nach einer weiteren RTT auf; dann „Host unreachable" beim Absender selbst oder vom Router zurück (bei ICMP nur für Echo-Anfragen); ein wartender Absender wacht nach den übrigen Ereignissen desselben Zeitpunkts auf; der Ping wartet danach eine RTT auf die Antwort. Swift schickt in der Ereignisverarbeitung beide Anfragen zugleich und lässt das Paket ohne Ende warten, wenn die Adresse irgendwo im Netz vorkommt (Wissen, das kein Knoten hat), und blockiert direkte Aufrufe ohne Wartezeit; die Option `swiftArp` behält das für den Swift-Vergleich. Seit F2.4b-2 kehrt ein Senden wie in Java sofort zurück, die Frames reisen, während die Uhr läuft (Swift: der Aufruf kehrt erst zurück, wenn alle Frames angekommen sind; die Option `swiftSends` behält das für den Swift-Vergleich), und UDP und TCP senden über Javas Transport-Thread je Knoten und Protokoll: ein Segment nach dem anderen; solange IP auf ARP wartet, blockiert das nächste `senden`. Wartende Absender kommen in der Reihenfolge an die Reihe, in der sie kamen (Javas Sperre überlässt das dem Zufall). Seit F2.4b-3 geht jedes ankommende Paket wie in Java durch den IP-Thread (UDP, TCP) oder den ICMP-Thread (ICMP) seines Knotens: zustellen, Echo-Reply, weiterleiten, eins nach dem anderen; solange ARP wartet, warten die folgenden. Abweichend von Java weckt eine ARP-Antwort alle, die auf die Adresse warten (Javas `notify` weckt einen beliebigen). DNS seit F2.4a nach Javas `DNSServer`/`Resolver`, an Java-Filius gemessen: Server auf Port 53 mit Einträgen aus dem Modell (die Antwort wiederholt die Frage nicht, RCODE immer 0, ein Verweis mit NS und A im Antwortteil), iterativer Resolver mit 5 RTT je Anfrage, der nur die Server behält, an die er verwiesen wurde; seit F2.4c auf den Ereignissen statt blockierend und mit rekursivem Server nach `DNSServer.answerWithRemoteData` (Nameserver der Zone, dann der eigene DNS-Server, sonst Verweis), abweichend von Java fragt er sich nie selbst (Java endlos). Gateway-NAT seit F2.6 (Z. ~3585–3900) nach Javas `filius.software.nat`, an Java-Filius gemessen: die Übersetzung vor dem IP-Thread (wie Javas NAT-Threads zwischen Karte und Ethernet), ausgehend WAN-Adresse und der Port des Eintrags (ICMP behält die Kennung), eingehend nach Gegenstelle, Port und Protokoll, sonst nach der Portweiterleitung (legt einen dynamischen Eintrag an), ein Ping an die WAN-Adresse beantwortet der Heimrouter, Pakete von außen an das LAN verschwinden, beide Seiten durch die Firewall des Heimrouters, ausgehend TTL 1 bekommt „Zeit überschritten“; dynamische Einträge verfallen nach 300 s mal Javas Verzögerungsfaktor (Swift fest 300 s), aufgefrischt nur eingehend, seit 01.10.2026 genau in diesem Alter (Java findet sie erst bei seiner sekündlichen Prüfung, bis zu 1 s später; so auch der Switch: Javas `checkSAT` prüft jede Sekunde, der Kern verfällt genau zur Lernzeit); der Heimrouter leitet weiter wie ein Router. Abweichend von Java: ein LAN-Endpunkt bekommt für jede neue Gegenstelle einen Eintrag auf demselben WAN-Port (Java behält nur den für die erste, die Antworten weiterer bleiben am Heimrouter hängen). RIP seit F2.5a (Z. ~4700–5090) nach Javas `filius.software.rip`, seit F2.5b an Java-Filius gemessen (die Pause in Javas `float`-Rechnung): eine Route mit 0 Hops je eigenem Netz, die nie verfällt; der erste Beacon nach einer Sekunde, dann alle 25,2–35,2 s aus einem Zufall je Router (Java: ein ungesetzter `Random` je Router; der Kern setzt ihn aus Szenario und Router-ID, `ripSeed`; Swift: ein Zufall für alle); eine Nachricht je Schnittstelle ohne die Routen über sie (Split Horizon); eine neue Route oder mehr Hops vom selben Router senden sofort; eine gelernte Route wird genau nach ihren 75 s auf 16 gesetzt und sofort gemeldet (Java erst beim nächsten eigenen Beacon, bis zu gut 30 s später; Swift bei jedem Ereignis; seit 01.10.2026, vorher wie Java); Nachrichten von jedem Quellport (Swift: nur 521); ein RIP-Router leitet nur nach seiner Tabelle weiter, wenige Hops vor langer Maske. `receiveUdp` kehrt wie Javas `empfangen` zurück, sobald ein Datagramm da ist. Seit der Abnahme F2 nach Javas `ARPThread`: ein Eintrag entsteht nur aus einer Anfrage nach der eigenen Adresse oder aus einer Antwort (Swift: aus jedem Paket; `swiftArp` behält das), ein Paket von der Netzadresse wird verworfen; ein Rechner leitet weiter, wenn seine IP-Weiterleitung an ist (`ipForwardingByNodeId`). Seit F2.8b nach Javas Tabellen gemessen: eine ARP-Anfrage trägt als Ziel-MAC die Broadcast-Adresse (Swift: Nullen; `swiftArp` behält sie), eine ICMP-Fehlermeldung Identifier und Sequenznummer 0 (RFC 792, Java; Swift kopiert die des Echos, ein Ping erkennt die Meldung am eingebetteten Echo), und „Host nicht erreichbar“ vom Router trägt das Paket, wie er es weitergeleitet hat (TTL gesenkt). Die Broadcast-Adresse schreibt sie immer groß (Java in der Antwort an 0.0.0.0 klein). Den Mitschnitt je Karte (`capture.ts`) schreibt sie seit F2.8a dort, wo Java ihn schreibt: beim Abgang auf das Kabel und bei der Ankunft an der Karte. Seit F3.4a läuft die Befehlszeile mit (`terminal`, auf den Dateien des Knotens). Seit F3.4b nach Javas `ICMP`/`ICMPThread`, an Java-Filius gemessen: ein Echo im Programm-Thread (`icmpEchoSteps`: Warteschlange leeren, senden mit ARP-Wartezeit, eine RTT auf die erste ICMP-Nachricht warten, gleich welche), ein ICMP-Paket an den Broadcast eines eigenen Netzes geht mit TTL 1 an alle und wird von dort beantwortet, einer für ein fremdes Netz verworfen; Javas Routenwahl (`routeRow`), die ARP-Tabelle mit Javas Broadcast-Zeile (`arpTable`, `removeArpEntry`, `resetArpTable`), DNS im Programm-Thread mit Antwort- und Autoritätsteil (`resolveDnsSteps`), ein UDP-Socket weiß, dass er ohne Gegenstelle lauscht (`listening`); ein Rechner nimmt Pakete an 127.0.0.1 an. Eine ARP-Wartezeit endet wie Javas `wait` nach allem, was zur selben Zeit sonst geschieht (eine Antwort zur selben Millisekunde zählt noch). Abweichend von Java: eine Echo-Antwort kommt von der gefragten Adresse (RFC 792; Java antwortet von 127.0.0.1, wenn die eigene Adresse gefragt war, und von der nahen Karte, wenn die ferne eines Routers gefragt war), und „Netz nicht erreichbar“ vom Router trägt wie „Host nicht erreichbar“ das Paket, wie er es weitergeleitet hätte, mit Absender (Java bettet ein halb gebautes ohne Absender ein). Seit F3.3b läuft das E-Mail-Programm mit (`emailClient`), seine gesendeten und abgeholten Mails stehen im Schnappschuss (`emailClientsByNodeId`); ein Programm-Thread kann MX nachschlagen (`resolveDnsMailServerSteps`). Seit F3.3a läuft der E-Mail-Server mit (`emailServer`); was er annimmt oder löscht, steht im Schnappschuss (`emailServersByNodeId`), aus dem es zurück ins Projekt geht; die Uhrzeit für seine Benachrichtigungen kommt aus der Option `wallClock`. Seit F3.2c ändert die Seite `konfig` der Router und Heimrouter die Firewall zur Laufzeit; die Änderung steht im Schnappschuss (`firewallConfiguration`), aus dem sie zurück ins Projekt geht. Seit F3.2b starten Router und Heimrouter ihren Webserver auf Port 80 mit Javas Seiten (Javas Server lauscht wegen eines Wettlaufs in `setAktiv` manchmal nie, der Kern immer; `swiftRouters` lässt ihn für den Swift-Vergleich weg), die Firewall führt ein Protokoll je Knoten (Regeltreffer bei TCP und UDP, verworfenes ICMP), das wie Javas Protokollseite einen Neustart überlebt, eine RIP-Route kennt die öffentliche Adresse des meldenden Routers (`hopPublicIp`), und TCP zählt Sequenznummern und Segmentgröße wie Java in Zeichen (UTF-16-Einheiten) statt in Bytes, ohne ein Zeichenpaar zu zerreißen; Bytes, die kein Text sind, zählen als Bytes. Seit F3.2a schließt ein Programm wie Javas `schliessen()` nur auf Bitte (`requestTcpClose`): Das FIN geht zur selben Zeit, nach dem, was der Programm-Thread noch tut. Seit F3.1 laufen Verbinden, Senden, Empfangen und Annehmen auch als Schritte eines Programm-Threads (`connectTcpSteps`, `sendTcpSteps`, `receiveTcpSteps`, `acceptTcpSteps`, `resolveHostSteps`); die blockierenden Aufrufe sind nur noch eine Hülle darum. Abweichend von Java: Ein Verbindungsaufbau ohne Route scheitert sofort (Javas Socket-Thread stirbt an der `RouteNotFoundException`, `verbinden` wartet ewig), eine Nachricht, die vor dem Schließen ankam, wird noch ausgegeben (Java verwirft sie), und Senden unterscheidet wie Java „nicht verbunden", „unterbrochen" und „Zeitüberschreitung". WLAN seit F2.7 an Java-Filius gemessen: zur Laufzeit ist ein Funkkabel ein Kabel wie jedes andere, und eine SSID verbindet nichts (nach ihr legt nur Javas Editor das Funkkabel, `JHostKonfiguration.updateWifiConnection`); Swifts Verbindung über die SSID zur Laufzeit, auch ohne Kabel (`wirelessAssociations`), nicht übernommen. Klasse statt Werttyp. Noch nicht übertragen (wirft `NotPortedError`): Remote Link | | `src/runtime/threads.ts` | Javas Threads der Programme (`Anwendung extends Thread`, `ServerMitarbeiter`) | neu (F3.1): ein Programm-Thread als Generator, der liefert, worauf er wartet (Bedingung, Zeit oder beides); die Engine setzt nach jedem Ereignis fort, wessen Warten vorbei ist, in der Reihenfolge, in der die Threads begannen; nichts blockiert die Engine. Abweichend von Java: ein Thread wacht sofort, wenn seine Bedingung gilt (Java sieht oft nur alle 100 ms nach) | | `src/runtime/apps/program.ts` | Java `filius.software.Anwendung` | neu (F3.1): die Zeilen im Fenster eines Programms (strukturiert, damit der Editor sie übersetzt) und der Befehls-Thread (`ausfuehren`) | | `src/runtime/apps/server.ts` | Java `ServerAnwendung`, `ServerMitarbeiter` | neu (F3.2a, aus `echo.ts` herausgelöst): was jeder Server teilt — ein Thread nimmt Verbindungen an, solange er eingeschaltet ist, je Verbindung einer beantwortet jede Nachricht; ausgeschaltet schließt er Socket und Verbindungen; Port belegt → er schaltet sich aus; seit F3.3a kann ein Server das Gespräch einer Verbindung selbst führen (`converse`: Begrüßung, keine oder mehrere Antworten, Schließen) | @@ -25,7 +25,7 @@ Swift-Pfade relativ zu `filius-ipad/ios/FiliusPad/TopologyEditor/` (Stand | `src/runtime/email.ts` | Java `filius.software.email.Email`, `AddressEntry`, `EmailUtils` | neu nach Java (F3.3a): Mails in Javas Textform (From, To, Cc, Subject, Date Received, Leerzeile, Text; kein Bcc), Adressen „Name “, Javas Größe einer Mail für POP3. Abweichend von Java: der Kopf endet an seiner Leerzeile, ein unbekanntes Feld wird übergangen (Java beendet dort den Kopf und liest die folgenden Felder als Text), eine Zeile ohne Feld beginnt den Text (Java verwirft sie) | | `src/runtime/apps/emailServer.ts` | Java `EmailServer`, `SMTPServer`, `SMTPMitarbeiter`, `POP3Server`, `POP3Mitarbeiter`, `EmailKonto` | neu nach Java (F3.3a): Konten einer Domain, SMTP auf Port 25 speichert Mails an eigene Konten (wie Java neu gelesen) und schickt bei unbekannten Empfängern eine Benachrichtigung an einen Absender der Domain, POP3 auf Port 110 gibt Mails ab 0 nummeriert aus; beide zusammen ein- und ausgeschaltet, POP3 zuerst; SMTP-Antworten in der Sprache des Projekts; Fensterzeilen wie Java. An Java-Filius gemessen (`EmailRun`, `MailCases`). Abweichend von Java: nach einer Mail ist der Umschlag neu (Java antwortet dem nächsten Befehl 503 und behält Absender, Empfänger und Text); ein Befehl, den der Zustand nicht nimmt, bekommt 503 (Java schweigt), HELO beginnt neu; in DATA ist alles Text, auch `quit`; die Domain gilt in jeder Schreibweise; ein Empfänger ohne `@` ist unbekannt, ein leerer Absender bekommt keine Benachrichtigung (Java wirft), eine Benachrichtigung an eine Mail ohne From geht an den Absender des Umschlags (Java: `To: null`); POP3: eine Mail lässt sich mehrmals abrufen, eine fehlende Mail, `LIST` ohne Mails und falsche Argumente geben `-ERR` (Java: leere Mail, leere Antwort, Abbruch), `LIST n` listet die eine Mail, Nummern bleiben nach `DELE` (Javas `LIST` zählt neu), vor der Anmeldung `-ERR unknown command`, `QUIT` immer `+OK`. Seit F3.3b leitet der Server Mails an fremde Domains per MX weiter (in seinem eigenen Thread, je Weiterleitung ein neuer SMTP-Client) und schickt eine Benachrichtigung an einen fremden Absender mit leerem Absender an dessen Domain. Noch nicht: die Kontodatei `/mailserver/konten.txt` zur Laufzeit | | `src/runtime/apps/emailClient.ts` | Java `EmailAnwendung`, `SMTPClient`, `POP3Client`, das Senden aus `GUIApplicationEmailAnwendungWindow` | neu nach Java (F3.3b): das E-Mail-Programm sendet eine Mail an den SMTP-Server seines Kontos, eine Verbindung je Empfänger (An, Cc, Bcc), und holt die Mails seines Kontos vom POP3-Server (jede abgerufen, dann gelöscht); die Prüfungen des Fensters (kein Konto, Adresse, die Javas Muster nicht nimmt, kein Empfänger); Meldungen wie Javas Beobachter (Verbindung, versendet, getrennt, Ausnahmen); der SMTP-Client dient auch dem Server zum Weiterleiten. An Java-Filius gemessen (`EmailClientRun`). Abweichend von Java: der SMTP-Port des Kontos gilt (Java verbindet immer zu 25); drei SYN statt einem | -| `src/runtime/apps/terminal.ts`, `src/runtime/apps/terminalTexts.ts` | Java `filius.software.lokal.Terminal`, die Eingabe aus `GUIApplicationTerminalWindow`, die Texte `sw_terminal_*` und `terminal_msg*` des Bündels | neu nach Java (F3.4a): die Befehlszeile mit Javas Zerlegung der Eingabe, Verteilung nach dem Befehlsnamen und den lokalen Befehlen `ls`/`dir`, `cd`, `pwd`, `mkdir`, `touch`, `cp`/`copy`, `mv`/`move`, `rm`/`del`, `cat`/`type`, `test`, `help`, `ipconfig`, `route`; Texte in der Sprache des Projekts, aus dem von Java geladenen Bündel erzeugt. An Java-Filius gemessen (`TerminalCases`). Abweichend von Java: die Größe einer Textdatei sind ihre Zeichen (Java dekodiert Base64); ein fehlender Ordner ist für `ls` „nicht vorhanden“, `ls /` nennt die Wurzel; `cd` auf eine Datei, `touch`/`mkdir` in fehlenden Ordnern und `cp` auf einen Ordnernamen scheitern; `..` bleibt an der Wurzel; `rm` und `mv` nehmen absolute Pfade absolut, die Wurzel ist nicht löschbar, nach dem Löschen des Arbeitsordners gilt der nächste verbliebene darüber; `mv` auf die Datei selbst benennt sie um | +| `src/runtime/apps/terminal.ts`, `src/runtime/apps/terminalTexts.ts` | Java `filius.software.lokal.Terminal`, die Eingabe aus `GUIApplicationTerminalWindow`, die Texte `sw_terminal_*` und `terminal_msg*` des Bündels | neu nach Java (F3.4a): die Befehlszeile mit Javas Zerlegung der Eingabe, Verteilung nach dem Befehlsnamen und den lokalen Befehlen `ls`/`dir`, `cd`, `pwd`, `mkdir`, `touch`, `cp`/`copy`, `mv`/`move`, `rm`/`del`, `cat`/`type`, `test`, `help`, `ipconfig`, `route`; Texte in der Sprache des Projekts, aus dem von Java geladenen Bündel erzeugt. An Java-Filius gemessen (`TerminalCases`). Abweichend von Java: die Größe einer Textdatei sind ihre Zeichen (Java dekodiert Base64); ein fehlender Ordner ist für `ls` „nicht vorhanden“, `ls /` nennt die Wurzel; `cd` auf eine Datei, `touch`/`mkdir` in fehlenden Ordnern und `cp` auf einen Ordnernamen scheitern; `..` bleibt an der Wurzel; `rm` und `mv` nehmen absolute Pfade absolut, die Wurzel ist nicht löschbar, nach dem Löschen des Arbeitsordners gilt der nächste verbliebene darüber; `mv` auf die Datei selbst benennt sie um. Seit F3.4b die Netzbefehle `ping` (Strg+C über `interrupt`), `host`, `nslookup`, `arp` und `netstat`, mit Javas Laufmarken; ein unbekannter Befehl wird wie bei Java sofort gemeldet, auch während ein anderer läuft; an Java-Filius gemessen (`TerminalRun`). Abweichend von Java: `ping` nennt den Host, wo Java seinen ersten Parameter nennt (`-b` in der Statistik), und nimmt vor dem Host nur `-b` (Java nimmt jedes Wort und pingt einen Broadcast); `arp` und `netstat` listen in der Reihenfolge des Lernens bzw. Anlegens (Java: Reihenfolge einer `HashMap`); `netstat` zeigt von einem UDP-Server nur den lauschenden Socket (Java auch einen für jede je beantwortete Adresse, nie geschlossen) | | `src/runtime/apps/echo.ts` | Java `filius.software.clientserver` (`ServerBaustein`, `ServerBausteinMitarbeiter`, `ClientAnwendung`, `ClientBaustein`) | neu nach Java statt nach Swift (F3.1): Echo-Server (auf `server.ts`, sendet jede Nachricht zurück) und einfacher Client (verbinden über Adresse oder Namen, senden, empfangen, trennen), mit Javas Fensterzeilen. An Java-Filius gemessen. Abweichend von Java: Der Server merkt das Ausschalten, der Client die Verbindung sofort (Java alle 100 ms); ohne Route scheitert der Client sofort (Java wartet ewig ohne Meldung); ausgeschaltet bestätigt der Server noch das FIN seiner Verbindungen (Java gibt den Port frei, das FIN bleibt unbeantwortet) | | `src/runtime/dns.ts` | Java `filius.software.dns.DNSNachricht`, `Query`, `ResourceRecord` | neu nach Java statt nach Swift (Swift ersetzt Javas Textnachrichten durch `FILIUS-DNS-TYPED/1`): Kopfzeile `ID=… QR=… RCODE=… QDCOUNT=… …`, Frage- und Eintragszeilen, Suche nach Namen ohne Rücksicht auf Groß- und Kleinschreibung, NS der längsten Zone, sonst der Wurzel | | `src/runtime/ipv4.ts` | Engine `parseIPv4`/`sameSubnet` | übertragen | @@ -58,7 +58,8 @@ Swift-Pfade relativ zu `filius-ipad/ios/FiliusPad/TopologyEditor/` (Stand | `test/emailJava.test.ts`, `test/scenarios/mail-lan.scenario.json`, `test/scenarios/email-java-*.java.json` | — | neu (F3.3a): vier Abläufe mit dem E-Mail-Server gegen Java-Filius (`EmailRun`): SMTP, SMTP mit Fehlern und Benachrichtigung, POP3 zweimal angemeldet, POP3-Anmeldefehler; je Karte Frames, Zeiten, Tabellen, die Fensterzeilen von Server und Client und die Konten am Ende (das Datum der Benachrichtigung als Platzhalter) | | `test/emailClientJava.test.ts`, `test/scenarios/email-client-java-*.java.json` | — | neu (F3.3b): sechs Abläufe mit dem E-Mail-Programm und zwei Servern gegen Java-Filius (`EmailClientRun`): senden mit Weiterleitung, abholen, Server per Name und Benachrichtigungen von beiden Servern, falsches Passwort, kein Server, unbekannter Servername; je Karte Frames, Zeiten, Tabellen, die Meldungen von Programm und Servern, Posteingang, Gesendete und Konten am Ende; Javas 100-ms-Blick kostet je Verbindung (und je DNS-Antwort, auf die es so wartet) eine Periode Toleranz; ein benannter Java-Fehler (nur ein SYN); bei `byName` die Startnummern ohne die Million (Thread-Wettlauf in Java) | | `test/emailClient.test.ts` | — | neu (F3.3b): was das Fenster ablehnt, Bcc, der SMTP-Port des Kontos, eine ungültige Kontoadresse, eine Verbindung, die beim Warten endet, eine Mail ohne Absender aus dem Modell, die Ordner im Schnappschuss | -| `test/terminal.test.ts`, `test/terminal.cases.txt`, `test/terminal.{de,en}.java.json` | — | neu (F3.4a): 16 Fälle der Befehlszeile gegen Java-Filius (`TerminalCases`), je Zeile die Handlung des Fensters, was das Programm sagt, Arbeitsordner und alle Dateien, Deutsch und Englisch; Javas Größe von Textdateien überall als Java-Fehler korrigiert, dazu acht Fälle mit benannten Java-Fehlern (`JAVA_BUGS`); ein Bild bleibt beim Kopieren ein Bild | +| `test/terminal.test.ts`, `test/terminal.cases.txt`, `test/terminal.{de,en}.java.json` | — | neu (F3.4a): 16 Fälle der Befehlszeile gegen Java-Filius (`TerminalCases`), je Zeile die Handlung des Fensters, was das Programm sagt, Arbeitsordner und alle Dateien, Deutsch und Englisch; Javas Größe von Textdateien überall als Java-Fehler korrigiert, dazu acht Fälle mit benannten Java-Fehlern (`JAVA_BUGS`); ein Bild bleibt beim Kopieren ein Bild; jeder Text der Tabelle ist wörtlich Javas | +| `test/terminalJava.test.ts`, `test/scenarios/terminal-net.scenario.json`, `test/scenarios/terminal-java-*.java.json` | — | neu (F3.4b): zwölf Abläufe der Netzbefehle gegen Java-Filius (`TerminalRun`) auf einem LAN mit DNS-Server, Router und Rechner dahinter: `ping` im LAN, über den Router, ins Leere, hinter dem Router unerreichbar, ohne Route am Router, Broadcast, eigene Adresse, Fehler, Strg+C; `host` und `nslookup`, auch ohne erreichbaren DNS-Server; `arp`; `netstat` mit TCP-Verbindung und DNS-Server; je Karte die Frames samt Javas Tabellen, je Rechner Texte und Laufmarken mit Zeit; benannte Java-Fehler (`JAVA_BUGS`); die Reihenfolge der Antworten auf einen Broadcast ist ein Wettlauf von Javas Threads (je Sekunde als Menge verglichen); ein Wächter verwirft Aufnahmen, in denen Java sein Aufwecken verpasst hat; dazu neun Einzelfälle (Strg+C vor dem Start, fremde Echo-Antworten, gerundeter Verlust, Broadcast bei anderer Maske, zufälliger Identifier und sein Weiterzählen, gleich lange Routen) | | `test/apps.test.ts` | — | neu (F3.1): wie Threads aufwachen (nach dem Ereignis, nach einer Pause hinter den anderen, ein Weckruf nur für sein Warten, Reihenfolge des Beginns, kein Warten auf schon Geltendes), und was die Java-Abläufe nicht zeigen: belegter Port, Name über DNS und ohne DNS, keine Route, unbestätigtes Senden, Neustart, eine Nachricht vor dem Schließen | | `test/captureRows.test.ts` | — | neu (F2.8b): die Regeln der Tabelle, die kein Java-Lauf zeigt (GNT, POP3, SMTP, HTTP, Javas `trim`, ICMP-Fehler mit eingebettetem ICMP, Ansicht ohne Enden) | | `test/wlanJava.test.ts`, `test/scenarios/wlan-lan.scenario.json`, `test/scenarios/wlan-java-*.java.json` | — | neu: vier Pings gegen Java-Filius (`WlanRun`): über Funkkabel, über ein Kabel und an ein Notebook mit der SSID des Switches, aber ohne Kabel (ARP scheitert in Java wie im Kern); Frames, Abstände, Ergebnis und Dauer | diff --git a/packages/core/src/runtime/apps/terminal.ts b/packages/core/src/runtime/apps/terminal.ts index 5e45276..ad01cc6 100644 --- a/packages/core/src/runtime/apps/terminal.ts +++ b/packages/core/src/runtime/apps/terminal.ts @@ -1,10 +1,21 @@ // FILIUS' command line (filius.software.lokal.Terminal, with the input // handling of GUIApplicationTerminalWindow): a line's first word is the // command, the others its parameters; the program tells its window texts, -// in the project's language, as Java writes them. The files are the node's -// (the snapshot's file system, the same the project keeps). +// in the project's language, as Java writes them, and marks a command that +// runs on (ping, host, nslookup) busy and done. The files are the node's +// (the snapshot's file system, the same the project keeps); the network +// commands ask the engine (ARP table, sockets, DNS, ICMP echo). // -// Departures from Java (terminal.test.ts names each): +// Departures from Java on the network (terminalJava.test.ts names each): +// - ping names the host where Java names its first parameter (-b in the +// statistics of ping -b), and takes only -b before the host (Java takes +// any word, and pings a broadcast); +// - arp and netstat list their rows in the order learned or made (Java: a +// HashMap's order); netstat lists a UDP server's listening socket only +// (Java also a socket for each address and port it ever answered, never +// closed). +// +// Departures from Java on the files (terminal.test.ts names each): // - a text file's size is its length in characters (Java decodes the text as // Base64 and counts the bytes: "Hallo Welt" is 6); // - a folder that is not there is "not there" for ls (Java: "empty"), and @@ -25,13 +36,15 @@ import type { Id } from '../../ids.js'; import type { VirtualFileContent, VirtualFileSystem } from '../../model/virtualFileSystem.js'; import { entryName, parentPath } from '../../model/virtualFileSystem.js'; -import type { NetworkRuntimeEngine } from '../engine.js'; +import { javaIpCheck } from '../../util/javaIp.js'; +import { isBroadcastFrom, type NetworkRuntimeEngine, type SocketRecord } from '../engine.js'; import { javaTrim } from '../http.js'; -import type { Steps } from '../threads.js'; +import { pause, type Steps } from '../threads.js'; import { javaBase64 } from '../../util/javaBase64.js'; import { CommandThread, ProgramLog } from './program.js'; import type { PageLanguage } from './routerPages.js'; import { TERMINAL_TEXTS, type TerminalTextKey } from './terminalTexts.js'; +import { IP_ADDRESS_PATTERN } from './web.js'; /** What the command line tells its window: a text, or whether a command runs on (Java's Boolean). */ export type TerminalLogEntry = { readonly kind: 'text'; readonly text: string } | { readonly kind: 'busy'; readonly busy: boolean }; @@ -87,11 +100,48 @@ function evaluatedPath(path: string): string { /** A path's last part (Dateisystem.getBasename). */ const basenameOf = (path: string) => path.slice(path.lastIndexOf('/') + 1); +/** The commands Terminal has a method for; the others are unknown (terminal_msg2). */ +const COMMANDS = new Set([ + 'arp', + 'cat', + 'cd', + 'copy', + 'cp', + 'del', + 'dir', + 'help', + 'host', + 'ipconfig', + 'ls', + 'mkdir', + 'move', + 'mv', + 'netstat', + 'nslookup', + 'ping', + 'pwd', + 'rm', + 'route', + 'test', + 'touch', + 'type', +]); + +/** Information.getPingRepeat: the echoes a ping sends. */ +const PING_REPEAT = 4; + +/** A line of 40 dashes under arp's head and at its end. */ +const ARP_RULE = `${'-'.repeat(40)}\n`; + export class Terminal { readonly log: ProgramLog; private directoryValue = '/'; /** The program's thread (Anwendung.ausfuehren): one command after the other. */ private readonly commands: CommandThread; + /** Ctrl+C was pressed (Terminal.interrupted): a ping ends before its next echo. */ + private interrupted = false; + /** The last ICMP identifier, -1 before the first (Terminal.identifier). */ + private identifier = -1; constructor( private readonly engine: NetworkRuntimeEngine, @@ -135,16 +185,32 @@ export class Terminal { const [command, ...parameters] = words as [string, ...string[]]; if (command === 'exit') return 'exit'; if (command === 'reset' || command === 'cls') return 'clear'; + // terminalEingabeAuswerten, in the window's thread: an unknown command is told at once, even while another runs; + // a known one clears Ctrl+C and is handed to the program's thread. + if (!COMMANDS.has(command)) { + this.tell(`${this.text('terminal_msg2')}\n${this.text('terminal_msg3')}`); + return undefined; + } + this.interrupted = false; this.commands.hand(() => this.run(command, parameters)); this.engine.resumeThreads(); return undefined; } + /** The window's Ctrl+C (Terminal.setInterrupt). */ + interrupt(): void { + this.interrupted = true; + } + private tell(text: string): void { this.log.write({ kind: 'text', text }); } - /** Terminal.terminalEingabeAuswerten: the method of the command's name, if Java has one. */ + private busy(busy: boolean): void { + this.log.write({ kind: 'busy', busy }); + } + + /** In the program's thread (Anwendung.ausfuehren): the method of the command's name. */ private *run(command: string, parameters: readonly string[]): Steps { const local: Record void> = { cat: (each) => this.cat(each), @@ -166,12 +232,18 @@ export class Terminal { touch: (each) => this.touch(each), type: (each) => this.cat(each), }; - const handler = Object.hasOwn(local, command) ? local[command] : undefined; - if (handler === undefined) { - this.tell(`${this.text('terminal_msg2')}\n${this.text('terminal_msg3')}`); + const network: Record Steps> = { + host: (each) => this.host(each), + nslookup: (each) => this.nslookup(each), + ping: (each) => this.ping(each), + }; + if (Object.hasOwn(network, command)) { + yield* network[command]!(parameters); return; } - handler(parameters); + if (command === 'arp') return this.arp(parameters); + if (command === 'netstat') return this.netstat(); + local[command]!(parameters); } /** Terminal.usage: the command's usage, or the list of commands. */ @@ -360,4 +432,158 @@ export class Terminal { const table = rows.map((row) => `| ${[row.destinationNetwork, row.subnetMask, row.nextHop, row.interfaceIPAddress].map(cell).join('')}\n`).join(''); this.tell(this.text('sw_terminal_msg7') + table); } + + /** Terminal.setIdentifier: at random the first time, then one more each time. */ + private nextIdentifier(): number { + this.identifier = this.identifier === -1 ? this.engine.drawIcmpIdentifier() : this.identifier + 1; + return this.identifier; + } + + /** + * Terminal.ping: the host's address (by DNS for a name), then four echo + * requests, one a second, each waiting for the first ICMP message back; a + * broadcast only with -b. + */ + private *ping(parameters: readonly string[]): Steps { + let target: string; + let broadcast = false; + if (parameters.length === 1) { + target = parameters[0]!; + } else if (parameters.length === 2 && parameters[0] === '-b') { + target = parameters[1]!; + broadcast = true; + } else { + return this.usage('ping'); + } + let address = javaIpCheck(target) ?? undefined; + if (address === undefined) { + const resolution = yield* this.engine.resolveDnsAddressSteps(this.nodeId, target); + if (resolution.type === 'timedOut') return this.tell(`${this.text('sw_terminal_msg31')} (DNS)`); + address = resolution.address; + if (address === undefined) return this.tell(this.text('sw_terminal_msg30')); + } + const route = this.engine.routeRow(this.nodeId, address); + if (route === undefined) return this.tell(this.text('sw_terminal_msg52')); + if (!broadcast && isBroadcastFrom(address, route.interfaceIPAddress, route.subnetMask)) return this.tell(this.text('sw_terminal_msg53')); + + const identifier = this.nextIdentifier(); + this.busy(true); + this.tell(`PING ${target} (${address})`); + let received = 0; + let sequenceNumber = 1; + for (; !this.interrupted && sequenceNumber <= PING_REPEAT; sequenceNumber += 1) { + const start = this.engine.state.currentTimeMilliseconds; + const response = yield* this.engine.icmpEchoSteps(this.nodeId, address, { identifier, sequenceNumber }); + const message = response?.message; + // ICMP.startSinglePing: anything but the echo's reply is a timeout, and the next echo goes at once. + if (message?.kind !== 'echoReply' || message.sequenceNumber !== sequenceNumber) { + this.tell(`\nFrom ${target} (${address}): icmp_seq=${sequenceNumber} -- Timeout!`); + continue; + } + if (message.identifier === identifier) { + const time = Math.round(this.engine.state.currentTimeMilliseconds - start); + this.tell(`\nFrom ${response!.packet.senderIPAddress}: icmp_seq=${sequenceNumber} ttl=${response!.packet.timeToLive} time=${time}ms`); + received += 1; + } + yield pause(start + 1_000); + } + const sent = sequenceNumber - 1; + const loss = sent === 0 ? 0 : Math.round((1 - received / sent) * 100); + this.tell( + `\n--- ${target} ${this.text('sw_terminal_msg45')} ---\n${sent} ${this.text('sw_terminal_msg46')}, ${received} ${this.text('sw_terminal_msg47')}, ${loss}% ${this.text('sw_terminal_msg48')}\n`, + ); + this.busy(false); + } + + /** Terminal.host: the name's A records, then its MX records. */ + private *host(parameters: readonly string[]): Steps { + this.busy(true); + if (parameters.length !== 1) { + this.usage('host'); + } else { + yield* this.lookUp(parameters[0]!); + } + this.busy(false); + } + + private *lookUp(name: string): Steps { + const addresses = yield* this.engine.resolveDnsSteps(this.nodeId, name, 'A'); + if (addresses.type === 'timedOut') return this.tell(this.text('sw_terminal_msg31')); + let found = 0; + // A resolution holds only the name's records of the type (Resolver.copyResourceRecords); for MX also the exchange's A. + for (const record of [...addresses.answers, ...addresses.authority]) { + this.tell(`${record.name} ${this.text('sw_terminal_msg28')} ${record.data}\n`); + found += 1; + } + const exchanges = yield* this.engine.resolveDnsSteps(this.nodeId, name, 'MX'); + if (exchanges.type === 'timedOut') return this.tell(this.text('sw_terminal_msg31')); + for (const record of [...exchanges.answers, ...exchanges.authority].filter((each) => each.type === 'MX')) { + this.tell(`${record.name} ${this.text('sw_terminal_msg58')} ${record.data}\n`); + found += 1; + } + if (found === 0) this.tell(this.text('sw_terminal_msg30')); + } + + /** Terminal.nslookup: the server asked and the answer's records. */ + private *nslookup(parameters: readonly string[]): Steps { + if (parameters.length !== 1) return this.usage('nslookup'); + const server = this.engine.state.topologySnapshot.deviceConfigurations.get(this.nodeId)?.dnsServer ?? ''; + this.busy(true); + const response = yield* this.engine.resolveDnsSteps(this.nodeId, parameters[0]!, 'A', server); + if (response.type === 'timedOut') { + this.tell(`${this.text('sw_terminal_msg31')}\n`); + } else { + const shown = response.isLocal ? '127.0.0.1' : server; + this.tell(`Server: ${shown}\n`); + this.tell(`Address: ${shown}\n`); + this.tell('\nNon-authoritative Answer:\n'); + for (const record of response.answers) { + this.tell(`Name: ${record.name}\n`); + this.tell(`Address: ${record.data}\n`); + } + } + this.busy(false); + } + + /** Terminal.arp: the ARP table; -a an address's row only, -d an address (or all) forgotten first. */ + private arp(parameters: readonly string[]): void { + let filter: string | undefined; + if (parameters.length === 2 && IP_ADDRESS_PATTERN.test(parameters[1]!)) { + if (parameters[0] === '-d') this.engine.removeArpEntry(this.nodeId, parameters[1]!); + else if (parameters[0] === '-a') filter = parameters[1]; + } else if (parameters.length === 1 && parameters[0] === '-d') { + this.engine.resetArpTable(this.nodeId); + } + const rows = this.engine.arpTable(this.nodeId).filter((row) => filter === undefined || row.ipAddress === filter); + const table = rows.map((row) => `| ${row.ipAddress.padEnd(15)} | ${row.macAddress.padEnd(17)} |\n`).join(''); + this.tell(`${this.text('sw_terminal_msg50')}${ARP_RULE}${table}${ARP_RULE}`); + } + + /** + * Terminal.netstat: the node's TCP sockets, then its UDP sockets; a + * listening one with the connections it accepted. A UDP server lists its + * listening socket only (Java also lists a socket for each address and + * port it ever answered, which it never closes). + */ + private netstat(): void { + const sockets = [...this.engine.state.socketsById.values()].filter((socket) => socket.nodeId === this.nodeId && socket.tcpState !== 'CLOSED'); + const cell = (host: string, port: string) => `| ${host.padStart(15)}:${port.padEnd(5)} `; + const row = (protocol: string, socket: SocketRecord) => { + const name = `| ${protocol.padEnd(7)} `; + if (socket.remoteIPAddress === undefined || socket.listening === true) { + return `${name}${cell('0.0.0.0', String(socket.localPort))}${cell('-', '-')}| ${'LISTEN'.padEnd(12)} |\n`; + } + const local = this.engine.routeRow(this.nodeId, socket.remoteIPAddress)?.interfaceIPAddress ?? ''; + const state = socket.tcpState ?? 'CONNECTED'; + return `${name}${cell(local, String(socket.localPort))}${cell(socket.remoteIPAddress, String(socket.remotePort))}| ${state.padEnd(12)} |\n`; + }; + let text = `${this.text('sw_terminal_msg49')}${'-'.repeat(74)}\n`; + for (const protocol of ['tcp', 'udp'] as const) { + for (const socket of sockets.filter((each) => each.protocol === protocol && each.parentListenerSocketId === undefined)) { + text += row(protocol.toUpperCase(), socket); + for (const accepted of sockets.filter((each) => each.parentListenerSocketId === socket.id)) text += row(protocol.toUpperCase(), accepted); + } + } + this.tell(text); + } } diff --git a/packages/core/src/runtime/apps/terminalTexts.ts b/packages/core/src/runtime/apps/terminalTexts.ts index 0854b31..a030c54 100644 --- a/packages/core/src/runtime/apps/terminalTexts.ts +++ b/packages/core/src/runtime/apps/terminalTexts.ts @@ -50,6 +50,7 @@ export const TERMINAL_TEXTS = { sw_terminal_msg38: 'Datei konnte nicht gelöscht werden\n', sw_terminal_msg4: 'IP Adresse . . . :', sw_terminal_msg45: 'Paketstatistik', + sw_terminal_msg46: 'Paket(e) gesendet', sw_terminal_msg47: 'Paket(e) empfangen', sw_terminal_msg48: 'Paketverlust', sw_terminal_msg49: '| Proto | Lokale Adresse | Entfernte Adresse | Zustand |\n', @@ -157,6 +158,7 @@ export const TERMINAL_TEXTS = { sw_terminal_msg38: 'File could not be deleted\n', sw_terminal_msg4: 'IP address . . .:', sw_terminal_msg45: 'packet statistics', + sw_terminal_msg46: 'packet(s) transmitted', sw_terminal_msg47: 'packet(s) received', sw_terminal_msg48: 'packet loss', sw_terminal_msg49: '| Proto | Local Address | Remote Address | State |\n', diff --git a/packages/core/src/runtime/engine.ts b/packages/core/src/runtime/engine.ts index 5a264c7..19ecad8 100644 --- a/packages/core/src/runtime/engine.ts +++ b/packages/core/src/runtime/engine.ts @@ -348,6 +348,8 @@ export interface SocketRecord { tcpState: TcpSocketState | undefined; /** A socket a TCP listener accepted: that listener. */ readonly parentListenerSocketId: Id | undefined; + /** UDP: bound to its port only, a server's (Java's ServerSocket); its remote is the last sender. */ + readonly listening?: boolean; } /** Swift's TopologyRuntimeTCPSessionRecord; sequence numbers are unsigned 32-bit. */ @@ -379,9 +381,13 @@ export type TcpReceived = { readonly type: 'message'; readonly payload: Uint8Arr /** Java's DNSQueryAgent waits five round trips for an answer. */ export const DNS_QUERY_TIMEOUT_ROUND_TRIPS = 5; export type DnsResolution = { readonly type: 'answered'; readonly records: readonly DnsMessageRecord[] } | { readonly type: 'timedOut' }; -/** A resolution as it goes on the events: the answer and authority records apart, as Java keeps them. */ -type DnsLookup = - | { readonly type: 'answered'; readonly answers: readonly DnsMessageRecord[]; readonly authority: readonly DnsMessageRecord[] } +/** + * A resolution as it goes on the events: the answer and authority records + * apart, as Java keeps them; isLocal for localhost, answered without asking + * (DNSNachricht.isLocal). + */ +export type DnsLookup = + | { readonly type: 'answered'; readonly answers: readonly DnsMessageRecord[]; readonly authority: readonly DnsMessageRecord[]; readonly isLocal: boolean } | { readonly type: 'timedOut' }; export type DnsAddressResolution = { readonly type: 'resolved'; readonly address: string | undefined } | { readonly type: 'timedOut' }; @@ -610,7 +616,7 @@ function natWithDestination(packet: IPv4Packet, endpoint: NatEndpoint): IPv4Pack } /** VermittlungsProtokoll.isBroadcast: the limited broadcast, or the broadcast address of the sender's network. */ -function isBroadcastFrom(receiverIPAddress: string, senderIPAddress: string, subnetMask: string): boolean { +export function isBroadcastFrom(receiverIPAddress: string, senderIPAddress: string, subnetMask: string): boolean { if (receiverIPAddress === LIMITED_BROADCAST_IP_ADDRESS) return true; const receiver = parseIPv4(receiverIPAddress); const sender = parseIPv4(senderIPAddress); @@ -808,6 +814,8 @@ interface ArpLookup { readonly ipAddress: string; readonly networkInterface: NetworkInterface; attemptsLeft: number; + /** Its round trip is over and it waits for what else happens at that time (Java's thread wakes after it). */ + woken?: boolean; /** Swift, for the comparison: a lookup made while events run waits in a list emptied by the answer itself. */ readonly swiftQueued: boolean; readonly done: (macAddress: string | undefined) => void; @@ -871,6 +879,10 @@ export class NetworkRuntimeEngine { private tcpPortRandom: JavaCompatibleRandom; private linkLocalRandom: JavaCompatibleRandom; private dnsIdRandom: JavaCompatibleRandom; + /** Draws the command line's first ICMP identifier (Terminal.setIdentifier: new Random()). */ + private icmpIdentifierRandom: JavaCompatibleRandom; + /** Nodes whose ARP table lost its broadcast row (arp -d 255.255.255.255), until the table is reset. */ + private readonly arpBroadcastRowRemoved = new Set(); private runtimeSpeed: RuntimeSpeed; private readonly packetTraceRetentionPolicy: TraceRetentionPolicy; private isProcessingScheduledEvents = false; @@ -967,6 +979,7 @@ export class NetworkRuntimeEngine { this.tcpPortRandom = new JavaCompatibleRandom(normalizedSeed ^ 0x5443_5050n); this.linkLocalRandom = new JavaCompatibleRandom(normalizedSeed ^ 0x4c4c_4144n); this.dnsIdRandom = new JavaCompatibleRandom(normalizedSeed ^ 0x444e_5349n); + this.icmpIdentifierRandom = new JavaCompatibleRandom(normalizedSeed ^ 0x4943_4d50n); this.runtimeSpeed = new RuntimeSpeed(); this.packetTraceRetentionPolicy = packetTraceRetentionPolicy; this.stateValue.simulationSpeedPercent = this.runtimeSpeed.percent; @@ -1020,6 +1033,8 @@ export class NetworkRuntimeEngine { this.tcpPortRandom = new JavaCompatibleRandom(seed ^ 0x5443_5050n); this.linkLocalRandom = new JavaCompatibleRandom(seed ^ 0x4c4c_4144n); this.dnsIdRandom = new JavaCompatibleRandom(seed ^ 0x444e_5349n); + this.icmpIdentifierRandom = new JavaCompatibleRandom(seed ^ 0x4943_4d50n); + this.arpBroadcastRowRemoved.clear(); this.isProcessingScheduledEvents = false; this.applicationThreads.clear(); this.applicationWakes.clear(); @@ -1054,6 +1069,7 @@ export class NetworkRuntimeEngine { this.dnsQueriesBySocketId.clear(); state.pendingEvents = []; state.arpCachesByNodeId.clear(); + this.arpBroadcastRowRemoved.clear(); state.switchForwardingTablesByNodeId.clear(); state.switchForwardingUpdatedAtMillisecondsByNodeId.clear(); state.switchSeenFrameIdentitiesByNodeId.clear(); @@ -1530,6 +1546,7 @@ export class NetworkRuntimeEngine { remotePort: options.remotePort, tcpState: undefined, parentListenerSocketId: undefined, + listening: options.remoteIPAddress === undefined, }); state.udpReceiveQueuesBySocketId.set(id, []); return id; @@ -1919,7 +1936,7 @@ export class NetworkRuntimeEngine { private beginDnsResolution(nodeId: Id, name: string, type: string, server: string | undefined, done: (resolution: DnsLookup) => void): void { const domainName = name.endsWith('.') ? name : `${name}.`; if (/^localhost\.?$/i.test(domainName)) { - done({ type: 'answered', answers: [{ name: 'localhost.', type: 'A', ttl: 3600, data: LOCALHOST_IP_ADDRESS }], authority: [] }); + done({ type: 'answered', answers: [{ name: 'localhost.', type: 'A', ttl: 3600, data: LOCALHOST_IP_ADDRESS }], authority: [], isLocal: true }); return; } const answers: DnsMessageRecord[] = []; @@ -1927,7 +1944,7 @@ export class NetworkRuntimeEngine { const queried = new Set(); const ask = (serverToQuery: string | undefined): void => { if (serverToQuery === undefined || serverToQuery === '') { - done({ type: 'answered', answers, authority }); + done({ type: 'answered', answers, authority, isLocal: false }); return; } this.queryDnsServer(nodeId, domainName, type, serverToQuery, (response) => { @@ -1943,7 +1960,7 @@ export class NetworkRuntimeEngine { answers.push(...findDnsRecords(data[0]!.data, 'A', response.answers)); authority.push(...findDnsRecords(data[0]!.data, 'A', response.authority)); } - done({ type: 'answered', answers, authority }); + done({ type: 'answered', answers, authority, isLocal: false }); return; } const all = [...response.answers, ...response.authority, ...response.additional]; @@ -1951,7 +1968,7 @@ export class NetworkRuntimeEngine { const next = nameServer === undefined ? undefined : findDnsRecords(nameServer.data, 'A', all)[0]?.data; // Java remembers only the servers it was referred to, not the first one. if (next === undefined || queried.has(next)) { - done({ type: 'answered', answers, authority }); + done({ type: 'answered', answers, authority, isLocal: false }); return; } queried.add(next); @@ -1969,17 +1986,22 @@ export class NetworkRuntimeEngine { return { type: 'resolved', address: findDnsRecords(domainName, 'A', resolution.records)[0]?.data }; } - /** Resolver.holeIPAdresse in a program's thread. */ - *resolveDnsAddressSteps(nodeId: Id, name: string): Steps { - const domainName = name.endsWith('.') ? name : `${name}.`; + /** Resolver.resolve in a program's thread: asks the node's DNS server, or `serverIPAddress`. */ + *resolveDnsSteps(nodeId: Id, name: string, type: string, serverIPAddress?: string): Steps { let lookup: DnsLookup | undefined; - const server = this.stateValue.topologySnapshot.deviceConfigurations.get(nodeId)?.dnsServer; - this.beginDnsResolution(nodeId, domainName, 'A', server, (result) => { + const server = serverIPAddress ?? this.stateValue.topologySnapshot.deviceConfigurations.get(nodeId)?.dnsServer; + this.beginDnsResolution(nodeId, name, type, server, (result) => { lookup = result; }); yield* waitUntil(() => lookup !== undefined || this.stateValue.phase !== 'running'); - const result = lookup as DnsLookup | undefined; - if (result === undefined || result.type === 'timedOut') return { type: 'timedOut' }; + return (lookup as DnsLookup | undefined) ?? { type: 'timedOut' }; + } + + /** Resolver.holeIPAdresse in a program's thread. */ + *resolveDnsAddressSteps(nodeId: Id, name: string): Steps { + const domainName = name.endsWith('.') ? name : `${name}.`; + const result = yield* this.resolveDnsSteps(nodeId, domainName, 'A'); + if (result.type === 'timedOut') return result; return { type: 'resolved', address: findDnsRecords(domainName, 'A', [...result.answers, ...result.authority])[0]?.data }; } @@ -2007,14 +2029,8 @@ export class NetworkRuntimeEngine { /** Resolver.holeIPAdresseMailServer in a program's thread (the e-mail server sending a mail on). */ *resolveDnsMailServerSteps(nodeId: Id, domain: string): Steps { const domainName = domain.endsWith('.') ? domain : `${domain}.`; - let lookup: DnsLookup | undefined; - const server = this.stateValue.topologySnapshot.deviceConfigurations.get(nodeId)?.dnsServer; - this.beginDnsResolution(nodeId, domainName, 'MX', server, (result) => { - lookup = result; - }); - yield* waitUntil(() => lookup !== undefined || this.stateValue.phase !== 'running'); - const result = lookup as DnsLookup | undefined; - if (result === undefined || result.type === 'timedOut') return { type: 'timedOut' }; + const result = yield* this.resolveDnsSteps(nodeId, domainName, 'MX'); + if (result.type === 'timedOut') return result; const records = [...result.answers, ...result.authority]; const exchange = findDnsRecords(domainName, 'MX', records)[0]; return { type: 'resolved', address: exchange === undefined ? undefined : findDnsRecords(exchange.data, 'A', records)[0]?.data }; @@ -4018,6 +4034,28 @@ export class NetworkRuntimeEngine { } } + /** + * The node's ARP table as Java's holds it (ARP.holeARPTabelle): the + * broadcast row Java puts in at each reset, then each learned address, in + * the order learned (Java: a HashMap's order). + */ + arpTable(nodeId: Id): { readonly ipAddress: string; readonly macAddress: string }[] { + const learned = [...