diff --git a/CHANGES.md b/CHANGES.md index 2cf2ec7..57ef6da 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -13,7 +13,7 @@ Swift-Pfade relativ zu `filius-ipad/ios/FiliusPad/TopologyEditor/` (Stand | `src/model/link.ts`, `src/model/graph.ts` | `Model/TopologyLink.swift`, `Model/TopologyGraph.swift` | übertragen, bisher nur die Daten (Abfragen folgen mit dem Editor) | | `src/model/documentation.ts` | `Model/TopologyDocumentation.swift` | übertragen; FNV-Kennung mit BigInt, gegen die IDs aus dem Swift-Import geprüft | | `src/runtime/config.ts` | `State/TopologyEditorState.swift` (Laufzeit-Konfigurationen, WLAN eines Rechners, DHCP, Portweiterleitung, Remote Link ohne LAN-Transport, Programme und ihre Konfiguration, Firewall, DNS-Einträge aus `State/TopologyDNSResolver.swift`, E-Mail-Konten und -Nachrichten aus `State/TopologyEmail.swift`); dazu Echo-Server- und Client-Konfiguration, die Swift nicht speichert | übertragen; Java-Beschriftungen der Oberfläche weggelassen | -| `src/runtime/engine.ts` | `State/TopologyNetworkRuntimeEngine.swift` Z. ~313–3585, ~4472–5187 (UDP), ~4753–4850 | übertragen: Warteschlange, Uhr, Ethernet, Switch, ARP, IPv4, ICMP, Routing, Firewall, UDP-Sockets (binden, freie Ports nach Javas Zufall, senden samt Broadcast, zustellen, empfangen mit Wartezeit, schließen), TCP (Z. ~5187–5913: Server- und Client-Sockets, Handschlag mit Ergebnis, Segmente zu 1460 Byte bis zum PSH, höchstens drei Versuche, Abbau über alle Java-Zustände samt `TIME_WAIT`; seit F2.3c nach Javas `TCPSocket` an Java-Filius gemessen: je Versuch und für `TIME_WAIT` 3 RTT nach der Geschwindigkeit (8250 ms bei 90 %, Swift fest 7500 bzw. 2500 ms), der Zeitablauf zählt ab der Übergabe des Segments, vor ARP; ein Segment beendet `TIME_WAIT`; die Gegenseite schließt beim FIN von selbst; nicht bestätigte Daten schließen mit FIN statt sofort; der angenommene Socket hat die Startnummer des Listeners, der Listener eine neue. seit F2.3e wie Java: SYN+ACK und FIN gehen nie ein zweites Mal hinaus; der Server gibt einen Handschlag nach 3 RTT auf und schließt mit FIN; nach dem FIN wartet ein Socket höchstens fünfmal 3 RTT, jedes Segment beendet eine Wartezeit, dann CLOSED (Java lässt den Zustand stehen). Abweichend von Java: drei SYN statt einem, weil Javas Wiederholungsschleife nach dem ersten Zeitablauf abbricht, und ein wiederholtes SYN in `SYN_RCVD` bekommt das SYN+ACK noch einmal, statt den Socket zu schließen), DHCP (Z. ~5913–6694: Server mit festen Zuordnungen, Adressbereich, Angeboten, Leases und Sperrliste; Client seit F2.3b nach Javas `DHCPClient` neu gebaut und an Java-Filius gemessen: je Versuch eine Nachricht, eine Antwort, die nicht passt, wird gelesen und verworfen; die ARP-Prüfung wartet eine RTT, eine Antwort für die Adresse beendet sie sofort, dann DECLINE; nach einem Zeitablauf wiederholt der Zustand seine Nachricht, nach dem fünften nimmt der Client eine Link-Local-Adresse `169.254.1.x/16` (ARP-Probe, ARP-Reply an alle) und gibt keine alte Adresse zurück; Swift sendete doppelt, wartete nicht auf ARP und kehrte nach zehn Versuchen zur alten Adresse zurück. Abweichend von Java: Nach fünf belegten Link-Local-Adressen gibt der Client auf (Java sucht endlos), und ein ARP-Paket für eine andere Adresse beendet die Prüfung nicht. Seit F2.3d befördert ein Kabel einen Frame nach dem anderen wie Javas `SimplexVerbindung` (ein Frame wartet im Ausgangspuffer, bis der vorige angekommen ist, und erscheint im Protokoll, wenn er losgeht); Swift schickt alle zugleich, die Option `swiftCables` behält das für den Swift-Vergleich. Die RTT der DHCP-Zeiten (Warten, Angebote, Sperrliste) folgt wie in Java der Geschwindigkeit (50 Kabel, 2750 ms bei 90 %); Swift rechnet fest mit 2500 ms. ARP seit F2.4b nach Javas `holeARPTabellenEintrag`, an Java-Filius gemessen: eine Auflösung fragt, wartet eine RTT, fragt ein zweites Mal und gibt nach einer weiteren RTT auf; dann „Host unreachable" beim Absender selbst oder vom Router zurück (bei ICMP nur für Echo-Anfragen); ein wartender Absender wacht nach den übrigen Ereignissen desselben Zeitpunkts auf; der Ping wartet danach eine RTT auf die Antwort. Swift schickt in der Ereignisverarbeitung beide Anfragen zugleich und lässt das Paket ohne Ende warten, wenn die Adresse irgendwo im Netz vorkommt (Wissen, das kein Knoten hat), und blockiert direkte Aufrufe ohne Wartezeit; die Option `swiftArp` behält das für den Swift-Vergleich. Seit F2.4b-2 kehrt ein Senden wie in Java sofort zurück, die Frames reisen, während die Uhr läuft (Swift: der Aufruf kehrt erst zurück, wenn alle Frames angekommen sind; die Option `swiftSends` behält das für den Swift-Vergleich), und UDP und TCP senden über Javas Transport-Thread je Knoten und Protokoll: ein Segment nach dem anderen; solange IP auf ARP wartet, blockiert das nächste `senden`. Wartende Absender kommen in der Reihenfolge an die Reihe, in der sie kamen (Javas Sperre überlässt das dem Zufall). Seit F2.4b-3 geht jedes ankommende Paket wie in Java durch den IP-Thread (UDP, TCP) oder den ICMP-Thread (ICMP) seines Knotens: zustellen, Echo-Reply, weiterleiten, eins nach dem anderen; solange ARP wartet, warten die folgenden. Abweichend von Java weckt eine ARP-Antwort alle, die auf die Adresse warten (Javas `notify` weckt einen beliebigen). DNS seit F2.4a nach Javas `DNSServer`/`Resolver`, an Java-Filius gemessen: Server auf Port 53 mit Einträgen aus dem Modell (die Antwort wiederholt die Frage nicht, RCODE immer 0, ein Verweis mit NS und A im Antwortteil), iterativer Resolver mit 5 RTT je Anfrage, der nur die Server behält, an die er verwiesen wurde; seit F2.4c auf den Ereignissen statt blockierend und mit rekursivem Server nach `DNSServer.answerWithRemoteData` (Nameserver der Zone, dann der eigene DNS-Server, sonst Verweis), abweichend von Java fragt er sich nie selbst (Java endlos). Gateway-NAT seit F2.6 (Z. ~3585–3900) nach Javas `filius.software.nat`, an Java-Filius gemessen: die Übersetzung vor dem IP-Thread (wie Javas NAT-Threads zwischen Karte und Ethernet), ausgehend WAN-Adresse und der Port des Eintrags (ICMP behält die Kennung), eingehend nach Gegenstelle, Port und Protokoll, sonst nach der Portweiterleitung (legt einen dynamischen Eintrag an), ein Ping an die WAN-Adresse beantwortet der Heimrouter, Pakete von außen an das LAN verschwinden, beide Seiten durch die Firewall des Heimrouters, ausgehend TTL 1 bekommt „Zeit überschritten“; dynamische Einträge verfallen nach 300 s mal Javas Verzögerungsfaktor (Swift fest 300 s), aufgefrischt nur eingehend, seit 01.10.2026 genau in diesem Alter (Java findet sie erst bei seiner sekündlichen Prüfung, bis zu 1 s später; so auch der Switch: Javas `checkSAT` prüft jede Sekunde, der Kern verfällt genau zur Lernzeit); der Heimrouter leitet weiter wie ein Router. Abweichend von Java: ein LAN-Endpunkt bekommt für jede neue Gegenstelle einen Eintrag auf demselben WAN-Port (Java behält nur den für die erste, die Antworten weiterer bleiben am Heimrouter hängen). RIP seit F2.5a (Z. ~4700–5090) nach Javas `filius.software.rip`, seit F2.5b an Java-Filius gemessen (die Pause in Javas `float`-Rechnung): eine Route mit 0 Hops je eigenem Netz, die nie verfällt; der erste Beacon nach einer Sekunde, dann alle 25,2–35,2 s aus einem Zufall je Router (Java: ein ungesetzter `Random` je Router; der Kern setzt ihn aus Szenario und Router-ID, `ripSeed`; Swift: ein Zufall für alle); eine Nachricht je Schnittstelle ohne die Routen über sie (Split Horizon); eine neue Route oder mehr Hops vom selben Router senden sofort; eine gelernte Route wird genau nach ihren 75 s auf 16 gesetzt und sofort gemeldet (Java erst beim nächsten eigenen Beacon, bis zu gut 30 s später; Swift bei jedem Ereignis; seit 01.10.2026, vorher wie Java); Nachrichten von jedem Quellport (Swift: nur 521); ein RIP-Router leitet nur nach seiner Tabelle weiter, wenige Hops vor langer Maske. `receiveUdp` kehrt wie Javas `empfangen` zurück, sobald ein Datagramm da ist. Seit der Abnahme F2 nach Javas `ARPThread`: ein Eintrag entsteht nur aus einer Anfrage nach der eigenen Adresse oder aus einer Antwort (Swift: aus jedem Paket; `swiftArp` behält das), ein Paket von der Netzadresse wird verworfen; ein Rechner leitet weiter, wenn seine IP-Weiterleitung an ist (`ipForwardingByNodeId`). Seit F2.8b nach Javas Tabellen gemessen: eine ARP-Anfrage trägt als Ziel-MAC die Broadcast-Adresse (Swift: Nullen; `swiftArp` behält sie), eine ICMP-Fehlermeldung Identifier und Sequenznummer 0 (RFC 792, Java; Swift kopiert die des Echos, ein Ping erkennt die Meldung am eingebetteten Echo), und „Host nicht erreichbar“ vom Router trägt das Paket, wie er es weitergeleitet hat (TTL gesenkt). Die Broadcast-Adresse schreibt sie immer groß (Java in der Antwort an 0.0.0.0 klein). Den Mitschnitt je Karte (`capture.ts`) schreibt sie seit F2.8a dort, wo Java ihn schreibt: beim Abgang auf das Kabel und bei der Ankunft an der Karte. Seit F3.4a läuft die Befehlszeile mit (`terminal`, auf den Dateien des Knotens). Seit F3.4b nach Javas `ICMP`/`ICMPThread`, an Java-Filius gemessen: ein Echo im Programm-Thread (`icmpEchoSteps`: Warteschlange leeren, senden mit ARP-Wartezeit, eine RTT auf die erste ICMP-Nachricht warten, gleich welche), ein ICMP-Paket an den Broadcast eines eigenen Netzes geht mit TTL 1 an alle und wird von dort beantwortet, einer für ein fremdes Netz verworfen; Javas Routenwahl (`routeRow`), die ARP-Tabelle mit Javas Broadcast-Zeile (`arpTable`, `removeArpEntry`, `resetArpTable`), DNS im Programm-Thread mit Antwort- und Autoritätsteil (`resolveDnsSteps`), ein UDP-Socket weiß, dass er ohne Gegenstelle lauscht (`listening`); ein Rechner nimmt Pakete an 127.0.0.1 an. Eine ARP-Wartezeit endet wie Javas `wait` nach allem, was zur selben Zeit sonst geschieht (eine Antwort zur selben Millisekunde zählt noch). Seit F3.4c die Uhrzeit eines Frames (`wallTime`) für `tcpdump`. Seit F3.5a schreibt der Mailserver seine Kontendatei `/mailserver/konten.txt` beim Start und bei jeder Änderung seiner Konten in die Dateien des Knotens (Java schreibt die Benachrichtigung an einen lokalen Absender erst beim nächsten Speichern hinein). Abweichend von Java: eine Echo-Antwort kommt von der gefragten Adresse (RFC 792; Java antwortet von 127.0.0.1, wenn die eigene Adresse gefragt war, und von der nahen Karte, wenn die ferne eines Routers gefragt war), und „Netz nicht erreichbar“ vom Router trägt wie „Host nicht erreichbar“ das Paket, wie er es weitergeleitet hätte, mit Absender (Java bettet ein halb gebautes ohne Absender ein). Seit F3.3b läuft das E-Mail-Programm mit (`emailClient`), seine gesendeten und abgeholten Mails stehen im Schnappschuss (`emailClientsByNodeId`); ein Programm-Thread kann MX nachschlagen (`resolveDnsMailServerSteps`). Seit F3.3a läuft der E-Mail-Server mit (`emailServer`); was er annimmt oder löscht, steht im Schnappschuss (`emailServersByNodeId`), aus dem es zurück ins Projekt geht; die Uhrzeit für seine Benachrichtigungen kommt aus der Option `wallClock`. Seit F3.2c ändert die Seite `konfig` der Router und Heimrouter die Firewall zur Laufzeit; die Änderung steht im Schnappschuss (`firewallConfiguration`), aus dem sie zurück ins Projekt geht. Seit F3.2b starten