(this.stateValue.arpCachesByNodeId.get(nodeId)?.values() ?? [])].map(({ ipAddress, macAddress }) => ({ ipAddress, macAddress })); + return this.arpBroadcastRowRemoved.has(nodeId) ? learned : [{ ipAddress: LIMITED_BROADCAST_IP_ADDRESS, macAddress: ETHERNET_BROADCAST_MAC_ADDRESS }, ...learned]; + } + + /** ARP.removeARPTableEntry: forgets the address (the broadcast row too, until the table is reset). */ + removeArpEntry(nodeId: Id, ipAddress: string): void { + if (ipAddress === LIMITED_BROADCAST_IP_ADDRESS) this.arpBroadcastRowRemoved.add(nodeId); + this.stateValue.arpCachesByNodeId.get(nodeId)?.delete(ipAddress); + } + + /** ARP.resetArpTable: every learned address forgotten, the broadcast row back. */ + resetArpTable(nodeId: Id): void { + this.clearArpCache(nodeId); + this.arpBroadcastRowRemoved.delete(nodeId); + } + /** * The MAC address for `targetIPAddress`, asking by ARP broadcast when it is * not cached. Blocks like Java: each request waits a round trip for its @@ -4103,10 +4141,19 @@ export class NetworkRuntimeEngine { for (const lookup of answered) lookup.done(macAddress); } - /** No answer within the round trip: ask again, or give up. */ + /** + * No answer within the round trip: ask again, or give up — after what + * else happens at that time (an answer coming then still counts). + */ private handleArpTimeout(lookupId: number): void { const lookup = this.arpLookups.find((each) => each.id === lookupId); if (lookup === undefined) return; + if (lookup.woken !== true) { + lookup.woken = true; + this.schedule(this.stateValue.currentTimeMilliseconds, { kind: 'arpTimeout', lookupId }); + return; + } + lookup.woken = false; if (lookup.attemptsLeft > 0) { lookup.attemptsLeft -= 1; this.schedule(this.stateValue.currentTimeMilliseconds + this.runtimeSpeed.roundTripTimeMilliseconds, { kind: 'arpTimeout', lookupId }); @@ -4667,6 +4714,88 @@ export class NetworkRuntimeEngine { return result; } + /** The first ICMP identifier of a command line (Terminal.setIdentifier: new Random().nextInt(43) * 23). */ + drawIcmpIdentifier(): number { + return this.icmpIdentifierRandom.nextInt(43) * 23; + } + + /** + * InternetKnotenBetriebssystem.determineRoute: the row of the forwarding + * table with the longest mask that holds the address, the first of equal + * ones; undefined when none does (RouteNotFoundException). + */ + routeRow(nodeId: Id, ipAddress: string): RouteRow | undefined { + const target = parseIPv4(ipAddress); + if (target === undefined) return undefined; + let best: RouteRow | undefined; + let bestMask = -1; + for (const row of this.forwardingTable(nodeId)) { + const mask = parseIPv4(row.subnetMask); + if (mask === undefined || mask <= bestMask || parseIPv4(row.destinationNetwork) !== maskAddress(target, mask)) continue; + best = row; + bestMask = mask; + } + return best; + } + + /** + * ICMP.startSinglePing and sendProbe in a program's thread: the node's + * queue of ICMP answers emptied, an echo request sent (its ARP waits as + * Java's send does; a broadcast of the route's network goes to every card + * with TTL 1, ICMP.sendBroadcast), then a round trip waited for the first + * ICMP message to come (ICMPThread.waitForIcmpResponse), which it returns, + * whatever it answers; undefined when none came. + */ + *icmpEchoSteps( + nodeId: Id, + targetIPAddress: string, + options: { readonly identifier: number; readonly sequenceNumber: number; readonly timeToLive?: number }, + ): Steps { + const interfaces = this.networkInterfaces(nodeId); + const route = this.routeForPacket(nodeId, targetIPAddress); + const sourceInterface = route.type === 'local' || route.type === 'egress' ? (route.interface ?? interfaces[0]) : interfaces[0]; + if (sourceInterface === undefined) return undefined; + const packet: IPv4Packet = { + identity: this.allocatePacketIdentity(), + senderIPAddress: sourceInterface.ipAddress, + receiverIPAddress: targetIPAddress, + timeToLive: options.timeToLive ?? 64, + protocol: 'icmp', + payload: { + kind: 'icmp', + message: icmpMessage('echoRequest', { identifier: options.identifier, sequenceNumber: options.sequenceNumber, data: new Uint8Array() }), + }, + }; + this.recordTrace({ + packetIdentity: packet.identity, + nodeId, + interfaceId: sourceInterface.portId, + direction: 'outbound', + layer: 'network', + operation: 'created', + afterHeaders: ipv4Headers(packet), + detail: 'ICMP echo request', + }); + const observations = () => this.stateValue.icmpObservationsByNodeId.get(nodeId) ?? []; + const queued = observations().length; + let sentAt: number | undefined; + if (route.type === 'egress' && isBroadcastFrom(targetIPAddress, sourceInterface.ipAddress, sourceInterface.subnetMask)) { + this.transmitIPv4Packet(nodeId, { ...packet, timeToLive: 1 }, sourceInterface, ETHERNET_BROADCAST_MAC_ADDRESS, 'sent'); + sentAt = this.stateValue.currentTimeMilliseconds; + } else { + this.sendIPv4PacketWithOptions(nodeId, packet, sourceInterface.portId, true, 'sent', { + onFinished: () => { + sentAt = this.stateValue.currentTimeMilliseconds; + }, + }); + } + const running = () => this.stateValue.phase === 'running'; + yield* waitUntil(() => sentAt !== undefined || !running()); + if (sentAt === undefined) return undefined; + yield* waitUntil(() => observations().length > queued || !running(), sentAt + this.runtimeSpeed.roundTripTimeMilliseconds); + return observations()[queued]; + } + /** `traceroute`: echoes with TTL 1, 2, … until one is answered. */ traceIcmpEcho( fromNodeId: Id, @@ -4894,10 +5023,16 @@ export class NetworkRuntimeEngine { const node = this.nodeSnapshot(nodeId)!; const packetForProcessing = packet; - const localAddresses = new Set(this.networkInterfaces(nodeId).map((candidate) => candidate.ipAddress)); + const interfaces = this.networkInterfaces(nodeId); + const localAddresses = new Set(interfaces.map((candidate) => candidate.ipAddress)); + // ICMPThread: a broadcast of a network of the node's, from that network, is the node's; one of another network is dropped. + const isIcmp = packetForProcessing.payload.kind === 'icmp'; + const isBroadcastOf = (candidate: NetworkInterface) => isBroadcastFrom(packetForProcessing.receiverIPAddress, candidate.ipAddress, candidate.subnetMask); if ( localAddresses.has(packetForProcessing.receiverIPAddress) || - packetForProcessing.receiverIPAddress === LIMITED_BROADCAST_IP_ADDRESS + packetForProcessing.receiverIPAddress === LOCALHOST_IP_ADDRESS || + packetForProcessing.receiverIPAddress === LIMITED_BROADCAST_IP_ADDRESS || + (isIcmp && interfaces.some((candidate) => isBroadcastOf(candidate) && sameSubnet(packetForProcessing.senderIPAddress, candidate.ipAddress, candidate.subnetMask))) ) { if ( isPcClassEndpoint(node.kind) && @@ -4912,6 +5047,21 @@ export class NetworkRuntimeEngine { if (!this.deliverIPv4Locally(packetForProcessing, nodeId, networkInterface, finished)) finished(); return; } + if (isIcmp && interfaces.some(isBroadcastOf)) { + this.recordTrace({ + frameIdentity, + packetIdentity: packetForProcessing.identity, + nodeId, + interfaceId: networkInterface.portId, + direction: 'inbound', + layer: 'network', + operation: 'dropped', + beforeHeaders: ipv4Headers(packetForProcessing), + detail: 'ICMP broadcast of another network', + }); + finished(); + return; + } // Java: routers and home routers forward, a host when its IP forwarding is on (ipForwardingEnabled). if (!(this.stateValue.topologySnapshot.ipForwardingByNodeId.get(nodeId) ?? forwardsIPv4ByDefault(node.kind))) { this.recordTrace({ @@ -4957,8 +5107,9 @@ export class NetworkRuntimeEngine { }, onFinished: finished, }); + // As for host unreachable, the packet as the router would have forwarded it (Java: half made, without its sender). if (result.type === 'dropped' && this.routeForPacket(nodeId, packetForProcessing.receiverIPAddress).type === 'unavailable') { - this.emitIcmpError(nodeId, networkInterface, 'destinationNetworkUnreachable', packet); + this.emitIcmpError(nodeId, networkInterface, 'destinationNetworkUnreachable', forwarded); } } @@ -4971,9 +5122,14 @@ export class NetworkRuntimeEngine { switch (message.kind) { case 'echoRequest': { if (packet.receiverIPAddress === LIMITED_BROADCAST_IP_ADDRESS && packet.timeToLive !== 1) return false; + // From the address asked (RFC 792: the addresses reversed); for a broadcast, the card's. Java answers from the + // address its route back gives: from the near card when a router's far address was asked, from 127.0.0.1 when the + // node's own address was. + const askedOwnAddress = + packet.receiverIPAddress === LOCALHOST_IP_ADDRESS || this.networkInterfaces(nodeId).some((candidate) => candidate.ipAddress === packet.receiverIPAddress); const reply: IPv4Packet = { identity: this.allocatePacketIdentity(), - senderIPAddress: networkInterface.ipAddress, + senderIPAddress: askedOwnAddress ? packet.receiverIPAddress : networkInterface.ipAddress, receiverIPAddress: packet.senderIPAddress, timeToLive: 64, protocol: 'icmp', diff --git a/packages/core/test/scenarios/terminal-java-arp.java.json b/packages/core/test/scenarios/terminal-java-arp.java.json new file mode 100644 index 0000000..c10c21c --- /dev/null +++ b/packages/core/test/scenarios/terminal-java-arp.java.json @@ -0,0 +1,2206 @@ +{ + "frames": { + "00000000-0000-0000-0000-000000000401": [ + { + "time": 506, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + }, + { + "time": 741, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.20" + }, + { + "time": 745, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 1 + }, + { + "time": 970, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 1505, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 2 + }, + { + "time": 1728, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 2506, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 3 + }, + { + "time": 2728, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 3507, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 4 + }, + { + "time": 3729, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 4 + }, + { + "time": 5506, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 5728, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.20" + }, + { + "time": 5730, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 50360, + "destinationPort": 53, + "payload": "ID=32581 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + }, + { + "time": 5958, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 50360, + "payload": "ID=32581 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" + }, + { + "time": 5962, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 53045, + "destinationPort": 53, + "payload": "ID=53015 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n" + }, + { + "time": 6187, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 53045, + "payload": "ID=53015 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + } + ], + "00000000-0000-0000-0000-000000000402": [ + { + "time": 628, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + }, + { + "time": 5617, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 5617, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.20" + }, + { + "time": 5842, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 50360, + "destinationPort": 53, + "payload": "ID=32581 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + }, + { + "time": 5847, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 50360, + "payload": "ID=32581 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" + }, + { + "time": 6074, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 53045, + "destinationPort": 53, + "payload": "ID=53015 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n" + }, + { + "time": 6075, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 53045, + "payload": "ID=53015 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + } + ], + "00000000-0000-0000-0000-000000000403": [ + { + "time": 628, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + }, + { + "time": 5617, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + } + ], + "00000000-0000-0000-0000-000000000404": [ + { + "time": 628, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + }, + { + "time": 630, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.20" + }, + { + "time": 858, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 1 + }, + { + "time": 859, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 1617, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 2 + }, + { + "time": 1617, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 2617, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 3 + }, + { + "time": 2617, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 3618, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 4 + }, + { + "time": 3618, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 4 + }, + { + "time": 5617, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + } + ], + "00000000-0000-0000-0000-000000000405": [ + { + "time": 628, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + }, + { + "time": 5617, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + } + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "rows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 782, Seq.-No.: 1" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 782, Seq.-No.: 1" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 782, Seq.-No.: 2" + ], + [ + "6", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 782, Seq.-No.: 2" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 782, Seq.-No.: 3" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 782, Seq.-No.: 3" + ], + [ + "9", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 782, Seq.-No.: 4" + ], + [ + "10", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 782, Seq.-No.: 4" + ], + [ + "11", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "11", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "12", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "12", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "13", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "13", + "192.168.0.20:50360", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "13", + "192.168.0.20:50360", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=32581 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "14", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "14", + "192.168.0.10:53", + "192.168.0.20:50360", + "UDP", + "Transport", + "" + ], + [ + "14", + "192.168.0.10:53", + "192.168.0.20:50360", + "DNS", + "Anwendung", + "ID=32581 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" + ], + [ + "15", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "15", + "192.168.0.20:53045", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "15", + "192.168.0.20:53045", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=53015 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n" + ], + [ + "16", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "16", + "192.168.0.10:53", + "192.168.0.20:53045", + "UDP", + "Transport", + "" + ], + [ + "16", + "192.168.0.10:53", + "192.168.0.20:53045", + "DNS", + "Anwendung", + "ID=53015 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "3", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "4", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "4", + "192.168.0.20:50360", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "4", + "192.168.0.20:50360", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=32581 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "5", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "5", + "192.168.0.10:53", + "192.168.0.20:50360", + "UDP", + "Transport", + "" + ], + [ + "5", + "192.168.0.10:53", + "192.168.0.20:50360", + "DNS", + "Anwendung", + "ID=32581 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" + ], + [ + "6", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "6", + "192.168.0.20:53045", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "6", + "192.168.0.20:53045", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=53015 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n" + ], + [ + "7", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "7", + "192.168.0.10:53", + "192.168.0.20:53045", + "UDP", + "Transport", + "" + ], + [ + "7", + "192.168.0.10:53", + "192.168.0.20:53045", + "DNS", + "Anwendung", + "ID=53015 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 782, Seq.-No.: 1" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 782, Seq.-No.: 1" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 782, Seq.-No.: 2" + ], + [ + "6", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 782, Seq.-No.: 2" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 782, Seq.-No.: 3" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 782, Seq.-No.: 3" + ], + [ + "9", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 782, Seq.-No.: 4" + ], + [ + "10", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 782, Seq.-No.: 4" + ], + [ + "11", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "11", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "layeredRows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 782, Seq.-No.: 1" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 782, Seq.-No.: 1" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 782, Seq.-No.: 2" + ], + [ + "6", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 782, Seq.-No.: 2" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 782, Seq.-No.: 3" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 782, Seq.-No.: 3" + ], + [ + "9", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 782, Seq.-No.: 4" + ], + [ + "10", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 782, Seq.-No.: 4" + ], + [ + "11", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "11", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "12", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "12", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "13", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "13", + "50360", + "53", + "UDP", + "Transport", + "" + ], + [ + "13", + null, + null, + "DNS", + "Anwendung", + "ID=32581 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "14", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "14", + "53", + "50360", + "UDP", + "Transport", + "" + ], + [ + "14", + null, + null, + "DNS", + "Anwendung", + "ID=32581 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" + ], + [ + "15", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "15", + "53045", + "53", + "UDP", + "Transport", + "" + ], + [ + "15", + null, + null, + "DNS", + "Anwendung", + "ID=53015 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n" + ], + [ + "16", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "16", + "53", + "53045", + "UDP", + "Transport", + "" + ], + [ + "16", + null, + null, + "DNS", + "Anwendung", + "ID=53015 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "3", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "4", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "4", + "50360", + "53", + "UDP", + "Transport", + "" + ], + [ + "4", + null, + null, + "DNS", + "Anwendung", + "ID=32581 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "5", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "5", + "53", + "50360", + "UDP", + "Transport", + "" + ], + [ + "5", + null, + null, + "DNS", + "Anwendung", + "ID=32581 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" + ], + [ + "6", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "6", + "53045", + "53", + "UDP", + "Transport", + "" + ], + [ + "6", + null, + null, + "DNS", + "Anwendung", + "ID=53015 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n" + ], + [ + "7", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "7", + "53", + "53045", + "UDP", + "Transport", + "" + ], + [ + "7", + null, + null, + "DNS", + "Anwendung", + "ID=53015 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 782, Seq.-No.: 1" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 782, Seq.-No.: 1" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 782, Seq.-No.: 2" + ], + [ + "6", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 782, Seq.-No.: 2" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 782, Seq.-No.: 3" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 782, Seq.-No.: 3" + ], + [ + "9", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 782, Seq.-No.: 4" + ], + [ + "10", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 782, Seq.-No.: 4" + ], + [ + "11", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "11", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "acts": [ + [ + 500, + "00000000-0000-0000-0000-000000000401", + "ping 192.168.0.31" + ], + [ + 5500, + "00000000-0000-0000-0000-000000000401", + "host www.filius.de" + ], + [ + 7000, + "00000000-0000-0000-0000-000000000401", + "arp" + ], + [ + 7200, + "00000000-0000-0000-0000-000000000401", + "arp -a 192.168.0.31" + ], + [ + 7400, + "00000000-0000-0000-0000-000000000401", + "arp -a 192.168.0.99" + ], + [ + 7600, + "00000000-0000-0000-0000-000000000401", + "arp -d 192.168.0.31" + ], + [ + 7800, + "00000000-0000-0000-0000-000000000401", + "arp" + ], + [ + 8000, + "00000000-0000-0000-0000-000000000401", + "arp -x 1.2.3.4" + ], + [ + 8200, + "00000000-0000-0000-0000-000000000401", + "arp foo" + ], + [ + 8250, + "00000000-0000-0000-0000-000000000401", + "arp -a foo" + ], + [ + 8300, + "00000000-0000-0000-0000-000000000401", + "arp -d foo" + ], + [ + 8400, + "00000000-0000-0000-0000-000000000401", + "arp -d" + ], + [ + 8600, + "00000000-0000-0000-0000-000000000401", + "arp" + ], + [ + 8800, + "00000000-0000-0000-0000-000000000401", + "arp -d 255.255.255.255" + ], + [ + 9000, + "00000000-0000-0000-0000-000000000401", + "arp" + ], + [ + 9200, + "00000000-0000-0000-0000-000000000401", + "arp -d" + ] + ], + "events": [ + [ + 500, + "00000000-0000-0000-0000-000000000401", + "call", + "ping 192.168.0.31" + ], + [ + 502, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 502, + "00000000-0000-0000-0000-000000000401", + "text", + "PING 192.168.0.31 (192.168.0.31)" + ], + [ + 973, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.31: icmp_seq=1 ttl=64 time=468ms" + ], + [ + 1728, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.31: icmp_seq=2 ttl=64 time=223ms" + ], + [ + 2728, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.31: icmp_seq=3 ttl=64 time=222ms" + ], + [ + 3729, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.31: icmp_seq=4 ttl=64 time=223ms" + ], + [ + 4508, + "00000000-0000-0000-0000-000000000401", + "text", + "\n--- 192.168.0.31 Paketstatistik ---\n4 Paket(e) gesendet, 4 Paket(e) empfangen, 0% Paketverlust\n" + ], + [ + 4508, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ], + [ + 5500, + "00000000-0000-0000-0000-000000000401", + "call", + "host www.filius.de" + ], + [ + 5500, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 5959, + "00000000-0000-0000-0000-000000000401", + "text", + "www.filius.de. hat die IP-Adresse 192.168.0.30\n" + ], + [ + 6187, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ], + [ + 7000, + "00000000-0000-0000-0000-000000000401", + "call", + "arp" + ], + [ + 7001, + "00000000-0000-0000-0000-000000000401", + "text", + "| Internetadresse | Physische Adresse |\n----------------------------------------\n| 192.168.0.31 | 02:00:00:00:04:14 |\n| 255.255.255.255 | FF:FF:FF:FF:FF:FF |\n| 192.168.0.10 | 02:00:00:00:04:12 |\n----------------------------------------\n" + ], + [ + 7200, + "00000000-0000-0000-0000-000000000401", + "call", + "arp -a 192.168.0.31" + ], + [ + 7200, + "00000000-0000-0000-0000-000000000401", + "text", + "| Internetadresse | Physische Adresse |\n----------------------------------------\n| 192.168.0.31 | 02:00:00:00:04:14 |\n----------------------------------------\n" + ], + [ + 7400, + "00000000-0000-0000-0000-000000000401", + "call", + "arp -a 192.168.0.99" + ], + [ + 7400, + "00000000-0000-0000-0000-000000000401", + "text", + "| Internetadresse | Physische Adresse |\n----------------------------------------\n----------------------------------------\n" + ], + [ + 7600, + "00000000-0000-0000-0000-000000000401", + "call", + "arp -d 192.168.0.31" + ], + [ + 7601, + "00000000-0000-0000-0000-000000000401", + "text", + "| Internetadresse | Physische Adresse |\n----------------------------------------\n| 255.255.255.255 | FF:FF:FF:FF:FF:FF |\n| 192.168.0.10 | 02:00:00:00:04:12 |\n----------------------------------------\n" + ], + [ + 7801, + "00000000-0000-0000-0000-000000000401", + "call", + "arp" + ], + [ + 7801, + "00000000-0000-0000-0000-000000000401", + "text", + "| Internetadresse | Physische Adresse |\n----------------------------------------\n| 255.255.255.255 | FF:FF:FF:FF:FF:FF |\n| 192.168.0.10 | 02:00:00:00:04:12 |\n----------------------------------------\n" + ], + [ + 8000, + "00000000-0000-0000-0000-000000000401", + "call", + "arp -x 1.2.3.4" + ], + [ + 8000, + "00000000-0000-0000-0000-000000000401", + "text", + "| Internetadresse | Physische Adresse |\n----------------------------------------\n| 255.255.255.255 | FF:FF:FF:FF:FF:FF |\n| 192.168.0.10 | 02:00:00:00:04:12 |\n----------------------------------------\n" + ], + [ + 8200, + "00000000-0000-0000-0000-000000000401", + "call", + "arp foo" + ], + [ + 8200, + "00000000-0000-0000-0000-000000000401", + "text", + "| Internetadresse | Physische Adresse |\n----------------------------------------\n| 255.255.255.255 | FF:FF:FF:FF:FF:FF |\n| 192.168.0.10 | 02:00:00:00:04:12 |\n----------------------------------------\n" + ], + [ + 8250, + "00000000-0000-0000-0000-000000000401", + "call", + "arp -a foo" + ], + [ + 8250, + "00000000-0000-0000-0000-000000000401", + "text", + "| Internetadresse | Physische Adresse |\n----------------------------------------\n| 255.255.255.255 | FF:FF:FF:FF:FF:FF |\n| 192.168.0.10 | 02:00:00:00:04:12 |\n----------------------------------------\n" + ], + [ + 8300, + "00000000-0000-0000-0000-000000000401", + "call", + "arp -d foo" + ], + [ + 8300, + "00000000-0000-0000-0000-000000000401", + "text", + "| Internetadresse | Physische Adresse |\n----------------------------------------\n| 255.255.255.255 | FF:FF:FF:FF:FF:FF |\n| 192.168.0.10 | 02:00:00:00:04:12 |\n----------------------------------------\n" + ], + [ + 8400, + "00000000-0000-0000-0000-000000000401", + "call", + "arp -d" + ], + [ + 8401, + "00000000-0000-0000-0000-000000000401", + "text", + "| Internetadresse | Physische Adresse |\n----------------------------------------\n| 255.255.255.255 | FF:FF:FF:FF:FF:FF |\n----------------------------------------\n" + ], + [ + 8600, + "00000000-0000-0000-0000-000000000401", + "call", + "arp" + ], + [ + 8601, + "00000000-0000-0000-0000-000000000401", + "text", + "| Internetadresse | Physische Adresse |\n----------------------------------------\n| 255.255.255.255 | FF:FF:FF:FF:FF:FF |\n----------------------------------------\n" + ], + [ + 8800, + "00000000-0000-0000-0000-000000000401", + "call", + "arp -d 255.255.255.255" + ], + [ + 8800, + "00000000-0000-0000-0000-000000000401", + "text", + "| Internetadresse | Physische Adresse |\n----------------------------------------\n----------------------------------------\n" + ], + [ + 9000, + "00000000-0000-0000-0000-000000000401", + "call", + "arp" + ], + [ + 9000, + "00000000-0000-0000-0000-000000000401", + "text", + "| Internetadresse | Physische Adresse |\n----------------------------------------\n----------------------------------------\n" + ], + [ + 9200, + "00000000-0000-0000-0000-000000000401", + "call", + "arp -d" + ], + [ + 9200, + "00000000-0000-0000-0000-000000000401", + "text", + "| Internetadresse | Physische Adresse |\n----------------------------------------\n| 255.255.255.255 | FF:FF:FF:FF:FF:FF |\n----------------------------------------\n" + ] + ] +} diff --git a/packages/core/test/scenarios/terminal-java-dns.java.json b/packages/core/test/scenarios/terminal-java-dns.java.json new file mode 100644 index 0000000..4e178f8 --- /dev/null +++ b/packages/core/test/scenarios/terminal-java-dns.java.json @@ -0,0 +1,5025 @@ +{ + "frames": { + "00000000-0000-0000-0000-000000000401": [ + { + "time": 514, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 752, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.20" + }, + { + "time": 755, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 61430, + "destinationPort": 53, + "payload": "ID=29672 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + }, + { + "time": 986, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 61430, + "payload": "ID=29672 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" + }, + { + "time": 987, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 51544, + "destinationPort": 53, + "payload": "ID=51534 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n" + }, + { + "time": 1212, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 51544, + "payload": "ID=51534 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + }, + { + "time": 2000, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 64101, + "destinationPort": 53, + "payload": "ID=26495 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. A IN\n" + }, + { + "time": 2224, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 64101, + "payload": "ID=26495 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nfilius.de. A 3600 192.168.0.31\n" + }, + { + "time": 2225, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 55982, + "destinationPort": 53, + "payload": "ID=56170 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n" + }, + { + "time": 2449, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 55982, + "payload": "ID=56170 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n" + }, + { + "time": 3500, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 54143, + "destinationPort": 53, + "payload": "ID=24737 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. A IN\n" + }, + { + "time": 3724, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 54143, + "payload": "ID=24737 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. A 3600 192.168.0.30\nmulti.filius.de. A 3600 192.168.0.31\n" + }, + { + "time": 3725, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 54865, + "destinationPort": 53, + "payload": "ID=51251 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. MX IN\n" + }, + { + "time": 3948, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 54865, + "payload": "ID=51251 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + }, + { + "time": 5001, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 60226, + "destinationPort": 53, + "payload": "ID=57327 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. A IN\n" + }, + { + "time": 5224, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 60226, + "payload": "ID=57327 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + }, + { + "time": 5225, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 61576, + "destinationPort": 53, + "payload": "ID=40063 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. MX IN\n" + }, + { + "time": 5449, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 61576, + "payload": "ID=40063 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + }, + { + "time": 6501, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 51872, + "destinationPort": 53, + "payload": "ID=39029 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + }, + { + "time": 6725, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 51872, + "payload": "ID=39029 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" + }, + { + "time": 8001, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 60627, + "destinationPort": 53, + "payload": "ID=21765 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. A IN\n" + }, + { + "time": 8224, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 60627, + "payload": "ID=21765 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. A 3600 192.168.0.30\nmulti.filius.de. A 3600 192.168.0.31\n" + }, + { + "time": 9700, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 58641, + "destinationPort": 53, + "payload": "ID=4519 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. A IN\n" + }, + { + "time": 9923, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 58641, + "payload": "ID=4519 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + }, + { + "time": 11901, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 64126, + "destinationPort": 53, + "payload": "ID=13005 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. A IN\n" + }, + { + "time": 12124, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 64126, + "payload": "ID=13005 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nfilius.de. A 3600 192.168.0.31\n" + }, + { + "time": 12125, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 62369, + "destinationPort": 53, + "payload": "ID=49574 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \npost.filius.de. A IN\n" + }, + { + "time": 12348, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 62369, + "payload": "ID=49574 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + }, + { + "time": 12349, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 57896, + "destinationPort": 53, + "payload": "ID=26237 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \npost.filius.de. MX IN\n" + }, + { + "time": 12572, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 57896, + "payload": "ID=26237 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \npost.filius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n" + } + ], + "00000000-0000-0000-0000-000000000402": [ + { + "time": 639, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 640, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.20" + }, + { + "time": 868, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 61430, + "destinationPort": 53, + "payload": "ID=29672 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + }, + { + "time": 874, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 61430, + "payload": "ID=29672 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" + }, + { + "time": 1098, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 51544, + "destinationPort": 53, + "payload": "ID=51534 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n" + }, + { + "time": 1100, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 51544, + "payload": "ID=51534 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + }, + { + "time": 2112, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 64101, + "destinationPort": 53, + "payload": "ID=26495 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. A IN\n" + }, + { + "time": 2113, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 64101, + "payload": "ID=26495 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nfilius.de. A 3600 192.168.0.31\n" + }, + { + "time": 2337, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 55982, + "destinationPort": 53, + "payload": "ID=56170 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n" + }, + { + "time": 2338, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 55982, + "payload": "ID=56170 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n" + }, + { + "time": 3612, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 54143, + "destinationPort": 53, + "payload": "ID=24737 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. A IN\n" + }, + { + "time": 3613, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 54143, + "payload": "ID=24737 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. A 3600 192.168.0.30\nmulti.filius.de. A 3600 192.168.0.31\n" + }, + { + "time": 3836, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 54865, + "destinationPort": 53, + "payload": "ID=51251 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. MX IN\n" + }, + { + "time": 3837, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 54865, + "payload": "ID=51251 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + }, + { + "time": 5112, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 60226, + "destinationPort": 53, + "payload": "ID=57327 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. A IN\n" + }, + { + "time": 5113, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 60226, + "payload": "ID=57327 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + }, + { + "time": 5336, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 61576, + "destinationPort": 53, + "payload": "ID=40063 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. MX IN\n" + }, + { + "time": 5337, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 61576, + "payload": "ID=40063 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + }, + { + "time": 6612, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 51872, + "destinationPort": 53, + "payload": "ID=39029 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + }, + { + "time": 6613, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 51872, + "payload": "ID=39029 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" + }, + { + "time": 8112, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 60627, + "destinationPort": 53, + "payload": "ID=21765 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. A IN\n" + }, + { + "time": 8113, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 60627, + "payload": "ID=21765 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. A 3600 192.168.0.30\nmulti.filius.de. A 3600 192.168.0.31\n" + }, + { + "time": 9811, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 58641, + "destinationPort": 53, + "payload": "ID=4519 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. A IN\n" + }, + { + "time": 9812, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 58641, + "payload": "ID=4519 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + }, + { + "time": 12012, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 64126, + "destinationPort": 53, + "payload": "ID=13005 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. A IN\n" + }, + { + "time": 12013, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 64126, + "payload": "ID=13005 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nfilius.de. A 3600 192.168.0.31\n" + }, + { + "time": 12236, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 62369, + "destinationPort": 53, + "payload": "ID=49574 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \npost.filius.de. A IN\n" + }, + { + "time": 12237, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 62369, + "payload": "ID=49574 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + }, + { + "time": 12460, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 57896, + "destinationPort": 53, + "payload": "ID=26237 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \npost.filius.de. MX IN\n" + }, + { + "time": 12461, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 57896, + "payload": "ID=26237 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \npost.filius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n" + } + ], + "00000000-0000-0000-0000-000000000403": [ + { + "time": 639, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + } + ], + "00000000-0000-0000-0000-000000000404": [ + { + "time": 639, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + } + ], + "00000000-0000-0000-0000-000000000405": [ + { + "time": 639, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + } + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "rows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "3", + "192.168.0.20:61430", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "3", + "192.168.0.20:61430", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=29672 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "4", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "4", + "192.168.0.10:53", + "192.168.0.20:61430", + "UDP", + "Transport", + "" + ], + [ + "4", + "192.168.0.10:53", + "192.168.0.20:61430", + "DNS", + "Anwendung", + "ID=29672 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "5", + "192.168.0.20:51544", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "5", + "192.168.0.20:51544", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=51534 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n" + ], + [ + "6", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "6", + "192.168.0.10:53", + "192.168.0.20:51544", + "UDP", + "Transport", + "" + ], + [ + "6", + "192.168.0.10:53", + "192.168.0.20:51544", + "DNS", + "Anwendung", + "ID=51534 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "7", + "192.168.0.20:64101", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "7", + "192.168.0.20:64101", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=26495 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. A IN\n" + ], + [ + "8", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "8", + "192.168.0.10:53", + "192.168.0.20:64101", + "UDP", + "Transport", + "" + ], + [ + "8", + "192.168.0.10:53", + "192.168.0.20:64101", + "DNS", + "Anwendung", + "ID=26495 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nfilius.de. A 3600 192.168.0.31\n" + ], + [ + "9", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "9", + "192.168.0.20:55982", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "9", + "192.168.0.20:55982", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=56170 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n" + ], + [ + "10", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "10", + "192.168.0.10:53", + "192.168.0.20:55982", + "UDP", + "Transport", + "" + ], + [ + "10", + "192.168.0.10:53", + "192.168.0.20:55982", + "DNS", + "Anwendung", + "ID=56170 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n" + ], + [ + "11", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "11", + "192.168.0.20:54143", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "11", + "192.168.0.20:54143", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=24737 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. A IN\n" + ], + [ + "12", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "12", + "192.168.0.10:53", + "192.168.0.20:54143", + "UDP", + "Transport", + "" + ], + [ + "12", + "192.168.0.10:53", + "192.168.0.20:54143", + "DNS", + "Anwendung", + "ID=24737 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. A 3600 192.168.0.30\nmulti.filius.de. A 3600 192.168.0.31\n" + ], + [ + "13", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "13", + "192.168.0.20:54865", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "13", + "192.168.0.20:54865", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=51251 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. MX IN\n" + ], + [ + "14", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "14", + "192.168.0.10:53", + "192.168.0.20:54865", + "UDP", + "Transport", + "" + ], + [ + "14", + "192.168.0.10:53", + "192.168.0.20:54865", + "DNS", + "Anwendung", + "ID=51251 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "15", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "15", + "192.168.0.20:60226", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "15", + "192.168.0.20:60226", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=57327 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. A IN\n" + ], + [ + "16", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "16", + "192.168.0.10:53", + "192.168.0.20:60226", + "UDP", + "Transport", + "" + ], + [ + "16", + "192.168.0.10:53", + "192.168.0.20:60226", + "DNS", + "Anwendung", + "ID=57327 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "17", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "17", + "192.168.0.20:61576", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "17", + "192.168.0.20:61576", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=40063 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. MX IN\n" + ], + [ + "18", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "18", + "192.168.0.10:53", + "192.168.0.20:61576", + "UDP", + "Transport", + "" + ], + [ + "18", + "192.168.0.10:53", + "192.168.0.20:61576", + "DNS", + "Anwendung", + "ID=40063 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "19", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "19", + "192.168.0.20:51872", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "19", + "192.168.0.20:51872", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=39029 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "20", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "20", + "192.168.0.10:53", + "192.168.0.20:51872", + "UDP", + "Transport", + "" + ], + [ + "20", + "192.168.0.10:53", + "192.168.0.20:51872", + "DNS", + "Anwendung", + "ID=39029 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" + ], + [ + "21", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "21", + "192.168.0.20:60627", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "21", + "192.168.0.20:60627", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=21765 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. A IN\n" + ], + [ + "22", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "22", + "192.168.0.10:53", + "192.168.0.20:60627", + "UDP", + "Transport", + "" + ], + [ + "22", + "192.168.0.10:53", + "192.168.0.20:60627", + "DNS", + "Anwendung", + "ID=21765 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. A 3600 192.168.0.30\nmulti.filius.de. A 3600 192.168.0.31\n" + ], + [ + "23", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "23", + "192.168.0.20:58641", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "23", + "192.168.0.20:58641", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=4519 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. A IN\n" + ], + [ + "24", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "24", + "192.168.0.10:53", + "192.168.0.20:58641", + "UDP", + "Transport", + "" + ], + [ + "24", + "192.168.0.10:53", + "192.168.0.20:58641", + "DNS", + "Anwendung", + "ID=4519 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "25", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "25", + "192.168.0.20:64126", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "25", + "192.168.0.20:64126", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=13005 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. A IN\n" + ], + [ + "26", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "26", + "192.168.0.10:53", + "192.168.0.20:64126", + "UDP", + "Transport", + "" + ], + [ + "26", + "192.168.0.10:53", + "192.168.0.20:64126", + "DNS", + "Anwendung", + "ID=13005 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nfilius.de. A 3600 192.168.0.31\n" + ], + [ + "27", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "27", + "192.168.0.20:62369", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "27", + "192.168.0.20:62369", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=49574 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \npost.filius.de. A IN\n" + ], + [ + "28", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "28", + "192.168.0.10:53", + "192.168.0.20:62369", + "UDP", + "Transport", + "" + ], + [ + "28", + "192.168.0.10:53", + "192.168.0.20:62369", + "DNS", + "Anwendung", + "ID=49574 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "29", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "29", + "192.168.0.20:57896", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "29", + "192.168.0.20:57896", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=26237 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \npost.filius.de. MX IN\n" + ], + [ + "30", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "30", + "192.168.0.10:53", + "192.168.0.20:57896", + "UDP", + "Transport", + "" + ], + [ + "30", + "192.168.0.10:53", + "192.168.0.20:57896", + "DNS", + "Anwendung", + "ID=26237 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \npost.filius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "3", + "192.168.0.20:61430", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "3", + "192.168.0.20:61430", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=29672 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "4", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "4", + "192.168.0.10:53", + "192.168.0.20:61430", + "UDP", + "Transport", + "" + ], + [ + "4", + "192.168.0.10:53", + "192.168.0.20:61430", + "DNS", + "Anwendung", + "ID=29672 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "5", + "192.168.0.20:51544", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "5", + "192.168.0.20:51544", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=51534 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n" + ], + [ + "6", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "6", + "192.168.0.10:53", + "192.168.0.20:51544", + "UDP", + "Transport", + "" + ], + [ + "6", + "192.168.0.10:53", + "192.168.0.20:51544", + "DNS", + "Anwendung", + "ID=51534 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "7", + "192.168.0.20:64101", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "7", + "192.168.0.20:64101", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=26495 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. A IN\n" + ], + [ + "8", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "8", + "192.168.0.10:53", + "192.168.0.20:64101", + "UDP", + "Transport", + "" + ], + [ + "8", + "192.168.0.10:53", + "192.168.0.20:64101", + "DNS", + "Anwendung", + "ID=26495 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nfilius.de. A 3600 192.168.0.31\n" + ], + [ + "9", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "9", + "192.168.0.20:55982", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "9", + "192.168.0.20:55982", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=56170 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n" + ], + [ + "10", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "10", + "192.168.0.10:53", + "192.168.0.20:55982", + "UDP", + "Transport", + "" + ], + [ + "10", + "192.168.0.10:53", + "192.168.0.20:55982", + "DNS", + "Anwendung", + "ID=56170 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n" + ], + [ + "11", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "11", + "192.168.0.20:54143", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "11", + "192.168.0.20:54143", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=24737 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. A IN\n" + ], + [ + "12", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "12", + "192.168.0.10:53", + "192.168.0.20:54143", + "UDP", + "Transport", + "" + ], + [ + "12", + "192.168.0.10:53", + "192.168.0.20:54143", + "DNS", + "Anwendung", + "ID=24737 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. A 3600 192.168.0.30\nmulti.filius.de. A 3600 192.168.0.31\n" + ], + [ + "13", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "13", + "192.168.0.20:54865", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "13", + "192.168.0.20:54865", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=51251 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. MX IN\n" + ], + [ + "14", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "14", + "192.168.0.10:53", + "192.168.0.20:54865", + "UDP", + "Transport", + "" + ], + [ + "14", + "192.168.0.10:53", + "192.168.0.20:54865", + "DNS", + "Anwendung", + "ID=51251 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "15", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "15", + "192.168.0.20:60226", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "15", + "192.168.0.20:60226", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=57327 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. A IN\n" + ], + [ + "16", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "16", + "192.168.0.10:53", + "192.168.0.20:60226", + "UDP", + "Transport", + "" + ], + [ + "16", + "192.168.0.10:53", + "192.168.0.20:60226", + "DNS", + "Anwendung", + "ID=57327 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "17", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "17", + "192.168.0.20:61576", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "17", + "192.168.0.20:61576", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=40063 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. MX IN\n" + ], + [ + "18", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "18", + "192.168.0.10:53", + "192.168.0.20:61576", + "UDP", + "Transport", + "" + ], + [ + "18", + "192.168.0.10:53", + "192.168.0.20:61576", + "DNS", + "Anwendung", + "ID=40063 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "19", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "19", + "192.168.0.20:51872", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "19", + "192.168.0.20:51872", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=39029 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "20", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "20", + "192.168.0.10:53", + "192.168.0.20:51872", + "UDP", + "Transport", + "" + ], + [ + "20", + "192.168.0.10:53", + "192.168.0.20:51872", + "DNS", + "Anwendung", + "ID=39029 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" + ], + [ + "21", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "21", + "192.168.0.20:60627", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "21", + "192.168.0.20:60627", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=21765 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. A IN\n" + ], + [ + "22", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "22", + "192.168.0.10:53", + "192.168.0.20:60627", + "UDP", + "Transport", + "" + ], + [ + "22", + "192.168.0.10:53", + "192.168.0.20:60627", + "DNS", + "Anwendung", + "ID=21765 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. A 3600 192.168.0.30\nmulti.filius.de. A 3600 192.168.0.31\n" + ], + [ + "23", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "23", + "192.168.0.20:58641", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "23", + "192.168.0.20:58641", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=4519 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. A IN\n" + ], + [ + "24", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "24", + "192.168.0.10:53", + "192.168.0.20:58641", + "UDP", + "Transport", + "" + ], + [ + "24", + "192.168.0.10:53", + "192.168.0.20:58641", + "DNS", + "Anwendung", + "ID=4519 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "25", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "25", + "192.168.0.20:64126", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "25", + "192.168.0.20:64126", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=13005 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. A IN\n" + ], + [ + "26", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "26", + "192.168.0.10:53", + "192.168.0.20:64126", + "UDP", + "Transport", + "" + ], + [ + "26", + "192.168.0.10:53", + "192.168.0.20:64126", + "DNS", + "Anwendung", + "ID=13005 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nfilius.de. A 3600 192.168.0.31\n" + ], + [ + "27", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "27", + "192.168.0.20:62369", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "27", + "192.168.0.20:62369", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=49574 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \npost.filius.de. A IN\n" + ], + [ + "28", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "28", + "192.168.0.10:53", + "192.168.0.20:62369", + "UDP", + "Transport", + "" + ], + [ + "28", + "192.168.0.10:53", + "192.168.0.20:62369", + "DNS", + "Anwendung", + "ID=49574 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "29", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "29", + "192.168.0.20:57896", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "29", + "192.168.0.20:57896", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=26237 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \npost.filius.de. MX IN\n" + ], + [ + "30", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "30", + "192.168.0.10:53", + "192.168.0.20:57896", + "UDP", + "Transport", + "" + ], + [ + "30", + "192.168.0.10:53", + "192.168.0.20:57896", + "DNS", + "Anwendung", + "ID=26237 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \npost.filius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "layeredRows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "3", + "61430", + "53", + "UDP", + "Transport", + "" + ], + [ + "3", + null, + null, + "DNS", + "Anwendung", + "ID=29672 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "4", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "4", + "53", + "61430", + "UDP", + "Transport", + "" + ], + [ + "4", + null, + null, + "DNS", + "Anwendung", + "ID=29672 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "5", + "51544", + "53", + "UDP", + "Transport", + "" + ], + [ + "5", + null, + null, + "DNS", + "Anwendung", + "ID=51534 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n" + ], + [ + "6", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "6", + "53", + "51544", + "UDP", + "Transport", + "" + ], + [ + "6", + null, + null, + "DNS", + "Anwendung", + "ID=51534 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "7", + "64101", + "53", + "UDP", + "Transport", + "" + ], + [ + "7", + null, + null, + "DNS", + "Anwendung", + "ID=26495 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. A IN\n" + ], + [ + "8", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "8", + "53", + "64101", + "UDP", + "Transport", + "" + ], + [ + "8", + null, + null, + "DNS", + "Anwendung", + "ID=26495 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nfilius.de. A 3600 192.168.0.31\n" + ], + [ + "9", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "9", + "55982", + "53", + "UDP", + "Transport", + "" + ], + [ + "9", + null, + null, + "DNS", + "Anwendung", + "ID=56170 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n" + ], + [ + "10", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "10", + "53", + "55982", + "UDP", + "Transport", + "" + ], + [ + "10", + null, + null, + "DNS", + "Anwendung", + "ID=56170 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n" + ], + [ + "11", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "11", + "54143", + "53", + "UDP", + "Transport", + "" + ], + [ + "11", + null, + null, + "DNS", + "Anwendung", + "ID=24737 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. A IN\n" + ], + [ + "12", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "12", + "53", + "54143", + "UDP", + "Transport", + "" + ], + [ + "12", + null, + null, + "DNS", + "Anwendung", + "ID=24737 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. A 3600 192.168.0.30\nmulti.filius.de. A 3600 192.168.0.31\n" + ], + [ + "13", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "13", + "54865", + "53", + "UDP", + "Transport", + "" + ], + [ + "13", + null, + null, + "DNS", + "Anwendung", + "ID=51251 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. MX IN\n" + ], + [ + "14", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "14", + "53", + "54865", + "UDP", + "Transport", + "" + ], + [ + "14", + null, + null, + "DNS", + "Anwendung", + "ID=51251 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "15", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "15", + "60226", + "53", + "UDP", + "Transport", + "" + ], + [ + "15", + null, + null, + "DNS", + "Anwendung", + "ID=57327 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. A IN\n" + ], + [ + "16", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "16", + "53", + "60226", + "UDP", + "Transport", + "" + ], + [ + "16", + null, + null, + "DNS", + "Anwendung", + "ID=57327 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "17", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "17", + "61576", + "53", + "UDP", + "Transport", + "" + ], + [ + "17", + null, + null, + "DNS", + "Anwendung", + "ID=40063 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. MX IN\n" + ], + [ + "18", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "18", + "53", + "61576", + "UDP", + "Transport", + "" + ], + [ + "18", + null, + null, + "DNS", + "Anwendung", + "ID=40063 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "19", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "19", + "51872", + "53", + "UDP", + "Transport", + "" + ], + [ + "19", + null, + null, + "DNS", + "Anwendung", + "ID=39029 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "20", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "20", + "53", + "51872", + "UDP", + "Transport", + "" + ], + [ + "20", + null, + null, + "DNS", + "Anwendung", + "ID=39029 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" + ], + [ + "21", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "21", + "60627", + "53", + "UDP", + "Transport", + "" + ], + [ + "21", + null, + null, + "DNS", + "Anwendung", + "ID=21765 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. A IN\n" + ], + [ + "22", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "22", + "53", + "60627", + "UDP", + "Transport", + "" + ], + [ + "22", + null, + null, + "DNS", + "Anwendung", + "ID=21765 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. A 3600 192.168.0.30\nmulti.filius.de. A 3600 192.168.0.31\n" + ], + [ + "23", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "23", + "58641", + "53", + "UDP", + "Transport", + "" + ], + [ + "23", + null, + null, + "DNS", + "Anwendung", + "ID=4519 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. A IN\n" + ], + [ + "24", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "24", + "53", + "58641", + "UDP", + "Transport", + "" + ], + [ + "24", + null, + null, + "DNS", + "Anwendung", + "ID=4519 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "25", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "25", + "64126", + "53", + "UDP", + "Transport", + "" + ], + [ + "25", + null, + null, + "DNS", + "Anwendung", + "ID=13005 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. A IN\n" + ], + [ + "26", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "26", + "53", + "64126", + "UDP", + "Transport", + "" + ], + [ + "26", + null, + null, + "DNS", + "Anwendung", + "ID=13005 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nfilius.de. A 3600 192.168.0.31\n" + ], + [ + "27", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "27", + "62369", + "53", + "UDP", + "Transport", + "" + ], + [ + "27", + null, + null, + "DNS", + "Anwendung", + "ID=49574 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \npost.filius.de. A IN\n" + ], + [ + "28", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "28", + "53", + "62369", + "UDP", + "Transport", + "" + ], + [ + "28", + null, + null, + "DNS", + "Anwendung", + "ID=49574 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "29", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "29", + "57896", + "53", + "UDP", + "Transport", + "" + ], + [ + "29", + null, + null, + "DNS", + "Anwendung", + "ID=26237 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \npost.filius.de. MX IN\n" + ], + [ + "30", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "30", + "53", + "57896", + "UDP", + "Transport", + "" + ], + [ + "30", + null, + null, + "DNS", + "Anwendung", + "ID=26237 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \npost.filius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "3", + "61430", + "53", + "UDP", + "Transport", + "" + ], + [ + "3", + null, + null, + "DNS", + "Anwendung", + "ID=29672 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "4", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "4", + "53", + "61430", + "UDP", + "Transport", + "" + ], + [ + "4", + null, + null, + "DNS", + "Anwendung", + "ID=29672 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "5", + "51544", + "53", + "UDP", + "Transport", + "" + ], + [ + "5", + null, + null, + "DNS", + "Anwendung", + "ID=51534 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n" + ], + [ + "6", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "6", + "53", + "51544", + "UDP", + "Transport", + "" + ], + [ + "6", + null, + null, + "DNS", + "Anwendung", + "ID=51534 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "7", + "64101", + "53", + "UDP", + "Transport", + "" + ], + [ + "7", + null, + null, + "DNS", + "Anwendung", + "ID=26495 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. A IN\n" + ], + [ + "8", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "8", + "53", + "64101", + "UDP", + "Transport", + "" + ], + [ + "8", + null, + null, + "DNS", + "Anwendung", + "ID=26495 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nfilius.de. A 3600 192.168.0.31\n" + ], + [ + "9", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "9", + "55982", + "53", + "UDP", + "Transport", + "" + ], + [ + "9", + null, + null, + "DNS", + "Anwendung", + "ID=56170 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n" + ], + [ + "10", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "10", + "53", + "55982", + "UDP", + "Transport", + "" + ], + [ + "10", + null, + null, + "DNS", + "Anwendung", + "ID=56170 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n" + ], + [ + "11", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "11", + "54143", + "53", + "UDP", + "Transport", + "" + ], + [ + "11", + null, + null, + "DNS", + "Anwendung", + "ID=24737 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. A IN\n" + ], + [ + "12", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "12", + "53", + "54143", + "UDP", + "Transport", + "" + ], + [ + "12", + null, + null, + "DNS", + "Anwendung", + "ID=24737 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. A 3600 192.168.0.30\nmulti.filius.de. A 3600 192.168.0.31\n" + ], + [ + "13", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "13", + "54865", + "53", + "UDP", + "Transport", + "" + ], + [ + "13", + null, + null, + "DNS", + "Anwendung", + "ID=51251 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. MX IN\n" + ], + [ + "14", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "14", + "53", + "54865", + "UDP", + "Transport", + "" + ], + [ + "14", + null, + null, + "DNS", + "Anwendung", + "ID=51251 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "15", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "15", + "60226", + "53", + "UDP", + "Transport", + "" + ], + [ + "15", + null, + null, + "DNS", + "Anwendung", + "ID=57327 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. A IN\n" + ], + [ + "16", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "16", + "53", + "60226", + "UDP", + "Transport", + "" + ], + [ + "16", + null, + null, + "DNS", + "Anwendung", + "ID=57327 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "17", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "17", + "61576", + "53", + "UDP", + "Transport", + "" + ], + [ + "17", + null, + null, + "DNS", + "Anwendung", + "ID=40063 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. MX IN\n" + ], + [ + "18", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "18", + "53", + "61576", + "UDP", + "Transport", + "" + ], + [ + "18", + null, + null, + "DNS", + "Anwendung", + "ID=40063 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "19", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "19", + "51872", + "53", + "UDP", + "Transport", + "" + ], + [ + "19", + null, + null, + "DNS", + "Anwendung", + "ID=39029 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "20", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "20", + "53", + "51872", + "UDP", + "Transport", + "" + ], + [ + "20", + null, + null, + "DNS", + "Anwendung", + "ID=39029 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" + ], + [ + "21", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "21", + "60627", + "53", + "UDP", + "Transport", + "" + ], + [ + "21", + null, + null, + "DNS", + "Anwendung", + "ID=21765 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. A IN\n" + ], + [ + "22", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "22", + "53", + "60627", + "UDP", + "Transport", + "" + ], + [ + "22", + null, + null, + "DNS", + "Anwendung", + "ID=21765 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nmulti.filius.de. A 3600 192.168.0.30\nmulti.filius.de. A 3600 192.168.0.31\n" + ], + [ + "23", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "23", + "58641", + "53", + "UDP", + "Transport", + "" + ], + [ + "23", + null, + null, + "DNS", + "Anwendung", + "ID=4519 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. A IN\n" + ], + [ + "24", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "24", + "53", + "58641", + "UDP", + "Transport", + "" + ], + [ + "24", + null, + null, + "DNS", + "Anwendung", + "ID=4519 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "25", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "25", + "64126", + "53", + "UDP", + "Transport", + "" + ], + [ + "25", + null, + null, + "DNS", + "Anwendung", + "ID=13005 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. A IN\n" + ], + [ + "26", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "26", + "53", + "64126", + "UDP", + "Transport", + "" + ], + [ + "26", + null, + null, + "DNS", + "Anwendung", + "ID=13005 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nfilius.de. A 3600 192.168.0.31\n" + ], + [ + "27", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "27", + "62369", + "53", + "UDP", + "Transport", + "" + ], + [ + "27", + null, + null, + "DNS", + "Anwendung", + "ID=49574 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \npost.filius.de. A IN\n" + ], + [ + "28", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "28", + "53", + "62369", + "UDP", + "Transport", + "" + ], + [ + "28", + null, + null, + "DNS", + "Anwendung", + "ID=49574 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "29", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "29", + "57896", + "53", + "UDP", + "Transport", + "" + ], + [ + "29", + null, + null, + "DNS", + "Anwendung", + "ID=26237 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \npost.filius.de. MX IN\n" + ], + [ + "30", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "30", + "53", + "57896", + "UDP", + "Transport", + "" + ], + [ + "30", + null, + null, + "DNS", + "Anwendung", + "ID=26237 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \npost.filius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.30\n" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "acts": [ + [ + 500, + "00000000-0000-0000-0000-000000000401", + "host www.filius.de" + ], + [ + 2000, + "00000000-0000-0000-0000-000000000401", + "host filius.de" + ], + [ + 3500, + "00000000-0000-0000-0000-000000000401", + "host multi.filius.de" + ], + [ + 5000, + "00000000-0000-0000-0000-000000000401", + "host gibtsnicht.filius.de" + ], + [ + 6500, + "00000000-0000-0000-0000-000000000401", + "nslookup www.filius.de" + ], + [ + 8000, + "00000000-0000-0000-0000-000000000401", + "nslookup multi.filius.de" + ], + [ + 9500, + "00000000-0000-0000-0000-000000000401", + "nslookup localhost" + ], + [ + 9700, + "00000000-0000-0000-0000-000000000401", + "nslookup gibtsnicht.filius.de" + ], + [ + 11500, + "00000000-0000-0000-0000-000000000401", + "host" + ], + [ + 11600, + "00000000-0000-0000-0000-000000000401", + "nslookup" + ], + [ + 11700, + "00000000-0000-0000-0000-000000000401", + "host localhost" + ], + [ + 11900, + "00000000-0000-0000-0000-000000000401", + "nslookup filius.de" + ], + [ + 12100, + "00000000-0000-0000-0000-000000000401", + "host post.filius.de" + ] + ], + "events": [ + [ + 500, + "00000000-0000-0000-0000-000000000401", + "call", + "host www.filius.de" + ], + [ + 501, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 986, + "00000000-0000-0000-0000-000000000401", + "text", + "www.filius.de. hat die IP-Adresse 192.168.0.30\n" + ], + [ + 1212, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ], + [ + 2000, + "00000000-0000-0000-0000-000000000401", + "call", + "host filius.de" + ], + [ + 2000, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 2225, + "00000000-0000-0000-0000-000000000401", + "text", + "filius.de. hat die IP-Adresse 192.168.0.31\n" + ], + [ + 2450, + "00000000-0000-0000-0000-000000000401", + "text", + "filius.de. Mails werden behandelt durch mail.filius.de.\n" + ], + [ + 2450, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ], + [ + 3500, + "00000000-0000-0000-0000-000000000401", + "call", + "host multi.filius.de" + ], + [ + 3500, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 3725, + "00000000-0000-0000-0000-000000000401", + "text", + "multi.filius.de. hat die IP-Adresse 192.168.0.30\n" + ], + [ + 3725, + "00000000-0000-0000-0000-000000000401", + "text", + "multi.filius.de. hat die IP-Adresse 192.168.0.31\n" + ], + [ + 3948, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ], + [ + 5000, + "00000000-0000-0000-0000-000000000401", + "call", + "host gibtsnicht.filius.de" + ], + [ + 5000, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 5449, + "00000000-0000-0000-0000-000000000401", + "text", + "Hostname konnte nicht aufgelöst werden!\nEventuell ist kein DNS-Server verfügbar.\n" + ], + [ + 5449, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ], + [ + 6500, + "00000000-0000-0000-0000-000000000401", + "call", + "nslookup www.filius.de" + ], + [ + 6500, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 6725, + "00000000-0000-0000-0000-000000000401", + "text", + "Server: 192.168.0.10\n" + ], + [ + 6725, + "00000000-0000-0000-0000-000000000401", + "text", + "Address: 192.168.0.10\n" + ], + [ + 6725, + "00000000-0000-0000-0000-000000000401", + "text", + "\nNon-authoritative Answer:\n" + ], + [ + 6725, + "00000000-0000-0000-0000-000000000401", + "text", + "Name: www.filius.de.\n" + ], + [ + 6725, + "00000000-0000-0000-0000-000000000401", + "text", + "Address: 192.168.0.30\n" + ], + [ + 6725, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ], + [ + 8000, + "00000000-0000-0000-0000-000000000401", + "call", + "nslookup multi.filius.de" + ], + [ + 8000, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 8224, + "00000000-0000-0000-0000-000000000401", + "text", + "Server: 192.168.0.10\n" + ], + [ + 8224, + "00000000-0000-0000-0000-000000000401", + "text", + "Address: 192.168.0.10\n" + ], + [ + 8224, + "00000000-0000-0000-0000-000000000401", + "text", + "\nNon-authoritative Answer:\n" + ], + [ + 8224, + "00000000-0000-0000-0000-000000000401", + "text", + "Name: multi.filius.de.\n" + ], + [ + 8224, + "00000000-0000-0000-0000-000000000401", + "text", + "Address: 192.168.0.30\n" + ], + [ + 8224, + "00000000-0000-0000-0000-000000000401", + "text", + "Name: multi.filius.de.\n" + ], + [ + 8224, + "00000000-0000-0000-0000-000000000401", + "text", + "Address: 192.168.0.31\n" + ], + [ + 8224, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ], + [ + 9500, + "00000000-0000-0000-0000-000000000401", + "call", + "nslookup localhost" + ], + [ + 9501, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 9501, + "00000000-0000-0000-0000-000000000401", + "text", + "Server: 127.0.0.1\n" + ], + [ + 9501, + "00000000-0000-0000-0000-000000000401", + "text", + "Address: 127.0.0.1\n" + ], + [ + 9501, + "00000000-0000-0000-0000-000000000401", + "text", + "\nNon-authoritative Answer:\n" + ], + [ + 9501, + "00000000-0000-0000-0000-000000000401", + "text", + "Name: localhost.\n" + ], + [ + 9501, + "00000000-0000-0000-0000-000000000401", + "text", + "Address: 127.0.0.1\n" + ], + [ + 9501, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ], + [ + 9700, + "00000000-0000-0000-0000-000000000401", + "call", + "nslookup gibtsnicht.filius.de" + ], + [ + 9700, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 9924, + "00000000-0000-0000-0000-000000000401", + "text", + "Server: 192.168.0.10\n" + ], + [ + 9924, + "00000000-0000-0000-0000-000000000401", + "text", + "Address: 192.168.0.10\n" + ], + [ + 9924, + "00000000-0000-0000-0000-000000000401", + "text", + "\nNon-authoritative Answer:\n" + ], + [ + 9924, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ], + [ + 11500, + "00000000-0000-0000-0000-000000000401", + "call", + "host" + ], + [ + 11500, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 11501, + "00000000-0000-0000-0000-000000000401", + "text", + "host - resolve hostname to IP address\nUsage: host \n the domain for which to look up A and MX records\n" + ], + [ + 11501, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ], + [ + 11600, + "00000000-0000-0000-0000-000000000401", + "call", + "nslookup" + ], + [ + 11600, + "00000000-0000-0000-0000-000000000401", + "text", + "nslookup - resolve hostname to IP address\nUsage: nslookup \n the domain for which to look up A (and related NS) records\n" + ], + [ + 11700, + "00000000-0000-0000-0000-000000000401", + "call", + "host localhost" + ], + [ + 11701, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 11701, + "00000000-0000-0000-0000-000000000401", + "text", + "localhost. hat die IP-Adresse 127.0.0.1\n" + ], + [ + 11701, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ], + [ + 11900, + "00000000-0000-0000-0000-000000000401", + "call", + "nslookup filius.de" + ], + [ + 11900, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 12101, + "00000000-0000-0000-0000-000000000401", + "call", + "host post.filius.de" + ], + [ + 12124, + "00000000-0000-0000-0000-000000000401", + "text", + "Server: 192.168.0.10\n" + ], + [ + 12124, + "00000000-0000-0000-0000-000000000401", + "text", + "Address: 192.168.0.10\n" + ], + [ + 12124, + "00000000-0000-0000-0000-000000000401", + "text", + "\nNon-authoritative Answer:\n" + ], + [ + 12124, + "00000000-0000-0000-0000-000000000401", + "text", + "Name: filius.de.\n" + ], + [ + 12124, + "00000000-0000-0000-0000-000000000401", + "text", + "Address: 192.168.0.31\n" + ], + [ + 12124, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ], + [ + 12124, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 12572, + "00000000-0000-0000-0000-000000000401", + "text", + "post.filius.de. Mails werden behandelt durch mail.filius.de.\n" + ], + [ + 12572, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ] + ] +} diff --git a/packages/core/test/scenarios/terminal-java-dnsTimeout.java.json b/packages/core/test/scenarios/terminal-java-dnsTimeout.java.json new file mode 100644 index 0000000..66d2ab6 --- /dev/null +++ b/packages/core/test/scenarios/terminal-java-dnsTimeout.java.json @@ -0,0 +1,2191 @@ +{ + "frames": { + "00000000-0000-0000-0000-000000000401": [ + { + "time": 811, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + }, + { + "time": 3557, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + }, + { + "time": 30168, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + }, + { + "time": 32918, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + }, + { + "time": 60168, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + }, + { + "time": 62918, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + } + ], + "00000000-0000-0000-0000-000000000402": [ + { + "time": 811, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + }, + { + "time": 3557, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + }, + { + "time": 30168, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + }, + { + "time": 32918, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + }, + { + "time": 60168, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + }, + { + "time": 62918, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + } + ], + "00000000-0000-0000-0000-000000000403": [ + { + "time": 811, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + }, + { + "time": 3557, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + }, + { + "time": 30168, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + }, + { + "time": 32918, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + }, + { + "time": 60168, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + }, + { + "time": 62918, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + } + ], + "00000000-0000-0000-0000-000000000404": [ + { + "time": 811, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + }, + { + "time": 3557, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + }, + { + "time": 30168, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + }, + { + "time": 32918, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + }, + { + "time": 60168, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + }, + { + "time": 62918, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + } + ], + "00000000-0000-0000-0000-000000000405": [ + { + "time": 695, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + }, + { + "time": 3446, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + }, + { + "time": 30057, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + }, + { + "time": 32807, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + }, + { + "time": 60057, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + }, + { + "time": 62807, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.53" + } + ], + "00000000-0000-0000-0000-000000000405#1": [ + { + "time": 577, + "source": "02:00:00:00:04:16", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "10.0.0.2", + "targetIp": "10.0.0.1" + }, + { + "time": 579, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "arp": 2, + "senderIp": "10.0.0.1", + "targetIp": "10.0.0.2" + }, + { + "time": 695, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.53", + "protocol": 17, + "sourcePort": 52317, + "destinationPort": 53, + "payload": "ID=24840 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + }, + { + "time": 6199, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "icmp": 3, + "icmpCode": 1, + "sourceIp": "10.0.0.1", + "destinationIp": "10.0.0.2", + "sequence": 0 + }, + { + "time": 30056, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.53", + "protocol": 17, + "sourcePort": 59561, + "destinationPort": 53, + "payload": "ID=14933 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + }, + { + "time": 35557, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "icmp": 3, + "icmpCode": 1, + "sourceIp": "10.0.0.1", + "destinationIp": "10.0.0.2", + "sequence": 0 + }, + { + "time": 60057, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.53", + "protocol": 17, + "sourcePort": 50768, + "destinationPort": 53, + "payload": "ID=21270 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + }, + { + "time": 65557, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "icmp": 3, + "icmpCode": 1, + "sourceIp": "10.0.0.1", + "destinationIp": "10.0.0.2", + "sequence": 0 + } + ], + "00000000-0000-0000-0000-000000000406": [ + { + "time": 512, + "source": "02:00:00:00:04:16", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "10.0.0.2", + "targetIp": "10.0.0.1" + }, + { + "time": 635, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "arp": 2, + "senderIp": "10.0.0.1", + "targetIp": "10.0.0.2" + }, + { + "time": 638, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.53", + "protocol": 17, + "sourcePort": 52317, + "destinationPort": 53, + "payload": "ID=24840 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + }, + { + "time": 6256, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "icmp": 3, + "icmpCode": 1, + "sourceIp": "10.0.0.1", + "destinationIp": "10.0.0.2", + "sequence": 0 + }, + { + "time": 30001, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.53", + "protocol": 17, + "sourcePort": 59561, + "destinationPort": 53, + "payload": "ID=14933 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + }, + { + "time": 35613, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "icmp": 3, + "icmpCode": 1, + "sourceIp": "10.0.0.1", + "destinationIp": "10.0.0.2", + "sequence": 0 + }, + { + "time": 60001, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.53", + "protocol": 17, + "sourcePort": 50768, + "destinationPort": 53, + "payload": "ID=21270 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + }, + { + "time": 65613, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "icmp": 3, + "icmpCode": 1, + "sourceIp": "10.0.0.1", + "destinationIp": "10.0.0.2", + "sequence": 0 + } + ] + }, + "rows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "2", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "3", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "4", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "5", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "6", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "2", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "3", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "4", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "5", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "6", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "2", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "3", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "4", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "5", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "6", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "2", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "3", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "4", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "5", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "6", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "2", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "3", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "4", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "5", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "6", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [ + [ + "1", + "02:00:00:00:04:16", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "10.0.0.2", + "10.0.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:04:16|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" + ], + [ + "2", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "10.0.0.1", + "10.0.0.2", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:52 [op=REPLY, sender=02:00:00:00:04:52|10.0.0.1, target=02:00:00:00:04:16|10.0.0.2]" + ], + [ + "3", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "10.0.0.2", + "192.168.0.53", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "3", + "10.0.0.2:52317", + "192.168.0.53:53", + "UDP", + "Transport", + "" + ], + [ + "3", + "10.0.0.2:52317", + "192.168.0.53:53", + "DNS", + "Anwendung", + "ID=24840 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "4", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "10.0.0.1", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1, ttl=63, protocol=17, dest=192.168.0.53, src=10.0.0.2]" + ], + [ + "5", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "10.0.0.2", + "192.168.0.53", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "5", + "10.0.0.2:59561", + "192.168.0.53:53", + "UDP", + "Transport", + "" + ], + [ + "5", + "10.0.0.2:59561", + "192.168.0.53:53", + "DNS", + "Anwendung", + "ID=14933 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "6", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "10.0.0.1", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=3, ttl=63, protocol=17, dest=192.168.0.53, src=10.0.0.2]" + ], + [ + "7", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "10.0.0.2", + "192.168.0.53", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "7", + "10.0.0.2:50768", + "192.168.0.53:53", + "UDP", + "Transport", + "" + ], + [ + "7", + "10.0.0.2:50768", + "192.168.0.53:53", + "DNS", + "Anwendung", + "ID=21270 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "8", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "10.0.0.1", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=5, ttl=63, protocol=17, dest=192.168.0.53, src=10.0.0.2]" + ] + ], + "00000000-0000-0000-0000-000000000406": [ + [ + "1", + "02:00:00:00:04:16", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "10.0.0.2", + "10.0.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:04:16|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" + ], + [ + "2", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "10.0.0.1", + "10.0.0.2", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:52 [op=REPLY, sender=02:00:00:00:04:52|10.0.0.1, target=02:00:00:00:04:16|10.0.0.2]" + ], + [ + "3", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "10.0.0.2", + "192.168.0.53", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "3", + "10.0.0.2:52317", + "192.168.0.53:53", + "UDP", + "Transport", + "" + ], + [ + "3", + "10.0.0.2:52317", + "192.168.0.53:53", + "DNS", + "Anwendung", + "ID=24840 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "4", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "10.0.0.1", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1, ttl=63, protocol=17, dest=192.168.0.53, src=10.0.0.2]" + ], + [ + "5", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "10.0.0.2", + "192.168.0.53", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "5", + "10.0.0.2:59561", + "192.168.0.53:53", + "UDP", + "Transport", + "" + ], + [ + "5", + "10.0.0.2:59561", + "192.168.0.53:53", + "DNS", + "Anwendung", + "ID=14933 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "6", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "10.0.0.1", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=3, ttl=63, protocol=17, dest=192.168.0.53, src=10.0.0.2]" + ], + [ + "7", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "10.0.0.2", + "192.168.0.53", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "7", + "10.0.0.2:50768", + "192.168.0.53:53", + "UDP", + "Transport", + "" + ], + [ + "7", + "10.0.0.2:50768", + "192.168.0.53:53", + "DNS", + "Anwendung", + "ID=21270 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "8", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "10.0.0.1", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=5, ttl=63, protocol=17, dest=192.168.0.53, src=10.0.0.2]" + ] + ] + }, + "layeredRows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "2", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "3", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "4", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "5", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "6", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "2", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "3", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "4", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "5", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "6", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "2", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "3", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "4", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "5", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "6", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "2", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "3", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "4", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "5", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "6", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "2", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "3", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "4", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "5", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ], + [ + "6", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.1", + "192.168.0.53", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.53 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.53]" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [ + [ + "1", + "02:00:00:00:04:16", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "10.0.0.2", + "10.0.