Router und Heimrouter ihren Webserver auf Port 80 mit Javas Seiten (Javas Server lauscht wegen eines Wettlaufs in `setAktiv` manchmal nie, der Kern immer; `swiftRouters` lässt ihn für den Swift-Vergleich weg), die Firewall führt ein Protokoll je Knoten (Regeltreffer bei TCP und UDP, verworfenes ICMP), das wie Javas Protokollseite einen Neustart überlebt, eine RIP-Route kennt die öffentliche Adresse des meldenden Routers (`hopPublicIp`), und TCP zählt Sequenznummern und Segmentgröße wie Java in Zeichen (UTF-16-Einheiten) statt in Bytes, ohne ein Zeichenpaar zu zerreißen; Bytes, die kein Text sind, zählen als Bytes. Seit F3.2a schließt ein Programm wie Javas `schliessen()` nur auf Bitte (`requestTcpClose`): Das FIN geht zur selben Zeit, nach dem, was der Programm-Thread noch tut. Seit F3.1 laufen Verbinden, Senden, Empfangen und Annehmen auch als Schritte eines Programm-Threads (`connectTcpSteps`, `sendTcpSteps`, `receiveTcpSteps`, `acceptTcpSteps`, `resolveHostSteps`); die blockierenden Aufrufe sind nur noch eine Hülle darum. Abweichend von Java: Ein Verbindungsaufbau ohne Route scheitert sofort (Javas Socket-Thread stirbt an der `RouteNotFoundException`, `verbinden` wartet ewig), eine Nachricht, die vor dem Schließen ankam, wird noch ausgegeben (Java verwirft sie), und Senden unterscheidet wie Java „nicht verbunden", „unterbrochen" und „Zeitüberschreitung". WLAN seit F2.7 an Java-Filius gemessen: zur Laufzeit ist ein Funkkabel ein Kabel wie jedes andere, und eine SSID verbindet nichts (nach ihr legt nur Javas Editor das Funkkabel, `JHostKonfiguration.updateWifiConnection`); Swifts Verbindung über die SSID zur Laufzeit, auch ohne Kabel (`wirelessAssociations`), nicht übernommen. Klasse statt Werttyp. Noch nicht übertragen (wirft `NotPortedError`): Remote Link | +| `src/runtime/engine.ts` | `State/TopologyNetworkRuntimeEngine.swift` Z. ~313–3585, ~4472–5187 (UDP), ~4753–4850 | übertragen: Warteschlange, Uhr, Ethernet, Switch, ARP, IPv4, ICMP, Routing, Firewall, UDP-Sockets (binden, freie Ports nach Javas Zufall, senden samt Broadcast, zustellen, empfangen mit Wartezeit, schließen), TCP (Z. ~5187–5913: Server- und Client-Sockets, Handschlag mit Ergebnis, Segmente zu 1460 Byte bis zum PSH, höchstens drei Versuche, Abbau über alle Java-Zustände samt `TIME_WAIT`; seit F2.3c nach Javas `TCPSocket` an Java-Filius gemessen: je Versuch und für `TIME_WAIT` 3 RTT nach der Geschwindigkeit (8250 ms bei 90 %, Swift fest 7500 bzw. 2500 ms), der Zeitablauf zählt ab der Übergabe des Segments, vor ARP; ein Segment beendet `TIME_WAIT`; die Gegenseite schließt beim FIN von selbst; nicht bestätigte Daten schließen mit FIN statt sofort; der angenommene Socket hat die Startnummer des Listeners, der Listener eine neue. seit F2.3e wie Java: SYN+ACK und FIN gehen nie ein zweites Mal hinaus; der Server gibt einen Handschlag nach 3 RTT auf und schließt mit FIN; nach dem FIN wartet ein Socket höchstens fünfmal 3 RTT, jedes Segment beendet eine Wartezeit, dann CLOSED (Java lässt den Zustand stehen). Abweichend von Java: drei SYN statt einem, weil Javas Wiederholungsschleife nach dem ersten Zeitablauf abbricht, und ein wiederholtes SYN in `SYN_RCVD` bekommt das SYN+ACK noch einmal, statt den Socket zu schließen), DHCP (Z. ~5913–6694: Server mit festen Zuordnungen, Adressbereich, Angeboten, Leases und Sperrliste; Client seit F2.3b nach Javas `DHCPClient` neu gebaut und an Java-Filius gemessen: je Versuch eine Nachricht, eine Antwort, die nicht passt, wird gelesen und verworfen; die ARP-Prüfung wartet eine RTT, eine Antwort für die Adresse beendet sie sofort, dann DECLINE; nach einem Zeitablauf wiederholt der Zustand seine Nachricht, nach dem fünften nimmt der Client eine Link-Local-Adresse `169.254.1.x/16` (ARP-Probe, ARP-Reply an alle) und gibt keine alte Adresse zurück; Swift sendete doppelt, wartete nicht auf ARP und kehrte nach zehn Versuchen zur alten Adresse zurück. Abweichend von Java: Nach fünf belegten Link-Local-Adressen gibt der Client auf (Java sucht endlos), und ein ARP-Paket für eine andere Adresse beendet die Prüfung nicht. Seit F2.3d befördert ein Kabel einen Frame nach dem anderen wie Javas `SimplexVerbindung` (ein Frame wartet im Ausgangspuffer, bis der vorige angekommen ist, und erscheint im Protokoll, wenn er losgeht); Swift schickt alle zugleich, die Option `swiftCables` behält das für den Swift-Vergleich. Die RTT der DHCP-Zeiten (Warten, Angebote, Sperrliste) folgt wie in Java der Geschwindigkeit (50 Kabel, 2750 ms bei 90 %); Swift rechnet fest mit 2500 ms. ARP seit F2.4b nach Javas `holeARPTabellenEintrag`, an Java-Filius gemessen: eine Auflösung fragt, wartet eine RTT, fragt ein zweites Mal und gibt nach einer weiteren RTT auf; dann „Host unreachable" beim Absender selbst oder vom Router zurück (bei ICMP nur für Echo-Anfragen); ein wartender Absender wacht nach den übrigen Ereignissen desselben Zeitpunkts auf; der Ping wartet danach eine RTT auf die Antwort. Swift schickt in der Ereignisverarbeitung beide Anfragen zugleich und lässt das Paket ohne Ende warten, wenn die Adresse irgendwo im Netz vorkommt (Wissen, das kein Knoten hat), und blockiert direkte Aufrufe ohne Wartezeit; die Option `swiftArp` behält das für den Swift-Vergleich. Seit F2.4b-2 kehrt ein Senden wie in Java sofort zurück, die Frames reisen, während die Uhr läuft (Swift: der Aufruf kehrt erst zurück, wenn alle Frames angekommen sind; die Option `swiftSends` behält das für den Swift-Vergleich), und UDP und TCP senden über Javas Transport-Thread je Knoten und Protokoll: ein Segment nach dem anderen; solange IP auf ARP wartet, blockiert das nächste `senden`. Wartende Absender kommen in der Reihenfolge an die Reihe, in der sie kamen (Javas Sperre überlässt das dem Zufall). Seit F2.4b-3 geht jedes ankommende Paket wie in Java durch den IP-Thread (UDP, TCP) oder den ICMP-Thread (ICMP) seines Knotens: zustellen, Echo-Reply, weiterleiten, eins nach dem anderen; solange ARP wartet, warten die folgenden. Abweichend von Java weckt eine ARP-Antwort alle, die auf die Adresse warten (Javas `notify` weckt einen beliebigen). DNS seit F2.4a nach Javas `DNSServer`/`Resolver`, an Java-Filius gemessen: Server auf Port 53 mit Einträgen aus dem Modell (die Antwort wiederholt die Frage nicht, RCODE immer 0, ein Verweis mit NS und A im Antwortteil), iterativer Resolver mit 5 RTT je Anfrage, der nur die Server behält, an die er verwiesen wurde; seit F2.4c auf den Ereignissen statt blockierend und mit rekursivem Server nach `DNSServer.answerWithRemoteData` (Nameserver der Zone, dann der eigene DNS-Server, sonst Verweis), abweichend von Java fragt er sich nie selbst (Java endlos). Gateway-NAT seit F2.6 (Z. ~3585–3900) nach Javas `filius.software.nat`, an Java-Filius gemessen: die Übersetzung vor dem IP-Thread (wie Javas NAT-Threads zwischen Karte und Ethernet), ausgehend WAN-Adresse und der Port des Eintrags (ICMP behält die Kennung), eingehend nach Gegenstelle, Port und Protokoll, sonst nach der Portweiterleitung (legt einen dynamischen Eintrag an), ein Ping an die WAN-Adresse beantwortet der Heimrouter, Pakete von außen an das LAN verschwinden, beide Seiten durch die Firewall des Heimrouters, ausgehend TTL 1 bekommt „Zeit überschritten“; dynamische Einträge verfallen nach 300 s mal Javas Verzögerungsfaktor (Swift fest 300 s), aufgefrischt nur eingehend, seit 01.10.2026 genau in diesem Alter (Java findet sie erst bei seiner sekündlichen Prüfung, bis zu 1 s später; so auch der Switch: Javas `checkSAT` prüft jede Sekunde, der Kern verfällt genau zur Lernzeit); der Heimrouter leitet weiter wie ein Router. Abweichend von Java: ein LAN-Endpunkt bekommt für jede neue Gegenstelle einen Eintrag auf demselben WAN-Port (Java behält nur den für die erste, die Antworten weiterer bleiben am Heimrouter hängen). RIP seit F2.5a (Z. ~4700–5090) nach Javas `filius.software.rip`, seit F2.5b an Java-Filius gemessen (die Pause in Javas `float`-Rechnung): eine Route mit 0 Hops je eigenem Netz, die nie verfällt; der erste Beacon nach einer Sekunde, dann alle 25,2–35,2 s aus einem Zufall je Router (Java: ein ungesetzter `Random` je Router; der Kern setzt ihn aus Szenario und Router-ID, `ripSeed`; Swift: ein Zufall für alle); eine Nachricht je Schnittstelle ohne die Routen über sie (Split Horizon); eine neue Route oder mehr Hops vom selben Router senden sofort; eine gelernte Route wird genau nach ihren 75 s auf 16 gesetzt und sofort gemeldet (Java erst beim nächsten eigenen Beacon, bis zu gut 30 s später; Swift bei jedem Ereignis; seit 01.10.2026, vorher wie Java); Nachrichten von jedem Quellport (Swift: nur 521); ein RIP-Router leitet nur nach seiner Tabelle weiter, wenige Hops vor langer Maske. `receiveUdp` kehrt wie Javas `empfangen` zurück, sobald ein Datagramm da ist. Seit der Abnahme F2 nach Javas `ARPThread`: ein Eintrag entsteht nur aus einer Anfrage nach der eigenen Adresse oder aus einer Antwort (Swift: aus jedem Paket; `swiftArp` behält das), ein Paket von der Netzadresse wird verworfen; ein Rechner leitet weiter, wenn seine IP-Weiterleitung an ist (`ipForwardingByNodeId`). Seit F2.8b nach Javas Tabellen gemessen: eine ARP-Anfrage trägt als Ziel-MAC die Broadcast-Adresse (Swift: Nullen; `swiftArp` behält sie), eine ICMP-Fehlermeldung Identifier und Sequenznummer 0 (RFC 792, Java; Swift kopiert die des Echos, ein Ping erkennt die Meldung am eingebetteten Echo), und „Host nicht erreichbar“ vom Router trägt das Paket, wie er es weitergeleitet hat (TTL gesenkt). Die Broadcast-Adresse schreibt sie immer groß (Java in der Antwort an 0.0.0.0 klein). Den Mitschnitt je Karte (`capture.ts`) schreibt sie seit F2.8a dort, wo Java ihn schreibt: beim Abgang auf das Kabel und bei der Ankunft an der Karte. Seit F3.4a läuft die Befehlszeile mit (`terminal`, auf den Dateien des Knotens). Seit F3.4b nach Javas `ICMP`/`ICMPThread`, an Java-Filius gemessen: ein Echo im Programm-Thread (`icmpEchoSteps`: Warteschlange leeren, senden mit ARP-Wartezeit, eine RTT auf die erste ICMP-Nachricht warten, gleich welche), ein ICMP-Paket an den Broadcast eines eigenen Netzes geht mit TTL 1 an alle und wird von dort beantwortet, einer für ein fremdes Netz verworfen; Javas Routenwahl (`routeRow`), die ARP-Tabelle mit Javas Broadcast-Zeile (`arpTable`, `removeArpEntry`, `resetArpTable`), DNS im Programm-Thread mit Antwort- und Autoritätsteil (`resolveDnsSteps`), ein UDP-Socket weiß, dass er ohne Gegenstelle lauscht (`listening`); ein Rechner nimmt Pakete an 127.0.0.1 an. Eine ARP-Wartezeit endet wie Javas `wait` nach allem, was zur selben Zeit sonst geschieht (eine Antwort zur selben Millisekunde zählt noch). Seit F3.4c die Uhrzeit eines Frames (`wallTime`) für `tcpdump`. Seit F3.6a läuft das Gnutella-Programm mit (`gnutella`, Schnappschuss `gnutellaByNodeId`), mit eigener Zufallsquelle für die GUIDs (`drawGnutellaGuid`). Seit F3.5a schreibt der Mailserver seine Kontendatei `/mailserver/konten.txt` beim Start und bei jeder Änderung seiner Konten in die Dateien des Knotens (Java schreibt die Benachrichtigung an einen lokalen Absender erst beim nächsten Speichern hinein). Abweichend von Java: eine Echo-Antwort kommt von der gefragten Adresse (RFC 792; Java antwortet von 