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:04:16|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" + ], + [ + "2", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "10.0.0.1", + "10.0.0.2", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:52 [op=REPLY, sender=02:00:00:00:04:52|10.0.0.1, target=02:00:00:00:04:16|10.0.0.2]" + ], + [ + "3", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "10.0.0.2", + "192.168.0.53", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "3", + "52317", + "53", + "UDP", + "Transport", + "" + ], + [ + "3", + null, + null, + "DNS", + "Anwendung", + "ID=24840 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "4", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "10.0.0.1", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1, ttl=63, protocol=17, dest=192.168.0.53, src=10.0.0.2]" + ], + [ + "5", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "10.0.0.2", + "192.168.0.53", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "5", + "59561", + "53", + "UDP", + "Transport", + "" + ], + [ + "5", + null, + null, + "DNS", + "Anwendung", + "ID=14933 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "6", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "10.0.0.1", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=3, ttl=63, protocol=17, dest=192.168.0.53, src=10.0.0.2]" + ], + [ + "7", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "10.0.0.2", + "192.168.0.53", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "7", + "50768", + "53", + "UDP", + "Transport", + "" + ], + [ + "7", + null, + null, + "DNS", + "Anwendung", + "ID=21270 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "8", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "10.0.0.1", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=5, ttl=63, protocol=17, dest=192.168.0.53, src=10.0.0.2]" + ] + ], + "00000000-0000-0000-0000-000000000406": [ + [ + "1", + "02:00:00:00:04:16", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "10.0.0.2", + "10.0.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:04:16|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" + ], + [ + "2", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "10.0.0.1", + "10.0.0.2", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:52 [op=REPLY, sender=02:00:00:00:04:52|10.0.0.1, target=02:00:00:00:04:16|10.0.0.2]" + ], + [ + "3", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "10.0.0.2", + "192.168.0.53", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "3", + "52317", + "53", + "UDP", + "Transport", + "" + ], + [ + "3", + null, + null, + "DNS", + "Anwendung", + "ID=24840 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "4", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "10.0.0.1", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1, ttl=63, protocol=17, dest=192.168.0.53, src=10.0.0.2]" + ], + [ + "5", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "10.0.0.2", + "192.168.0.53", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "5", + "59561", + "53", + "UDP", + "Transport", + "" + ], + [ + "5", + null, + null, + "DNS", + "Anwendung", + "ID=14933 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "6", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "10.0.0.1", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=3, ttl=63, protocol=17, dest=192.168.0.53, src=10.0.0.2]" + ], + [ + "7", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "10.0.0.2", + "192.168.0.53", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "7", + "50768", + "53", + "UDP", + "Transport", + "" + ], + [ + "7", + null, + null, + "DNS", + "Anwendung", + "ID=21270 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "8", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "10.0.0.1", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=5, ttl=63, protocol=17, dest=192.168.0.53, src=10.0.0.2]" + ] + ] + }, + "acts": [ + [ + 500, + "00000000-0000-0000-0000-000000000406", + "host www.filius.de" + ], + [ + 30000, + "00000000-0000-0000-0000-000000000406", + "nslookup www.filius.de" + ], + [ + 60000, + "00000000-0000-0000-0000-000000000406", + "ping www.filius.de" + ] + ], + "events": [ + [ + 500, + "00000000-0000-0000-0000-000000000406", + "call", + "host www.filius.de" + ], + [ + 501, + "00000000-0000-0000-0000-000000000406", + "busy", + "true" + ], + [ + 14259, + "00000000-0000-0000-0000-000000000406", + "text", + "Zeitüberschreitung! Keine Antwort empfangen." + ], + [ + 14259, + "00000000-0000-0000-0000-000000000406", + "busy", + "false" + ], + [ + 30000, + "00000000-0000-0000-0000-000000000406", + "call", + "nslookup www.filius.de" + ], + [ + 30000, + "00000000-0000-0000-0000-000000000406", + "busy", + "true" + ], + [ + 43751, + "00000000-0000-0000-0000-000000000406", + "text", + "Zeitüberschreitung! Keine Antwort empfangen.\n" + ], + [ + 43751, + "00000000-0000-0000-0000-000000000406", + "busy", + "false" + ], + [ + 60000, + "00000000-0000-0000-0000-000000000406", + "call", + "ping www.filius.de" + ], + [ + 73751, + "00000000-0000-0000-0000-000000000406", + "text", + "Zeitüberschreitung! Keine Antwort empfangen. (DNS)" + ] + ] +} diff --git a/packages/core/test/scenarios/terminal-java-interrupt.java.json b/packages/core/test/scenarios/terminal-java-interrupt.java.json new file mode 100644 index 0000000..98a6c6f --- /dev/null +++ b/packages/core/test/scenarios/terminal-java-interrupt.java.json @@ -0,0 +1,1718 @@ +{ + "frames": { + "00000000-0000-0000-0000-000000000401": [ + { + "time": 507, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + }, + { + "time": 741, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.20" + }, + { + "time": 745, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 1 + }, + { + "time": 970, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 1504, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 2 + }, + { + "time": 1726, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 5000, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 1 + }, + { + "time": 5223, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 6000, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 2 + }, + { + "time": 6223, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 7000, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 3 + }, + { + "time": 7223, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 8000, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 4 + }, + { + "time": 8222, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 4 + }, + { + "time": 10001, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 1 + }, + { + "time": 10223, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 1 + } + ], + "00000000-0000-0000-0000-000000000402": [ + { + "time": 628, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + } + ], + "00000000-0000-0000-0000-000000000403": [ + { + "time": 628, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + } + ], + "00000000-0000-0000-0000-000000000404": [ + { + "time": 628, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + }, + { + "time": 630, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.20" + }, + { + "time": 858, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 1 + }, + { + "time": 858, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 1615, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 2 + }, + { + "time": 1615, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 5111, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 1 + }, + { + "time": 5112, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 6112, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 2 + }, + { + "time": 6112, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 7112, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 3 + }, + { + "time": 7112, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 8111, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 4 + }, + { + "time": 8112, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 4 + }, + { + "time": 10112, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 1 + }, + { + "time": 10112, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 1 + } + ], + "00000000-0000-0000-0000-000000000405": [ + { + "time": 628, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + } + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "rows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 759, Seq.-No.: 1" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 759, Seq.-No.: 1" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 759, Seq.-No.: 2" + ], + [ + "6", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 759, Seq.-No.: 2" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 760, Seq.-No.: 1" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 760, Seq.-No.: 1" + ], + [ + "9", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 760, Seq.-No.: 2" + ], + [ + "10", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 760, Seq.-No.: 2" + ], + [ + "11", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 760, Seq.-No.: 3" + ], + [ + "12", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 760, Seq.-No.: 3" + ], + [ + "13", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 760, Seq.-No.: 4" + ], + [ + "14", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 760, Seq.-No.: 4" + ], + [ + "15", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 761, Seq.-No.: 1" + ], + [ + "16", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 761, Seq.-No.: 1" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 759, Seq.-No.: 1" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 759, Seq.-No.: 1" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 759, Seq.-No.: 2" + ], + [ + "6", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 759, Seq.-No.: 2" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 760, Seq.-No.: 1" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 760, Seq.-No.: 1" + ], + [ + "9", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 760, Seq.-No.: 2" + ], + [ + "10", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 760, Seq.-No.: 2" + ], + [ + "11", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 760, Seq.-No.: 3" + ], + [ + "12", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 760, Seq.-No.: 3" + ], + [ + "13", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 760, Seq.-No.: 4" + ], + [ + "14", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 760, Seq.-No.: 4" + ], + [ + "15", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 761, Seq.-No.: 1" + ], + [ + "16", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 761, Seq.-No.: 1" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "layeredRows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 759, Seq.-No.: 1" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 759, Seq.-No.: 1" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 759, Seq.-No.: 2" + ], + [ + "6", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 759, Seq.-No.: 2" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 760, Seq.-No.: 1" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 760, Seq.-No.: 1" + ], + [ + "9", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 760, Seq.-No.: 2" + ], + [ + "10", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 760, Seq.-No.: 2" + ], + [ + "11", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 760, Seq.-No.: 3" + ], + [ + "12", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 760, Seq.-No.: 3" + ], + [ + "13", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 760, Seq.-No.: 4" + ], + [ + "14", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 760, Seq.-No.: 4" + ], + [ + "15", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 761, Seq.-No.: 1" + ], + [ + "16", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 761, Seq.-No.: 1" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 759, Seq.-No.: 1" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 759, Seq.-No.: 1" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 759, Seq.-No.: 2" + ], + [ + "6", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 759, Seq.-No.: 2" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 760, Seq.-No.: 1" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 760, Seq.-No.: 1" + ], + [ + "9", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 760, Seq.-No.: 2" + ], + [ + "10", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 760, Seq.-No.: 2" + ], + [ + "11", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 760, Seq.-No.: 3" + ], + [ + "12", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 760, Seq.-No.: 3" + ], + [ + "13", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 760, Seq.-No.: 4" + ], + [ + "14", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 760, Seq.-No.: 4" + ], + [ + "15", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 761, Seq.-No.: 1" + ], + [ + "16", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 761, Seq.-No.: 1" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "acts": [ + [ + 500, + "00000000-0000-0000-0000-000000000401", + "ping 192.168.0.31" + ], + [ + 2300, + "00000000-0000-0000-0000-000000000401", + "^C" + ], + [ + 5000, + "00000000-0000-0000-0000-000000000401", + "ping 192.168.0.31" + ], + [ + 5800, + "00000000-0000-0000-0000-000000000401", + "^C" + ], + [ + 5900, + "00000000-0000-0000-0000-000000000401", + "arp" + ], + [ + 10000, + "00000000-0000-0000-0000-000000000401", + "ping 192.168.0.31" + ], + [ + 10800, + "00000000-0000-0000-0000-000000000401", + "^C" + ], + [ + 10900, + "00000000-0000-0000-0000-000000000401", + "gibtsnicht" + ] + ], + "events": [ + [ + 500, + "00000000-0000-0000-0000-000000000401", + "call", + "ping 192.168.0.31" + ], + [ + 502, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 502, + "00000000-0000-0000-0000-000000000401", + "text", + "PING 192.168.0.31 (192.168.0.31)" + ], + [ + 971, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.31: icmp_seq=1 ttl=64 time=468ms" + ], + [ + 1726, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.31: icmp_seq=2 ttl=64 time=223ms" + ], + [ + 2300, + "00000000-0000-0000-0000-000000000401", + "call", + "^C" + ], + [ + 2505, + "00000000-0000-0000-0000-000000000401", + "text", + "\n--- 192.168.0.31 Paketstatistik ---\n2 Paket(e) gesendet, 2 Paket(e) empfangen, 0% Paketverlust\n" + ], + [ + 2505, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ], + [ + 5000, + "00000000-0000-0000-0000-000000000401", + "call", + "ping 192.168.0.31" + ], + [ + 5000, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 5000, + "00000000-0000-0000-0000-000000000401", + "text", + "PING 192.168.0.31 (192.168.0.31)" + ], + [ + 5223, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.31: icmp_seq=1 ttl=64 time=223ms" + ], + [ + 5800, + "00000000-0000-0000-0000-000000000401", + "call", + "^C" + ], + [ + 5900, + "00000000-0000-0000-0000-000000000401", + "call", + "arp" + ], + [ + 6223, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.31: icmp_seq=2 ttl=64 time=223ms" + ], + [ + 7223, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.31: icmp_seq=3 ttl=64 time=223ms" + ], + [ + 8223, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.31: icmp_seq=4 ttl=64 time=223ms" + ], + [ + 9000, + "00000000-0000-0000-0000-000000000401", + "text", + "\n--- 192.168.0.31 Paketstatistik ---\n4 Paket(e) gesendet, 4 Paket(e) empfangen, 0% Paketverlust\n" + ], + [ + 9000, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ], + [ + 9000, + "00000000-0000-0000-0000-000000000401", + "text", + "| Internetadresse | Physische Adresse |\n----------------------------------------\n| 192.168.0.31 | 02:00:00:00:04:14 |\n| 255.255.255.255 | FF:FF:FF:FF:FF:FF |\n----------------------------------------\n" + ], + [ + 10000, + "00000000-0000-0000-0000-000000000401", + "call", + "ping 192.168.0.31" + ], + [ + 10000, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 10000, + "00000000-0000-0000-0000-000000000401", + "text", + "PING 192.168.0.31 (192.168.0.31)" + ], + [ + 10223, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.31: icmp_seq=1 ttl=64 time=223ms" + ], + [ + 10800, + "00000000-0000-0000-0000-000000000401", + "call", + "^C" + ], + [ + 10900, + "00000000-0000-0000-0000-000000000401", + "call", + "gibtsnicht" + ], + [ + 10901, + "00000000-0000-0000-0000-000000000401", + "text", + "Unbekannter Befehl!\nMit 'help' erhalten Sie eine Liste bekannter Befehle." + ], + [ + 11000, + "00000000-0000-0000-0000-000000000401", + "text", + "\n--- 192.168.0.31 Paketstatistik ---\n1 Paket(e) gesendet, 1 Paket(e) empfangen, 0% Paketverlust\n" + ], + [ + 11000, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ] + ] +} diff --git a/packages/core/test/scenarios/terminal-java-netstat.java.json b/packages/core/test/scenarios/terminal-java-netstat.java.json new file mode 100644 index 0000000..250ae1e --- /dev/null +++ b/packages/core/test/scenarios/terminal-java-netstat.java.json @@ -0,0 +1,2241 @@ +{ + "frames": { + "00000000-0000-0000-0000-000000000401": [ + { + "time": 518, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + }, + { + "time": 752, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.20" + }, + { + "time": 755, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 63658, + "destinationPort": 55555, + "payload": null, + "tcpFlags": "S", + "sequence": 4000000, + "acknowledgement": 0 + }, + { + "time": 982, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 55555, + "destinationPort": 63658, + "payload": null, + "tcpFlags": "SA", + "sequence": 2000000, + "acknowledgement": 4000001 + }, + { + "time": 982, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 63658, + "destinationPort": 55555, + "payload": null, + "tcpFlags": "A", + "sequence": 4000001, + "acknowledgement": 2000001 + }, + { + "time": 2904, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 3127, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.20" + }, + { + "time": 3127, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 53339, + "destinationPort": 53, + "payload": "ID=41076 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + }, + { + "time": 3354, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 53339, + "payload": "ID=41076 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" + }, + { + "time": 3355, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 54167, + "destinationPort": 53, + "payload": "ID=35450 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n" + }, + { + "time": 3579, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 54167, + "payload": "ID=35450 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + }, + { + "time": 5000, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 63658, + "destinationPort": 55555, + "payload": null, + "tcpFlags": "F", + "sequence": 4000001, + "acknowledgement": 0 + }, + { + "time": 5223, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 55555, + "destinationPort": 63658, + "payload": null, + "tcpFlags": "A", + "sequence": 2000001, + "acknowledgement": 4000002 + }, + { + "time": 5279, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 55555, + "destinationPort": 63658, + "payload": null, + "tcpFlags": "F", + "sequence": 2000001, + "acknowledgement": 0 + }, + { + "time": 5279, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 63658, + "destinationPort": 55555, + "payload": null, + "tcpFlags": "A", + "sequence": 4000002, + "acknowledgement": 2000002 + } + ], + "00000000-0000-0000-0000-000000000402": [ + { + "time": 639, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + }, + { + "time": 3016, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 3016, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.20" + }, + { + "time": 3239, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 53339, + "destinationPort": 53, + "payload": "ID=41076 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + }, + { + "time": 3243, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 53339, + "payload": "ID=41076 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" + }, + { + "time": 3466, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 54167, + "destinationPort": 53, + "payload": "ID=35450 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n" + }, + { + "time": 3468, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 54167, + "payload": "ID=35450 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + } + ], + "00000000-0000-0000-0000-000000000403": [ + { + "time": 639, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + }, + { + "time": 3016, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + } + ], + "00000000-0000-0000-0000-000000000404": [ + { + "time": 639, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + }, + { + "time": 641, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.20" + }, + { + "time": 868, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 63658, + "destinationPort": 55555, + "payload": null, + "tcpFlags": "S", + "sequence": 4000000, + "acknowledgement": 0 + }, + { + "time": 870, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 55555, + "destinationPort": 63658, + "payload": null, + "tcpFlags": "SA", + "sequence": 2000000, + "acknowledgement": 4000001 + }, + { + "time": 1093, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 63658, + "destinationPort": 55555, + "payload": null, + "tcpFlags": "A", + "sequence": 4000001, + "acknowledgement": 2000001 + }, + { + "time": 3016, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 5111, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 63658, + "destinationPort": 55555, + "payload": null, + "tcpFlags": "F", + "sequence": 4000001, + "acknowledgement": 0 + }, + { + "time": 5112, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 55555, + "destinationPort": 63658, + "payload": null, + "tcpFlags": "A", + "sequence": 2000001, + "acknowledgement": 4000002 + }, + { + "time": 5167, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 55555, + "destinationPort": 63658, + "payload": null, + "tcpFlags": "F", + "sequence": 2000001, + "acknowledgement": 0 + }, + { + "time": 5390, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 63658, + "destinationPort": 55555, + "payload": null, + "tcpFlags": "A", + "sequence": 4000002, + "acknowledgement": 2000002 + } + ], + "00000000-0000-0000-0000-000000000405": [ + { + "time": 639, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + }, + { + "time": 3016, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + } + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "rows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "192.168.0.20:63658", + "192.168.0.31:55555", + "TCP", + "Transport", + "SYN, SEQ: 4.000.000" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "192.168.0.31:55555", + "192.168.0.20:63658", + "TCP", + "Transport", + "SYN, SEQ: 2.000.000, ACK: 4.000.001" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "192.168.0.20:63658", + "192.168.0.31:55555", + "TCP", + "Transport", + "SEQ: 4.000.001, ACK: 2.000.001" + ], + [ + "6", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "7", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "7", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "8", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "8", + "192.168.0.20:53339", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "8", + "192.168.0.20:53339", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=41076 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "9", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "9", + "192.168.0.10:53", + "192.168.0.20:53339", + "UDP", + "Transport", + "" + ], + [ + "9", + "192.168.0.10:53", + "192.168.0.20:53339", + "DNS", + "Anwendung", + "ID=41076 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" + ], + [ + "10", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "10", + "192.168.0.20:54167", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "10", + "192.168.0.20:54167", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=35450 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n" + ], + [ + "11", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "11", + "192.168.0.10:53", + "192.168.0.20:54167", + "UDP", + "Transport", + "" + ], + [ + "11", + "192.168.0.10:53", + "192.168.0.20:54167", + "DNS", + "Anwendung", + "ID=35450 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "12", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "192.168.0.20:63658", + "192.168.0.31:55555", + "TCP", + "Transport", + "FIN, SEQ: 4.000.001" + ], + [ + "13", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "192.168.0.31:55555", + "192.168.0.20:63658", + "TCP", + "Transport", + "SEQ: 2.000.001, ACK: 4.000.002" + ], + [ + "14", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "192.168.0.31:55555", + "192.168.0.20:63658", + "TCP", + "Transport", + "FIN, SEQ: 2.000.001" + ], + [ + "15", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "192.168.0.20:63658", + "192.168.0.31:55555", + "TCP", + "Transport", + "SEQ: 4.000.002, ACK: 2.000.002" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "3", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "4", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "4", + "192.168.0.20:53339", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "4", + "192.168.0.20:53339", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=41076 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "5", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "5", + "192.168.0.10:53", + "192.168.0.20:53339", + "UDP", + "Transport", + "" + ], + [ + "5", + "192.168.0.10:53", + "192.168.0.20:53339", + "DNS", + "Anwendung", + "ID=41076 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" + ], + [ + "6", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "6", + "192.168.0.20:54167", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "6", + "192.168.0.20:54167", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=35450 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n" + ], + [ + "7", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "7", + "192.168.0.10:53", + "192.168.0.20:54167", + "UDP", + "Transport", + "" + ], + [ + "7", + "192.168.0.10:53", + "192.168.0.20:54167", + "DNS", + "Anwendung", + "ID=35450 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "192.168.0.20:63658", + "192.168.0.31:55555", + "TCP", + "Transport", + "SYN, SEQ: 4.000.000" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "192.168.0.31:55555", + "192.168.0.20:63658", + "TCP", + "Transport", + "SYN, SEQ: 2.000.000, ACK: 4.000.001" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "192.168.0.20:63658", + "192.168.0.31:55555", + "TCP", + "Transport", + "SEQ: 4.000.001, ACK: 2.000.001" + ], + [ + "6", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "192.168.0.20:63658", + "192.168.0.31:55555", + "TCP", + "Transport", + "FIN, SEQ: 4.000.001" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "192.168.0.31:55555", + "192.168.0.20:63658", + "TCP", + "Transport", + "SEQ: 2.000.001, ACK: 4.000.002" + ], + [ + "9", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "192.168.0.31:55555", + "192.168.0.20:63658", + "TCP", + "Transport", + "FIN, SEQ: 2.000.001" + ], + [ + "10", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "192.168.0.20:63658", + "192.168.0.31:55555", + "TCP", + "Transport", + "SEQ: 4.000.002, ACK: 2.000.002" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "layeredRows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "63658", + "55555", + "TCP", + "Transport", + "SYN, SEQ: 4.000.000" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "55555", + "63658", + "TCP", + "Transport", + "SYN, SEQ: 2.000.000, ACK: 4.000.001" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "63658", + "55555", + "TCP", + "Transport", + "SEQ: 4.000.001, ACK: 2.000.001" + ], + [ + "6", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "7", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "7", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "8", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "8", + "53339", + "53", + "UDP", + "Transport", + "" + ], + [ + "8", + null, + null, + "DNS", + "Anwendung", + "ID=41076 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "9", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "9", + "53", + "53339", + "UDP", + "Transport", + "" + ], + [ + "9", + null, + null, + "DNS", + "Anwendung", + "ID=41076 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" + ], + [ + "10", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "10", + "54167", + "53", + "UDP", + "Transport", + "" + ], + [ + "10", + null, + null, + "DNS", + "Anwendung", + "ID=35450 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n" + ], + [ + "11", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "11", + "53", + "54167", + "UDP", + "Transport", + "" + ], + [ + "11", + null, + null, + "DNS", + "Anwendung", + "ID=35450 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "12", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "63658", + "55555", + "TCP", + "Transport", + "FIN, SEQ: 4.000.001" + ], + [ + "13", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "55555", + "63658", + "TCP", + "Transport", + "SEQ: 2.000.001, ACK: 4.000.002" + ], + [ + "14", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "55555", + "63658", + "TCP", + "Transport", + "FIN, SEQ: 2.000.001" + ], + [ + "15", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "63658", + "55555", + "TCP", + "Transport", + "SEQ: 4.000.002, ACK: 2.000.002" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "3", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "4", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "4", + "53339", + "53", + "UDP", + "Transport", + "" + ], + [ + "4", + null, + null, + "DNS", + "Anwendung", + "ID=41076 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" + ], + [ + "5", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "5", + "53", + "53339", + "UDP", + "Transport", + "" + ], + [ + "5", + null, + null, + "DNS", + "Anwendung", + "ID=41076 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" + ], + [ + "6", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "6", + "54167", + "53", + "UDP", + "Transport", + "" + ], + [ + "6", + null, + null, + "DNS", + "Anwendung", + "ID=35450 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n" + ], + [ + "7", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "7", + "53", + "54167", + "UDP", + "Transport", + "" + ], + [ + "7", + null, + null, + "DNS", + "Anwendung", + "ID=35450 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "63658", + "55555", + "TCP", + "Transport", + "SYN, SEQ: 4.000.000" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "55555", + "63658", + "TCP", + "Transport", + "SYN, SEQ: 2.000.000, ACK: 4.000.001" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "63658", + "55555", + "TCP", + "Transport", + "SEQ: 4.000.001, ACK: 2.000.001" + ], + [ + "6", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "63658", + "55555", + "TCP", + "Transport", + "FIN, SEQ: 4.000.001" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "55555", + "63658", + "TCP", + "Transport", + "SEQ: 2.000.001, ACK: 4.000.002" + ], + [ + "9", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "55555", + "63658", + "TCP", + "Transport", + "FIN, SEQ: 2.000.001" + ], + [ + "10", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "63658", + "55555", + "TCP", + "Transport", + "SEQ: 4.000.002, ACK: 2.000.002" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "acts": [ + [ + 2500, + "00000000-0000-0000-0000-000000000401", + "netstat" + ], + [ + 2700, + "00000000-0000-0000-0000-000000000404", + "netstat" + ], + [ + 2900, + "00000000-0000-0000-0000-000000000401", + "host www.filius.de" + ], + [ + 4500, + "00000000-0000-0000-0000-000000000402", + "netstat" + ], + [ + 4700, + "00000000-0000-0000-0000-000000000403", + "netstat" + ], + [ + 4900, + "00000000-0000-0000-0000-000000000401", + "netstat x" + ], + [ + 5000, + "00000000-0000-0000-0000-000000000401", + "disconnect" + ], + [ + 8000, + "00000000-0000-0000-0000-000000000401", + "netstat" + ], + [ + 8200, + "00000000-0000-0000-0000-000000000404", + "netstat" + ] + ], + "events": [ + [ + 500, + "00000000-0000-0000-0000-000000000401", + "call", + "connect 192.168.0.31:55555" + ], + [ + 2500, + "00000000-0000-0000-0000-000000000401", + "call", + "netstat" + ], + [ + 2502, + "00000000-0000-0000-0000-000000000401", + "text", + "| Proto | Lokale Adresse | Entfernte Adresse | Zustand |\n--------------------------------------------------------------------------\n| TCP | 192.168.0.20:63658 | 192.168.0.31:55555 | ESTABLISHED |\n" + ], + [ + 2700, + "00000000-0000-0000-0000-000000000404", + "call", + "netstat" + ], + [ + 2701, + "00000000-0000-0000-0000-000000000404", + "text", + "| Proto | Lokale Adresse | Entfernte Adresse | Zustand |\n--------------------------------------------------------------------------\n| TCP | 0.0.0.0:55555 | -:- | LISTEN |\n| TCP | 192.168.0.31:55555 | 192.168.0.20:63658 | ESTABLISHED |\n" + ], + [ + 2900, + "00000000-0000-0000-0000-000000000401", + "call", + "host www.filius.de" + ], + [ + 2900, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 3355, + "00000000-0000-0000-0000-000000000401", + "text", + "www.filius.de. hat die IP-Adresse 192.168.0.30\n" + ], + [ + 3580, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ], + [ + 4500, + "00000000-0000-0000-0000-000000000402", + "call", + "netstat" + ], + [ + 4501, + "00000000-0000-0000-0000-000000000402", + "text", + "| Proto | Lokale Adresse | Entfernte Adresse | Zustand |\n--------------------------------------------------------------------------\n| TCP | 0.0.0.0:55555 | -:- | LISTEN |\n| UDP | 0.0.0.0:53 | -:- | LISTEN |\n| UDP | 192.168.0.10:53 | 192.168.0.20:53339 | CONNECTED |\n| UDP | 192.168.0.10:53 | 192.168.0.20:54167 | CONNECTED |\n" + ], + [ + 4700, + "00000000-0000-0000-0000-000000000403", + "call", + "netstat" + ], + [ + 4701, + "00000000-0000-0000-0000-000000000403", + "text", + "| Proto | Lokale Adresse | Entfernte Adresse | Zustand |\n--------------------------------------------------------------------------\n" + ], + [ + 4900, + "00000000-0000-0000-0000-000000000401", + "call", + "netstat x" + ], + [ + 4900, + "00000000-0000-0000-0000-000000000401", + "text", + "| Proto | Lokale Adresse | Entfernte Adresse | Zustand |\n--------------------------------------------------------------------------\n| TCP | 192.168.0.20:63658 | 192.168.0.31:55555 | ESTABLISHED |\n" + ], + [ + 5000, + "00000000-0000-0000-0000-000000000401", + "call", + "disconnect" + ], + [ + 8000, + "00000000-0000-0000-0000-000000000401", + "call", + "netstat" + ], + [ + 8000, + "00000000-0000-0000-0000-000000000401", + "text", + "| Proto | Lokale Adresse | Entfernte Adresse | Zustand |\n--------------------------------------------------------------------------\n| TCP | 192.168.0.20:63658 | 192.168.0.31:55555 | TIME_WAIT |\n" + ], + [ + 8200, + "00000000-0000-0000-0000-000000000404", + "call", + "netstat" + ], + [ + 8200, + "00000000-0000-0000-0000-000000000404", + "text", + "| Proto | Lokale Adresse | Entfernte Adresse | Zustand |\n--------------------------------------------------------------------------\n| TCP | 0.0.0.0:55555 | -:- | LISTEN |\n" + ] + ] +} diff --git a/packages/core/test/scenarios/terminal-java-pingBroadcast.java.json b/packages/core/test/scenarios/terminal-java-pingBroadcast.java.json new file mode 100644 index 0000000..d5e581a --- /dev/null +++ b/packages/core/test/scenarios/terminal-java-pingBroadcast.java.json @@ -0,0 +1,6283 @@ +{ + "frames": { + "00000000-0000-0000-0000-000000000401": [ + { + "time": 1008, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.255", + "sequence": 1 + }, + { + "time": 1245, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.20" + }, + { + "time": 1246, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:13", + "arp": 2, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + }, + { + "time": 1300, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.20" + }, + { + "time": 1302, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "arp": 2, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.1" + }, + { + "time": 1356, + "source": "02:00:00:00:04:14", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.20" + }, + { + "time": 1357, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "arp": 2, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + }, + { + "time": 1411, + "source": "02:00:00:00:04:12", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.20" + }, + { + "time": 1413, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "arp": 2, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 1523, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 1578, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 1634, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 1689, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 2002, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.255", + "sequence": 2 + }, + { + "time": 2225, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 2280, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 2336, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 2391, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 3002, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.255", + "sequence": 3 + }, + { + "time": 3224, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 3280, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 3335, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 3391, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 4002, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.255", + "sequence": 4 + }, + { + "time": 4224, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 4 + }, + { + "time": 4280, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 4 + }, + { + "time": 4335, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "sequence": 4 + }, + { + "time": 4390, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "sequence": 4 + }, + { + "time": 7401, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "255.255.255.255", + "sequence": 1 + }, + { + "time": 7623, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 7678, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 7734, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 7789, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 8402, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "255.255.255.255", + "sequence": 2 + }, + { + "time": 8624, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 8679, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 8734, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 8790, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 9401, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "255.255.255.255", + "sequence": 3 + }, + { + "time": 9624, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 9679, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 9734, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 9790, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 10401, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "255.255.255.255", + "sequence": 4 + }, + { + "time": 10623, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 4 + }, + { + "time": 10679, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 4 + }, + { + "time": 10734, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "sequence": 4 + }, + { + "time": 10789, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "sequence": 4 + } + ], + "00000000-0000-0000-0000-000000000402": [ + { + "time": 1131, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.255", + "sequence": 1 + }, + { + "time": 1132, + "source": "02:00:00:00:04:12", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.20" + }, + { + "time": 1245, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.20" + }, + { + "time": 1300, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.20" + }, + { + "time": 1356, + "source": "02:00:00:00:04:14", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.20" + }, + { + "time": 1523, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "arp": 2, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 1524, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 2113, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.255", + "sequence": 2 + }, + { + "time": 2113, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 3113, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.255", + "sequence": 3 + }, + { + "time": 3113, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 4113, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.255", + "sequence": 4 + }, + { + "time": 4114, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "sequence": 4 + }, + { + "time": 7512, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "255.255.255.255", + "sequence": 1 + }, + { + "time": 7512, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 8513, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "255.255.255.255", + "sequence": 2 + }, + { + "time": 8513, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 9513, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "255.255.255.255", + "sequence": 3 + }, + { + "time": 9513, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 10512, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "255.255.255.255", + "sequence": 4 + }, + { + "time": 10512, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "sequence": 4 + } + ], + "00000000-0000-0000-0000-000000000403": [ + { + "time": 1131, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.255", + "sequence": 1 + }, + { + "time": 1132, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.20" + }, + { + "time": 1300, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.20" + }, + { + "time": 1356, + "source": "02:00:00:00:04:14", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.20" + }, + { + "time": 1411, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:13", + "arp": 2, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + }, + { + "time": 1411, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 1467, + "source": "02:00:00:00:04:12", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.20" + }, + { + "time": 2113, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.255", + "sequence": 2 + }, + { + "time": 2113, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 3113, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.255", + "sequence": 3 + }, + { + "time": 3113, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 4113, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.255", + "sequence": 4 + }, + { + "time": 4113, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "sequence": 4 + }, + { + "time": 7512, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "255.255.255.255", + "sequence": 1 + }, + { + "time": 7512, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 8513, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "255.255.255.255", + "sequence": 2 + }, + { + "time": 8513, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 9513, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "255.255.255.255", + "sequence": 3 + }, + { + "time": 9513, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 10512, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "255.255.255.255", + "sequence": 4 + }, + { + "time": 10513, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "sequence": 4 + } + ], + "00000000-0000-0000-0000-000000000404": [ + { + "time": 1131, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.255", + "sequence": 1 + }, + { + "time": 1132, + "source": "02:00:00:00:04:14", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.20" + }, + { + "time": 1245, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.20" + }, + { + "time": 1300, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.20" + }, + { + "time": 1411, + "source": "02:00:00:00:04:12", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.20" + }, + { + "time": 1468, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "arp": 2, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + }, + { + "time": 1468, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 2113, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.255", + "sequence": 2 + }, + { + "time": 2113, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 3113, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.255", + "sequence": 3 + }, + { + "time": 3113, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 4113, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.255", + "sequence": 4 + }, + { + "time": 4113, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 4 + }, + { + "time": 7512, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "255.255.255.255", + "sequence": 1 + }, + { + "time": 7512, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 8513, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "255.255.255.255", + "sequence": 2 + }, + { + "time": 8513, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 9513, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "255.255.255.255", + "sequence": 3 + }, + { + "time": 9513, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 10512, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "255.255.255.255", + "sequence": 4 + }, + { + "time": 10512, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 4 + } + ], + "00000000-0000-0000-0000-000000000405": [ + { + "time": 1131, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.255", + "sequence": 1 + }, + { + "time": 1132, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.20" + }, + { + "time": 1245, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.20" + }, + { + "time": 1356, + "source": "02:00:00:00:04:14", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.20" + }, + { + "time": 1411, + "source": "02:00:00:00:04:12", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.20" + }, + { + "time": 1467, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "arp": 2, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.1" + }, + { + "time": 1467, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 2113, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.255", + "sequence": 2 + }, + { + "time": 2113, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 3113, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.255", + "sequence": 3 + }, + { + "time": 3114, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 4113, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.255", + "sequence": 4 + }, + { + "time": 4113, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 4 + }, + { + "time": 7512, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "255.255.255.255", + "sequence": 1 + }, + { + "time": 7512, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 8513, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "255.255.255.255", + "sequence": 2 + }, + { + "time": 8513, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 9513, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "255.255.255.255", + "sequence": 3 + }, + { + "time": 9513, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 10512, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "255.255.255.255", + "sequence": 4 + }, + { + "time": 10512, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 4 + } + ], + "00000000-0000-0000-0000-000000000405#1": [ + { + "time": 13056, + "source": "02:00:00:00:04:16", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "10.0.0.2", + "targetIp": "10.0.0.1" + }, + { + "time": 13056, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "arp": 2, + "senderIp": "10.0.0.1", + "targetIp": "10.0.0.2" + }, + { + "time": 13167, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.255", + "sequence": 1 + }, + { + "time": 15919, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.255", + "sequence": 2 + }, + { + "time": 18669, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.255", + "sequence": 3 + }, + { + "time": 21419, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.255", + "sequence": 4 + } + ], + "00000000-0000-0000-0000-000000000406": [ + { + "time": 13000, + "source": "02:00:00:00:04:16", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "10.0.0.2", + "targetIp": "10.0.0.1" + }, + { + "time": 13111, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "arp": 2, + "senderIp": "10.0.0.1", + "targetIp": "10.0.0.2" + }, + { + "time": 13111, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.255", + "sequence": 1 + }, + { + "time": 15863, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.255", + "sequence": 2 + }, + { + "time": 18614, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.255", + "sequence": 3 + }, + { + "time": 21364, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.255", + "sequence": 4 + } + ] + }, + "rows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "1", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 1" + ], + [ + "2", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:11 [op=REPLY, sender=02:00:00:00:04:11|192.168.0.20, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "4", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.1", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.20", + "192.168.0.1", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:11 [op=REPLY, sender=02:00:00:00:04:11|192.168.0.20, target=02:00:00:00:04:51|192.168.0.1]" + ], + [ + "6", + "02:00:00:00:04:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x806" + ], + [ + "7", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:11 [op=REPLY, sender=02:00:00:00:04:11|192.168.0.20, target=02:00:00:00:04:14|192.168.0.31]" + ], + [ + "8", + "02:00:00:00:04:12", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "8", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:12|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "9", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x806" + ], + [ + "9", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:11 [op=REPLY, sender=02:00:00:00:04:11|192.168.0.20, target=02:00:00:00:04:12|192.168.0.10]" + ], + [ + "10", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 1" + ], + [ + "11", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 1" + ], + [ + "12", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 1" + ], + [ + "13", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 1" + ], + [ + "14", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 2" + ], + [ + "15", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 2" + ], + [ + "16", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 2" + ], + [ + "17", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 2" + ], + [ + "18", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 2" + ], + [ + "19", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 3" + ], + [ + "20", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 3" + ], + [ + "21", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 3" + ], + [ + "22", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 3" + ], + [ + "23", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 3" + ], + [ + "24", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 4" + ], + [ + "25", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 4" + ], + [ + "26", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 4" + ], + [ + "27", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 4" + ], + [ + "28", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 4" + ], + [ + "29", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 1" + ], + [ + "30", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 1" + ], + [ + "31", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 1" + ], + [ + "32", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 1" + ], + [ + "33", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "33", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 1" + ], + [ + "34", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 2" + ], + [ + "35", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 2" + ], + [ + "36", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "36", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 2" + ], + [ + "37", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 2" + ], + [ + "38", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 2" + ], + [ + "39", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 3" + ], + [ + "40", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "40", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 3" + ], + [ + "41", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "41", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 3" + ], + [ + "42", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "42", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 3" + ], + [ + "43", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 3" + ], + [ + "44", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 4" + ], + [ + "45", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 4" + ], + [ + "46", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 4" + ], + [ + "47", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 4" + ], + [ + "48", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "48", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 4" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "1", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 1" + ], + [ + "2", + "02:00:00:00:04:12", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:12|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "4", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.1", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "5", + "02:00:00:00:04:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "6", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:11 [op=REPLY, sender=02:00:00:00:04:11|192.168.0.20, target=02:00:00:00:04:12|192.168.0.10]" + ], + [ + "7", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 1" + ], + [ + "8", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 2" + ], + [ + "9", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 2" + ], + [ + "10", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 3" + ], + [ + "11", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 3" + ], + [ + "12", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 4" + ], + [ + "13", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 4" + ], + [ + "14", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 1" + ], + [ + "15", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 1" + ], + [ + "16", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 2" + ], + [ + "17", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 2" + ], + [ + "18", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 3" + ], + [ + "19", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 3" + ], + [ + "20", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 4" + ], + [ + "21", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 4" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "1", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 1" + ], + [ + "2", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.1", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "4", + "02:00:00:00:04:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:11 [op=REPLY, sender=02:00:00:00:04:11|192.168.0.20, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "6", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 1" + ], + [ + "7", + "02:00:00:00:04:12", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "7", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:12|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "8", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 2" + ], + [ + "9", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 2" + ], + [ + "10", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 3" + ], + [ + "11", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 3" + ], + [ + "12", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 4" + ], + [ + "13", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 4" + ], + [ + "14", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 1" + ], + [ + "15", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 1" + ], + [ + "16", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 2" + ], + [ + "17", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 2" + ], + [ + "18", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 3" + ], + [ + "19", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 3" + ], + [ + "20", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 4" + ], + [ + "21", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 4" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "1", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 1" + ], + [ + "2", + "02:00:00:00:04:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "4", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.1", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "5", + "02:00:00:00:04:12", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:12|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "6", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:11 [op=REPLY, sender=02:00:00:00:04:11|192.168.0.20, target=02:00:00:00:04:14|192.168.0.31]" + ], + [ + "7", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 1" + ], + [ + "8", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 2" + ], + [ + "9", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 2" + ], + [ + "10", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 3" + ], + [ + "11", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 3" + ], + [ + "12", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 4" + ], + [ + "13", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 4" + ], + [ + "14", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 1" + ], + [ + "15", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 1" + ], + [ + "16", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 2" + ], + [ + "17", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 2" + ], + [ + "18", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 3" + ], + [ + "19", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 3" + ], + [ + "20", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 4" + ], + [ + "21", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 4" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "1", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 1" + ], + [ + "2", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.1", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "4", + "02:00:00:00:04:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "5", + "02:00:00:00:04:12", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:12|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "6", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.20", + "192.168.0.1", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:11 [op=REPLY, sender=02:00:00:00:04:11|192.168.0.20, target=02:00:00:00:04:51|192.168.0.1]" + ], + [ + "7", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 1" + ], + [ + "8", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 2" + ], + [ + "9", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 2" + ], + [ + "10", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 3" + ], + [ + "11", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 3" + ], + [ + "12", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 4" + ], + [ + "13", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 4" + ], + [ + "14", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 1" + ], + [ + "15", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 1" + ], + [ + "16", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 2" + ], + [ + "17", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 2" + ], + [ + "18", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 3" + ], + [ + "19", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 3" + ], + [ + "20", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 4" + ], + [ + "21", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 4" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [ + [ + "1", + "02:00:00:00:04:16", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "10.0.0.2", + "10.0.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:04:16|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" + ], + [ + "2", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "10.0.0.1", + "10.0.0.2", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:52 [op=REPLY, sender=02:00:00:00:04:52|10.0.0.1, target=02:00:00:00:04:16|10.0.0.2]" + ], + [ + "3", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "10.0.0.2", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 345, Seq.-No.: 1" + ], + [ + "4", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "10.0.0.2", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 345, Seq.-No.: 2" + ], + [ + "5", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "10.0.0.2", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 345, Seq.-No.: 3" + ], + [ + "6", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "10.0.0.2", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 345, Seq.-No.: 4" + ] + ], + "00000000-0000-0000-0000-000000000406": [ + [ + "1", + "02:00:00:00:04:16", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "10.0.0.2", + "10.0.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:04:16|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" + ], + [ + "2", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "10.0.0.1", + "10.0.0.2", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:52 [op=REPLY, sender=02:00:00:00:04:52|10.0.0.1, target=02:00:00:00:04:16|10.0.0.2]" + ], + [ + "3", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "10.0.0.2", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 345, Seq.-No.: 1" + ], + [ + "4", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "10.0.0.2", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 345, Seq.-No.: 2" + ], + [ + "5", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "10.0.0.2", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 345, Seq.-No.: 3" + ], + [ + "6", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "10.0.0.2", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 345, Seq.-No.: 4" + ] + ] + }, + "layeredRows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "1", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 1" + ], + [ + "2", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:11 [op=REPLY, sender=02:00:00:00:04:11|192.168.0.20, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "4", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.1", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.20", + "192.168.0.1", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:11 [op=REPLY, sender=02:00:00:00:04:11|192.168.0.20, target=02:00:00:00:04:51|192.168.0.1]" + ], + [ + "6", + "02:00:00:00:04:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x806" + ], + [ + "7", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:11 [op=REPLY, sender=02:00:00:00:04:11|192.168.0.20, target=02:00:00:00:04:14|192.168.0.31]" + ], + [ + "8", + "02:00:00:00:04:12", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "8", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:12|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "9", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x806" + ], + [ + "9", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:11 [op=REPLY, sender=02:00:00:00:04:11|192.168.0.20, target=02:00:00:00:04:12|192.168.0.10]" + ], + [ + "10", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 1" + ], + [ + "11", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 1" + ], + [ + "12", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 1" + ], + [ + "13", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 1" + ], + [ + "14", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 2" + ], + [ + "15", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 2" + ], + [ + "16", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 2" + ], + [ + "17", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 2" + ], + [ + "18", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 2" + ], + [ + "19", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 3" + ], + [ + "20", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 3" + ], + [ + "21", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 3" + ], + [ + "22", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 3" + ], + [ + "23", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 3" + ], + [ + "24", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 4" + ], + [ + "25", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 4" + ], + [ + "26", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 4" + ], + [ + "27", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 4" + ], + [ + "28", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 4" + ], + [ + "29", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 1" + ], + [ + "30", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 1" + ], + [ + "31", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 1" + ], + [ + "32", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 1" + ], + [ + "33", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "33", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 1" + ], + [ + "34", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 2" + ], + [ + "35", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 2" + ], + [ + "36", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "36", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 2" + ], + [ + "37", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 2" + ], + [ + "38", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 2" + ], + [ + "39", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 3" + ], + [ + "40", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "40", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 3" + ], + [ + "41", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "41", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 3" + ], + [ + "42", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "42", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 3" + ], + [ + "43", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 3" + ], + [ + "44", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 4" + ], + [ + "45", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 4" + ], + [ + "46", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 4" + ], + [ + "47", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 4" + ], + [ + "48", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "48", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 4" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "1", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 1" + ], + [ + "2", + "02:00:00:00:04:12", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:12|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "4", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.1", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "5", + "02:00:00:00:04:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "6", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:11 [op=REPLY, sender=02:00:00:00:04:11|192.168.0.20, target=02:00:00:00:04:12|192.168.0.10]" + ], + [ + "7", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 1" + ], + [ + "8", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 2" + ], + [ + "9", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 2" + ], + [ + "10", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 3" + ], + [ + "11", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 3" + ], + [ + "12", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 4" + ], + [ + "13", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 4" + ], + [ + "14", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 1" + ], + [ + "15", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 1" + ], + [ + "16", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 2" + ], + [ + "17", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 2" + ], + [ + "18", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 3" + ], + [ + "19", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 3" + ], + [ + "20", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 4" + ], + [ + "21", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.10", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 4" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "1", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 1" + ], + [ + "2", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.1", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "4", + "02:00:00:00:04:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:11 [op=REPLY, sender=02:00:00:00:04:11|192.168.0.20, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "6", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 1" + ], + [ + "7", + "02:00:00:00:04:12", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "7", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:12|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "8", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 2" + ], + [ + "9", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 2" + ], + [ + "10", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 3" + ], + [ + "11", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 3" + ], + [ + "12", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 4" + ], + [ + "13", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 4" + ], + [ + "14", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 1" + ], + [ + "15", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 1" + ], + [ + "16", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 2" + ], + [ + "17", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 2" + ], + [ + "18", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 3" + ], + [ + "19", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 3" + ], + [ + "20", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 4" + ], + [ + "21", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.30", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 4" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "1", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 1" + ], + [ + "2", + "02:00:00:00:04:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "4", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.1", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "5", + "02:00:00:00:04:12", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:12|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "6", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:11 [op=REPLY, sender=02:00:00:00:04:11|192.168.0.20, target=02:00:00:00:04:14|192.168.0.31]" + ], + [ + "7", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 1" + ], + [ + "8", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 2" + ], + [ + "9", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 2" + ], + [ + "10", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 3" + ], + [ + "11", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 3" + ], + [ + "12", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 4" + ], + [ + "13", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 4" + ], + [ + "14", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 1" + ], + [ + "15", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 1" + ], + [ + "16", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 2" + ], + [ + "17", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 2" + ], + [ + "18", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 3" + ], + [ + "19", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 3" + ], + [ + "20", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 4" + ], + [ + "21", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 4" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "1", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 1" + ], + [ + "2", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.1", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "4", + "02:00:00:00:04:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "5", + "02:00:00:00:04:12", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.20 [op=REQUEST, sender=02:00:00:00:04:12|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.20]" + ], + [ + "6", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.20", + "192.168.0.1", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:11 [op=REPLY, sender=02:00:00:00:04:11|192.168.0.20, target=02:00:00:00:04:51|192.168.0.1]" + ], + [ + "7", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 1" + ], + [ + "8", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 2" + ], + [ + "9", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 2" + ], + [ + "10", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 3" + ], + [ + "11", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 3" + ], + [ + "12", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 483, Seq.-No.: 4" + ], + [ + "13", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 4" + ], + [ + "14", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 1" + ], + [ + "15", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 1" + ], + [ + "16", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 2" + ], + [ + "17", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 2" + ], + [ + "18", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 3" + ], + [ + "19", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 3" + ], + [ + "20", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.20", + "255.255.255.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 1, Identifier: 484, Seq.-No.: 4" + ], + [ + "21", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 484, Seq.-No.: 4" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [ + [ + "1", + "02:00:00:00:04:16", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "10.0.0.2", + "10.0.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:04:16|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" + ], + [ + "2", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "10.0.0.1", + "10.0.0.2", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:52 [op=REPLY, sender=02:00:00:00:04:52|10.0.0.1, target=02:00:00:00:04:16|10.0.0.2]" + ], + [ + "3", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "10.0.0.2", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 345, Seq.-No.: 1" + ], + [ + "4", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "10.0.0.2", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 345, Seq.-No.: 2" + ], + [ + "5", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "10.0.0.2", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 345, Seq.-No.: 3" + ], + [ + "6", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "10.0.0.2", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 345, Seq.-No.: 4" + ] + ], + "00000000-0000-0000-0000-000000000406": [ + [ + "1", + "02:00:00:00:04:16", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "10.0.0.2", + "10.0.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:04:16|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" + ], + [ + "2", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "10.0.0.1", + "10.0.0.2", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:52 [op=REPLY, sender=02:00:00:00:04:52|10.0.0.1, target=02:00:00:00:04:16|10.0.0.2]" + ], + [ + "3", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "10.0.0.2", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 345, Seq.-No.: 1" + ], + [ + "4", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "10.0.0.2", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 345, Seq.-No.: 2" + ], + [ + "5", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "10.0.0.2", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 345, Seq.-No.: 3" + ], + [ + "6", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "10.0.0.2", + "192.168.0.255", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 345, Seq.-No.: 4" + ] + ] + }, + "acts": [ + [ + 500, + "00000000-0000-0000-0000-000000000401", + "ping 192.168.0.255" + ], + [ + 1000, + "00000000-0000-0000-0000-000000000401", + "ping -b 192.168.0.255" + ], + [ + 7000, + "00000000-0000-0000-0000-000000000401", + "arp" + ], + [ + 7200, + "00000000-0000-0000-0000-000000000401", + "ping 255.255.255.255" + ], + [ + 7400, + "00000000-0000-0000-0000-000000000401", + "ping -b 255.255.255.255" + ], + [ + 12500, + "00000000-0000-0000-0000-000000000402", + "ping 255.255.255.255" + ], + [ + 13000, + "00000000-0000-0000-0000-000000000406", + "ping -b 192.168.0.255" + ] + ], + "events": [ + [ + 500, + "00000000-0000-0000-0000-000000000401", + "call", + "ping 192.168.0.255" + ], + [ + 502, + "00000000-0000-0000-0000-000000000401", + "text", + "Ping zu Broadcast-Adressen wird nicht unterstützt." + ], + [ + 1000, + "00000000-0000-0000-0000-000000000401", + "call", + "ping -b 192.168.0.255" + ], + [ + 1000, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 1000, + "00000000-0000-0000-0000-000000000401", + "text", + "PING 192.168.0.255 (192.168.0.255)" + ], + [ + 1524, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.30: icmp_seq=1 ttl=64 time=523ms" + ], + [ + 2225, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.31: icmp_seq=2 ttl=64 time=223ms" + ], + [ + 3225, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.1: icmp_seq=3 ttl=64 time=223ms" + ], + [ + 4224, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.1: icmp_seq=4 ttl=64 time=222ms" + ], + [ + 5004, + "00000000-0000-0000-0000-000000000401", + "text", + "\n--- -b Paketstatistik ---\n4 Paket(e) gesendet, 4 Paket(e) empfangen, 0% Paketverlust\n" + ], + [ + 5004, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ], + [ + 7000, + "00000000-0000-0000-0000-000000000401", + "call", + "arp" + ], + [ + 7001, + "00000000-0000-0000-0000-000000000401", + "text", + "| Internetadresse | Physische Adresse |\n----------------------------------------\n| 192.168.0.1 | 02:00:00:00:04:51 |\n| 192.168.0.30 | 02:00:00:00:04:13 |\n| 192.168.0.31 | 02:00:00:00:04:14 |\n| 255.255.255.255 | FF:FF:FF:FF:FF:FF |\n| 192.168.0.10 | 02:00:00:00:04:12 |\n----------------------------------------\n" + ], + [ + 7200, + "00000000-0000-0000-0000-000000000401", + "call", + "ping 255.255.255.255" + ], + [ + 7201, + "00000000-0000-0000-0000-000000000401", + "text", + "Ping zu Broadcast-Adressen wird nicht unterstützt." + ], + [ + 7400, + "00000000-0000-0000-0000-000000000401", + "call", + "ping -b 255.255.255.255" + ], + [ + 7401, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 7401, + "00000000-0000-0000-0000-000000000401", + "text", + "PING 255.255.255.255 (255.255.255.255)" + ], + [ + 7623, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.30: icmp_seq=1 ttl=64 time=222ms" + ], + [ + 8624, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.10: icmp_seq=2 ttl=64 time=223ms" + ], + [ + 9624, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.31: icmp_seq=3 ttl=64 time=223ms" + ], + [ + 10623, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.31: icmp_seq=4 ttl=64 time=222ms" + ], + [ + 11402, + "00000000-0000-0000-0000-000000000401", + "text", + "\n--- -b Paketstatistik ---\n4 Paket(e) gesendet, 4 Paket(e) empfangen, 0% Paketverlust\n" + ], + [ + 11402, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ], + [ + 12500, + "00000000-0000-0000-0000-000000000402", + "call", + "ping 255.255.255.255" + ], + [ + 12500, + "00000000-0000-0000-0000-000000000402", + "text", + "Zieladresse nicht erreichbar" + ], + [ + 13000, + "00000000-0000-0000-0000-000000000406", + "call", + "ping -b 192.168.0.255" + ], + [ + 13000, + "00000000-0000-0000-0000-000000000406", + "busy", + "true" + ], + [ + 13000, + "00000000-0000-0000-0000-000000000406", + "text", + "PING 192.168.0.255 (192.168.0.255)" + ], + [ + 15863, + "00000000-0000-0000-0000-000000000406", + "text", + "\nFrom -b (192.168.0.255): icmp_seq=1 -- Timeout!" + ], + [ + 18613, + "00000000-0000-0000-0000-000000000406", + "text", + "\nFrom -b (192.168.0.255): icmp_seq=2 -- Timeout!" + ], + [ + 21364, + "00000000-0000-0000-0000-000000000406", + "text", + "\nFrom -b (192.168.0.255): icmp_seq=3 -- Timeout!" + ], + [ + 24114, + "00000000-0000-0000-0000-000000000406", + "text", + "\nFrom -b (192.168.0.255): icmp_seq=4 -- Timeout!" + ], + [ + 24114, + "00000000-0000-0000-0000-000000000406", + "text", + "\n--- -b Paketstatistik ---\n4 Paket(e) gesendet, 0 Paket(e) empfangen, 100% Paketverlust\n" + ], + [ + 24114, + "00000000-0000-0000-0000-000000000406", + "busy", + "false" + ] + ] +} diff --git a/packages/core/test/scenarios/terminal-java-pingErrors.java.json b/packages/core/test/scenarios/terminal-java-pingErrors.java.json new file mode 100644 index 0000000..0f14496 --- /dev/null +++ b/packages/core/test/scenarios/terminal-java-pingErrors.java.json @@ -0,0 +1,2041 @@ +{ + "frames": { + "00000000-0000-0000-0000-000000000401": [ + { + "time": 917, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 1154, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.20" + }, + { + "time": 1157, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 52862, + "destinationPort": 53, + "payload": "ID=61843 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. A IN\n" + }, + { + "time": 1392, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 52862, + "payload": "ID=61843 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + }, + { + "time": 2506, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 51619, + "destinationPort": 53, + "payload": "ID=1320 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n1.2.3. A IN\n" + }, + { + "time": 2741, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 51619, + "payload": "ID=1320 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + }, + { + "time": 8001, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + }, + { + "time": 8223, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.20" + }, + { + "time": 8226, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 1 + }, + { + "time": 8451, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 9003, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 2 + }, + { + "time": 9227, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 10004, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 3 + }, + { + "time": 10227, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 11003, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 4 + }, + { + "time": 11226, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 4 + } + ], + "00000000-0000-0000-0000-000000000402": [ + { + "time": 1041, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 1042, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.20" + }, + { + "time": 1271, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 52862, + "destinationPort": 53, + "payload": "ID=61843 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. A IN\n" + }, + { + "time": 1277, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 52862, + "payload": "ID=61843 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + }, + { + "time": 2623, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 51619, + "destinationPort": 53, + "payload": "ID=1320 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n1.2.3. A IN\n" + }, + { + "time": 2628, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 51619, + "payload": "ID=1320 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + }, + { + "time": 8112, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + } + ], + "00000000-0000-0000-0000-000000000403": [ + { + "time": 1041, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 8112, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + } + ], + "00000000-0000-0000-0000-000000000404": [ + { + "time": 1041, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 8112, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + }, + { + "time": 8112, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.20" + }, + { + "time": 8339, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 1 + }, + { + "time": 8339, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 9115, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 2 + }, + { + "time": 9116, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 10115, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 3 + }, + { + "time": 10115, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 11114, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 4 + }, + { + "time": 11115, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 4 + } + ], + "00000000-0000-0000-0000-000000000405": [ + { + "time": 1042, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 8112, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + } + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "rows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "3", + "192.168.0.20:52862", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "3", + "192.168.0.20:52862", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=61843 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. A IN\n" + ], + [ + "4", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "4", + "192.168.0.10:53", + "192.168.0.20:52862", + "UDP", + "Transport", + "" + ], + [ + "4", + "192.168.0.10:53", + "192.168.0.20:52862", + "DNS", + "Anwendung", + "ID=61843 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "5", + "192.168.0.20:51619", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "5", + "192.168.0.20:51619", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=1320 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n1.2.3. A IN\n" + ], + [ + "6", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "6", + "192.168.0.10:53", + "192.168.0.20:51619", + "UDP", + "Transport", + "" + ], + [ + "6", + "192.168.0.10:53", + "192.168.0.20:51619", + "DNS", + "Anwendung", + "ID=1320 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "7", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "7", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "8", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "9", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 138, Seq.-No.: 1" + ], + [ + "10", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 138, Seq.-No.: 1" + ], + [ + "11", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 138, Seq.-No.: 2" + ], + [ + "12", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 138, Seq.-No.: 2" + ], + [ + "13", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 138, Seq.-No.: 3" + ], + [ + "14", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 138, Seq.-No.: 3" + ], + [ + "15", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 138, Seq.-No.: 4" + ], + [ + "16", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 138, Seq.-No.: 4" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "3", + "192.168.0.20:52862", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "3", + "192.168.0.20:52862", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=61843 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. A IN\n" + ], + [ + "4", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "4", + "192.168.0.10:53", + "192.168.0.20:52862", + "UDP", + "Transport", + "" + ], + [ + "4", + "192.168.0.10:53", + "192.168.0.20:52862", + "DNS", + "Anwendung", + "ID=61843 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "5", + "192.168.0.20:51619", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "5", + "192.168.0.20:51619", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=1320 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n1.2.3. A IN\n" + ], + [ + "6", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "6", + "192.168.0.10:53", + "192.168.0.20:51619", + "UDP", + "Transport", + "" + ], + [ + "6", + "192.168.0.10:53", + "192.168.0.20:51619", + "DNS", + "Anwendung", + "ID=1320 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "7", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "7", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "3", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "4", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 138, Seq.-No.: 1" + ], + [ + "5", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 138, Seq.-No.: 1" + ], + [ + "6", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 138, Seq.-No.: 2" + ], + [ + "7", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 138, Seq.-No.: 2" + ], + [ + "8", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 138, Seq.-No.: 3" + ], + [ + "9", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 138, Seq.-No.: 3" + ], + [ + "10", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 138, Seq.-No.: 4" + ], + [ + "11", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 138, Seq.-No.: 4" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "layeredRows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "3", + "52862", + "53", + "UDP", + "Transport", + "" + ], + [ + "3", + null, + null, + "DNS", + "Anwendung", + "ID=61843 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. A IN\n" + ], + [ + "4", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "4", + "53", + "52862", + "UDP", + "Transport", + "" + ], + [ + "4", + null, + null, + "DNS", + "Anwendung", + "ID=61843 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "5", + "51619", + "53", + "UDP", + "Transport", + "" + ], + [ + "5", + null, + null, + "DNS", + "Anwendung", + "ID=1320 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n1.2.3. A IN\n" + ], + [ + "6", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "6", + "53", + "51619", + "UDP", + "Transport", + "" + ], + [ + "6", + null, + null, + "DNS", + "Anwendung", + "ID=1320 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "7", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "7", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "8", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "9", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 138, Seq.-No.: 1" + ], + [ + "10", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 138, Seq.-No.: 1" + ], + [ + "11", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 138, Seq.-No.: 2" + ], + [ + "12", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 138, Seq.-No.: 2" + ], + [ + "13", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 138, Seq.-No.: 3" + ], + [ + "14", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 138, Seq.-No.: 3" + ], + [ + "15", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 138, Seq.-No.: 4" + ], + [ + "16", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 138, Seq.-No.: 4" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "3", + "52862", + "53", + "UDP", + "Transport", + "" + ], + [ + "3", + null, + null, + "DNS", + "Anwendung", + "ID=61843 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \ngibtsnicht.filius.de. A IN\n" + ], + [ + "4", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "4", + "53", + "52862", + "UDP", + "Transport", + "" + ], + [ + "4", + null, + null, + "DNS", + "Anwendung", + "ID=61843 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "5", + "51619", + "53", + "UDP", + "Transport", + "" + ], + [ + "5", + null, + null, + "DNS", + "Anwendung", + "ID=1320 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n1.2.3. A IN\n" + ], + [ + "6", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "6", + "53", + "51619", + "UDP", + "Transport", + "" + ], + [ + "6", + null, + null, + "DNS", + "Anwendung", + "ID=1320 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n" + ], + [ + "7", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "7", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "3", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "4", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 138, Seq.-No.: 1" + ], + [ + "5", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 138, Seq.-No.: 1" + ], + [ + "6", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 138, Seq.-No.: 2" + ], + [ + "7", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 138, Seq.-No.: 2" + ], + [ + "8", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 138, Seq.-No.: 3" + ], + [ + "9", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 138, Seq.-No.: 3" + ], + [ + "10", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 138, Seq.-No.: 4" + ], + [ + "11", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 138, Seq.