127.0.0.1, wenn die eigene Adresse gefragt war, und von der nahen Karte, wenn die ferne eines Routers gefragt war), und „Netz nicht erreichbar“ vom Router trägt wie „Host nicht erreichbar“ das Paket, wie er es weitergeleitet hätte, mit Absender (Java bettet ein halb gebautes ohne Absender ein). Seit F3.3b läuft das E-Mail-Programm mit (`emailClient`), seine gesendeten und abgeholten Mails stehen im Schnappschuss (`emailClientsByNodeId`); ein Programm-Thread kann MX nachschlagen (`resolveDnsMailServerSteps`). Seit F3.3a läuft der E-Mail-Server mit (`emailServer`); was er annimmt oder löscht, steht im Schnappschuss (`emailServersByNodeId`), aus dem es zurück ins Projekt geht; die Uhrzeit für seine Benachrichtigungen kommt aus der Option `wallClock`. Seit F3.2c ändert die Seite `konfig` der Router und Heimrouter die Firewall zur Laufzeit; die Änderung steht im Schnappschuss (`firewallConfiguration`), aus dem sie zurück ins Projekt geht. Seit F3.2b starten Router und Heimrouter ihren Webserver auf Port 80 mit Javas Seiten (Javas Server lauscht wegen eines Wettlaufs in `setAktiv` manchmal nie, der Kern immer; `swiftRouters` lässt ihn für den Swift-Vergleich weg), die Firewall führt ein Protokoll je Knoten (Regeltreffer bei TCP und UDP, verworfenes ICMP), das wie Javas Protokollseite einen Neustart überlebt, eine RIP-Route kennt die öffentliche Adresse des meldenden Routers (`hopPublicIp`), und TCP zählt Sequenznummern und Segmentgröße wie Java in Zeichen (UTF-16-Einheiten) statt in Bytes, ohne ein Zeichenpaar zu zerreißen; Bytes, die kein Text sind, zählen als Bytes. Seit F3.2a schließt ein Programm wie Javas `schliessen()` nur auf Bitte (`requestTcpClose`): Das FIN geht zur selben Zeit, nach dem, was der Programm-Thread noch tut. Seit F3.1 laufen Verbinden, Senden, Empfangen und Annehmen auch als Schritte eines Programm-Threads (`connectTcpSteps`, `sendTcpSteps`, `receiveTcpSteps`, `acceptTcpSteps`, `resolveHostSteps`); die blockierenden Aufrufe sind nur noch eine Hülle darum. Abweichend von Java: Ein Verbindungsaufbau ohne Route scheitert sofort (Javas Socket-Thread stirbt an der `RouteNotFoundException`, `verbinden` wartet ewig), eine Nachricht, die vor dem Schließen ankam, wird noch ausgegeben (Java verwirft sie), und Senden unterscheidet wie Java „nicht verbunden", „unterbrochen" und „Zeitüberschreitung". WLAN seit F2.7 an Java-Filius gemessen: zur Laufzeit ist ein Funkkabel ein Kabel wie jedes andere, und eine SSID verbindet nichts (nach ihr legt nur Javas Editor das Funkkabel, `JHostKonfiguration.updateWifiConnection`); Swifts Verbindung über die SSID zur Laufzeit, auch ohne Kabel (`wirelessAssociations`), nicht übernommen. Klasse statt Werttyp. Noch nicht übertragen (wirft `NotPortedError`): Remote Link | | `src/runtime/threads.ts` | Javas Threads der Programme (`Anwendung extends Thread`, `ServerMitarbeiter`) | neu (F3.1): ein Programm-Thread als Generator, der liefert, worauf er wartet (Bedingung, Zeit oder beides); die Engine setzt nach jedem Ereignis fort, wessen Warten vorbei ist, in der Reihenfolge, in der die Threads begannen; nichts blockiert die Engine. Abweichend von Java: ein Thread wacht sofort, wenn seine Bedingung gilt (Java sieht oft nur alle 100 ms nach) | | `src/runtime/apps/program.ts` | Java `filius.software.Anwendung` | neu (F3.1): die Zeilen im Fenster eines Programms (strukturiert, damit der Editor sie übersetzt) und der Befehls-Thread (`ausfuehren`) | | `src/runtime/apps/server.ts` | Java `ServerAnwendung`, `ServerMitarbeiter` | neu (F3.2a, aus `echo.ts` herausgelöst): was jeder Server teilt — ein Thread nimmt Verbindungen an, solange er eingeschaltet ist, je Verbindung einer beantwortet jede Nachricht; ausgeschaltet schließt er Socket und Verbindungen; Port belegt → er schaltet sich aus; seit F3.3a kann ein Server das Gespräch einer Verbindung selbst führen (`converse`: Begrüßung, keine oder mehrere Antworten, Schließen) | @@ -27,6 +27,7 @@ Swift-Pfade relativ zu `filius-ipad/ios/FiliusPad/TopologyEditor/` (Stand | `src/runtime/apps/emailServer.ts` | Java `EmailServer`, `SMTPServer`, `SMTPMitarbeiter`, `POP3Server`, `POP3Mitarbeiter`, `EmailKonto` | neu nach Java (F3.3a): Konten einer Domain, SMTP auf Port 25 speichert Mails an eigene Konten (wie Java neu gelesen) und schickt bei unbekannten Empfängern eine Benachrichtigung an einen Absender der Domain, POP3 auf Port 110 gibt Mails ab 0 nummeriert aus; beide zusammen ein- und ausgeschaltet, POP3 zuerst; SMTP-Antworten in der Sprache des Projekts; Fensterzeilen wie Java. An Java-Filius gemessen (`EmailRun`, `MailCases`). Abweichend von Java: nach einer Mail ist der Umschlag neu (Java antwortet dem nächsten Befehl 503 und behält Absender, Empfänger und Text); ein Befehl, den der Zustand nicht nimmt, bekommt 503 (Java schweigt), HELO beginnt neu; in DATA ist alles Text, auch `quit`; die Domain gilt in jeder Schreibweise; ein Empfänger ohne `@` ist unbekannt, ein leerer Absender bekommt keine Benachrichtigung (Java wirft), eine Benachrichtigung an eine Mail ohne From geht an den Absender des Umschlags (Java: `To: null`); POP3: eine Mail lässt sich mehrmals abrufen, eine fehlende Mail, `LIST` ohne Mails und falsche Argumente geben `-ERR` (Java: leere Mail, leere Antwort, Abbruch), `LIST n` listet die eine Mail, Nummern bleiben nach `DELE` (Javas `LIST` zählt neu), vor der Anmeldung `-ERR unknown command`, `QUIT` immer `+OK`. Seit F3.3b leitet der Server Mails an fremde Domains per MX weiter (in seinem eigenen Thread, je Weiterleitung ein neuer SMTP-Client) und schickt eine Benachrichtigung an einen fremden Absender mit leerem Absender an dessen Domain. Noch nicht: die Kontodatei `/mailserver/konten.txt` zur Laufzeit | | `src/runtime/apps/emailClient.ts` | Java `EmailAnwendung`, `SMTPClient`, `POP3Client`, das Senden aus `GUIApplicationEmailAnwendungWindow` | neu nach Java (F3.3b): das E-Mail-Programm sendet eine Mail an den SMTP-Server seines Kontos, eine Verbindung je Empfänger (An, Cc, Bcc), und holt die Mails seines Kontos vom POP3-Server (jede abgerufen, dann gelöscht); die Prüfungen des Fensters (kein Konto, Adresse, die Javas Muster nicht nimmt, kein Empfänger); Meldungen wie Javas Beobachter (Verbindung, versendet, getrennt, Ausnahmen); der SMTP-Client dient auch dem Server zum Weiterleiten. An Java-Filius gemessen (`EmailClientRun`). Abweichend von Java: der SMTP-Port des Kontos gilt (Java verbindet immer zu 25); drei SYN statt einem | | `src/runtime/apps/filePrograms.ts` | Java `FileExplorer`, `TextEditor`, `ImageViewer` und ihre Fenster, `config/filetypes.txt`, die Meldungen `sw_fileexplorer_msg1`–`3`, `fileexplorer_msg19` | neu nach Java (F3.5b): die Dateioperationen hinter den Knöpfen von Datei-Explorer (Ordnerliste, neuer Ordner, löschen, kopieren/ausschneiden/einfügen, umbenennen, importieren), Texteditor (speichern, speichern unter) und Bildbetrachter, auf den Dateien des Knotens; an Java-Filius gemessen (`FileCases`). Abweichend von Java: ein Ordnername, der zu keinem Namen wird, legt nichts an; Einfügen auf einen vorhandenen Namen wird abgelehnt (Java: zweiter Eintrag gleichen Namens); Umbenennen auf einen Namen mit `/` oder mit Leerzeichen am Rand wird abgelehnt, eine reine Änderung der Groß-/Kleinschreibung ausgeführt (Java lehnt sie ab); „Speichern unter“ und Import auf einen Ordnernamen werden abgelehnt (Java wirft); die Größe einer Textdatei sind ihre Zeichen | +| `src/runtime/apps/gnutella.ts` | Java `filius.software.dateiaustausch` (`PeerToPeerAnwendung`, `PeerToPeerServer`, `PeerToPeerServerMitarbeiter`, `PeerToPeerClient`, `PeerToPeerClientMitarbeiter`, `PingPaket`, `PongPaket`) | neu nach Java (F3.6a): Beitreten mit Ping und Pong in Javas Textformat über Port 6346, Weiterleiten an die eigenen Teilnehmer, Pongs auf dem Weg des Pings zurück, Höchstzahl der Teilnehmer, Zurücksetzen, Ordner `/peer2peer`; an Java-Filius gemessen (`GnutellaRun`). Die Swift-Fassung (`TopologyRuntimeGnutella.swift`, eigenes Protokoll) nicht übernommen. Abweichend von Java: ein zweites Mal ankommender Ping bekommt keinen Pong, und seine Verbindung bleibt (Java wirft und schließt sie) | | `src/runtime/apps/terminal.ts`, `src/runtime/apps/terminalTexts.ts` | Java `filius.software.lokal.Terminal`, die Eingabe aus `GUIApplicationTerminalWindow`, die Texte `sw_terminal_*` und `terminal_msg*` des Bündels | neu nach Java (F3.4a): die Befehlszeile mit Javas Zerlegung der Eingabe, Verteilung nach dem Befehlsnamen und den lokalen Befehlen `ls`/`dir`, `cd`, `pwd`, `mkdir`, `touch`, `cp`/`copy`, `mv`/`move`, `rm`/`del`, `cat`/`type`, `test`, `help`, `ipconfig`, `route`; Texte in der Sprache des Projekts, aus dem von Java geladenen Bündel erzeugt. An Java-Filius gemessen (`TerminalCases`). Abweichend von Java: die Größe einer Textdatei sind ihre Zeichen (Java dekodiert Base64); ein fehlender Ordner ist für `ls` „nicht vorhanden“, `ls /` nennt die Wurzel; `cd` auf eine Datei, `touch`/`mkdir` in fehlenden Ordnern und `cp` auf einen Ordnernamen scheitern; `..` bleibt an der Wurzel; `rm` und `mv` nehmen absolute Pfade absolut, die Wurzel ist nicht löschbar, nach dem Löschen des Arbeitsordners gilt der nächste verbliebene darüber; `mv` auf die Datei selbst benennt sie um. Seit F3.4b die Netzbefehle `ping` (Strg+C über `interrupt`), `host`, `nslookup`, `arp` und `netstat`, mit Javas Laufmarken; ein unbekannter Befehl wird wie bei Java sofort gemeldet, auch während ein anderer läuft; seit F3.4c `traceroute` und `tcpdump` (`arpsend` nicht gebaut, der Befehl ist unbekannt); an Java-Filius gemessen (`TerminalRun`). Abweichend von Java: `ping` nennt den Host, wo Java seinen ersten Parameter nennt (`-b` in der Statistik), und nimmt vor dem Host nur `-b` (Java nimmt jedes Wort und pingt einen Broadcast); `arp` und `netstat` listen in der Reihenfolge des Lernens bzw. Anlegens (Java: Reihenfolge einer `HashMap`); `netstat` zeigt von einem UDP-Server nur den lauschenden Socket (Java auch einen für jede je beantwortete Adresse, nie geschlossen); `traceroute` sagt sein Fazit vor der Endmarke (Java danach, wo sein Fenster keinen Text mehr zeigt) und nennt ein Ziel beim 20. Sprung erreicht (Java: nicht erreicht); `tcpdump` meldet jeden Frame sofort (Java schaut alle 100 ms) | | `src/runtime/apps/echo.ts` | Java `filius.software.clientserver` (`ServerBaustein`, `ServerBausteinMitarbeiter`, `ClientAnwendung`, `ClientBaustein`) | neu nach Java statt nach Swift (F3.1): Echo-Server (auf `server.ts`, sendet jede Nachricht zurück) und einfacher Client (verbinden über Adresse oder Namen, senden, empfangen, trennen), mit Javas Fensterzeilen. An Java-Filius gemessen. Abweichend von Java: Der Server merkt das Ausschalten, der Client die Verbindung sofort (Java alle 100 ms); ohne Route scheitert der Client sofort (Java wartet ewig ohne Meldung); ausgeschaltet bestätigt der Server noch das FIN seiner Verbindungen (Java gibt den Port frei, das FIN bleibt unbeantwortet) | | `src/runtime/dns.ts` | Java `filius.software.dns.DNSNachricht`, `Query`, `ResourceRecord` | neu nach Java statt nach Swift (Swift ersetzt Javas Textnachrichten durch `FILIUS-DNS-TYPED/1`): Kopfzeile `ID=… QR=… RCODE=… QDCOUNT=… …`, Frage- und Eintragszeilen, Suche nach Namen ohne Rücksicht auf Groß- und Kleinschreibung, NS der längsten Zone, sonst der Wurzel | @@ -61,6 +62,7 @@ Swift-Pfade relativ zu `filius-ipad/ios/FiliusPad/TopologyEditor/` (Stand | `test/emailClientJava.test.ts`, `test/scenarios/email-client-java-*.java.json` | — | neu (F3.3b): sechs Abläufe mit dem E-Mail-Programm und zwei Servern gegen Java-Filius (`EmailClientRun`): senden mit Weiterleitung, abholen, Server per Name und Benachrichtigungen von beiden Servern, falsches Passwort, kein Server, unbekannter Servername; je Karte Frames, Zeiten, Tabellen, die Meldungen von Programm und Servern, Posteingang, Gesendete und Konten am Ende; Javas 100-ms-Blick kostet je Verbindung (und je DNS-Antwort, auf die es so wartet) eine Periode Toleranz; ein benannter Java-Fehler (nur ein SYN); bei `byName` die Startnummern ohne die Million (Thread-Wettlauf in Java) | | `test/emailClient.test.ts` | — | neu (F3.3b): was das Fenster ablehnt, Bcc, der SMTP-Port des Kontos, eine ungültige Kontoadresse, eine Verbindung, die beim Warten endet, eine Mail ohne Absender aus dem Modell, die Ordner im Schnappschuss | | `test/filePrograms.test.ts`, `test/file-programs.cases.txt`, `test/file-programs.