-No.: 4" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "acts": [ + [ + 500, + "00000000-0000-0000-0000-000000000401", + "ping" + ], + [ + 700, + "00000000-0000-0000-0000-000000000401", + "ping a b c" + ], + [ + 900, + "00000000-0000-0000-0000-000000000401", + "ping gibtsnicht.filius.de" + ], + [ + 2500, + "00000000-0000-0000-0000-000000000401", + "ping 1.2.3" + ], + [ + 4000, + "00000000-0000-0000-0000-000000000402", + "ping 10.0.0.2" + ], + [ + 4200, + "00000000-0000-0000-0000-000000000402", + "ping www.filius.de" + ], + [ + 8000, + "00000000-0000-0000-0000-000000000401", + "ping -x 192.168.0.31" + ] + ], + "events": [ + [ + 500, + "00000000-0000-0000-0000-000000000401", + "call", + "ping" + ], + [ + 503, + "00000000-0000-0000-0000-000000000401", + "text", + "ping - test connection to other computer\nUsage: ping \n the remote address as IP address or host name\n" + ], + [ + 700, + "00000000-0000-0000-0000-000000000401", + "call", + "ping a b c" + ], + [ + 701, + "00000000-0000-0000-0000-000000000401", + "text", + "ping - test connection to other computer\nUsage: ping \n the remote address as IP address or host name\n" + ], + [ + 900, + "00000000-0000-0000-0000-000000000401", + "call", + "ping gibtsnicht.filius.de" + ], + [ + 1393, + "00000000-0000-0000-0000-000000000401", + "text", + "Hostname konnte nicht aufgelöst werden!\nEventuell ist kein DNS-Server verfügbar.\n" + ], + [ + 2500, + "00000000-0000-0000-0000-000000000401", + "call", + "ping 1.2.3" + ], + [ + 2741, + "00000000-0000-0000-0000-000000000401", + "text", + "Hostname konnte nicht aufgelöst werden!\nEventuell ist kein DNS-Server verfügbar.\n" + ], + [ + 4001, + "00000000-0000-0000-0000-000000000402", + "call", + "ping 10.0.0.2" + ], + [ + 4001, + "00000000-0000-0000-0000-000000000402", + "text", + "Zieladresse nicht erreichbar" + ], + [ + 4200, + "00000000-0000-0000-0000-000000000402", + "call", + "ping www.filius.de" + ], + [ + 4201, + "00000000-0000-0000-0000-000000000402", + "text", + "Hostname konnte nicht aufgelöst werden!\nEventuell ist kein DNS-Server verfügbar.\n" + ], + [ + 8000, + "00000000-0000-0000-0000-000000000401", + "call", + "ping -x 192.168.0.31" + ], + [ + 8000, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 8001, + "00000000-0000-0000-0000-000000000401", + "text", + "PING 192.168.0.31 (192.168.0.31)" + ], + [ + 8453, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.31: icmp_seq=1 ttl=64 time=450ms" + ], + [ + 9227, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.31: icmp_seq=2 ttl=64 time=224ms" + ], + [ + 10227, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.31: icmp_seq=3 ttl=64 time=224ms" + ], + [ + 11226, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.31: icmp_seq=4 ttl=64 time=223ms" + ], + [ + 12004, + "00000000-0000-0000-0000-000000000401", + "text", + "\n--- -x Paketstatistik ---\n4 Paket(e) gesendet, 4 Paket(e) empfangen, 0% Paketverlust\n" + ], + [ + 12004, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ] + ] +} diff --git a/packages/core/test/scenarios/terminal-java-pingLan.java.json b/packages/core/test/scenarios/terminal-java-pingLan.java.json new file mode 100644 index 0000000..46a7713 --- /dev/null +++ b/packages/core/test/scenarios/terminal-java-pingLan.java.json @@ -0,0 +1,1076 @@ +{ + "frames": { + "00000000-0000-0000-0000-000000000401": [ + { + "time": 506, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + }, + { + "time": 743, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.20" + }, + { + "time": 747, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 1 + }, + { + "time": 972, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 1504, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 2 + }, + { + "time": 1728, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 2504, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 3 + }, + { + "time": 2727, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 3505, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 4 + }, + { + "time": 3728, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 4 + } + ], + "00000000-0000-0000-0000-000000000402": [ + { + "time": 629, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + } + ], + "00000000-0000-0000-0000-000000000403": [ + { + "time": 629, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + } + ], + "00000000-0000-0000-0000-000000000404": [ + { + "time": 629, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + }, + { + "time": 631, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.20" + }, + { + "time": 860, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 1 + }, + { + "time": 861, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 1616, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 2 + }, + { + "time": 1616, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 2616, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 3 + }, + { + "time": 2616, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 3616, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "sequence": 4 + }, + { + "time": 3616, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "sequence": 4 + } + ], + "00000000-0000-0000-0000-000000000405": [ + { + "time": 629, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + } + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "rows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 69, Seq.-No.: 1" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 69, Seq.-No.: 1" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 69, Seq.-No.: 2" + ], + [ + "6", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 69, Seq.-No.: 2" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 69, Seq.-No.: 3" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 69, Seq.-No.: 3" + ], + [ + "9", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 69, Seq.-No.: 4" + ], + [ + "10", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 69, Seq.-No.: 4" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 69, Seq.-No.: 1" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 69, Seq.-No.: 1" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 69, Seq.-No.: 2" + ], + [ + "6", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 69, Seq.-No.: 2" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 69, Seq.-No.: 3" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 69, Seq.-No.: 3" + ], + [ + "9", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 69, Seq.-No.: 4" + ], + [ + "10", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 69, Seq.-No.: 4" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "layeredRows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 69, Seq.-No.: 1" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 69, Seq.-No.: 1" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 69, Seq.-No.: 2" + ], + [ + "6", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 69, Seq.-No.: 2" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 69, Seq.-No.: 3" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 69, Seq.-No.: 3" + ], + [ + "9", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 69, Seq.-No.: 4" + ], + [ + "10", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 69, Seq.-No.: 4" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 69, Seq.-No.: 1" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 69, Seq.-No.: 1" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 69, Seq.-No.: 2" + ], + [ + "6", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 69, Seq.-No.: 2" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 69, Seq.-No.: 3" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 69, Seq.-No.: 3" + ], + [ + "9", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "192.168.0.31", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 69, Seq.-No.: 4" + ], + [ + "10", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.31", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 69, Seq.-No.: 4" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "acts": [ + [ + 500, + "00000000-0000-0000-0000-000000000401", + "ping 192.168.0.31" + ], + [ + 1500, + "00000000-0000-0000-0000-000000000401", + "arp" + ] + ], + "events": [ + [ + 501, + "00000000-0000-0000-0000-000000000401", + "call", + "ping 192.168.0.31" + ], + [ + 502, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 502, + "00000000-0000-0000-0000-000000000401", + "text", + "PING 192.168.0.31 (192.168.0.31)" + ], + [ + 974, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.31: icmp_seq=1 ttl=64 time=470ms" + ], + [ + 1500, + "00000000-0000-0000-0000-000000000401", + "call", + "arp" + ], + [ + 1728, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.31: icmp_seq=2 ttl=64 time=224ms" + ], + [ + 2727, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.31: icmp_seq=3 ttl=64 time=223ms" + ], + [ + 3728, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.31: icmp_seq=4 ttl=64 time=223ms" + ], + [ + 4507, + "00000000-0000-0000-0000-000000000401", + "text", + "\n--- 192.168.0.31 Paketstatistik ---\n4 Paket(e) gesendet, 4 Paket(e) empfangen, 0% Paketverlust\n" + ], + [ + 4507, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ], + [ + 4507, + "00000000-0000-0000-0000-000000000401", + "text", + "| Internetadresse | Physische Adresse |\n----------------------------------------\n| 192.168.0.31 | 02:00:00:00:04:14 |\n| 255.255.255.255 | FF:FF:FF:FF:FF:FF |\n----------------------------------------\n" + ] + ] +} diff --git a/packages/core/test/scenarios/terminal-java-pingNobody.java.json b/packages/core/test/scenarios/terminal-java-pingNobody.java.json new file mode 100644 index 0000000..3f5fdca --- /dev/null +++ b/packages/core/test/scenarios/terminal-java-pingNobody.java.json @@ -0,0 +1,3946 @@ +{ + "frames": { + "00000000-0000-0000-0000-000000000401": [ + { + "time": 508, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 3258, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 6014, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 8765, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 11515, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 14266, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 17016, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 19766, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 23506, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 23729, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.20" + }, + { + "time": 23731, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 59461, + "destinationPort": 53, + "payload": "ID=53257 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweg.filius.de. A IN\n" + }, + { + "time": 23967, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 59461, + "payload": "ID=53257 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweg.filius.de. A 3600 192.168.0.99\n" + }, + { + "time": 23968, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 26718, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 29469, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 32219, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 34969, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 37720, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 40470, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 43220, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + } + ], + "00000000-0000-0000-0000-000000000402": [ + { + "time": 632, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 3370, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 6126, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 8876, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 11627, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 14377, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 17128, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 19878, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 23618, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 23618, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.20" + }, + { + "time": 23844, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 59461, + "destinationPort": 53, + "payload": "ID=53257 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweg.filius.de. A IN\n" + }, + { + "time": 23856, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 59461, + "payload": "ID=53257 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweg.filius.de. A 3600 192.168.0.99\n" + }, + { + "time": 24079, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 26829, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 29580, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 32330, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 35081, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 37832, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 40581, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 43332, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + } + ], + "00000000-0000-0000-0000-000000000403": [ + { + "time": 632, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 3370, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 6126, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 8876, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 11627, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 14377, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 17128, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 19878, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 23618, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 24079, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 26829, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 29580, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 32330, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 35081, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 37832, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 40582, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 43332, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + } + ], + "00000000-0000-0000-0000-000000000404": [ + { + "time": 632, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 3370, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 6126, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 8876, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 11627, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 14377, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 17128, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 19878, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 23618, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 24079, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 26829, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 29580, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 32330, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 35081, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 37833, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 40581, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 43332, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + } + ], + "00000000-0000-0000-0000-000000000405": [ + { + "time": 632, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 3370, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 6126, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 8877, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 11627, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 14377, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 17128, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 19878, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 23618, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 24079, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 26829, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 29580, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 32330, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 35081, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 37832, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 40581, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 43332, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + } + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "rows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "3", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "4", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "5", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "6", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "7", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "7", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "8", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "8", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "9", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "9", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "10", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "10", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "11", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "11", + "192.168.0.20:59461", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "11", + "192.168.0.20:59461", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=53257 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweg.filius.de. A IN\n" + ], + [ + "12", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "12", + "192.168.0.10:53", + "192.168.0.20:59461", + "UDP", + "Transport", + "" + ], + [ + "12", + "192.168.0.10:53", + "192.168.0.20:59461", + "DNS", + "Anwendung", + "ID=53257 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweg.filius.de. A 3600 192.168.0.99\n" + ], + [ + "13", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "13", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "14", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "14", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "15", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "15", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "16", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "16", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "17", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "17", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "18", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "18", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "19", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "19", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "20", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "20", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "3", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "4", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "5", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "6", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "7", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "7", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "8", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "8", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "9", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "9", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "10", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "10", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "11", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "11", + "192.168.0.20:59461", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "11", + "192.168.0.20:59461", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=53257 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweg.filius.de. A IN\n" + ], + [ + "12", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "12", + "192.168.0.10:53", + "192.168.0.20:59461", + "UDP", + "Transport", + "" + ], + [ + "12", + "192.168.0.10:53", + "192.168.0.20:59461", + "DNS", + "Anwendung", + "ID=53257 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweg.filius.de. A 3600 192.168.0.99\n" + ], + [ + "13", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "13", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "14", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "14", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "15", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "15", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "16", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "16", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "17", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "17", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "18", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "18", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "19", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "19", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "20", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "20", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "3", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "4", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "5", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "6", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "7", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "7", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "8", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "8", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "9", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "9", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "10", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "10", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "11", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "11", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "12", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "12", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "13", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "13", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "14", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "14", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "15", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "15", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "16", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "16", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "17", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "17", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "3", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "4", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "5", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "6", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "7", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "7", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "8", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "8", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "9", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "9", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "10", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "10", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "11", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "11", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "12", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "12", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "13", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "13", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "14", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "14", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "15", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "15", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "16", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "16", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "17", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "17", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "3", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "4", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "5", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "6", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "7", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "7", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "8", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "8", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "9", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "9", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "10", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "10", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "11", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "11", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "12", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "12", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "13", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "13", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "14", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "14", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "15", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "15", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "16", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "16", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "17", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "17", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "layeredRows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "3", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "4", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "5", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "6", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "7", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "7", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "8", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "8", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "9", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "9", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "10", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "10", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "11", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "11", + "59461", + "53", + "UDP", + "Transport", + "" + ], + [ + "11", + null, + null, + "DNS", + "Anwendung", + "ID=53257 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweg.filius.de. A IN\n" + ], + [ + "12", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "12", + "53", + "59461", + "UDP", + "Transport", + "" + ], + [ + "12", + null, + null, + "DNS", + "Anwendung", + "ID=53257 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweg.filius.de. A 3600 192.168.0.99\n" + ], + [ + "13", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "13", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "14", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "14", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "15", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "15", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "16", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "16", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "17", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "17", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "18", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "18", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "19", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "19", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "20", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "20", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "3", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "4", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "5", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "6", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "7", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "7", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "8", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "8", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "9", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "9", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "10", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "10", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "11", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "11", + "59461", + "53", + "UDP", + "Transport", + "" + ], + [ + "11", + null, + null, + "DNS", + "Anwendung", + "ID=53257 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweg.filius.de. A IN\n" + ], + [ + "12", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "12", + "53", + "59461", + "UDP", + "Transport", + "" + ], + [ + "12", + null, + null, + "DNS", + "Anwendung", + "ID=53257 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweg.filius.de. A 3600 192.168.0.99\n" + ], + [ + "13", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "13", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "14", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "14", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "15", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "15", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "16", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "16", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "17", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "17", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "18", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "18", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "19", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "19", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "20", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "20", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "3", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "4", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "5", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "6", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "7", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "7", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "8", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "8", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "9", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "9", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "10", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "10", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "11", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "11", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "12", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "12", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "13", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "13", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "14", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "14", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "15", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "15", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "16", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "16", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "17", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "17", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "3", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "4", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "5", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "6", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "7", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "7", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "8", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "8", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "9", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "9", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "10", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "10", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "11", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "11", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "12", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "12", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "13", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "13", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "14", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "14", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "15", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "15", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "16", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "16", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "17", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "17", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "3", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "4", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "5", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "6", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "7", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "7", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "8", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "8", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "9", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "9", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "10", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "10", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "11", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "11", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "12", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "12", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "13", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "13", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "14", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "14", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "15", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "15", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "16", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "16", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "17", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "17", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "acts": [ + [ + 500, + "00000000-0000-0000-0000-000000000401", + "ping 192.168.0.99" + ], + [ + 23500, + "00000000-0000-0000-0000-000000000401", + "ping weg.filius.de" + ] + ], + "events": [ + [ + 501, + "00000000-0000-0000-0000-000000000401", + "call", + "ping 192.168.0.99" + ], + [ + 503, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 503, + "00000000-0000-0000-0000-000000000401", + "text", + "PING 192.168.0.99 (192.168.0.99)" + ], + [ + 6014, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.99 (192.168.0.99): icmp_seq=1 -- Timeout!" + ], + [ + 11515, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.99 (192.168.0.99): icmp_seq=2 -- Timeout!" + ], + [ + 17016, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.99 (192.168.0.99): icmp_seq=3 -- Timeout!" + ], + [ + 22517, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.99 (192.168.0.99): icmp_seq=4 -- Timeout!" + ], + [ + 22518, + "00000000-0000-0000-0000-000000000401", + "text", + "\n--- 192.168.0.99 Paketstatistik ---\n4 Paket(e) gesendet, 0 Paket(e) empfangen, 100% Paketverlust\n" + ], + [ + 22518, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ], + [ + 23501, + "00000000-0000-0000-0000-000000000401", + "call", + "ping weg.filius.de" + ], + [ + 23968, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 23968, + "00000000-0000-0000-0000-000000000401", + "text", + "PING weg.filius.de (192.168.0.99)" + ], + [ + 29468, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom weg.filius.de (192.168.0.99): icmp_seq=1 -- Timeout!" + ], + [ + 34969, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom weg.filius.de (192.168.0.99): icmp_seq=2 -- Timeout!" + ], + [ + 40470, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom weg.filius.de (192.168.0.99): icmp_seq=3 -- Timeout!" + ], + [ + 45971, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom weg.filius.de (192.168.0.99): icmp_seq=4 -- Timeout!" + ], + [ + 45971, + "00000000-0000-0000-0000-000000000401", + "text", + "\n--- weg.filius.de Paketstatistik ---\n4 Paket(e) gesendet, 0 Paket(e) empfangen, 100% Paketverlust\n" + ], + [ + 45971, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ] + ] +} diff --git a/packages/core/test/scenarios/terminal-java-pingRouted.java.json b/packages/core/test/scenarios/terminal-java-pingRouted.java.json new file mode 100644 index 0000000..fd2174f --- /dev/null +++ b/packages/core/test/scenarios/terminal-java-pingRouted.java.json @@ -0,0 +1,3242 @@ +{ + "frames": { + "00000000-0000-0000-0000-000000000401": [ + { + "time": 512, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 748, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.20" + }, + { + "time": 750, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 57181, + "destinationPort": 53, + "payload": "ID=24952 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfern.filius.de. A IN\n" + }, + { + "time": 982, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 57181, + "payload": "ID=24952 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nfern.filius.de. A 3600 10.0.0.2\n" + }, + { + "time": 983, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.1" + }, + { + "time": 1206, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.20" + }, + { + "time": 1209, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.2", + "sequence": 1 + }, + { + "time": 1657, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 1986, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.2", + "sequence": 2 + }, + { + "time": 2320, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 2985, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.2", + "sequence": 3 + }, + { + "time": 3320, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 3986, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.2", + "sequence": 4 + }, + { + "time": 4321, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.20", + "sequence": 4 + }, + { + "time": 7001, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.1", + "sequence": 1 + }, + { + "time": 7224, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 8001, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.1", + "sequence": 2 + }, + { + "time": 8224, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 9001, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.1", + "sequence": 3 + }, + { + "time": 9224, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 10002, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.1", + "sequence": 4 + }, + { + "time": 10224, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 4 + } + ], + "00000000-0000-0000-0000-000000000402": [ + { + "time": 634, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 636, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.20" + }, + { + "time": 864, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 17, + "sourcePort": 57181, + "destinationPort": 53, + "payload": "ID=24952 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfern.filius.de. A IN\n" + }, + { + "time": 870, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.10", + "destinationIp": "192.168.0.20", + "protocol": 17, + "sourcePort": 53, + "destinationPort": 57181, + "payload": "ID=24952 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nfern.filius.de. A 3600 10.0.0.2\n" + }, + { + "time": 1095, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.1" + } + ], + "00000000-0000-0000-0000-000000000403": [ + { + "time": 634, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 1095, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.1" + } + ], + "00000000-0000-0000-0000-000000000404": [ + { + "time": 634, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 1095, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.1" + } + ], + "00000000-0000-0000-0000-000000000405": [ + { + "time": 634, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 1095, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.1" + }, + { + "time": 1095, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.20" + }, + { + "time": 1322, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.2", + "sequence": 1 + }, + { + "time": 1546, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 2097, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.2", + "sequence": 2 + }, + { + "time": 2209, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 3097, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.2", + "sequence": 3 + }, + { + "time": 3209, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 4097, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.2", + "sequence": 4 + }, + { + "time": 4210, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.20", + "sequence": 4 + }, + { + "time": 7112, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.1", + "sequence": 1 + }, + { + "time": 7112, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 8113, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.1", + "sequence": 2 + }, + { + "time": 8113, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 9113, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.1", + "sequence": 3 + }, + { + "time": 9113, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 10113, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.1", + "sequence": 4 + }, + { + "time": 10113, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 4 + } + ], + "00000000-0000-0000-0000-000000000405#1": [ + { + "time": 1322, + "source": "02:00:00:00:04:52", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "10.0.0.1", + "targetIp": "10.0.0.2" + }, + { + "time": 1433, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "arp": 2, + "senderIp": "10.0.0.2", + "targetIp": "10.0.0.1" + }, + { + "time": 1434, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.2", + "sequence": 1 + }, + { + "time": 1545, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 2097, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.2", + "sequence": 2 + }, + { + "time": 2209, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 3097, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.2", + "sequence": 3 + }, + { + "time": 3209, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 4098, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.2", + "sequence": 4 + }, + { + "time": 4209, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.20", + "sequence": 4 + } + ], + "00000000-0000-0000-0000-000000000406": [ + { + "time": 1378, + "source": "02:00:00:00:04:52", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "10.0.0.1", + "targetIp": "10.0.0.2" + }, + { + "time": 1378, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "arp": 2, + "senderIp": "10.0.0.2", + "targetIp": "10.0.0.1" + }, + { + "time": 1489, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.2", + "sequence": 1 + }, + { + "time": 1490, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.20", + "sequence": 1 + }, + { + "time": 2153, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.2", + "sequence": 2 + }, + { + "time": 2153, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.20", + "sequence": 2 + }, + { + "time": 3153, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.2", + "sequence": 3 + }, + { + "time": 3153, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.20", + "sequence": 3 + }, + { + "time": 4153, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.2", + "sequence": 4 + }, + { + "time": 4154, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "icmp": 0, + "icmpCode": 0, + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.20", + "sequence": 4 + } + ] + }, + "rows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "3", + "192.168.0.20:57181", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "3", + "192.168.0.20:57181", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=24952 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfern.filius.de. A IN\n" + ], + [ + "4", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "4", + "192.168.0.10:53", + "192.168.0.20:57181", + "UDP", + "Transport", + "" + ], + [ + "4", + "192.168.0.10:53", + "192.168.0.20:57181", + "DNS", + "Anwendung", + "ID=24952 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nfern.filius.de. A 3600 10.0.0.2\n" + ], + [ + "5", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.20", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "6", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.1", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:51 [op=REPLY, sender=02:00:00:00:04:51|192.168.0.1, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 506, Seq.-No.: 1" + ], + [ + "8", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 63, Identifier: 506, Seq.-No.: 1" + ], + [ + "9", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 506, Seq.-No.: 2" + ], + [ + "10", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 63, Identifier: 506, Seq.-No.: 2" + ], + [ + "11", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 506, Seq.-No.: 3" + ], + [ + "12", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 63, Identifier: 506, Seq.-No.: 3" + ], + [ + "13", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 506, Seq.-No.: 4" + ], + [ + "14", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 63, Identifier: 506, Seq.-No.: 4" + ], + [ + "15", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "10.0.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 507, Seq.-No.: 1" + ], + [ + "16", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 507, Seq.-No.: 1" + ], + [ + "17", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.20", + "10.0.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 507, Seq.-No.: 2" + ], + [ + "18", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 507, Seq.-No.: 2" + ], + [ + "19", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.20", + "10.0.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 507, Seq.-No.: 3" + ], + [ + "20", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 507, Seq.-No.: 3" + ], + [ + "21", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.20", + "10.0.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 507, Seq.-No.: 4" + ], + [ + "22", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 507, Seq.