{de,en}.java.json` | — | neu (F3.5b): sechs Fälle der Dateiprogramme gegen Java-Filius (`FileCases`), je Schritt Rückgabe und alle Dateien, Deutsch und Englisch, benannte Java-Fehler (`JAVA_BUGS`); dazu Dateitypen, Ordnerliste, Bildbetrachter, leerer Ordnername | +| `test/gnutellaJava.test.ts`, `test/gnutella.test.ts`, `test/scenarios/gnutella-java-*.java.json` | — | neu (F3.6a): sechs Abläufe des Beitretens gegen Java-Filius (`GnutellaRun`), je Karte die Frames samt Tabellen (wo viele Verbindungen zugleich laufen: je Verbindung und Richtung mit ihren Daten), die Teilnehmer jedes Programms mit Zeit; Javas GUIDs ersetzen die gezogenen, damit Längen und Sequenznummern gleich bleiben; dazu Paketformat, doppelter Ping, Kopf ohne Paket, Lebensdauer, Dateien im Pong | | `test/terminal.test.ts`, `test/terminal.cases.txt`, `test/terminal.{de,en}.java.json` | — | neu (F3.4a): 16 Fälle der Befehlszeile gegen Java-Filius (`TerminalCases`), je Zeile die Handlung des Fensters, was das Programm sagt, Arbeitsordner und alle Dateien, Deutsch und Englisch; Javas Größe von Textdateien überall als Java-Fehler korrigiert, dazu acht Fälle mit benannten Java-Fehlern (`JAVA_BUGS`); ein Bild bleibt beim Kopieren ein Bild; jeder Text der Tabelle ist wörtlich Javas | | `test/terminalJava.test.ts`, `test/scenarios/terminal-net.scenario.json`, `test/scenarios/terminal-java-*.java.json` | — | neu (F3.4b): zwölf Abläufe der Netzbefehle gegen Java-Filius (`TerminalRun`) auf einem LAN mit DNS-Server, Router und Rechner dahinter: `ping` im LAN, über den Router, ins Leere, hinter dem Router unerreichbar, ohne Route am Router, Broadcast, eigene Adresse, Fehler, Strg+C; `host` und `nslookup`, auch ohne erreichbaren DNS-Server; `arp`; `netstat` mit TCP-Verbindung und DNS-Server; je Karte die Frames samt Javas Tabellen, je Rechner Texte und Laufmarken mit Zeit; benannte Java-Fehler (`JAVA_BUGS`); die Reihenfolge der Antworten auf einen Broadcast ist ein Wettlauf von Javas Threads (je Sekunde als Menge verglichen); seit F3.4c neun Abläufe mit `traceroute` (LAN, über den Router, unerreichbar, ohne Route, ins Leere, eigene Adresse, Fehler, Strg+C) und `tcpdump` auf zwei Rechnern; ein Wächter verwirft Aufnahmen, in denen Java sein Aufwecken verpasst hat; dazu zehn Einzelfälle (traceroute über 20 Sprünge, Strg+C vor dem Start, fremde Echo-Antworten, gerundeter Verlust, Broadcast bei anderer Maske, zufälliger Identifier und sein Weiterzählen, gleich lange Routen) | | `test/apps.test.ts` | — | neu (F3.1): wie Threads aufwachen (nach dem Ereignis, nach einer Pause hinter den anderen, ein Weckruf nur für sein Warten, Reihenfolge des Beginns, kein Warten auf schon Geltendes), und was die Java-Abläufe nicht zeigen: belegter Port, Name über DNS und ohne DNS, keine Route, unbestätigtes Senden, Neustart, eine Nachricht vor dem Schließen | diff --git a/packages/core/src/index.ts b/packages/core/src/index.ts index f0e65a6..df99bf0 100644 --- a/packages/core/src/index.ts +++ b/packages/core/src/index.ts @@ -27,6 +27,7 @@ export * from './runtime/apps/firewallSettings.js'; export * from './runtime/apps/emailServer.js'; export * from './runtime/apps/emailClient.js'; export * from './runtime/apps/filePrograms.js'; +export * from './runtime/apps/gnutella.js'; export * from './runtime/apps/terminal.js'; export * from './runtime/apps/terminalTexts.js'; export * from './runtime/email.js'; diff --git a/packages/core/src/runtime/apps/gnutella.ts b/packages/core/src/runtime/apps/gnutella.ts new file mode 100644 index 0000000..87e84d8 --- /dev/null +++ b/packages/core/src/runtime/apps/gnutella.ts @@ -0,0 +1,280 @@ +// FILIUS' Gnutella program (filius.software.dateiaustausch: PeerToPeerAnwendung +// with its PeerToPeerServer on port 6346 and PeerToPeerClient): a host joins +// the network by a ping to one peer, which answers with a pong, takes the +// host as a peer and sends the ping on to its own peers, whose pongs come +// back the same way; each knows at most its number of peers. The messages +// are Java's text packets (PeerToPeerPaket.toString), each on a connection +// of its own that stays open, as Java's do. +// +// Departures from Java (gnutellaJava.test.ts names each): +// - a ping that comes a second time gets no pong, and its connection stays +// (Java means so, but its worker throws on the missing pong and closes the +// connection). + +import type { Id } from '../../ids.js'; +import type { GnutellaConfiguration } from '../config.js'; +import type { NetworkRuntimeEngine } from '../engine.js'; +import type { Steps } from '../threads.js'; +import { ProgramLog } from './program.js'; +import { TcpServerProgram } from './server.js'; + +/** PeerToPeerServer, PeerToPeerClientMitarbeiter: Gnutella's port. */ +export const GNUTELLA_PORT = 6346; + +/** Where the program keeps its files to share (PeerToPeerAnwendung.setSystemSoftware). */ +export const GNUTELLA_FOLDER = '/peer2peer'; + +/** A packet's head (PeerToPeerPaket): its id, kind, hops, time to live and payload length in bits. */ +interface GnutellaHead { + readonly guid: number; + readonly hops: number; + readonly ttl: number; + readonly payloadLength: number; +} + +/** PingPaket: from the host with this address. */ +export interface PingPacket extends GnutellaHead { + readonly kind: 'ping'; + readonly ipAddress: string; +} + +/** PongPaket: the answering host, its port, its files and their bytes (Java calls them KBs). */ +export interface PongPacket extends GnutellaHead { + readonly kind: 'pong'; + readonly ipAddress: string; + readonly port: number; + readonly files: number; + readonly bytes: number; +} + +export type GnutellaPacket = PingPacket | PongPacket; + +const PAYLOAD_KIND = { ping: '0x00', pong: '0x01' } as const; + +/** PeerToPeerPaket.anzahlBenoetigterBits: the least exponent whose power of two is at least the number. */ +function bitsFor(value: number): number { + let exponent = 0; + while (2 ** exponent < value) exponent += 1; + return exponent; +} + +/** PongPaket.payloadLengthBerechnen. */ +export function pongPayloadLength(ipAddress: string, port: number, files: number, bytes: number): number { + return ipAddress.length * 8 + bitsFor(port) + bitsFor(files) + bitsFor(bytes); +} + +/** PeerToPeerPaket.toString and its subclasses': the fields joined by "//". */ +export function gnutellaText(packet: GnutellaPacket): string { + const head = [packet.guid, PAYLOAD_KIND[packet.kind], packet.hops, packet.ttl, packet.payloadLength]; + const body = packet.kind === 'ping' ? [packet.ipAddress] : [packet.ipAddress, packet.port, packet.files, packet.bytes]; + return [...head, ...body].join('//'); +} + +/** A packet's fields, as Java's constructors read them: a StringTokenizer on "/", empty fields skipped. */ +const fieldsOf = (text: string) => text.split('/').filter((field) => field !== ''); + +const numberAt = (fields: readonly string[], index: number) => (/^-?\d+$/.test(fields[index] ?? '') ? Number(fields[index]) : undefined); + +/** PeerToPeerPaket(String): whether the text has a packet's head (its id, kind, hops, time to live, payload length). */ +export function hasGnutellaHead(text: string): boolean { + const fields = fieldsOf(text); + return fields[1] !== undefined && [0, 2, 3, 4].every((index) => numberAt(fields, index) !== undefined); +} + +/** A packet from its text; undefined for any other kind or a text that is no packet. */ +export function gnutellaPacket(text: string): GnutellaPacket | undefined { + const fields = fieldsOf(text); + const number = (index: number) => numberAt(fields, index); + const [guid, hops, ttl, payloadLength] = [number(0), number(2), number(3), number(4)]; + if (guid === undefined || hops === undefined || ttl === undefined || payloadLength === undefined) return undefined; + const head = { guid, hops, ttl, payloadLength }; + if (fields[1] === PAYLOAD_KIND.ping && fields[5] !== undefined) return { kind: 'ping', ...head, ipAddress: fields[5] }; + const [port, files, bytes] = [number(6), number(7), number(8)]; + if (fields[1] === PAYLOAD_KIND.pong && fields[5] !== undefined && port !== undefined && files !== undefined && bytes !== undefined) { + return { kind: 'pong', ...head, ipAddress: fields[5], port, files, bytes }; + } + return undefined; +} + +/** What the program tells its window: its known peers, whenever they change. */ +export type GnutellaLogEntry = { readonly kind: 'peers'; readonly peers: readonly string[] }; + +/** PeerToPeerServer: answers pings on 6346; a connection's worker remembers the id of its last packet. */ +class GnutellaServer extends TcpServerProgram { + /** Each connection's last packet id (PeerToPeerServerMitarbeiter.guid), to send answers back on. */ + private readonly lastGuidBySocket = new Map(); + + constructor( + engine: NetworkRuntimeEngine, + nodeId: Id, + private readonly peer: GnutellaPeer, + ) { + super(engine, nodeId, { port: GNUTELLA_PORT, isActive: true }); + } + + /** Never asked: each connection runs its own dialogue (converse). */ + protected answer(): string { + return ''; + } + + protected override *converse(socketId: Id, address: string): Steps { + for (;;) { + const received = yield* this.engine.receiveTcpSteps(socketId); + if (received.type !== 'message') { + this.lastGuidBySocket.delete(socketId); + return; + } + const text = new TextDecoder().decode(received.payload); + // PeerToPeerServerMitarbeiter.verarbeiteNachricht: a text without a packet's head throws, and the worker closes the + // connection; a packet of another kind is left. + if (!hasGnutellaHead(text)) { + this.lastGuidBySocket.delete(socketId); + return; + } + const packet = gnutellaPacket(text); + if (packet === undefined) continue; + this.lastGuidBySocket.set(socketId, packet.guid); + if (packet.kind === 'ping') yield* this.peer.answerPing(packet, address, (text) => this.engine.sendTcpSteps(socketId, new TextEncoder().encode(text))); + } + } + + /** PeerToPeerServer.sendePaket: on every connection whose last packet had this id. */ + sendBack(packet: GnutellaPacket): void { + for (const [socketId, guid] of this.lastGuidBySocket) { + if (guid !