-No.: 4" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "3", + "192.168.0.20:57181", + "192.168.0.10:53", + "UDP", + "Transport", + "" + ], + [ + "3", + "192.168.0.20:57181", + "192.168.0.10:53", + "DNS", + "Anwendung", + "ID=24952 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfern.filius.de. A IN\n" + ], + [ + "4", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "4", + "192.168.0.10:53", + "192.168.0.20:57181", + "UDP", + "Transport", + "" + ], + [ + "4", + "192.168.0.10:53", + "192.168.0.20:57181", + "DNS", + "Anwendung", + "ID=24952 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nfern.filius.de. A 3600 10.0.0.2\n" + ], + [ + "5", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.20", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "3", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.1", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:51 [op=REPLY, sender=02:00:00:00:04:51|192.168.0.1, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "4", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 506, Seq.-No.: 1" + ], + [ + "5", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 63, Identifier: 506, Seq.-No.: 1" + ], + [ + "6", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 506, Seq.-No.: 2" + ], + [ + "7", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 63, Identifier: 506, Seq.-No.: 2" + ], + [ + "8", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 506, Seq.-No.: 3" + ], + [ + "9", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 63, Identifier: 506, Seq.-No.: 3" + ], + [ + "10", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 506, Seq.-No.: 4" + ], + [ + "11", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 63, Identifier: 506, Seq.-No.: 4" + ], + [ + "12", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "10.0.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 507, Seq.-No.: 1" + ], + [ + "13", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 507, Seq.-No.: 1" + ], + [ + "14", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.20", + "10.0.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 507, Seq.-No.: 2" + ], + [ + "15", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 507, Seq.-No.: 2" + ], + [ + "16", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "10.0.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 507, Seq.-No.: 3" + ], + [ + "17", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 507, Seq.-No.: 3" + ], + [ + "18", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.20", + "10.0.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 507, Seq.-No.: 4" + ], + [ + "19", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 507, Seq.-No.: 4" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [ + [ + "1", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "10.0.0.1", + "10.0.0.2", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.2 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.2]" + ], + [ + "2", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "10.0.0.2", + "10.0.0.1", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:16 [op=REPLY, sender=02:00:00:00:04:16|10.0.0.2, target=02:00:00:00:04:52|10.0.0.1]" + ], + [ + "3", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 63, Identifier: 506, Seq.-No.: 1" + ], + [ + "4", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 506, Seq.-No.: 1" + ], + [ + "5", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 63, Identifier: 506, Seq.-No.: 2" + ], + [ + "6", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 506, Seq.-No.: 2" + ], + [ + "7", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 63, Identifier: 506, Seq.-No.: 3" + ], + [ + "8", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 506, Seq.-No.: 3" + ], + [ + "9", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 63, Identifier: 506, Seq.-No.: 4" + ], + [ + "10", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 506, Seq.-No.: 4" + ] + ], + "00000000-0000-0000-0000-000000000406": [ + [ + "1", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "10.0.0.1", + "10.0.0.2", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.2 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.2]" + ], + [ + "2", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "10.0.0.2", + "10.0.0.1", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:16 [op=REPLY, sender=02:00:00:00:04:16|10.0.0.2, target=02:00:00:00:04:52|10.0.0.1]" + ], + [ + "3", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 63, Identifier: 506, Seq.-No.: 1" + ], + [ + "4", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 506, Seq.-No.: 1" + ], + [ + "5", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 63, Identifier: 506, Seq.-No.: 2" + ], + [ + "6", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 506, Seq.-No.: 2" + ], + [ + "7", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 63, Identifier: 506, Seq.-No.: 3" + ], + [ + "8", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 506, Seq.-No.: 3" + ], + [ + "9", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 63, Identifier: 506, Seq.-No.: 4" + ], + [ + "10", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 506, Seq.-No.: 4" + ] + ] + }, + "layeredRows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "3", + "57181", + "53", + "UDP", + "Transport", + "" + ], + [ + "3", + null, + null, + "DNS", + "Anwendung", + "ID=24952 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfern.filius.de. A IN\n" + ], + [ + "4", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "4", + "53", + "57181", + "UDP", + "Transport", + "" + ], + [ + "4", + null, + null, + "DNS", + "Anwendung", + "ID=24952 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nfern.filius.de. A 3600 10.0.0.2\n" + ], + [ + "5", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.20", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "6", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "192.168.0.1", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:51 [op=REPLY, sender=02:00:00:00:04:51|192.168.0.1, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 506, Seq.-No.: 1" + ], + [ + "8", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 63, Identifier: 506, Seq.-No.: 1" + ], + [ + "9", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 506, Seq.-No.: 2" + ], + [ + "10", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 63, Identifier: 506, Seq.-No.: 2" + ], + [ + "11", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 506, Seq.-No.: 3" + ], + [ + "12", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 63, Identifier: 506, Seq.-No.: 3" + ], + [ + "13", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 506, Seq.-No.: 4" + ], + [ + "14", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 63, Identifier: 506, Seq.-No.: 4" + ], + [ + "15", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "10.0.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 507, Seq.-No.: 1" + ], + [ + "16", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 507, Seq.-No.: 1" + ], + [ + "17", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.20", + "10.0.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 507, Seq.-No.: 2" + ], + [ + "18", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 507, Seq.-No.: 2" + ], + [ + "19", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.20", + "10.0.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 507, Seq.-No.: 3" + ], + [ + "20", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 507, Seq.-No.: 3" + ], + [ + "21", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.20", + "10.0.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 507, Seq.-No.: 4" + ], + [ + "22", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 507, Seq.-No.: 4" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "3", + "57181", + "53", + "UDP", + "Transport", + "" + ], + [ + "3", + null, + null, + "DNS", + "Anwendung", + "ID=24952 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfern.filius.de. A IN\n" + ], + [ + "4", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.10", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 17, TTL: 64" + ], + [ + "4", + "53", + "57181", + "UDP", + "Transport", + "" + ], + [ + "4", + null, + null, + "DNS", + "Anwendung", + "ID=24952 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nfern.filius.de. A 3600 10.0.0.2\n" + ], + [ + "5", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.20", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "3", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.1", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:51 [op=REPLY, sender=02:00:00:00:04:51|192.168.0.1, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "4", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 506, Seq.-No.: 1" + ], + [ + "5", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 63, Identifier: 506, Seq.-No.: 1" + ], + [ + "6", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 506, Seq.-No.: 2" + ], + [ + "7", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 63, Identifier: 506, Seq.-No.: 2" + ], + [ + "8", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 506, Seq.-No.: 3" + ], + [ + "9", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 63, Identifier: 506, Seq.-No.: 3" + ], + [ + "10", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 506, Seq.-No.: 4" + ], + [ + "11", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 63, Identifier: 506, Seq.-No.: 4" + ], + [ + "12", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "10.0.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 507, Seq.-No.: 1" + ], + [ + "13", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 507, Seq.-No.: 1" + ], + [ + "14", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.20", + "10.0.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 507, Seq.-No.: 2" + ], + [ + "15", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 507, Seq.-No.: 2" + ], + [ + "16", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "10.0.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 507, Seq.-No.: 3" + ], + [ + "17", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 507, Seq.-No.: 3" + ], + [ + "18", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.20", + "10.0.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 507, Seq.-No.: 4" + ], + [ + "19", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 507, Seq.-No.: 4" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [ + [ + "1", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "10.0.0.1", + "10.0.0.2", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.2 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.2]" + ], + [ + "2", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "10.0.0.2", + "10.0.0.1", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:16 [op=REPLY, sender=02:00:00:00:04:16|10.0.0.2, target=02:00:00:00:04:52|10.0.0.1]" + ], + [ + "3", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 63, Identifier: 506, Seq.-No.: 1" + ], + [ + "4", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 506, Seq.-No.: 1" + ], + [ + "5", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 63, Identifier: 506, Seq.-No.: 2" + ], + [ + "6", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 506, Seq.-No.: 2" + ], + [ + "7", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 63, Identifier: 506, Seq.-No.: 3" + ], + [ + "8", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 506, Seq.-No.: 3" + ], + [ + "9", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 63, Identifier: 506, Seq.-No.: 4" + ], + [ + "10", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 506, Seq.-No.: 4" + ] + ], + "00000000-0000-0000-0000-000000000406": [ + [ + "1", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "10.0.0.1", + "10.0.0.2", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.2 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.2]" + ], + [ + "2", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "10.0.0.2", + "10.0.0.1", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:16 [op=REPLY, sender=02:00:00:00:04:16|10.0.0.2, target=02:00:00:00:04:52|10.0.0.1]" + ], + [ + "3", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 63, Identifier: 506, Seq.-No.: 1" + ], + [ + "4", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 506, Seq.-No.: 1" + ], + [ + "5", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 63, Identifier: 506, Seq.-No.: 2" + ], + [ + "6", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 506, Seq.-No.: 2" + ], + [ + "7", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 63, Identifier: 506, Seq.-No.: 3" + ], + [ + "8", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 506, Seq.-No.: 3" + ], + [ + "9", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "10.0.0.2", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 63, Identifier: 506, Seq.-No.: 4" + ], + [ + "10", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "10.0.0.2", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Echo Reply (pong), TTL: 64, Identifier: 506, Seq.-No.: 4" + ] + ] + }, + "acts": [ + [ + 500, + "00000000-0000-0000-0000-000000000401", + "ping fern.filius.de" + ], + [ + 6500, + "00000000-0000-0000-0000-000000000401", + "arp" + ], + [ + 6700, + "00000000-0000-0000-0000-000000000406", + "arp" + ], + [ + 7000, + "00000000-0000-0000-0000-000000000401", + "ping 10.0.0.1" + ] + ], + "events": [ + [ + 500, + "00000000-0000-0000-0000-000000000401", + "call", + "ping fern.filius.de" + ], + [ + 983, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 983, + "00000000-0000-0000-0000-000000000401", + "text", + "PING fern.filius.de (10.0.0.2)" + ], + [ + 1659, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 10.0.0.2: icmp_seq=1 ttl=63 time=674ms" + ], + [ + 2321, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 10.0.0.2: icmp_seq=2 ttl=63 time=336ms" + ], + [ + 3321, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 10.0.0.2: icmp_seq=3 ttl=63 time=335ms" + ], + [ + 4321, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 10.0.0.2: icmp_seq=4 ttl=63 time=335ms" + ], + [ + 4988, + "00000000-0000-0000-0000-000000000401", + "text", + "\n--- fern.filius.de Paketstatistik ---\n4 Paket(e) gesendet, 4 Paket(e) empfangen, 0% Paketverlust\n" + ], + [ + 4988, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ], + [ + 6500, + "00000000-0000-0000-0000-000000000401", + "call", + "arp" + ], + [ + 6501, + "00000000-0000-0000-0000-000000000401", + "text", + "| Internetadresse | Physische Adresse |\n----------------------------------------\n| 192.168.0.1 | 02:00:00:00:04:51 |\n| 255.255.255.255 | FF:FF:FF:FF:FF:FF |\n| 192.168.0.10 | 02:00:00:00:04:12 |\n----------------------------------------\n" + ], + [ + 6700, + "00000000-0000-0000-0000-000000000406", + "call", + "arp" + ], + [ + 6701, + "00000000-0000-0000-0000-000000000406", + "text", + "| Internetadresse | Physische Adresse |\n----------------------------------------\n| 255.255.255.255 | FF:FF:FF:FF:FF:FF |\n| 10.0.0.1 | 02:00:00:00:04:52 |\n----------------------------------------\n" + ], + [ + 7000, + "00000000-0000-0000-0000-000000000401", + "call", + "ping 10.0.0.1" + ], + [ + 7001, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 7001, + "00000000-0000-0000-0000-000000000401", + "text", + "PING 10.0.0.1 (10.0.0.1)" + ], + [ + 7224, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.1: icmp_seq=1 ttl=64 time=223ms" + ], + [ + 8224, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.1: icmp_seq=2 ttl=64 time=223ms" + ], + [ + 9224, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.1: icmp_seq=3 ttl=64 time=223ms" + ], + [ + 10224, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 192.168.0.1: icmp_seq=4 ttl=64 time=223ms" + ], + [ + 11001, + "00000000-0000-0000-0000-000000000401", + "text", + "\n--- 10.0.0.1 Paketstatistik ---\n4 Paket(e) gesendet, 4 Paket(e) empfangen, 0% Paketverlust\n" + ], + [ + 11001, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ] + ] +} diff --git a/packages/core/test/scenarios/terminal-java-pingSelf.java.json b/packages/core/test/scenarios/terminal-java-pingSelf.java.json new file mode 100644 index 0000000..26c548e --- /dev/null +++ b/packages/core/test/scenarios/terminal-java-pingSelf.java.json @@ -0,0 +1,210 @@ +{ + "frames": { + "00000000-0000-0000-0000-000000000401": [], + "00000000-0000-0000-0000-000000000402": [], + "00000000-0000-0000-0000-000000000403": [], + "00000000-0000-0000-0000-000000000404": [], + "00000000-0000-0000-0000-000000000405": [], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "rows": { + "00000000-0000-0000-0000-000000000401": [], + "00000000-0000-0000-0000-000000000402": [], + "00000000-0000-0000-0000-000000000403": [], + "00000000-0000-0000-0000-000000000404": [], + "00000000-0000-0000-0000-000000000405": [], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "layeredRows": { + "00000000-0000-0000-0000-000000000401": [], + "00000000-0000-0000-0000-000000000402": [], + "00000000-0000-0000-0000-000000000403": [], + "00000000-0000-0000-0000-000000000404": [], + "00000000-0000-0000-0000-000000000405": [], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "acts": [ + [ + 500, + "00000000-0000-0000-0000-000000000401", + "ping 192.168.0.20" + ], + [ + 6000, + "00000000-0000-0000-0000-000000000401", + "ping localhost" + ], + [ + 11500, + "00000000-0000-0000-0000-000000000401", + "ping 127.0.0.1" + ] + ], + "events": [ + [ + 500, + "00000000-0000-0000-0000-000000000401", + "call", + "ping 192.168.0.20" + ], + [ + 502, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 502, + "00000000-0000-0000-0000-000000000401", + "text", + "PING 192.168.0.20 (192.168.0.20)" + ], + [ + 508, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 127.0.0.1: icmp_seq=1 ttl=64 time=4ms" + ], + [ + 1504, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 127.0.0.1: icmp_seq=2 ttl=64 time=0ms" + ], + [ + 2505, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 127.0.0.1: icmp_seq=3 ttl=64 time=1ms" + ], + [ + 3504, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 127.0.0.1: icmp_seq=4 ttl=64 time=0ms" + ], + [ + 4506, + "00000000-0000-0000-0000-000000000401", + "text", + "\n--- 192.168.0.20 Paketstatistik ---\n4 Paket(e) gesendet, 4 Paket(e) empfangen, 0% Paketverlust\n" + ], + [ + 4506, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ], + [ + 6000, + "00000000-0000-0000-0000-000000000401", + "call", + "ping localhost" + ], + [ + 6001, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 6001, + "00000000-0000-0000-0000-000000000401", + "text", + "PING localhost (127.0.0.1)" + ], + [ + 6001, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 127.0.0.1: icmp_seq=1 ttl=64 time=0ms" + ], + [ + 7002, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 127.0.0.1: icmp_seq=2 ttl=64 time=1ms" + ], + [ + 8001, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 127.0.0.1: icmp_seq=3 ttl=64 time=0ms" + ], + [ + 9002, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 127.0.0.1: icmp_seq=4 ttl=64 time=1ms" + ], + [ + 10001, + "00000000-0000-0000-0000-000000000401", + "text", + "\n--- localhost Paketstatistik ---\n4 Paket(e) gesendet, 4 Paket(e) empfangen, 0% Paketverlust\n" + ], + [ + 10001, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ], + [ + 11500, + "00000000-0000-0000-0000-000000000401", + "call", + "ping 127.0.0.1" + ], + [ + 11500, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 11500, + "00000000-0000-0000-0000-000000000401", + "text", + "PING 127.0.0.1 (127.0.0.1)" + ], + [ + 11501, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 127.0.0.1: icmp_seq=1 ttl=64 time=1ms" + ], + [ + 12500, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 127.0.0.1: icmp_seq=2 ttl=64 time=0ms" + ], + [ + 13501, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 127.0.0.1: icmp_seq=3 ttl=64 time=1ms" + ], + [ + 14501, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 127.0.0.1: icmp_seq=4 ttl=64 time=0ms" + ], + [ + 15503, + "00000000-0000-0000-0000-000000000401", + "text", + "\n--- 127.0.0.1 Paketstatistik ---\n4 Paket(e) gesendet, 4 Paket(e) empfangen, 0% Paketverlust\n" + ], + [ + 15503, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ] + ] +} diff --git a/packages/core/test/scenarios/terminal-java-pingUnreachable.java.json b/packages/core/test/scenarios/terminal-java-pingUnreachable.java.json new file mode 100644 index 0000000..162e17d --- /dev/null +++ b/packages/core/test/scenarios/terminal-java-pingUnreachable.java.json @@ -0,0 +1,2436 @@ +{ + "frames": { + "00000000-0000-0000-0000-000000000401": [ + { + "time": 517, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.1" + }, + { + "time": 796, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.20" + }, + { + "time": 811, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.99", + "sequence": 1 + }, + { + "time": 3570, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.99", + "sequence": 2 + }, + { + "time": 6320, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.99", + "sequence": 3 + }, + { + "time": 6554, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 3, + "icmpCode": 1, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 0 + }, + { + "time": 6555, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.99", + "sequence": 4 + }, + { + "time": 12050, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 3, + "icmpCode": 1, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 0 + }, + { + "time": 17555, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 3, + "icmpCode": 1, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 0 + }, + { + "time": 23060, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 3, + "icmpCode": 1, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 0 + }, + { + "time": 40000, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "172.16.0.1", + "sequence": 1 + }, + { + "time": 40223, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 3, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 0 + }, + { + "time": 40223, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "172.16.0.1", + "sequence": 2 + }, + { + "time": 40446, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 3, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 0 + }, + { + "time": 40446, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "172.16.0.1", + "sequence": 3 + }, + { + "time": 40669, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 3, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 0 + }, + { + "time": 40669, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "172.16.0.1", + "sequence": 4 + }, + { + "time": 40892, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 3, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 0 + } + ], + "00000000-0000-0000-0000-000000000402": [ + { + "time": 703, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.1" + } + ], + "00000000-0000-0000-0000-000000000403": [ + { + "time": 699, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.1" + } + ], + "00000000-0000-0000-0000-000000000404": [ + { + "time": 672, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.1" + } + ], + "00000000-0000-0000-0000-000000000405": [ + { + "time": 674, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.1" + }, + { + "time": 677, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.20" + }, + { + "time": 931, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.99", + "sequence": 1 + }, + { + "time": 3685, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.99", + "sequence": 2 + }, + { + "time": 6437, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.99", + "sequence": 3 + }, + { + "time": 6437, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 3, + "icmpCode": 1, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 0 + }, + { + "time": 6668, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "10.0.0.99", + "sequence": 4 + }, + { + "time": 11939, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 3, + "icmpCode": 1, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 0 + }, + { + "time": 17440, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 3, + "icmpCode": 1, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 0 + }, + { + "time": 22943, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 3, + "icmpCode": 1, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 0 + }, + { + "time": 40111, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "172.16.0.1", + "sequence": 1 + }, + { + "time": 40112, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 3, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 0 + }, + { + "time": 40334, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "172.16.0.1", + "sequence": 2 + }, + { + "time": 40335, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 3, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 0 + }, + { + "time": 40557, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "172.16.0.1", + "sequence": 3 + }, + { + "time": 40558, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 3, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 0 + }, + { + "time": 40780, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:51", + "icmp": 8, + "icmpCode": 0, + "sourceIp": "192.168.0.20", + "destinationIp": "172.16.0.1", + "sequence": 4 + }, + { + "time": 40780, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:11", + "icmp": 3, + "icmpCode": 0, + "sourceIp": "192.168.0.1", + "destinationIp": "192.168.0.20", + "sequence": 0 + } + ], + "00000000-0000-0000-0000-000000000405#1": [ + { + "time": 932, + "source": "02:00:00:00:04:52", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "10.0.0.1", + "targetIp": "10.0.0.99" + }, + { + "time": 3686, + "source": "02:00:00:00:04:52", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "10.0.0.1", + "targetIp": "10.0.0.99" + }, + { + "time": 6438, + "source": "02:00:00:00:04:52", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "10.0.0.1", + "targetIp": "10.0.0.99" + }, + { + "time": 9188, + "source": "02:00:00:00:04:52", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "10.0.0.1", + "targetIp": "10.0.0.99" + }, + { + "time": 11939, + "source": "02:00:00:00:04:52", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "10.0.0.1", + "targetIp": "10.0.0.99" + }, + { + "time": 14689, + "source": "02:00:00:00:04:52", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "10.0.0.1", + "targetIp": "10.0.0.99" + }, + { + "time": 17441, + "source": "02:00:00:00:04:52", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "10.0.0.1", + "targetIp": "10.0.0.99" + }, + { + "time": 20192, + "source": "02:00:00:00:04:52", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "10.0.0.1", + "targetIp": "10.0.0.99" + } + ], + "00000000-0000-0000-0000-000000000406": [ + { + "time": 990, + "source": "02:00:00:00:04:52", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "10.0.0.1", + "targetIp": "10.0.0.99" + }, + { + "time": 3745, + "source": "02:00:00:00:04:52", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "10.0.0.1", + "targetIp": "10.0.0.99" + }, + { + "time": 6494, + "source": "02:00:00:00:04:52", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "10.0.0.1", + "targetIp": "10.0.0.99" + }, + { + "time": 9245, + "source": "02:00:00:00:04:52", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "10.0.0.1", + "targetIp": "10.0.0.99" + }, + { + "time": 11994, + "source": "02:00:00:00:04:52", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "10.0.0.1", + "targetIp": "10.0.0.99" + }, + { + "time": 14745, + "source": "02:00:00:00:04:52", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "10.0.0.1", + "targetIp": "10.0.0.99" + }, + { + "time": 17498, + "source": "02:00:00:00:04:52", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "10.0.0.1", + "targetIp": "10.0.0.99" + }, + { + "time": 20252, + "source": "02:00:00:00:04:52", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "10.0.0.1", + "targetIp": "10.0.0.99" + } + ] + }, + "rows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "2", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.1", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:51 [op=REPLY, sender=02:00:00:00:04:51|192.168.0.1, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "10.0.0.99", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 943, Seq.-No.: 1" + ], + [ + "4", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.20", + "10.0.0.99", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 943, Seq.-No.: 2" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "10.0.0.99", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 943, Seq.-No.: 3" + ], + [ + "6", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=63; protocol=1; sender=192.168.0.20; target=10.0.0.99; icmpType=8; icmpCode=0; identifier=943; seqNr=1]" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "10.0.0.99", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 943, Seq.-No.: 4" + ], + [ + "8", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=2; ttl=63; protocol=1; sender=192.168.0.20; target=10.0.0.99; icmpType=8; icmpCode=0; identifier=943; seqNr=2]" + ], + [ + "9", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=3; ttl=63; protocol=1; sender=192.168.0.20; target=10.0.0.99; icmpType=8; icmpCode=0; identifier=943; seqNr=3]" + ], + [ + "10", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=5; ttl=63; protocol=1; sender=192.168.0.20; target=10.0.0.99; icmpType=8; icmpCode=0; identifier=943; seqNr=4]" + ], + [ + "11", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "172.16.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 944, Seq.-No.: 1" + ], + [ + "12", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Network Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=9; ttl=63; protocol=1; sender=null; target=172.16.0.1; icmpType=8; icmpCode=0; identifier=944; seqNr=1]" + ], + [ + "13", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.20", + "172.16.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 944, Seq.-No.: 2" + ], + [ + "14", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Network Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=11; ttl=63; protocol=1; sender=null; target=172.16.0.1; icmpType=8; icmpCode=0; identifier=944; seqNr=2]" + ], + [ + "15", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "172.16.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 944, Seq.-No.: 3" + ], + [ + "16", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Network Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=13; ttl=63; protocol=1; sender=null; target=172.16.0.1; icmpType=8; icmpCode=0; identifier=944; seqNr=3]" + ], + [ + "17", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.20", + "172.16.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 944, Seq.-No.: 4" + ], + [ + "18", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Network Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=15; ttl=63; protocol=1; sender=null; target=172.16.0.1; icmpType=8; icmpCode=0; identifier=944; seqNr=4]" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "2", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.1", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:51 [op=REPLY, sender=02:00:00:00:04:51|192.168.0.1, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "10.0.0.99", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 943, Seq.-No.: 1" + ], + [ + "4", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.20", + "10.0.0.99", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 943, Seq.-No.: 2" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "10.0.0.99", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 943, Seq.-No.: 3" + ], + [ + "6", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=63; protocol=1; sender=192.168.0.20; target=10.0.0.99; icmpType=8; icmpCode=0; identifier=943; seqNr=1]" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "10.0.0.99", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 943, Seq.-No.: 4" + ], + [ + "8", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=2; ttl=63; protocol=1; sender=192.168.0.20; target=10.0.0.99; icmpType=8; icmpCode=0; identifier=943; seqNr=2]" + ], + [ + "9", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=3; ttl=63; protocol=1; sender=192.168.0.20; target=10.0.0.99; icmpType=8; icmpCode=0; identifier=943; seqNr=3]" + ], + [ + "10", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=5; ttl=63; protocol=1; sender=192.168.0.20; target=10.0.0.99; icmpType=8; icmpCode=0; identifier=943; seqNr=4]" + ], + [ + "11", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "172.16.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 944, Seq.-No.: 1" + ], + [ + "12", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Network Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=9; ttl=63; protocol=1; sender=null; target=172.16.0.1; icmpType=8; icmpCode=0; identifier=944; seqNr=1]" + ], + [ + "13", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.20", + "172.16.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 944, Seq.-No.: 2" + ], + [ + "14", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Network Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=11; ttl=63; protocol=1; sender=null; target=172.16.0.1; icmpType=8; icmpCode=0; identifier=944; seqNr=2]" + ], + [ + "15", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "172.16.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 944, Seq.-No.: 3" + ], + [ + "16", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Network Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=13; ttl=63; protocol=1; sender=null; target=172.16.0.1; icmpType=8; icmpCode=0; identifier=944; seqNr=3]" + ], + [ + "17", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.20", + "172.16.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 944, Seq.-No.: 4" + ], + [ + "18", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Network Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=15; ttl=63; protocol=1; sender=null; target=172.16.0.1; icmpType=8; icmpCode=0; identifier=944; seqNr=4]" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [ + [ + "1", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "2", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "3", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "4", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "5", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "6", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "7", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "7", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "8", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "8", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ] + ], + "00000000-0000-0000-0000-000000000406": [ + [ + "1", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "2", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "3", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "4", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "5", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "6", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "7", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "7", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "8", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "8", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ] + ] + }, + "layeredRows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "2", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.1", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:51 [op=REPLY, sender=02:00:00:00:04:51|192.168.0.1, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "10.0.0.99", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 943, Seq.-No.: 1" + ], + [ + "4", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.20", + "10.0.0.99", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 943, Seq.-No.: 2" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "10.0.0.99", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 943, Seq.-No.: 3" + ], + [ + "6", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=63; protocol=1; sender=192.168.0.20; target=10.0.0.99; icmpType=8; icmpCode=0; identifier=943; seqNr=1]" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "10.0.0.99", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 943, Seq.-No.: 4" + ], + [ + "8", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=2; ttl=63; protocol=1; sender=192.168.0.20; target=10.0.0.99; icmpType=8; icmpCode=0; identifier=943; seqNr=2]" + ], + [ + "9", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=3; ttl=63; protocol=1; sender=192.168.0.20; target=10.0.0.99; icmpType=8; icmpCode=0; identifier=943; seqNr=3]" + ], + [ + "10", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=5; ttl=63; protocol=1; sender=192.168.0.20; target=10.0.0.99; icmpType=8; icmpCode=0; identifier=943; seqNr=4]" + ], + [ + "11", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "172.16.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 944, Seq.-No.: 1" + ], + [ + "12", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Network Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=9; ttl=63; protocol=1; sender=null; target=172.16.0.1; icmpType=8; icmpCode=0; identifier=944; seqNr=1]" + ], + [ + "13", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.20", + "172.16.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 944, Seq.-No.: 2" + ], + [ + "14", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Network Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=11; ttl=63; protocol=1; sender=null; target=172.16.0.1; icmpType=8; icmpCode=0; identifier=944; seqNr=2]" + ], + [ + "15", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "172.16.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 944, Seq.-No.: 3" + ], + [ + "16", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Network Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=13; ttl=63; protocol=1; sender=null; target=172.16.0.1; icmpType=8; icmpCode=0; identifier=944; seqNr=3]" + ], + [ + "17", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.20", + "172.16.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 944, Seq.-No.: 4" + ], + [ + "18", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Network Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=15; ttl=63; protocol=1; sender=null; target=172.16.0.1; icmpType=8; icmpCode=0; identifier=944; seqNr=4]" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "2", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.1", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:51 [op=REPLY, sender=02:00:00:00:04:51|192.168.0.1, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "10.0.0.99", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 943, Seq.-No.: 1" + ], + [ + "4", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.20", + "10.0.0.99", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 943, Seq.-No.: 2" + ], + [ + "5", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.20", + "10.0.0.99", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 943, Seq.-No.: 3" + ], + [ + "6", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1; ttl=63; protocol=1; sender=192.168.0.20; target=10.0.0.99; icmpType=8; icmpCode=0; identifier=943; seqNr=1]" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "10.0.0.99", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 943, Seq.-No.: 4" + ], + [ + "8", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=2; ttl=63; protocol=1; sender=192.168.0.20; target=10.0.0.99; icmpType=8; icmpCode=0; identifier=943; seqNr=2]" + ], + [ + "9", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=3; ttl=63; protocol=1; sender=192.168.0.20; target=10.0.0.99; icmpType=8; icmpCode=0; identifier=943; seqNr=3]" + ], + [ + "10", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=5; ttl=63; protocol=1; sender=192.168.0.20; target=10.0.0.99; icmpType=8; icmpCode=0; identifier=943; seqNr=4]" + ], + [ + "11", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.20", + "172.16.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 944, Seq.-No.: 1" + ], + [ + "12", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Network Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=9; ttl=63; protocol=1; sender=null; target=172.16.0.1; icmpType=8; icmpCode=0; identifier=944; seqNr=1]" + ], + [ + "13", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.20", + "172.16.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 944, Seq.-No.: 2" + ], + [ + "14", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Network Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=11; ttl=63; protocol=1; sender=null; target=172.16.0.1; icmpType=8; icmpCode=0; identifier=944; seqNr=2]" + ], + [ + "15", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "172.16.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 944, Seq.-No.: 3" + ], + [ + "16", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Network Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=13; ttl=63; protocol=1; sender=null; target=172.16.0.1; icmpType=8; icmpCode=0; identifier=944; seqNr=3]" + ], + [ + "17", + "02:00:00:00:04:11", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.20", + "172.16.0.1", + "ICMP", + "Vermittlung", + "ICMP Echo Request (ping), TTL: 64, Identifier: 944, Seq.-No.: 4" + ], + [ + "18", + "02:00:00:00:04:51", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.1", + "192.168.0.20", + "ICMP", + "Vermittlung", + "ICMP Network Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=15; ttl=63; protocol=1; sender=null; target=172.16.0.1; icmpType=8; icmpCode=0; identifier=944; seqNr=4]" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [ + [ + "1", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "2", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "3", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "4", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "5", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "6", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "7", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "7", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "8", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "8", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ] + ], + "00000000-0000-0000-0000-000000000406": [ + [ + "1", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "2", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "3", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "4", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "5", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "6", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "6", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "7", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "7", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ], + [ + "8", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "8", + "10.0.0.1", + "10.0.