== packet.guid) continue; + const engine = this.engine; + engine.startThread( + (function* (): Steps { + yield* engine.sendTcpSteps(socketId, new TextEncoder().encode(gnutellaText(packet))); + })(), + ); + } + } +} + +export class GnutellaPeer { + readonly log: ProgramLog; + private peersValue: string[] = []; + private readonly maximumKnownPeers: number; + /** The ids of the program's own pings (eigeneAnfragen), of others' (fremdeAnfragen), and of those it sent on (schonmalVerschicktListe). */ + private readonly ownRequests = new Set(); + private readonly foreignRequests = new Set(); + private readonly alreadySent = new Set(); + private readonly server: GnutellaServer; + + constructor( + private readonly engine: NetworkRuntimeEngine, + private readonly nodeId: Id, + configuration: GnutellaConfiguration, + ) { + this.log = new ProgramLog(engine); + this.maximumKnownPeers = configuration.maximumKnownPeers; + this.server = new GnutellaServer(engine, nodeId, this); + } + + /** The known peers (holeBekanntePeerToPeerTeilnehmer), in the order they came. */ + get peers(): readonly string[] { + return this.peersValue; + } + + /** The node's first address (Betriebssystem.primaryIPAdresse). */ + private get ownAddress(): string { + return this.engine.networkInterfaces(this.nodeId)[0]?.ipAddress ?? ''; + } + + /** beitretenNetzwerk: a ping to the peer at the address, not to the host itself. */ + join(address: string): void { + if (address === this.ownAddress) return; + const ping: PingPacket = { kind: 'ping', guid: this.engine.drawGnutellaGuid(), hops: 0, ttl: 8, payloadLength: 0, ipAddress: this.ownAddress }; + this.ownRequests.add(ping.guid); + this.engine.startThread(this.sendTo(address, ping)); + } + + /** resetNetwork: no known peers. */ + reset(): void { + this.peersValue = []; + this.log.write({ kind: 'peers', peers: [] }); + } + + /** hinzuTeilnehmer: a new peer while there is room. */ + private addPeer(address: string): void { + if (this.peersValue.includes(address) || this.peersValue.length >= this.maximumKnownPeers) return; + this.peersValue = [...this.peersValue, address]; + this.log.write({ kind: 'peers', peers: this.peersValue }); + } + + /** + * PeerToPeerServerMitarbeiter.verarbeitePing: the sender's host taken as a + * peer, a pong unless the ping was here already, and the ping sent on to + * the other peers. + */ + *answerPing(ping: PingPacket, from: string, send: (text: string) => Steps): Steps { + this.addPeer(ping.ipAddress); + // erstellePong: none for a ping sent on before. + if (!this.alreadySent.has(ping.guid)) { + const files = this.sharedFiles(); + const bytes = files.reduce((sum, size) => sum + size, 0); + const address = this.ownAddress; + const pong: PongPacket = { + kind: 'pong', + guid: ping.guid, + hops: 0, + ttl: 8, + payloadLength: pongPayloadLength(address, GNUTELLA_PORT, files.length, bytes), + ipAddress: address, + port: GNUTELLA_PORT, + files: files.length, + bytes, + }; + yield* send(gnutellaText(pong)); + } + this.sendPingOn({ ...ping, hops: ping.hops + 1, ttl: ping.ttl - 1 }, from); + } + + /** PeerToPeerAnwendung.sendePing: once per id, while it lives, to each peer but the sender and the ping's host. */ + private sendPingOn(ping: PingPacket, from: string): void { + if (ping.ttl <= 0 || this.alreadySent.has(ping.guid)) return; + this.alreadySent.add(ping.guid); + this.foreignRequests.add(ping.guid); + for (const peer of this.peersValue) { + if (peer !== from && peer !== ping.ipAddress) this.engine.startThread(this.sendTo(peer, ping)); + } + } + + /** verarbeitePong: the program's own ping answered (a new peer), else the pong sent back the way its ping came. */ + private takePong(pong: PongPacket): void { + if (this.ownRequests.has(pong.guid)) this.addPeer(pong.ipAddress); + else this.server.sendBack({ ...pong, ttl: pong.ttl - 1, hops: pong.hops + 1 }); + } + + /** The sizes of the files in /peer2peer (Datei.holeGroesse, a text in characters). */ + private sharedFiles(): number[] { + const files = this.engine.state.topologySnapshot.fileSystemsByNodeId.get(this.nodeId); + if (files === undefined || !files.contains(GNUTELLA_FOLDER)) return []; + return files.entriesInCreationOrder(GNUTELLA_FOLDER).flatMap((entry) => { + const content = entry.content; + return content.kind === 'directory' ? [] : [content.kind === 'text' ? content.text.length : content.data.length]; + }); + } + + /** + * PeerToPeerClientMitarbeiter.run: a connection to the peer's port 6346, the + * packet sent, then each answer taken until the connection ends. + */ + private *sendTo(address: string, packet: GnutellaPacket): Steps { + const engine = this.engine; + const socketId = engine.openTcpClientSocket(this.nodeId, address, GNUTELLA_PORT); + if (socketId === undefined || (yield* engine.connectTcpSteps(socketId)) !== 'connected') { + if (socketId !== undefined) engine.requestTcpClose(socketId); + return; + } + yield* engine.sendTcpSteps(socketId, new TextEncoder().encode(gnutellaText(packet))); + for (;;) { + const received = yield* engine.receiveTcpSteps(socketId); + if (received.type !== 'message') break; + const answer = gnutellaPacket(new TextDecoder().decode(received.payload)); + if (answer?.kind === 'pong') this.takePong(answer); + } + engine.requestTcpClose(socketId); + } +} diff --git a/packages/core/src/runtime/engine.ts b/packages/core/src/runtime/engine.ts index 8d7a2bf..b22a2d0 100644 --- a/packages/core/src/runtime/engine.ts +++ b/packages/core/src/runtime/engine.ts @@ -123,6 +123,7 @@ import { firewallLogPage, forwardingTablePage, ripTablePage, routerIndexPage } f import { applyFirewallSettings, firewallSettingsPage } from './apps/firewallSettings.js'; import { parentPath, VirtualFileSystem } from '../model/virtualFileSystem.js'; import { EMAIL_SERVER_ACCOUNTS_FILE, serverAccountsFileText } from './emailAccountsFile.js'; +import { GNUTELLA_FOLDER, GnutellaPeer } from './apps/gnutella.js'; import { PRODUCTION_TRACE_RETENTION, type HeaderField, @@ -882,6 +883,8 @@ export class NetworkRuntimeEngine { private dnsIdRandom: JavaCompatibleRandom; /** Draws the command line's first ICMP identifier (Terminal.setIdentifier: new Random()). */ private icmpIdentifierRandom: JavaCompatibleRandom; + /** Draws Gnutella packet ids (PeerToPeerPaket.guidErstellen: new Random()). */ + private gnutellaGuidRandom: JavaCompatibleRandom; /** Nodes whose ARP table lost its broadcast row (arp -d 255.255.255.255), until the table is reset. */ private readonly arpBroadcastRowRemoved = new Set(); private runtimeSpeed: RuntimeSpeed; @@ -930,6 +933,7 @@ export class NetworkRuntimeEngine { private readonly emailServersByNodeId = new Map(); private readonly emailClientsByNodeId = new Map(); private readonly terminalsByNodeId = new Map(); + private readonly gnutellaPeersByNodeId = new Map(); /** The time of day a program writes into a mail (Java's new Date()). */ private readonly wallClock: () => number; /** Each node's firewall log; it outlives a stop and a new start, as Java's log page does. */ @@ -981,6 +985,7 @@ export class NetworkRuntimeEngine { this.linkLocalRandom = new JavaCompatibleRandom(normalizedSeed ^ 0x4c4c_4144n); this.dnsIdRandom = new JavaCompatibleRandom(normalizedSeed ^ 0x444e_5349n); this.icmpIdentifierRandom = new JavaCompatibleRandom(normalizedSeed ^ 0x4943_4d50n); + this.gnutellaGuidRandom = new JavaCompatibleRandom(normalizedSeed ^ 0x474e_5554n); this.runtimeSpeed = new RuntimeSpeed(); this.packetTraceRetentionPolicy = packetTraceRetentionPolicy; this.stateValue.simulationSpeedPercent = this.runtimeSpeed.percent; @@ -1035,6 +1040,7 @@ export class NetworkRuntimeEngine { this.linkLocalRandom = new JavaCompatibleRandom(seed ^ 0x4c4c_4144n); this.dnsIdRandom = new JavaCompatibleRandom(seed ^ 0x444e_5349n); this.icmpIdentifierRandom = new JavaCompatibleRandom(seed ^ 0x4943_4d50n); + this.gnutellaGuidRandom = new JavaCompatibleRandom(seed ^ 0x474e_5554n); this.arpBroadcastRowRemoved.clear(); this.isProcessingScheduledEvents = false; this.applicationThreads.clear(); @@ -1065,6 +1071,7 @@ export class NetworkRuntimeEngine { this.emailServersByNodeId.clear(); this.emailClientsByNodeId.clear(); this.terminalsByNodeId.clear(); + this.gnutellaPeersByNodeId.clear(); this.arpLookups = []; this.protocolThreads.clear(); this.dnsQueriesBySocketId.clear(); @@ -1161,6 +1168,19 @@ export class NetworkRuntimeEngine { return this.terminalsByNodeId.get(nodeId); } + /** The node's Gnutella program while the simulation runs, if it has one installed. */ + gnutella(nodeId: Id): GnutellaPeer | undefined { + return this.gnutellaPeersByNodeId.get(nodeId); + } + + /** A Gnutella packet's id (PeerToPeerPaket.guidErstellen: Random.nextInt until it is not negative). */ + drawGnutellaGuid(): number { + for (;;) { + const value = this.gnutellaGuidRandom.next(32) | 0; + if (value >= 0) return value; + } + } + /** The node's e-mail program while the simulation runs, if it has one installed. */ emailClient(nodeId: Id): EmailClient | undefined { return this.emailClientsByNodeId.get(nodeId); @@ -1224,6 +1244,7 @@ export class NetworkRuntimeEngine { this.emailServersByNodeId.clear(); this.emailClientsByNodeId.clear(); this.terminalsByNodeId.clear(); + this.gnutellaPeersByNodeId.clear(); for (const node of snapshot.nodes) { const echoServer = snapshot.echoServersByNodeId.get(node.id); if (echoServer !== undefined) this.echoServersByNodeId.set(node.id, new EchoServer(this, node.id, echoServer)); @@ -1251,6 +1272,13 @@ export class NetworkRuntimeEngine { this.writeEmailServerAccountsFile(nodeId, emailServer.domain, emailServer.accounts); } if (snapshot.terminalNodeIds.has(node.id)) this.terminalsByNodeId.set(node.id, new Terminal(this, node.id, this.nodeFiles(node.id))); + const gnutella = snapshot.gnutellaByNodeId.get(node.id); + if (gnutella !== undefined) { + // PeerToPeerAnwendung.setSystemSoftware: the folder of the files to share. + const files = this.nodeFiles(node.id); + if (!files.contains(GNUTELLA_FOLDER)) files.createDirectory(GNUTELLA_FOLDER); + this.gnutellaPeersByNodeId.set(node.id, new GnutellaPeer(this, node.id, gnutella)); + } const emailClient = snapshot.emailClientsByNodeId.get(node.id); if (emailClient !== undefined) { const nodeId = node.id; diff --git a/packages/core/src/runtime/snapshot.ts b/packages/core/src/runtime/snapshot.ts index 1617ba0..c95e9f1 100644 --- a/packages/core/src/runtime/snapshot.ts +++ b/packages/core/src/runtime/snapshot.ts @@ -23,6 +23,7 @@ import type { WebServerConfiguration, EmailServerAccount, EmailClientConfiguration, + GnutellaConfiguration, } from './config.js'; import type { VirtualFileSystem } from '../model/virtualFileSystem.js'; import type { PageLanguage } from './apps/routerPages.js'; @@ -107,6 +108,8 @@ export interface TopologySnapshot { readonly terminalNodeIds: ReadonlySet; /** The installed e-mail programs, by node; a run's sent and fetched mails change their folders here. */ readonly emailClientsByNodeId: ReadonlyMap; + /** The installed Gnutella programs (PeerToPeerAnwendung), by node: how many peers each keeps. */ + readonly gnutellaByNodeId: ReadonlyMap; /** Each node's files, which its programs read (a web server its pages). */ readonly fileSystemsByNodeId: ReadonlyMap; /** The language of the pages the devices write themselves (a router's), as Java's in the locale it runs in. */ @@ -133,6 +136,7 @@ export interface TopologySnapshotInput { webBrowserNodeIds?: ReadonlySet; emailServersByNodeId?: ReadonlyMap; emailClientsByNodeId?: ReadonlyMap; + gnutellaByNodeId?: ReadonlyMap; terminalNodeIds?: ReadonlySet; fileSystemsByNodeId?: ReadonlyMap; language?: PageLanguage; @@ -159,6 +163,7 @@ export function topologySnapshot(input: TopologySnapshotInput): TopologySnapshot webBrowserNodeIds: input.webBrowserNodeIds ?? new Set(), emailServersByNodeId: input.emailServersByNodeId ?? new Map(), emailClientsByNodeId: input.emailClientsByNodeId ?? new Map(), + gnutellaByNodeId: input.gnutellaByNodeId ?? new Map(), terminalNodeIds: input.terminalNodeIds ?? new Set(), fileSystemsByNodeId: input.fileSystemsByNodeId ?? new Map(), language: input.language ?? 'de', diff --git a/packages/core/test/gnutella.test.ts b/packages/core/test/gnutella.test.ts new file mode 100644 index 0000000..612bd9f --- /dev/null +++ b/packages/core/test/gnutella.test.ts @@ -0,0 +1,147 @@ +// The Gnutella program (apps/gnutella.ts) beyond what Java's runs show +// (gnutellaJava.test.ts): its packets as Java writes and reads them, a ping +// that comes twice, the files it offers. + +import { readFileSync } from 'node:fs'; +import { dirname, join } from 'node:path'; +import { fileURLToPath } from 'node:url'; +import { describe, expect, it } from 'vitest'; +import { GNUTELLA_FOLDER, gnutellaPacket, gnutellaText, pongPayloadLength, VirtualFileSystem, withSnapshot, type NetworkRuntimeEngine } from '../src/index.js'; +import { watchedEngine } from './javaRun.js'; +import { snapshotOf, type Scenario } from './scenario.js'; + +const scenario = JSON.parse(readFileSync(join(dirname(fileURLToPath(import.meta.url)), 'scenarios', 'terminal-net.scenario.json'), 'utf8')) as Scenario; +const CLIENT = '00000000-0000-0000-0000-000000000401'; +const ECHO = '00000000-0000-0000-0000-000000000404'; + +describe('Gnutella packets as Java writes and reads them', () => { + it('writes a ping and a pong with their fields joined by "//"', () => { + expect(gnutellaText({ kind: 'ping', guid: 42, hops: 1, ttl: 7, payloadLength: 0, ipAddress: '192.168.0.30' })).toBe('42//0x00//1//7//0//192.168.0.30'); + expect(gnutellaText({ kind: 'pong', guid: 42, hops: 0, ttl: 8, payloadLength: 77, ipAddress: '10.0.0.2', port: 6346, files: 2, bytes: 15 })).toBe( + '42//0x01//0//8//77//10.0.0.2//6346//2//15', + ); + }); + + it('reads them back, skipping empty fields as a StringTokenizer on "/" does', () => { + expect(gnutellaPacket('42///0x00//1//7//0//192.168.0.30/')).toEqual({ kind: 'ping', guid: 42, hops: 1, ttl: 7, payloadLength: 0, ipAddress: '192.168.0.30' }); + expect(gnutellaPacket('42//0x01//0//8//77//10.0.0.2//6346//2//15')).toEqual({ + kind: 'pong', + guid: 42, + hops: 0, + ttl: 8, + payloadLength: 77, + ipAddress: '10.0.0.2', + port: 6346, + files: 2, + bytes: 15, + }); + }); + + it('reads no packet from a text that is none, or of another kind', () => { + expect(['', 'GET /x HTTP/1.1', '42//0x00//1//7//0', 'x//0x00//1//7//0//a', '42//0x80//1//7//0//1//txt', '42//0x01//0//8//77//10.0.0.2//6346//2'].map(gnutellaPacket)).toEqual( + Array(6).fill(undefined), + ); + }); + + it("counts a pong's payload in Java's bits: the address's characters, then the least power of two for each number", () => { + expect(pongPayloadLength('10.0.0.2', 6346, 0, 0)).toBe(77); + expect(pongPayloadLength('192.168.0.31', 6346, 0, 0)).toBe(109); + expect(pongPayloadLength('1.2.3.4', 6346, 1, 5)).toBe(7 * 8 + 13 + 0 + 3); + }); +}); + +describe('the Gnutella program in the engine', () => { + const started = (files?: VirtualFileSystem) => + watchedEngine( + scenario, + withSnapshot(snapshotOf(scenario), { + gnutellaByNodeId: new Map([[ECHO, { maximumKnownPeers: 3 }]]), + ...(files === undefined ? {} : { fileSystemsByNodeId: new Map([[ECHO, files]]) }), + }), + ).engine; + + /** A connection of the client's to .31's port 6346, a ping sent on it; what came back. */ + const ping = (engine: NetworkRuntimeEngine, text: string) => { + const socketId = engine.openTcpClientSocket(CLIENT, '192.168.0.31', 6346)!; + expect(engine.connectTcp(socketId)).toBe(true); + expect(engine.sendTcp(socketId, new TextEncoder().encode(text))).toBe(true); + engine.handle({ type: 'advance', toMilliseconds: engine.state.currentTimeMilliseconds + 3_000 }); + const answers: string[] = []; + for (let answer = engine.receiveTcp(socketId); answer !== undefined; answer = engine.receiveTcp(socketId)) answers.push(new TextDecoder().decode(answer)); + return { socketId, answers }; + }; + + it('makes its folder of files to share', () => { + const engine = started(); + expect(engine.state.topologySnapshot.fileSystemsByNodeId.get(ECHO)!.entry(GNUTELLA_FOLDER).content.kind).toBe('directory'); + }); + + it('answers a ping once, and keeps the connection of the second (Java closes it)', () => { + const engine = started(); + const first = ping(engine, '7//0x00//0//8//0//192.168.0.20'); + expect(first.answers).toEqual(['7//0x01//0//8//109//192.168.0.31//6346//0//0']); + const second = ping(engine, '7//0x00//0//8//0//192.168.0.20'); + expect(second.answers).toEqual([]); + expect(engine.state.socketsById.get(second.socketId)?.tcpState).toBe('ESTABLISHED'); + expect(engine.gnutella(ECHO)!.peers).toEqual(['192.168.0.20']); + }); + + it("counts the files of its folder and their size in a pong (a text's in characters)", () => { + const files = new VirtualFileSystem(); + files.createDirectory(GNUTELLA_FOLDER); + files.writeTextFile(`${GNUTELLA_FOLDER}/lied.txt`, 'Hallo Welt'); + files.writeBinaryFile(`${GNUTELLA_FOLDER}/daten.bin`, new Uint8Array(5)); + files.createDirectory(`${GNUTELLA_FOLDER}/ordner`); + files.writeTextFile('/anderswo.txt', 'nicht geteilt'); + const engine = started(files); + expect(ping(engine, '9//0x00//0//8//0//192.168.0.20').answers).toEqual([`9//0x01//0//8//${pongPayloadLength('192.168.0.31', 6346, 2, 15)}//192.168.0.31//6346//2//15`]); + }); + + it('joins no one at its own address, and forgets its peers when reset', () => { + const engine = started(); + engine.gnutella(ECHO)!.join('192.168.0.31'); + engine.handle({ type: 'advance', toMilliseconds: 3_000 }); + expect(engine.capture.frames(scenario.nodes.find((node) => node.id === ECHO)!.ports[0]!.id)).toEqual([]); + ping(engine, '5//0x00//0//8//0//192.168.0.20'); + engine.gnutella(ECHO)!.reset(); + expect(engine.gnutella(ECHO)!.peers).toEqual([]); + expect(engine.gnutella(ECHO)!.log.all.map((line) => line.peers)).toEqual([['192.168.0.20'], []]); + }); + + it('closes a connection whose text has no packet head, and leaves a packet of another kind (Java: its worker throws on the one)', () => { + const engine = started(); + const garbage = ping(engine, 'hallo'); + expect(garbage.answers).toEqual([]); + expect(engine.state.socketsById.get(garbage.socketId)?.tcpState).not.toBe('ESTABLISHED'); + const other = ping(engine, '3//0x42//0//8//0'); + expect(other.answers).toEqual([]); + expect(engine.state.socketsById.get(other.socketId)?.tcpState).toBe('ESTABLISHED'); + }); + + it('sends a ping on once, and not when its time to live runs out', () => { + const WEB = '00000000-0000-0000-0000-000000000403'; + const engine = watchedEngine( + scenario, + withSnapshot(snapshotOf(scenario), { + gnutellaByNodeId: new Map([ + [ECHO, { maximumKnownPeers: 3 }], + [WEB, { maximumKnownPeers: 3 }], + ]), + }), + ).engine; + engine.gnutella(WEB)!.join('192.168.0.31'); + engine.handle({ type: 'advance', toMilliseconds: 3_000 }); + const webCard = scenario.nodes.find((node) => node.id === WEB)!.ports[0]!.id; + const forwarded = () => + engine.capture.frames(webCard).filter(({ frame }) => { + const packet = frame.payload.kind === 'ipv4' ? frame.payload.packet : undefined; + return packet?.payload.kind === 'tcp' && packet.senderIPAddress === '192.168.0.31' && new TextDecoder().decode(packet.payload.segment.payload).includes('//0x00//'); + }).length; + expect(forwarded()).toBe(0); + ping(engine, '11//0x00//7//1//0//192.168.0.20'); + expect(forwarded()).toBe(0); + ping(engine, '12//0x00//0//8//0//192.168.0.20'); + ping(engine, '12//0x00//0//8//0//192.168.0.20'); + expect(forwarded()).toBe(1); + }); +}); diff --git a/packages/core/test/gnutellaJava.test.ts b/packages/core/test/gnutellaJava.test.ts new file mode 100644 index 0000000..8466ba4 --- /dev/null +++ b/packages/core/test/gnutellaJava.test.ts @@ -0,0 +1,217 @@ +// The Gnutella program as Java FILIUS runs it. tools/java-oracle's +// GnutellaRun let FILIUS' Gnutella program (PeerToPeerAnwendung) join peers +// on terminal-net and wrote every frame each card saw, Java's tables of +// them, each program's known peers whenever it told its window, and at the +// end each program's peers (gnutella-java-.java.json). The engine +// plays the same calls at the same times (apps/gnutella.ts): each card's +// frames in the same order, with the same content and rows, at about the +// same time; the same peers, in the same order, at about the same time. + +import { readFileSync } from 'node:fs'; +import { dirname, join } from 'node:path'; +import { fileURLToPath } from 'node:url'; +import { describe, expect, it } from 'vitest'; +import { withSnapshot, type NetworkRuntimeEngine } from '../src/index.js'; +import { + engineText, + expectSameCaptures, + GAP_TOLERANCE_MILLISECONDS, + javaText, + scenarioCards, + watchedEngine, + withClientPortText, + type JavaFrame, + type JavaTables, +} from './javaRun.js'; +import { POLL_MILLISECONDS } from './programLines.js'; +import { snapshotOf, type Scenario } from './scenario.js'; + +const scenarioDirectory = join(dirname(fileURLToPath(import.meta.url)), 'scenarios'); + +const CLIENT = '00000000-0000-0000-0000-000000000401'; +const WEB = '00000000-0000-0000-0000-000000000403'; +const ECHO = '00000000-0000-0000-0000-000000000404'; +const FAR = '00000000-0000-0000-0000-000000000406'; +const PEERS = [CLIENT, WEB, ECHO, FAR]; + +interface JavaRun extends JavaTables { + frames: Record; + acts: [number, string, string][]; + /** time, host, kind (call or peers), text */ + events: [number, string, string, string][]; + programs: Record; +} + +/** The stories, and how many connections each makes one after the other (Java looks every 100 ms whether one is made). */ +const STORIES: Record = { + pair: { looks: 1 }, + chain: { looks: 2 }, + twoPaths: { looks: 3 }, + full: { looks: 3 }, + reset: { looks: 1 }, + errors: { looks: 1 }, +}; + +/** The ids of Java's own pings, in the order they were made: the engine draws its own, these take their place. */ +function javaPingIds(java: JavaRun): number[] { + const pings = Object.values(java.frames) + .flat() + .flatMap((frame) => { + const match = /^(\d+)\/\/0x00\/\/0\/\//.exec(frame.payload ?? ''); + return match === null ? [] : [[frame.time, Number(match[1])] as const]; + }) + .sort((lhs, rhs) => lhs[0] - rhs[0]); + return [...new Set(pings.map(([, guid]) => guid))]; +} + +/** Each program's known peers as it told them, each change once (Java tells its window also when nothing changed, and an empty list at its start). */ +function javaPeers(java: JavaRun): Record { + const peers: Record = Object.fromEntries(PEERS.map((host) => [host, []])); + for (const [time, host, kind, text] of java.events) { + if (kind !