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.99 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.99]" + ] + ] + }, + "acts": [ + [ + 500, + "00000000-0000-0000-0000-000000000401", + "ping 10.0.0.99" + ], + [ + 40000, + "00000000-0000-0000-0000-000000000401", + "ping 172.16.0.1" + ] + ], + "events": [ + [ + 500, + "00000000-0000-0000-0000-000000000401", + "call", + "ping 10.0.0.99" + ], + [ + 505, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 505, + "00000000-0000-0000-0000-000000000401", + "text", + "PING 10.0.0.99 (10.0.0.99)" + ], + [ + 3570, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 10.0.0.99 (10.0.0.99): icmp_seq=1 -- Timeout!" + ], + [ + 6320, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 10.0.0.99 (10.0.0.99): icmp_seq=2 -- Timeout!" + ], + [ + 6555, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 10.0.0.99 (10.0.0.99): icmp_seq=3 -- Timeout!" + ], + [ + 9305, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 10.0.0.99 (10.0.0.99): icmp_seq=4 -- Timeout!" + ], + [ + 9310, + "00000000-0000-0000-0000-000000000401", + "text", + "\n--- 10.0.0.99 Paketstatistik ---\n4 Paket(e) gesendet, 0 Paket(e) empfangen, 100% Paketverlust\n" + ], + [ + 9310, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ], + [ + 40000, + "00000000-0000-0000-0000-000000000401", + "call", + "ping 172.16.0.1" + ], + [ + 40000, + "00000000-0000-0000-0000-000000000401", + "busy", + "true" + ], + [ + 40000, + "00000000-0000-0000-0000-000000000401", + "text", + "PING 172.16.0.1 (172.16.0.1)" + ], + [ + 40223, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 172.16.0.1 (172.16.0.1): icmp_seq=1 -- Timeout!" + ], + [ + 40446, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 172.16.0.1 (172.16.0.1): icmp_seq=2 -- Timeout!" + ], + [ + 40669, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 172.16.0.1 (172.16.0.1): icmp_seq=3 -- Timeout!" + ], + [ + 40892, + "00000000-0000-0000-0000-000000000401", + "text", + "\nFrom 172.16.0.1 (172.16.0.1): icmp_seq=4 -- Timeout!" + ], + [ + 40892, + "00000000-0000-0000-0000-000000000401", + "text", + "\n--- 172.16.0.1 Paketstatistik ---\n4 Paket(e) gesendet, 0 Paket(e) empfangen, 100% Paketverlust\n" + ], + [ + 40892, + "00000000-0000-0000-0000-000000000401", + "busy", + "false" + ] + ] +} diff --git a/packages/core/test/scenarios/terminal-net.scenario.json b/packages/core/test/scenarios/terminal-net.scenario.json new file mode 100644 index 0000000..a4e5e56 --- /dev/null +++ b/packages/core/test/scenarios/terminal-net.scenario.json @@ -0,0 +1,202 @@ +{ + "seed": 91, + "nodes": [ + { + "id": "00000000-0000-0000-0000-000000000401", + "kind": "pc", + "ports": [ + { + "id": "00000000-0000-0000-0000-000000000411", + "label": "eth0" + } + ] + }, + { + "id": "00000000-0000-0000-0000-000000000402", + "kind": "pc", + "ports": [ + { + "id": "00000000-0000-0000-0000-000000000412", + "label": "eth0" + } + ] + }, + { + "id": "00000000-0000-0000-0000-000000000403", + "kind": "pc", + "ports": [ + { + "id": "00000000-0000-0000-0000-000000000413", + "label": "eth0" + } + ] + }, + { + "id": "00000000-0000-0000-0000-000000000404", + "kind": "pc", + "ports": [ + { + "id": "00000000-0000-0000-0000-000000000414", + "label": "eth0" + } + ] + }, + { + "id": "00000000-0000-0000-0000-000000000405", + "kind": "router", + "ports": [ + { + "id": "00000000-0000-0000-0000-000000000451", + "label": "eth0" + }, + { + "id": "00000000-0000-0000-0000-000000000452", + "label": "eth1" + } + ] + }, + { + "id": "00000000-0000-0000-0000-000000000406", + "kind": "pc", + "ports": [ + { + "id": "00000000-0000-0000-0000-000000000416", + "label": "eth0" + } + ] + }, + { + "id": "00000000-0000-0000-0000-000000000407", + "kind": "networkSwitch", + "ports": [ + { + "id": "00000000-0000-0000-0000-000000000471", + "label": "sw1" + }, + { + "id": "00000000-0000-0000-0000-000000000472", + "label": "sw2" + }, + { + "id": "00000000-0000-0000-0000-000000000473", + "label": "sw3" + }, + { + "id": "00000000-0000-0000-0000-000000000474", + "label": "sw4" + }, + { + "id": "00000000-0000-0000-0000-000000000475", + "label": "sw5" + } + ] + } + ], + "links": [ + { + "id": "00000000-0000-0000-0000-00000000F401", + "sourceNode": "00000000-0000-0000-0000-000000000401", + "sourcePort": "00000000-0000-0000-0000-000000000411", + "targetNode": "00000000-0000-0000-0000-000000000407", + "targetPort": "00000000-0000-0000-0000-000000000471" + }, + { + "id": "00000000-0000-0000-0000-00000000F402", + "sourceNode": "00000000-0000-0000-0000-000000000402", + "sourcePort": "00000000-0000-0000-0000-000000000412", + "targetNode": "00000000-0000-0000-0000-000000000407", + "targetPort": "00000000-0000-0000-0000-000000000472" + }, + { + "id": "00000000-0000-0000-0000-00000000F403", + "sourceNode": "00000000-0000-0000-0000-000000000403", + "sourcePort": "00000000-0000-0000-0000-000000000413", + "targetNode": "00000000-0000-0000-0000-000000000407", + "targetPort": "00000000-0000-0000-0000-000000000473" + }, + { + "id": "00000000-0000-0000-0000-00000000F404", + "sourceNode": "00000000-0000-0000-0000-000000000404", + "sourcePort": "00000000-0000-0000-0000-000000000414", + "targetNode": "00000000-0000-0000-0000-000000000407", + "targetPort": "00000000-0000-0000-0000-000000000474" + }, + { + "id": "00000000-0000-0000-0000-00000000F405", + "sourceNode": "00000000-0000-0000-0000-000000000405", + "sourcePort": "00000000-0000-0000-0000-000000000451", + "targetNode": "00000000-0000-0000-0000-000000000407", + "targetPort": "00000000-0000-0000-0000-000000000475" + }, + { + "id": "00000000-0000-0000-0000-00000000F406", + "sourceNode": "00000000-0000-0000-0000-000000000405", + "sourcePort": "00000000-0000-0000-0000-000000000452", + "targetNode": "00000000-0000-0000-0000-000000000406", + "targetPort": "00000000-0000-0000-0000-000000000416" + } + ], + "devices": { + "00000000-0000-0000-0000-000000000401": { + "ip": "192.168.0.20", + "mask": "255.255.255.0", + "gateway": "192.168.0.1", + "dns": "192.168.0.10" + }, + "00000000-0000-0000-0000-000000000402": { + "ip": "192.168.0.10", + "mask": "255.255.255.0" + }, + "00000000-0000-0000-0000-000000000403": { + "ip": "192.168.0.30", + "mask": "255.255.255.0", + "gateway": "192.168.0.1", + "dns": "192.168.0.10" + }, + "00000000-0000-0000-0000-000000000404": { + "ip": "192.168.0.31", + "mask": "255.255.255.0", + "gateway": "192.168.0.1", + "dns": "192.168.0.10" + }, + "00000000-0000-0000-0000-000000000405": { + "ip": "192.168.0.1", + "mask": "255.255.255.0" + }, + "00000000-0000-0000-0000-000000000406": { + "ip": "10.0.0.2", + "mask": "255.255.255.0", + "gateway": "10.0.0.1", + "dns": "192.168.0.53" + } + }, + "interfaces": [ + { + "node": "00000000-0000-0000-0000-000000000405", + "port": "00000000-0000-0000-0000-000000000451", + "ip": "192.168.0.1", + "mask": "255.255.255.0" + }, + { + "node": "00000000-0000-0000-0000-000000000405", + "port": "00000000-0000-0000-0000-000000000452", + "ip": "10.0.0.1", + "mask": "255.255.255.0" + } + ], + "dnsServers": { + "00000000-0000-0000-0000-000000000402": { + "records": [ + "www.filius.de A 192.168.0.30", + "filius.de A 192.168.0.31", + "filius.de MX mail.filius.de", + "mail.filius.de A 192.168.0.30", + "multi.filius.de A 192.168.0.30", + "multi.filius.de A 192.168.0.31", + "fern.filius.de A 10.0.0.2", + "weg.filius.de A 192.168.0.99", + "post.filius.de MX mail.filius.de" + ] + } + } +} diff --git a/packages/core/test/terminal.test.ts b/packages/core/test/terminal.test.ts index a830dcb..4580144 100644 --- a/packages/core/test/terminal.test.ts +++ b/packages/core/test/terminal.test.ts @@ -217,6 +217,11 @@ describe('the command line as Java FILIUS answers it', () => { const cases = javaCases(language); const text = (key: TerminalTextKey) => TERMINAL_TEXTS[language][key]; + it(`has Java's texts (${language})`, () => { + const javaTexts = (JSON.parse(readFileSync(join(here, `terminal.${language}.java.json`), 'utf8')) as { texts: Record }).texts; + for (const [key, value] of Object.entries(TERMINAL_TEXTS[language])) expect(value, key).toBe(javaTexts[key]); + }); + it(`corrects Java only where it errs (${language})`, () => { for (const [name, fix] of Object.entries(JAVA_BUGS)) { const javaCase = cases.find((each) => each.name === name)!; diff --git a/packages/core/test/terminalJava.test.ts b/packages/core/test/terminalJava.test.ts new file mode 100644 index 0000000..2125fc4 --- /dev/null +++ b/packages/core/test/terminalJava.test.ts @@ -0,0 +1,411 @@ +// The command line's network commands as Java FILIUS runs them. +// tools/java-oracle's TerminalRun typed lines into FILIUS' command line on +// the hosts of terminal-net at set times and wrote every frame each card +// saw, Java's tables of them, and everything each command line told its +// window (terminal-java-.java.json). The engine types the same lines +// at the same times (apps/terminal.ts): each card's frames in the same +// order, with the same content and rows, at about the same time; the same +// texts and busy marks, at about the same time. + +import { readFileSync } from 'node:fs'; +import { dirname, join } from 'node:path'; +import { fileURLToPath } from 'node:url'; +import { describe, expect, it } from 'vitest'; +import { NetworkRuntimeEngine, withSnapshot } from '../src/index.js'; +import { expectSameCaptures, GAP_TOLERANCE_MILLISECONDS, watchedEngine, withClientPortText, type JavaFrame, type JavaTables, type SeenFrame } from './javaRun.js'; +import { snapshotOf, type Scenario } from './scenario.js'; + +const scenarioDirectory = join(dirname(fileURLToPath(import.meta.url)), 'scenarios'); + +const CLIENT = '00000000-0000-0000-0000-000000000401'; +const DNS = '00000000-0000-0000-0000-000000000402'; +const WEB = '00000000-0000-0000-0000-000000000403'; +const ECHO = '00000000-0000-0000-0000-000000000404'; +const FAR = '00000000-0000-0000-0000-000000000406'; +const HOSTS = [CLIENT, DNS, WEB, ECHO, FAR]; + +type Told = ['text' | 'busy', string]; + +interface JavaRun extends JavaTables { + frames: Record; + acts: [number, string, string][]; + /** time, host, kind (call, text or busy), text */ + events: [number, string, string, string][]; +} + +const STORIES = ['pingLan', 'pingRouted', 'pingNobody', 'pingUnreachable', 'pingBroadcast', 'pingSelf', 'pingErrors', 'interrupt', 'dns', 'dnsTimeout', 'arp', 'netstat'] as const; + +type Lines = Record; + +function javaLines(java: JavaRun): Lines { + const lines: Lines = Object.fromEntries(HOSTS.map((host) => [host, []])); + for (const [time, host, kind, text] of java.events) { + if (kind === 'call') continue; + lines[host]!.push([time, [kind as Told[0], text]]); + } + return lines; +} + +function engineLines(engine: NetworkRuntimeEngine): Lines { + return Object.fromEntries( + HOSTS.map((host) => [ + host, + engine.terminal(host)!.log.all.map((line): [number, Told] => [line.timeMilliseconds, line.kind === 'text' ? ['text', line.text] : ['busy', String(line.busy)]]), + ]), + ); +} + +/** + * A text with placeholders: a client's port; a ping's time (compared on its + * own); the rows of an ARP or netstat table sorted (Java lists them in a + * HashMap's order, the engine in the order learned, or made). + */ +function lineText(text: string): string { + const table = /^(\| [^\n]*\|\n-+\n)((?:\|[^\n]*\n)*)(-+\n)?$/.exec(text); + // Sorted within each protocol of netstat's, the protocols in the order they come (TCP, then UDP, in Java too). + const rows = table?.[2]!.split('\n').filter(Boolean) ?? []; + const protocols = [...new Set(rows.map((row) => /^\| (TCP|UDP) /.exec(row)?.[1] ?? ''))]; + const protocol = (row: string) => protocols.indexOf(/^\| (TCP|UDP) /.exec(row)?.[1] ?? ''); + rows.sort((lhs, rhs) => protocol(lhs) - protocol(rhs) || (lhs < rhs ? -1 : lhs > rhs ? 1 : 0)); + const sorted = table === null ? text : `${table[1]}${rows.join('\n')}\n${table[3] ?? ''}`; + return withClientPortText(sorted).replace(/time=\d+ms/, 'time=…ms'); +} + +const pingTime = (text: string) => Number(/time=(\d+)ms/.exec(text)?.[1] ?? 0); + +/** The identifier a ping draws at random (Java: new Random()). */ +const cellText = (text: string) => text.replace(/Identifier: \d+/, 'Identifier: x').replace(/identifier=\d+/, 'identifier=x'); + +/** Java's run with what each line told replaced where Java errs. */ +function withTold(java: JavaRun, change: (host: string, text: string, time: number) => string | undefined): JavaRun { + return { + ...java, + events: java.events.flatMap(([time, host, kind, text]): [number, string, string, string][] => { + if (kind !== 'text') return [[time, host, kind, text]]; + const changed = change(host, text, time); + return changed === undefined ? [] : [[time, host, kind, changed]]; + }), + }; +} + +/** The answers to an echo from `from` to the client, in Java's frames and rows, as from `to`. */ +function withEchoReplySource(java: JavaRun, from: string, to: string, after: number): JavaRun { + const frames = Object.fromEntries( + Object.entries(java.frames).map(([card, list]) => [ + card, + list.map((frame) => (frame.icmp === 0 && frame.sourceIp === from && frame.time >= after ? { ...frame, sourceIp: to } : frame)), + ]), + ); + const replies = (card: string) => + new Set(java.frames[card]!.flatMap((frame, index) => (frame.icmp === 0 && frame.sourceIp === from && frame.time >= after ? [String(index + 1)] : []))); + const rows = (tables: Record | undefined) => + tables === undefined + ? undefined + : Object.fromEntries( + Object.entries(tables).map(([card, list]) => [card, list.map((row) => (replies(card).has(row[0]!) && row[1] === from ? [row[0]!, to, ...row.slice(2)] : row))]), + ); + return { ...java, frames, rows: rows(java.rows), layeredRows: rows(java.layeredRows) }; +} + +/** Java's tables with each cell changed. */ +function withCells(java: JavaRun, change: (cell: string) => string): JavaRun { + const tables = (list: Record | undefined) => + list === undefined + ? undefined + : Object.fromEntries(Object.entries(list).map(([card, rows]) => [card, rows.map((row) => row.map((cell) => (cell === null ? null : change(cell))))])); + return { ...java, rows: tables(java.rows), layeredRows: tables(java.layeredRows) }; +} + +const USAGE_PING = 'ping - test connection to other computer\nUsage: ping \n the remote address as IP address or host name\n'; + +/** + * Where Java errs: its run corrected, as Java means it. + * - Java's ping names its first parameter where it means the host (-b in the + * statistics of ping -b), and takes any first word for -b (ping -x pings). + * - An echo's answer comes from the address asked (RFC 792: the addresses + * reversed): Java answers from 127.0.0.1 when the host's own address is + * asked, from the near card when a router's far address is. + * - netstat on a UDP server lists its listening socket only: Java also lists + * a socket for each address and port it ever answered (never closed). + * - A router's network unreachable carries the echo as it would have + * forwarded it, with its sender (Java's is half made: sender null). + */ +const JAVA_BUGS: Partial JavaRun>> = { + pingBroadcast: (java) => + withTold(java, (host, text, time) => { + const target = host === CLIENT && time >= 7_000 ? '255.255.255.255' : '192.168.0.255'; + return text.replace('--- -b ', `--- ${target} `).replace('From -b (', `From ${target} (`); + }), + pingErrors: (java) => { + const typed = java.acts.find(([, , line]) => line.startsWith('ping -x'))![0]; + const corrected = withTold(java, (_, text, time) => (time < typed ? text : undefined)); + return { + ...corrected, + frames: Object.fromEntries(Object.entries(java.frames).map(([card, list]) => [card, list.filter((frame) => frame.time < typed)])), + events: [...corrected.events.filter(([time, , kind]) => time < typed || kind !== 'busy'), [typed, CLIENT, 'text', USAGE_PING]], + }; + }, + pingSelf: (java) => withTold(java, (_, text, time) => (time < 6_000 ? text.replace('From 127.0.0.1:', 'From 192.168.0.20:') : text)), + pingRouted: (java) => { + const typed = java.acts.find(([, , line]) => line === 'ping 10.0.0.1')![0]; + return withEchoReplySource( + withTold(java, (_, text, time) => (time >= typed ? text.replace('From 192.168.0.1:', 'From 10.0.0.1:') : text)), + '192.168.0.1', + '10.0.0.1', + typed, + ); + }, + pingUnreachable: (java) => withCells(java, (cell) => cell.replace('sender=null;', 'sender=192.168.0.20;')), + netstat: (java) => withTold(java, (host, text) => (host === DNS ? text.replace(/\| UDP {5}\| {4}192\.168\.0\.10:53 {4}\|[^\n]*CONNECTED +\|\n/g, '') : text)), +}; + +/** Where the frames are compared only up to a time (Java's): pingErrors, the ping Java sends for ping -x. */ +const UNTIL: Partial number>> = { + pingErrors: (java) => java.acts.find(([, , line]) => line.startsWith('ping -x'))![0], +}; + +/** The hosts that answer a broadcast echo at once: which answer comes first is a race of Java's threads. */ +const BROADCAST_ANSWER = /From 192\.168\.0\.(1|10|30|31): icmp_seq/; + +/** + * pingBroadcast: the hosts answer each broadcast echo at once, and the order + * of their ARP requests and answers on the cables is a race of Java's + * threads. Its frames are compared second by second (each ping's), as a + * set; Java's tables, which go frame by frame, are left out. + */ +const RACING = new Set(['pingBroadcast']); +const bySecond = (frames: SeenFrame[]): SeenFrame[] => + frames + .map((frame) => ({ time: Math.floor((frame.time - 900) / 1_000) * 1_000 + 900, text: frame.text })) + .sort((lhs, rhs) => lhs.time - rhs.time || lhs.text.localeCompare(rhs.text)); + +describe('the command line on the network as Java FILIUS runs it', () => { + it('corrects Java only where it errs, and cuts only after the story began', () => { + for (const [name, correct] of Object.entries(JAVA_BUGS)) { + const java = JSON.parse(readFileSync(join(scenarioDirectory, `terminal-java-${name}.java.json`), 'utf8')) as JavaRun; + expect(JSON.stringify(correct(java)), name).not.toBe(JSON.stringify(java)); + expect(UNTIL[name as (typeof STORIES)[number]]?.(java) ?? Number.POSITIVE_INFINITY, name).toBeGreaterThan(1_000); + } + }); + + // ICMPThread.waitForIcmpResponse misses its wake-up when the answer is there before it waits (a race of Java's + // threads: an echo to the host itself, the host unreachable a host gives itself), and waits a whole round trip. + // The engine answers at once; a recording with a missed wake-up is made again (tools/java-oracle/run.sh). + it("was recorded without a missed wake-up of Java's", () => { + const told = (name: string) => + (JSON.parse(readFileSync(join(scenarioDirectory, `terminal-java-${name}.java.json`), 'utf8')) as JavaRun).events.filter(([, , kind]) => kind === 'text'); + for (const [, , , text] of told('pingSelf')) expect(pingTime(text), `pingSelf: ${JSON.stringify(text)}`).toBeLessThan(1_000); + const timeouts = told('pingNobody').filter(([, , , text]) => text.includes('Timeout!')); + for (const [index, [time, , , text]] of timeouts.slice(1).entries()) { + if (text.includes('icmp_seq=1 ')) continue; + expect(time - timeouts[index]![0], 'pingNobody: two ARP round trips per echo').toBeLessThan(6_000); + } + }); + + const scenario = JSON.parse(readFileSync(join(scenarioDirectory, 'terminal-net.scenario.json'), 'utf8')) as Scenario; + + for (const name of STORIES) { + it(name, () => { + const measured = JSON.parse(readFileSync(join(scenarioDirectory, `terminal-java-${name}.java.json`), 'utf8')) as JavaRun; + const java = JAVA_BUGS[name]?.(measured) ?? measured; + const snapshot = withSnapshot(snapshotOf(scenario), { + language: 'de', + terminalNodeIds: new Set(HOSTS), + ...(name === 'netstat' + ? { + echoServersByNodeId: new Map([ + [ECHO, { port: 55555, isActive: true }], + [DNS, { port: 55555, isActive: true }], + ]), + simpleClientsByNodeId: new Map([[CLIENT, { targetAddress: '', targetPort: 55555 }]]), + } + : {}), + }); + const { engine } = watchedEngine(scenario, snapshot); + const acts: [number, () => void][] = java.acts.map(([time, host, line]) => [ + time, + () => { + if (line === '^C') engine.terminal(host)!.interrupt(); + else if (line === 'disconnect') engine.simpleClient(CLIENT)!.disconnect(); + else engine.terminal(host)!.enter(line); + }, + ]); + if (name === 'netstat') acts.unshift([500, () => engine.simpleClient(CLIENT)!.connect('192.168.0.31', 55555)]); + for (const [time, act] of acts) { + engine.handle({ type: 'advance', toMilliseconds: time }); + act(); + } + engine.handle({ type: 'advance', toMilliseconds: Math.max(...java.events.map(([time]) => time)) + 5_000 }); + + const racing = RACING.has(name); + expectSameCaptures(engine, scenario, java.frames, { + text: (text) => withClientPortText(text).replace(/ID=\d+/g, 'ID=x'), + ...(racing ? { normalized: bySecond, starts: { java: 0, engine: 0 } } : { tables: java }), + cell: cellText, + until: UNTIL[name]?.(measured), + }); + if (racing) { + // ICMP.sendBroadcast: with TTL 1, to every card. + const echoes = engine.capture.frames(scenario.nodes.find((node) => node.id === CLIENT)!.ports[0]!.id).flatMap(({ frame }) => { + const packet = frame.payload.kind === 'ipv4' ? frame.payload.packet : undefined; + return packet?.payload.kind === 'icmp' && packet.payload.message.kind === 'echoRequest' ? [[frame.destinationMacAddress, packet.timeToLive]] : []; + }); + expect(echoes).toEqual(Array.from({ length: 8 }, () => ['FF:FF:FF:FF:FF:FF', 1])); + } + + const expected = javaLines(java); + const actual = engineLines(engine); + const told = ([kind, text]: Told): Told => [kind, lineText(name === 'pingBroadcast' ? text.replace(BROADCAST_ANSWER, 'From : icmp_seq') : text)]; + for (const host of HOSTS) { + expect( + actual[host]!.map(([, line]) => told(line)), + `${host}'s lines`, + ).toEqual(expected[host]!.map(([, line]) => told(line))); + for (const [index, [javaTime, line]] of expected[host]!.entries()) { + const [engineTime, engineLine] = actual[host]![index]!; + const late = javaTime - engineTime; + expect(Math.abs(late), `${host}'s line ${JSON.stringify(line[1].slice(0, 60))}: Java ${late} ms later`).toBeLessThanOrEqual(GAP_TOLERANCE_MILLISECONDS); + expect(Math.abs(pingTime(line[1]) - pingTime(engineLine[1])), `${host}'s ping time in ${JSON.stringify(line[1])}`).toBeLessThanOrEqual(GAP_TOLERANCE_MILLISECONDS); + } + } + }); + } +}); + +describe('the command line on the network beyond the stories', () => { + const scenario = JSON.parse(readFileSync(join(scenarioDirectory, 'terminal-net.scenario.json'), 'utf8')) as Scenario; + const started = () => watchedEngine(scenario, withSnapshot(snapshotOf(scenario), { language: 'de', terminalNodeIds: new Set(HOSTS) })).engine; + const texts = (engine: NetworkRuntimeEngine) => engine.terminal(CLIENT)!.log.all.flatMap((line) => (line.kind === 'text' ? [line.text] : [])); + const echoIdentifiers = (engine: NetworkRuntimeEngine) => + engine.capture.frames(scenario.nodes.find((node) => node.id === CLIENT)!.ports[0]!.id).flatMap(({ frame }) => { + const packet = frame.payload.kind === 'ipv4' ? frame.payload.packet : undefined; + return packet?.payload.kind === 'icmp' && packet.payload.message.kind === 'echoRequest' ? [packet.payload.message.identifier] : []; + }); + + it('sends no echo for a ping whose Ctrl+C came before it began', () => { + const engine = started(); + engine.terminal(CLIENT)!.enter('host www.filius.de'); + engine.terminal(CLIENT)!.enter('ping 192.168.0.31'); + engine.terminal(CLIENT)!.interrupt(); + engine.handle({ type: 'advance', toMilliseconds: 5_000 }); + expect(texts(engine).slice(-2)).toEqual([ + 'PING 192.168.0.31 (192.168.0.31)', + '\n--- 192.168.0.31 Paketstatistik ---\n0 Paket(e) gesendet, 0 Paket(e) empfangen, 0% Paketverlust\n', + ]); + expect(echoIdentifiers(engine)).toEqual([]); + }); + + it("counts no answer to another ping's echo, and waits out its second", () => { + const engine = started(); + engine.terminal(CLIENT)!.enter('ping 192.168.0.31'); + // An echo reply with the first echo's number, but another identifier (a multiple of 23 is drawn), first in the queue. + const reply = { kind: 'echoReply', identifier: 1, sequenceNumber: 1, data: new Uint8Array() } as const; + const packet = { + identity: 0, + senderIPAddress: '192.168.0.31', + receiverIPAddress: '192.168.0.20', + timeToLive: 64, + protocol: 'icmp', + payload: { kind: 'icmp', message: reply }, + } as const; + const queue = engine.state.icmpObservationsByNodeId; + queue.set(CLIENT, [...(queue.get(CLIENT) ?? []), { nodeId: CLIENT, packet, message: reply }]); + engine.handle({ type: 'advance', toMilliseconds: 6_000 }); + const lines = engine.terminal(CLIENT)!.log.all.flatMap((line) => (line.kind === 'text' ? [[line.timeMilliseconds, line.text] as const] : [])); + expect(lines.map(([, text]) => text.replace(/time=\d+ms/, 'time=…ms'))).toEqual([ + 'PING 192.168.0.31 (192.168.0.31)', + '\nFrom 192.168.0.31: icmp_seq=2 ttl=64 time=…ms', + '\nFrom 192.168.0.31: icmp_seq=3 ttl=64 time=…ms', + '\nFrom 192.168.0.31: icmp_seq=4 ttl=64 time=…ms', + '\n--- 192.168.0.31 Paketstatistik ---\n4 Paket(e) gesendet, 3 Paket(e) empfangen, 25% Paketverlust\n', + ]); + expect(lines[1]![0]).toBeGreaterThanOrEqual(1_000); + }); + + it('goes on with the next identifier, from one drawn at random', () => { + const engine = started(); + engine.terminal(CLIENT)!.enter('ping 192.168.0.31'); + engine.terminal(CLIENT)!.enter('ping 192.168.0.30'); + engine.handle({ type: 'advance', toMilliseconds: 10_000 }); + const identifiers = echoIdentifiers(engine); + expect(identifiers).toHaveLength(8); + expect(identifiers[0]! % 23).toBe(0); + expect(identifiers[0]!).toBeLessThanOrEqual(42 * 23); + expect(identifiers).toEqual([...Array(4).fill(identifiers[0]), ...Array(4).fill(identifiers[0]! + 1)]); + }); + + /** An ICMP message put first in the client's queue, as if it had come (an answer to another echo). */ + const queueEchoReply = (engine: NetworkRuntimeEngine, sequenceNumber: number) => { + const reply = { kind: 'echoReply', identifier: 1, sequenceNumber, data: new Uint8Array() } as const; + const packet = { + identity: 0, + senderIPAddress: '192.168.0.31', + receiverIPAddress: '192.168.0.20', + timeToLive: 64, + protocol: 'icmp', + payload: { kind: 'icmp', message: reply }, + } as const; + const queue = engine.state.icmpObservationsByNodeId; + queue.set(CLIENT, [...(queue.get(CLIENT) ?? []), { nodeId: CLIENT, packet, message: reply }]); + }; + + it('takes an echo reply with another number for a timeout, and sends the next echo at once', () => { + const engine = started(); + engine.terminal(CLIENT)!.enter('ping 192.168.0.31'); + queueEchoReply(engine, 9); + engine.handle({ type: 'advance', toMilliseconds: 6_000 }); + const lines = engine.terminal(CLIENT)!.log.all.flatMap((line) => (line.kind === 'text' ? [[line.timeMilliseconds, line.text] as const] : [])); + expect(lines[1]![1]).toBe('\nFrom 192.168.0.31 (192.168.0.31): icmp_seq=1 -- Timeout!'); + // The next echo goes at once, and the late answer to the first comes first: a timeout too. + expect(lines[2]![1]).toBe('\nFrom 192.168.0.31 (192.168.0.31): icmp_seq=2 -- Timeout!'); + expect(lines[2]![0] - lines[1]![0]).toBeLessThan(500); + }); + + it('takes the first ICMP message that came, not the last', () => { + const engine = started(); + engine.terminal(CLIENT)!.enter('ping 192.168.0.99'); + // First the answer to another echo, then (when ARP gives up) the host unreachable the client gives itself. + queueEchoReply(engine, 1); + engine.handle({ type: 'advance', toMilliseconds: 30_000 }); + expect(texts(engine).slice(1)).toEqual([ + '\nFrom 192.168.0.99 (192.168.0.99): icmp_seq=2 -- Timeout!', + '\nFrom 192.168.0.99 (192.168.0.99): icmp_seq=3 -- Timeout!', + '\nFrom 192.168.0.99 (192.168.0.99): icmp_seq=4 -- Timeout!', + '\n--- 192.168.0.99 Paketstatistik ---\n4 Paket(e) gesendet, 0 Paket(e) empfangen, 100% Paketverlust\n', + ]); + }); + + it('rounds the loss (Math.round)', () => { + const engine = started(); + engine.terminal(CLIENT)!.enter('ping 192.168.0.31'); + queueEchoReply(engine, 1); + engine.handle({ type: 'advance', toMilliseconds: 1_000 }); + queueEchoReply(engine, 2); + engine.handle({ type: 'advance', toMilliseconds: 2_500 }); + engine.terminal(CLIENT)!.interrupt(); + engine.handle({ type: 'advance', toMilliseconds: 6_000 }); + expect(texts(engine).at(-1)).toBe('\n--- 192.168.0.31 Paketstatistik ---\n3 Paket(e) gesendet, 1 Paket(e) empfangen, 67% Paketverlust\n'); + }); + + it("refuses the broadcast of the route's network, whatever its mask", () => { + const wide = { ...scenario, devices: { ...scenario.devices, [CLIENT]: { ...scenario.devices![CLIENT]!, mask: '255.255.0.0' } } } as Scenario; + const engine = watchedEngine(wide, withSnapshot(snapshotOf(wide), { language: 'de', terminalNodeIds: new Set([CLIENT]) })).engine; + engine.terminal(CLIENT)!.enter('ping 192.168.255.255'); + expect(texts(engine)).toEqual(['Ping zu Broadcast-Adressen wird nicht unterstützt.']); + }); + + it('draws the first identifier at random', () => { + const drawn = new Set(Array.from({ length: 10 }, (_, seed) => new NetworkRuntimeEngine(seed).drawIcmpIdentifier())); + expect(drawn.size).toBeGreaterThan(1); + }); + + it('routes by the first of rows with the same mask (determineRouteFromStaticRoutingTable)', () => { + const snapshot = withSnapshot(snapshotOf(scenario), { + manualRoutesByNodeId: new Map([[CLIENT, [{ destinationNetwork: '192.168.0.0', subnetMask: '255.255.255.0', gateway: '192.168.0.99', interfaceIPAddress: '192.168.0.20' }]]]), + }); + const engine = watchedEngine(scenario, snapshot).engine; + const rows = engine.forwardingTable(CLIENT).filter((row) => row.destinationNetwork === '192.168.0.0' && row.subnetMask === '255.255.255.0'); + expect(rows).toHaveLength(2); + expect(engine.routeRow(CLIENT, '192.168.0.31')).toEqual(rows[0]); + }); +}); diff --git a/tools/java-oracle/README.md b/tools/java-oracle/README.md index 94b6798..c8579a0 100644 --- a/tools/java-oracle/README.md +++ b/tools/java-oracle/README.md @@ -793,3 +793,71 @@ Gemessen (01.10.2026): Pfad an den Arbeitsordner, `rm /` löscht den Arbeitsordner und meldet Erfolg; `mv` auf die Datei selbst (auch in anderer Schreibweise) löscht sie. + +## Befehlszeile, Netzbefehle (F3.4b) + +`TerminalRun` tippt Zeilen in Javas `Terminal` auf den Rechnern von +`terminal-net` (LAN 192.168.0.0/24 mit Client .20, DNS-Server .10 ohne +Gateway, .30, .31, Router .1/10.0.0.1, dahinter 10.0.0.2 mit einem +DNS-Server, den es nicht gibt), zu festen Zeiten und so, wie das Fenster sie +übergibt (`terminalEingabeAuswerten`); `^C` ist Strg+C (`setInterrupt`). +Geschrieben werden je Karte die Frames samt Javas Tabellen, je Rechner was +die Befehlszeile sagt (Texte und Laufmarken) mit der Zeit, und die getippten +Zeilen mit ihren Zeiten, die der Test des Kerns ebenso tippt. Die JVM läuft +deutsch. + +Gemessen (02.10.2026): + +* `ping`: vier Echos, je eines pro Sekunde ab dem Senden des vorigen; die + Zeit zählt ab vor dem ARP (473 ms im LAN mit ARP, dann 223 ms; über den + Router 673 und 334 ms, TTL 63). Gewartet wird nach dem Senden eine RTT + (hier 2750 ms) auf die *erste* ICMP-Nachricht, gleich welche; alles außer + der Antwort mit der Sequenznummer ist „Timeout!“, und das nächste Echo geht + sofort. Ohne ARP-Antwort legt sich der Rechner selbst „Host Unreachable“ + hin (je Echo zwei ARP-Anfragen, 5,5 s); hinter dem Router fragt dieser + seine ARP-Anfragen nacheinander ab, so beantwortet das dritte Echo die + Meldung zum ersten. Ohne Route am Router kommt „Network Unreachable“ + sofort, viermal in 900 ms. Strg+C wirkt vor dem nächsten Echo, die + Statistik zählt die gesendeten; ein danach getippter bekannter Befehl + hebt es auf (`setInterrupt(false)` beim Übergeben), ein unbekannter nicht. + Einen unbekannten Befehl meldet das Fenster sofort, auch während ein + anderer läuft. +* Broadcast: ohne `-b` „nicht unterstützt“ (auch 255.255.255.255 über die + Standardroute, Maske 0.0.0.0); mit `-b` geht das Echo mit TTL 1 an + FF:FF:FF:FF:FF:FF, alle im Netz antworten (auch der Router), jeder fragt + dazu per ARP nach dem Absender. Welche Antwort zuerst kommt, ist ein + Wettlauf der Threads. Ein gerichteter Broadcast aus einem anderen Netz + (10.0.0.2 an 192.168.0.255) wird am Router verworfen. +* Eigene Adresse: Javas Route geht über 127.0.0.1, die Antwort kommt „From + 127.0.0.1“; ebenso für `localhost` und 127.0.0.1, ohne Frame. +* Ferne Adresse eines Routers: die Antwort kommt von der nahen Karte + („From 192.168.0.1“ für `ping 10.0.0.1`). +* Fehler Javas: in der Statistik und bei „Timeout!“ steht der erste Parameter + statt des Hosts (`--- -b Paketstatistik`); jedes erste Wort gilt als `-b` + (`ping -x 192.168.0.31` pingt). „Network Unreachable“ vom Router bettet ein + halb gebautes Paket ein (`sender=null`, TTL 63). +* `host`: A, dann MX, Namen mit Punkt am Ende; „nicht aufgelöst“ erst nach + beiden Anfragen (auch MX allein zählt); `localhost` ohne Anfrage. Ohne erreichbaren DNS-Server + nach fünf RTT „Zeitüberschreitung“, bei `ping` mit „ (DNS)“ und ohne + Laufmarken. Ohne eingetragenen DNS-Server sofort „nicht aufgelöst“. +* `nslookup`: Server und Adresse (127.0.0.1 für `localhost`), dann nur der + Antwortteil; ohne Treffer nur der Kopf. Ohne Parameter die Hilfe ohne + Laufmarken (`host` mit). +* `arp`: Javas Tabelle ist eine `HashMap` mit der Zeile 255.255.255.255, + die jedes Zurücksetzen (`-d`) neu anlegt; `-a` zeigt eine Zeile, `-d` mit + Adresse löscht sie und zeigt dann die Tabelle; unbekannte Optionen und + `-a`/`-d` mit etwas anderem als einer Adresse zeigen die Tabelle. `arp -d + 255.255.255.255` entfernt auch die Broadcast-Zeile, bis `arp -d`. +* `netstat`: TCP, dann UDP, je Socket die lokale Adresse nach der Route zur + Gegenstelle; ein Server mit `0.0.0.0` und `-:-` in LISTEN, darunter seine + Verbindungen; eine getrennte Verbindung steht beim Client in `TIME_WAIT`, + beim Server ist sie ausgetragen. Javas UDP-Server behält für jede je beantwortete Adresse und + jeden Port einen Socket (`CONNECTED`), dessen Arbeiter für immer wartet. + Die Reihenfolge ist die einer `HashMap` bzw. `Hashtable`. +* Javas `waitForIcmpResponse` verpasst sein Aufwecken, wenn die Antwort + schon da ist, bevor es wartet (ein Wettlauf der Threads: Echo an sich + selbst, das „Host Unreachable“, das sich ein Rechner selbst hinlegt), und + wartet dann eine volle RTT. Eine Aufnahme damit (ein Ping an sich selbst + über 1 s, mehr als 6 s zwischen zwei Timeouts ins Leere) wird wiederholt; + ebenso eine unter Last (andere Sitzungen auf dem Rechner: die erste + ARP-Runde dauert dann knapp 300 statt 225 ms). diff --git a/tools/java-oracle/run.sh b/tools/java-oracle/run.sh index 60c79f2..7be9679 100755 --- a/tools/java-oracle/run.sh +++ b/tools/java-oracle/run.sh @@ -21,7 +21,7 @@ if [ ! -f "$upstream/target/filius.jar" ]; then fi classpath="$upstream/target/filius.jar:$upstream/target/lib/*" mkdir -p "$here/.build" -javac -encoding UTF-8 -d "$here/.build" -cp "$classpath" "$here/src/FlsOracle.java" "$here/src/GetterDefaults.java" "$here/src/IpCheckCases.java" "$here/src/DnsHostsCases.java" "$here/src/EmailFileCases.java" "$here/src/BeansDump.java" "$here/src/Base64Cases.java" "$here/src/ScenarioNetwork.java" "$here/src/DhcpRun.java" "$here/src/TcpRun.java" "$here/src/DnsRun.java" "$here/src/ArpRun.java" "$here/src/RipRun.java" "$here/src/NatRun.java" "$here/src/WlanRun.java" "$here/src/ExampleRun.java" "$here/src/EchoRun.java" "$here/src/WebRun.java" "$here/src/RouterWebRun.java" "$here/src/KonfigCases.java" "$here/src/EmailRun.java" "$here/src/MailCases.java" "$here/src/EmailClientRun.java" "$here/src/TerminalCases.java" +javac -encoding UTF-8 -d "$here/.build" -cp "$classpath" "$here/src/FlsOracle.java" "$here/src/GetterDefaults.java" "$here/src/IpCheckCases.java" "$here/src/DnsHostsCases.java" "$here/src/EmailFileCases.java" "$here/src/BeansDump.java" "$here/src/Base64Cases.java" "$here/src/ScenarioNetwork.java" "$here/src/DhcpRun.java" "$here/src/TcpRun.java" "$here/src/DnsRun.java" "$here/src/ArpRun.java" "$here/src/RipRun.java" "$here/src/NatRun.java" "$here/src/WlanRun.java" "$here/src/ExampleRun.java" "$here/src/EchoRun.java" "$here/src/WebRun.java" "$here/src/RouterWebRun.java" "$here/src/KonfigCases.java" "$here/src/EmailRun.java" "$here/src/MailCases.java" "$here/src/EmailClientRun.java" "$here/src/TerminalCases.java" "$here/src/TerminalRun.java" # FILIUS writes its settings below $HOME; keep them out of the real one. mkdir -p "$here/.build/home" # Removed first: a crashed run must not leave the previous result standing. @@ -286,6 +286,18 @@ for language in de en; do test -s "$output" done +# The command line's network commands on terminal-net, typed at set times +# (TerminalRun; packages/core/test/terminalJava.test.ts), in the German locale. +for run in pingLan:8000 pingRouted:13000 pingNobody:49000 pingUnreachable:45000 pingBroadcast:27000 pingSelf:17000 \ + pingErrors:14000 interrupt:16000 dns:15000 dnsTimeout:80000 arp:11000 netstat:10000; do + story="${run%%:*}" + output="$root/packages/core/test/scenarios/terminal-java-$story.java.json" + rm -f "$output" + HOME="$here/.build/home" xvfb-run -a java $german -cp "$classpath:$here/.build" TerminalRun \ + "$root/packages/core/test/scenarios/terminal-net.scenario.json" "$story" "${run##*:}" "$output" 2>&1 | grep -v 'logback\|^$\|^\s*at ' || true + test -s "$output" +done + # FILIUS' own examples as Java FILIUS runs them, opened and started as FILIUS # does (ExampleRun): the acceptance of F2 (packages/fls/test/examplesJava.test.ts). for run in internetwork_komplett:routing:12000 einfaches_rechnernetz_komplett:dhcp:20000 dns_server:dns:12000 \ diff --git a/tools/java-oracle/src/TerminalRun.java b/tools/java-oracle/src/TerminalRun.java new file mode 100644 index 0000000..75413c5 --- /dev/null +++ b/tools/java-oracle/src/TerminalRun.java @@ -0,0 +1,254 @@ +// Runs a story of FILIUS' command line (Terminal) on terminal-net in Java +// FILIUS and records what really happens: every frame each card saw, Java's +// tables of them, and everything each host's command line told its window +// (each text and each Boolean "busy" mark), with the time. +// +// TerminalRun +// +// terminal-net: the client 192.168.0.20 (gateway .1, DNS server .10), the +// DNS server .10 (no gateway, no DNS server), .30, .31 (the echo server on +// 55555 in netstat, as on the DNS server), the router .1 / 10.0.0.1, and 10.0.0.2 behind it +// (DNS server 192.168.0.53, which is not there). The DNS server knows +// www.filius.de, filius.de (A and MX), mail.filius.de, multi.filius.de (two +// A), fern.filius.de (10.0.0.2), weg.filius.de (.99, no one) and post.filius.de +// (MX only). A line is typed as the window hands it over +// (Terminal.terminalEingabeAuswerten, the +// first word the command, the others its parameters, then three empty ones): +// the program's thread runs it, one after the other; "^C" is the window's +// Ctrl+C (setInterrupt). Each story's lines with their times are in the +// output (acts), for the core's test to type them at the same times. +// pingLan ping .31, arp typed while it runs +// pingRouted ping fern.filius.de (behind the router), arp on both ends, ping the router's far address +// pingNobody ping .99, which no one has, then by name (weg.filius.de) +// pingUnreachable ping 10.0.0.99 (no one behind the router), 172.16.0.1 (no route at the router) +// pingBroadcast ping .255, ping -b .255, arp, ping (-b) 255.255.255.255, also without a route; +// ping -b .255 from behind the router +// pingSelf ping its own address, localhost, 127.0.0.1 +// pingErrors usage, unknown names, no route, no DNS server, a first word other than -b +// interrupt ping .31, Ctrl+C after 1.8 s; again, then arp typed at once; again, then an unknown command +// dns host and nslookup on known and unknown names, localhost, usage, a name with MX only +// dnsTimeout host, nslookup and ping by name where the DNS server is not there +// arp arp after a ping and a lookup, -a, -d, unknown options, no address, the broadcast row removed +// netstat netstat on the client connected to the echo server, on the echo server, on the DNS server; +// the connection closed, on both again + +import filius.software.clientserver.ClientBaustein; +import filius.software.clientserver.ServerBaustein; +import filius.software.lokal.Terminal; + +import java.util.ArrayList; +import java.util.Arrays; +import java.util.LinkedHashMap; +import java.util.List; +import java.util.Map; +import java.util.StringTokenizer; + +public class TerminalRun { + static final String CLIENT = "00000000-0000-0000-0000-000000000401"; + static final String DNS = "00000000-0000-0000-0000-000000000402"; + static final String WEB = "00000000-0000-0000-0000-000000000403"; + static final String ECHO = "00000000-0000-0000-0000-000000000404"; + static final String FAR = "00000000-0000-0000-0000-000000000406"; + static final String TERMINAL_CLASS = "filius.software.lokal.Terminal"; + + static ScenarioNetwork network; + static final List events = new ArrayList<>(); + + static synchronized void event(String host, String kind, String text) { + events.add(new Object[] { System.currentTimeMillis() - network.start, host, kind, text }); + } + + static void sleepUntil(long milliseconds) throws InterruptedException { + long rest = network.start + milliseconds - System.currentTimeMillis(); + if (rest > 0) Thread.sleep(rest); + } + + /** The story's lines: time, host, line. */ + static List acts(String story) { + List acts = new ArrayList<>(); + switch (story) { + case "pingLan": + acts.add(new Object[] { 500L, CLIENT, "ping 192.168.0.31" }); + acts.add(new Object[] { 1500L, CLIENT, "arp" }); + break; + case "pingRouted": + acts.add(new Object[] { 500L, CLIENT, "ping fern.filius.de" }); + acts.add(new Object[] { 6500L, CLIENT, "arp" }); + acts.add(new Object[] { 6700L, FAR, "arp" }); + acts.add(new Object[] { 7000L, CLIENT, "ping 10.0.0.1" }); + break; + case "pingNobody": + acts.add(new Object[] { 500L, CLIENT, "ping 192.168.0.99" }); + acts.add(new Object[] { 23500L, CLIENT, "ping weg.filius.de" }); + break; + case "pingUnreachable": + acts.add(new Object[] { 500L, CLIENT, "ping 10.0.0.99" }); + acts.add(new Object[] { 40000L, CLIENT, "ping 172.16.0.1" }); + break; + case "pingBroadcast": + acts.add(new Object[] { 500L, CLIENT, "ping 192.168.0.255" }); + acts.add(new Object[] { 1000L, CLIENT, "ping -b 192.168.0.255" }); + acts.add(new Object[] { 7000L, CLIENT, "arp" }); + acts.add(new Object[] { 7200L, CLIENT, "ping 255.255.255.255" }); + acts.add(new Object[] { 7400L, CLIENT, "ping -b 255.255.255.255" }); + acts.add(new Object[] { 12500L, DNS, "ping 255.255.255.255" }); + acts.add(new Object[] { 13000L, FAR, "ping -b 192.168.0.255" }); + break; + case "pingSelf": + acts.add(new Object[] { 500L, CLIENT, "ping 192.168.0.20" }); + acts.add(new Object[] { 6000L, CLIENT, "ping localhost" }); + acts.add(new Object[] { 11500L, CLIENT, "ping 127.0.0.1" }); + break; + case "pingErrors": + acts.add(new Object[] { 500L, CLIENT, "ping" }); + acts.add(new Object[] { 700L, CLIENT, "ping a b c" }); + acts.add(new Object[] { 900L, CLIENT, "ping gibtsnicht.filius.de" }); + acts.add(new Object[] { 2500L, CLIENT, "ping 1.2.3" }); + acts.add(new Object[] { 4000L, DNS, "ping 10.0.0.2" }); + acts.add(new Object[] { 4200L, DNS, "ping www.filius.de" }); + acts.add(new Object[] { 8000L, CLIENT, "ping -x 192.168.0.31" }); + break; + case "interrupt": + acts.add(new Object[] { 500L, CLIENT, "ping 192.168.0.31" }); + acts.add(new Object[] { 2300L, CLIENT, "^C" }); + acts.add(new Object[] { 5000L, CLIENT, "ping 192.168.0.31" }); + acts.add(new Object[] { 5800L, CLIENT, "^C" }); + acts.add(new Object[] { 5900L, CLIENT, "arp" }); + acts.add(new Object[] { 10000L, CLIENT, "ping 192.168.0.31" }); + acts.add(new Object[] { 10800L, CLIENT, "^C" }); + acts.add(new Object[] { 10900L, CLIENT, "gibtsnicht" }); + break; + case "dns": + acts.add(new Object[] { 500L, CLIENT, "host www.filius.de" }); + acts.add(new Object[] { 2000L, CLIENT, "host filius.de" }); + acts.add(new Object[] { 3500L, CLIENT, "host multi.filius.de" }); + acts.add(new Object[] { 5000L, CLIENT, "host gibtsnicht.filius.de" }); + acts.add(new Object[] { 6500L, CLIENT, "nslookup www.filius.de" }); + acts.add(new Object[] { 8000L, CLIENT, "nslookup multi.filius.de" }); + acts.add(new Object[] { 9500L, CLIENT, "nslookup localhost" }); + acts.add(new Object[] { 9700L, CLIENT, "nslookup gibtsnicht.filius.de" }); + acts.add(new Object[] { 11500L, CLIENT, "host" }); + acts.add(new Object[] { 11600L, CLIENT, "nslookup" }); + acts.add(new Object[] { 11700L, CLIENT, "host localhost" }); + acts.add(new Object[] { 11900L, CLIENT, "nslookup filius.de" }); + acts.add(new Object[] { 12100L, CLIENT, "host post.filius.de" }); + break; + case "dnsTimeout": + acts.add(new Object[] { 500L, FAR, "host www.filius.de" }); + acts.add(new Object[] { 30000L, FAR, "nslookup www.filius.de" }); + acts.add(new Object[] { 60000L, FAR, "ping www.filius.de" }); + break; + case "arp": + acts.add(new Object[] { 500L, CLIENT, "ping 192.168.0.31" }); + acts.add(new Object[] { 5500L, CLIENT, "host www.filius.de" }); + acts.add(new Object[] { 7000L, CLIENT, "arp" }); + acts.add(new Object[] { 7200L, CLIENT, "arp -a 192.168.0.31" }); + acts.add(new Object[] { 7400L, CLIENT, "arp -a 192.168.0.99" }); + acts.add(new Object[] { 7600L, CLIENT, "arp -d 192.168.0.31" }); + acts.add(new Object[] { 7800L, CLIENT, "arp" }); + acts.add(new Object[] { 8000L, CLIENT, "arp -x 1.2.3.4" }); + acts.add(new Object[] { 8200L, CLIENT, "arp foo" }); + acts.add(new Object[] { 8250L, CLIENT, "arp -a foo" }); + acts.add(new Object[] { 8300L, CLIENT, "arp -d foo" }); + acts.add(new Object[] { 8400L, CLIENT, "arp -d" }); + acts.add(new Object[] { 8600L, CLIENT, "arp" }); + acts.add(new Object[] { 8800L, CLIENT, "arp -d 255.255.255.255" }); + acts.add(new Object[] { 9000L, CLIENT, "arp" }); + acts.add(new Object[] { 9200L, CLIENT, "arp -d" }); + break; + case "netstat": + acts.add(new Object[] { 2500L, CLIENT, "netstat" }); + acts.add(new Object[] { 2700L, ECHO, "netstat" }); + acts.add(new Object[] { 2900L, CLIENT, "host www.filius.de" }); + acts.add(new Object[] { 4500L, DNS, "netstat" }); + acts.add(new Object[] { 4700L, WEB, "netstat" }); + acts.add(new Object[] { 4900L, CLIENT, "netstat x" }); + acts.add(new Object[] { 5000L, CLIENT, "disconnect" }); + acts.add(new Object[] { 8000L, CLIENT, "netstat" }); + acts.add(new Object[] { 8200L, ECHO, "netstat" }); + break; + default: + throw new IllegalArgumentException("unknown story " + story); + } + return acts; + } + + /** GUIApplicationTerminalWindow on Enter (or Ctrl+C): the line handed to the program. */ + static void type(Terminal terminal, String host, String line) { + event(host, "call", line); + if (line.equals("^C")) { + terminal.setInterrupt(true); + return; + } + StringTokenizer tokens = new StringTokenizer(line, " "); + String command = tokens.nextToken(); + String[] parameters = new String[3 + tokens.countTokens()]; + Arrays.fill(parameters, ""); + for (int index = 0; tokens.hasMoreTokens(); index++) parameters[index] = tokens.nextToken(); + terminal.terminalEingabeAuswerten(command, parameters); + } + + public static void main(String[] args) throws Exception { + network = ScenarioNetwork.read(args[0]); + String story = args[1]; + long end = Long.parseLong(args[2]); + List acts = acts(story); + + Map terminals = new LinkedHashMap<>(); + for (String host : new String[] { CLIENT, DNS, WEB, ECHO, FAR }) { + network.system(host).installApp(TERMINAL_CLASS, false); + Terminal terminal = (Terminal) network.system(host).holeSoftware(TERMINAL_CLASS); + terminal.hinzuBeobachter((observable, data) -> { + if (data instanceof Boolean) event(host, "busy", data.toString()); + else if (data != null) event(host, "text", data.toString()); + }); + terminals.put(host, terminal); + } + ClientBaustein client = null; + if (story.equals("netstat")) { + for (String host : new String[] { ECHO, DNS }) { + network.system(host).installApp("filius.software.clientserver.ServerBaustein", false); + ServerBaustein server = (ServerBaustein) network.system(host).holeSoftware("filius.software.clientserver.ServerBaustein"); + server.setPort(55555); + server.setAktiv(true); + } + network.system(CLIENT).installApp("filius.software.clientserver.ClientBaustein", false); + client = (ClientBaustein) network.system(CLIENT).holeSoftware("filius.software.clientserver.ClientBaustein"); + } + network.start(); + if (client != null) { + sleepUntil(500); + event(CLIENT, "call", "connect 192.168.0.31:55555"); + client.setZielIPAdresse("192.168.0.31"); + client.setZielPort(55555); + client.verbinden(); + } + for (Object[] act : acts) { + sleepUntil((Long) act[0]); + if (act[2].equals("disconnect")) { + // The echo client's window: its connection closed (ClientBaustein.trennen). + event(CLIENT, "call", "disconnect"); + client.trennen(); + continue; + } + type(terminals.get((String) act[1]), (String) act[1], (String) act[2]); + } + sleepUntil(end); + + ScenarioNetwork.Json out = new ScenarioNetwork.Json(); + out.open('{'); + network.writeFrames(out); + out.key("acts").open('['); + for (Object[] act : acts) out.open('[').number((Long) act[0]).string((String) act[1]).string((String) act[2]).close(']'); + out.close(']'); + synchronized (TerminalRun.class) { + out.key("events").open('['); + for (Object[] each : events) out.open('[').number((Long) each[0]).string((String) each[1]).string((String) each[2]).string((String) each[3]).close(']'); + out.close(']'); + } + out.close('}'); + network.stop(); + ScenarioNetwork.write(args[3], out); + System.exit(0); + } +}