== 'peers') continue; + const list = peers[host]!; + if ((list.at(-1)?.[1] ?? '') === text) continue; + list.push([time, text]); + } + return peers; +} + +function enginePeers(engine: NetworkRuntimeEngine): Record { + return Object.fromEntries(PEERS.map((host) => [host, engine.gnutella(host)!.log.all.map((line): [number, string] => [line.timeMilliseconds, line.peers.join(',')])])); +} + +/** + * Where Java errs, compared only up to a time (Java's): twoPaths, from the + * first ping that comes a second time — Java's worker throws on the + * missing pong and closes the connection (gnutella.ts); + * errors, before the engine's second SYN to the closed port. + */ +/** + * twoPaths, full: many connections at once, and at a card the frames of two + * of them, or the two directions of one, may come in either order a few ten + * milliseconds apart (Java's threads over several hops). Each card's frames + * are compared connection by connection and direction by direction — the + * frames between the two hosts on the server's port, in the order the + * connections began — with their data; ARP on its own. + */ +const BY_CONNECTION = new Set(['twoPaths', 'full']); + +interface FlowFrame { + readonly time: number; + /** The frame's text with its real ports, which tell the connection. */ + readonly raw: string; + /** The text compared: a client's port as "client", a packet's id as "x". */ + readonly text: string; +} + +/** A card's frames by connection: its two hosts and the server's port (a client's port is drawn), each connection's frames in order. */ +function connections(frames: readonly FlowFrame[]): Map { + const byKey = new Map>(); + for (const frame of frames) { + const tcp = / TCP (\S+):(\d+) > (\S+):(\d+) /.exec(frame.raw); + // A connection by its client's end, and each of its directions on its own (TCP orders a direction, not the two). + const [key, connection] = + tcp === null ? ['arp', 'arp'] : tcp[2] === '6346' ? [`${tcp[3]}>${tcp[1]}:6346 answers`, `${tcp[3]}:${tcp[4]}`] : [`${tcp[1]}>${tcp[3]}:6346`, `${tcp[1]}:${tcp[2]}`]; + const flows = byKey.get(key) ?? new Map(); + byKey.set(key, flows); + flows.set(connection, [...(flows.get(connection) ?? []), frame]); + } + return new Map([...byKey].map(([key, flows]) => [key, [...flows.values()]])); +} + +/** + * When a ping first comes to a host a second time (the same id to the same + * address, on another connection; a frame shows on both its cards); before + * it, by more than a timing difference. + */ +function secondPing(java: JavaRun): number { + const connectionsByPing = new Map>(); + for (const frame of Object.values(java.frames) + .flat() + .sort((lhs, rhs) => lhs.time - rhs.time)) { + const match = /^(\d+)\/\/0x00\//.exec(frame.payload ?? ''); + if (match === null) continue; + const ping = `${match[1]}>${frame.destinationIp}`; + const connections = connectionsByPing.get(ping) ?? new Set(); + connections.add(`${frame.sourceIp}:${frame.sourcePort}`); + connectionsByPing.set(ping, connections); + if (connections.size > 1) return frame.time - 150; + } + return Number.POSITIVE_INFINITY; +} + +const UNTIL: Record number> = { + // The SYN to a closed port goes once in Java, three times in the engine (tcpJava.test.ts, closedPort). + errors: (java) => java.frames[CLIENT]!.find((frame) => frame.tcpFlags === 'S')!.time + 1_000, + twoPaths: secondPing, +}; + +describe('the Gnutella program as Java FILIUS runs it', () => { + const scenario = JSON.parse(readFileSync(join(scenarioDirectory, 'terminal-net.scenario.json'), 'utf8')) as Scenario; + + for (const [name, story] of Object.entries(STORIES)) { + it(name, () => { + const java = JSON.parse(readFileSync(join(scenarioDirectory, `gnutella-java-${name}.java.json`), 'utf8')) as JavaRun; + const snapshot = withSnapshot(snapshotOf(scenario), { + gnutellaByNodeId: new Map(PEERS.map((host) => [host, { maximumKnownPeers: name !== 'full' ? 3 : host === ECHO ? 2 : host === FAR ? 3 : 1 }])), + }); + const { engine } = watchedEngine(scenario, snapshot); + const ids = javaPingIds(java); + engine.drawGnutellaGuid = () => ids.shift() ?? 1; + for (const [time, host, call] of java.acts) { + engine.handle({ type: 'advance', toMilliseconds: time }); + if (call.startsWith('join ')) engine.gnutella(host)!.join(call.slice('join '.length)); + else engine.gnutella(host)!.reset(); + } + engine.handle({ type: 'advance', toMilliseconds: Math.max(...java.events.map(([time]) => time)) + 10_000 }); + + const tolerance = GAP_TOLERANCE_MILLISECONDS + story.looks * POLL_MILLISECONDS; + const until = UNTIL[name]?.(java) ?? Number.POSITIVE_INFINITY; + if (BY_CONNECTION.has(name)) { + const portOf = new Map(scenarioCards(scenario).map((card) => [card.key, card.portId])); + const data = (text: string | undefined) => withClientPortText(text ?? '').replace(/^\d+\/\/0x/, 'x//0x'); + for (const [card, list] of Object.entries(java.frames)) { + const expected = connections( + list + .filter((frame) => frame.time < until) + .map((frame) => ({ time: frame.time, raw: javaText(frame), text: `${withClientPortText(javaText(frame))} ${data(frame.payload)}` })), + ); + const captured = engine.capture.frames(portOf.get(card)!).filter((each) => each.timeMilliseconds < until); + const actual = connections( + captured.map(({ timeMilliseconds, frame }) => { + const packet = frame.payload.kind === 'ipv4' ? frame.payload.packet : undefined; + const bytes = packet?.payload.kind === 'tcp' ? packet.payload.segment.payload : new Uint8Array(); + const text = engineText(frame); + return { time: timeMilliseconds, raw: text, text: `${withClientPortText(text)} ${data(bytes.length === 0 ? undefined : new TextDecoder().decode(bytes))}` }; + }), + ); + expect([...actual.keys()].sort(), `${card}'s connections`).toEqual([...expected.keys()].sort()); + for (const [key, flows] of expected) { + const texts = (each: FlowFrame[][]) => each.map((flow) => flow.map((frame) => frame.text)); + expect(texts(actual.get(key)!), `${card} ${key}`).toEqual(texts(flows)); + for (const [index, flow] of flows.entries()) { + for (const [at, frame] of flow.entries()) { + expect(Math.abs(actual.get(key)![index]![at]!.time - frame.time), `${card} ${key} #${index + 1} frame ${at + 1}`).toBeLessThanOrEqual(tolerance); + } + } + } + } + } else { + expectSameCaptures(engine, scenario, java.frames, { text: withClientPortText, tables: java, until: UNTIL[name]?.(java), tolerance }); + } + + const expected = javaPeers(java); + const actual = enginePeers(engine); + for (const host of PEERS) { + expect( + actual[host]!.map(([, peers]) => peers), + `${host}'s peers`, + ).toEqual(expected[host]!.map(([, peers]) => peers)); + for (const [index, [javaTime]] of expected[host]!.entries()) { + expect(Math.abs(javaTime - actual[host]![index]![0]), `${host}'s peers #${index + 1}`).toBeLessThanOrEqual(tolerance); + } + expect(engine.gnutella(host)!.peers, `${host}'s peers at the end`).toEqual(java.programs[host]!.peers); + } + }); + } +}); diff --git a/packages/core/test/javaRun.ts b/packages/core/test/javaRun.ts index 6c515a9..bd7ec70 100644 --- a/packages/core/test/javaRun.ts +++ b/packages/core/test/javaRun.ts @@ -63,7 +63,7 @@ export interface SeenFrame { readonly text: string; } -function javaText(frame: JavaFrame): string { +export function javaText(frame: JavaFrame): string { const macs = `${frame.source} > ${frame.destination}`.toUpperCase(); if (frame.arp !== undefined) return `${macs} ARP ${frame.arp === 1 ? 'request' : 'reply'} ${frame.senderIp} > ${frame.targetIp}`; if (frame.icmp !== undefined) return icmpText(macs, frame.icmp, frame.icmpCode!, frame.sourceIp!, frame.destinationIp!, frame.sequence!); diff --git a/packages/core/test/scenarios/gnutella-java-chain.java.json b/packages/core/test/scenarios/gnutella-java-chain.java.json new file mode 100644 index 0000000..a0fb869 --- /dev/null +++ b/packages/core/test/scenarios/gnutella-java-chain.java.json @@ -0,0 +1,3793 @@ +{ + "frames": { + "00000000-0000-0000-0000-000000000401": [ + { + "time": 639, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + }, + { + "time": 3001, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + }, + { + "time": 3224, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.20" + }, + { + "time": 3224, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 51163, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 8000000, + "acknowledgement": 0 + }, + { + "time": 3447, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 51163, + "payload": null, + "tcpFlags": "SA", + "sequence": 2000000, + "acknowledgement": 8000001 + }, + { + "time": 3448, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 51163, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 8000001, + "acknowledgement": 2000001 + }, + { + "time": 3503, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 51163, + "destinationPort": 6346, + "payload": "405010602//0x00//0//8//0//192.168.0.20", + "tcpFlags": "P", + "sequence": 8000001, + "acknowledgement": 0 + }, + { + "time": 3726, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 51163, + "payload": null, + "tcpFlags": "A", + "sequence": 2000001, + "acknowledgement": 8000039 + }, + { + "time": 3781, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 51163, + "payload": "405010602//0x01//0//8//109//192.168.0.30//6346//0//0", + "tcpFlags": "P", + "sequence": 2000001, + "acknowledgement": 0 + }, + { + "time": 3781, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 51163, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 8000039, + "acknowledgement": 2000053 + }, + { + "time": 4638, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 51163, + "payload": "405010602//0x01//1//7//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 2000053, + "acknowledgement": 0 + }, + { + "time": 4638, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 51163, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 8000039, + "acknowledgement": 2000105 + } + ], + "00000000-0000-0000-0000-000000000402": [ + { + "time": 639, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + }, + { + "time": 3113, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + } + ], + "00000000-0000-0000-0000-000000000403": [ + { + "time": 519, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + }, + { + "time": 752, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.30" + }, + { + "time": 755, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56950, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 6000000, + "acknowledgement": 0 + }, + { + "time": 982, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56950, + "payload": null, + "tcpFlags": "SA", + "sequence": 3000000, + "acknowledgement": 6000001 + }, + { + "time": 983, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56950, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 6000001, + "acknowledgement": 3000001 + }, + { + "time": 1039, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56950, + "destinationPort": 6346, + "payload": "260782001//0x00//0//8//0//192.168.0.30", + "tcpFlags": "P", + "sequence": 6000001, + "acknowledgement": 0 + }, + { + "time": 1263, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56950, + "payload": null, + "tcpFlags": "A", + "sequence": 3000001, + "acknowledgement": 6000039 + }, + { + "time": 1318, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56950, + "payload": "260782001//0x01//0//8//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 3000001, + "acknowledgement": 0 + }, + { + "time": 1319, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56950, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 6000039, + "acknowledgement": 3000053 + }, + { + "time": 3113, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + }, + { + "time": 3113, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.20" + }, + { + "time": 3336, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 51163, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 8000000, + "acknowledgement": 0 + }, + { + "time": 3336, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 51163, + "payload": null, + "tcpFlags": "SA", + "sequence": 2000000, + "acknowledgement": 8000001 + }, + { + "time": 3559, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 51163, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 8000001, + "acknowledgement": 2000001 + }, + { + "time": 3614, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 51163, + "destinationPort": 6346, + "payload": "405010602//0x00//0//8//0//192.168.0.20", + "tcpFlags": "P", + "sequence": 8000001, + "acknowledgement": 0 + }, + { + "time": 3615, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 51163, + "payload": null, + "tcpFlags": "A", + "sequence": 2000001, + "acknowledgement": 8000039 + }, + { + "time": 3670, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 51163, + "payload": "405010602//0x01//0//8//109//192.168.0.30//6346//0//0", + "tcpFlags": "P", + "sequence": 2000001, + "acknowledgement": 0 + }, + { + "time": 3893, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 51163, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 8000039, + "acknowledgement": 2000053 + }, + { + "time": 3893, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 60161, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 10000000, + "acknowledgement": 0 + }, + { + "time": 4116, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 60161, + "payload": null, + "tcpFlags": "SA", + "sequence": 7000000, + "acknowledgement": 10000001 + }, + { + "time": 4116, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 60161, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 10000001, + "acknowledgement": 7000001 + }, + { + "time": 4194, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 60161, + "destinationPort": 6346, + "payload": "405010602//0x00//1//7//0//192.168.0.20", + "tcpFlags": "P", + "sequence": 10000001, + "acknowledgement": 0 + }, + { + "time": 4416, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 60161, + "payload": null, + "tcpFlags": "A", + "sequence": 7000001, + "acknowledgement": 10000039 + }, + { + "time": 4471, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 60161, + "payload": "405010602//0x01//0//8//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 7000001, + "acknowledgement": 0 + }, + { + "time": 4472, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 60161, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 10000039, + "acknowledgement": 7000053 + }, + { + "time": 4527, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 51163, + "payload": "405010602//0x01//1//7//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 2000053, + "acknowledgement": 0 + }, + { + "time": 4749, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 51163, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 8000039, + "acknowledgement": 2000105 + } + ], + "00000000-0000-0000-0000-000000000404": [ + { + "time": 639, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + }, + { + "time": 641, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.30" + }, + { + "time": 869, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56950, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 6000000, + "acknowledgement": 0 + }, + { + "time": 871, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56950, + "payload": null, + "tcpFlags": "SA", + "sequence": 3000000, + "acknowledgement": 6000001 + }, + { + "time": 1094, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56950, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 6000001, + "acknowledgement": 3000001 + }, + { + "time": 1150, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56950, + "destinationPort": 6346, + "payload": "260782001//0x00//0//8//0//192.168.0.30", + "tcpFlags": "P", + "sequence": 6000001, + "acknowledgement": 0 + }, + { + "time": 1151, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56950, + "payload": null, + "tcpFlags": "A", + "sequence": 3000001, + "acknowledgement": 6000039 + }, + { + "time": 1207, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56950, + "payload": "260782001//0x01//0//8//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 3000001, + "acknowledgement": 0 + }, + { + "time": 1430, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56950, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 6000039, + "acknowledgement": 3000053 + }, + { + "time": 3113, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + }, + { + "time": 4005, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 60161, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 10000000, + "acknowledgement": 0 + }, + { + "time": 4005, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 60161, + "payload": null, + "tcpFlags": "SA", + "sequence": 7000000, + "acknowledgement": 10000001 + }, + { + "time": 4227, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 60161, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 10000001, + "acknowledgement": 7000001 + }, + { + "time": 4304, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 60161, + "destinationPort": 6346, + "payload": "405010602//0x00//1//7//0//192.168.0.20", + "tcpFlags": "P", + "sequence": 10000001, + "acknowledgement": 0 + }, + { + "time": 4305, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 60161, + "payload": null, + "tcpFlags": "A", + "sequence": 7000001, + "acknowledgement": 10000039 + }, + { + "time": 4360, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 60161, + "payload": "405010602//0x01//0//8//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 7000001, + "acknowledgement": 0 + }, + { + "time": 4583, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 60161, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 10000039, + "acknowledgement": 7000053 + } + ], + "00000000-0000-0000-0000-000000000405": [ + { + "time": 639, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + }, + { + "time": 3113, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + } + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "rows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "3", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:13 [op=REPLY, sender=02:00:00:00:04:13|192.168.0.30, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "4", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "192.168.0.20:51163", + "192.168.0.30:6346", + "TCP", + "Transport", + "SYN, SEQ: 8.000.000" + ], + [ + "5", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "192.168.0.30:6346", + "192.168.0.20:51163", + "TCP", + "Transport", + "SYN, SEQ: 2.000.000, ACK: 8.000.001" + ], + [ + "6", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "192.168.0.20:51163", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 8.000.001, ACK: 2.000.001" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "192.168.0.20:51163", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 8.000.001" + ], + [ + "7", + "192.168.0.20:51163", + "192.168.0.30:6346", + "GNT", + "Anwendung", + "405010602//0x00//0//8//0//192.168.0.20" + ], + [ + "8", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "192.168.0.30:6346", + "192.168.0.20:51163", + "TCP", + "Transport", + "SEQ: 2.000.001, ACK: 8.000.039" + ], + [ + "9", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "192.168.0.30:6346", + "192.168.0.20:51163", + "TCP", + "Transport", + "SEQ: 2.000.001" + ], + [ + "9", + "192.168.0.30:6346", + "192.168.0.20:51163", + "GNT", + "Anwendung", + "405010602//0x01//0//8//109//192.168.0.30//6346//0//0" + ], + [ + "10", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "192.168.0.20:51163", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 8.000.039, ACK: 2.000.053" + ], + [ + "11", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "192.168.0.30:6346", + "192.168.0.20:51163", + "TCP", + "Transport", + "SEQ: 2.000.053" + ], + [ + "11", + "192.168.0.30:6346", + "192.168.0.20:51163", + "GNT", + "Anwendung", + "405010602//0x01//1//7//109//192.168.0.31//6346//0//0" + ], + [ + "12", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "192.168.0.20:51163", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 8.000.039, ACK: 2.000.105" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "3", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "192.168.0.30:56950", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "192.168.0.31:6346", + "192.168.0.30:56950", + "TCP", + "Transport", + "SYN, SEQ: 3.000.000, ACK: 6.000.001" + ], + [ + "5", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "192.168.0.30:56950", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 6.000.001, ACK: 3.000.001" + ], + [ + "6", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "192.168.0.30:56950", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "6", + "192.168.0.30:56950", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "260782001//0x00//0//8//0//192.168.0.30" + ], + [ + "7", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "192.168.0.31:6346", + "192.168.0.30:56950", + "TCP", + "Transport", + "SEQ: 3.000.001, ACK: 6.000.039" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "192.168.0.31:6346", + "192.168.0.30:56950", + "TCP", + "Transport", + "SEQ: 3.000.001" + ], + [ + "8", + "192.168.0.31:6346", + "192.168.0.30:56950", + "GNT", + "Anwendung", + "260782001//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "192.168.0.30:56950", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 6.000.039, ACK: 3.000.053" + ], + [ + "10", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "10", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "11", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "11", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:13 [op=REPLY, sender=02:00:00:00:04:13|192.168.0.30, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "12", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "192.168.0.20:51163", + "192.168.0.30:6346", + "TCP", + "Transport", + "SYN, SEQ: 8.000.000" + ], + [ + "13", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "192.168.0.30:6346", + "192.168.0.20:51163", + "TCP", + "Transport", + "SYN, SEQ: 2.000.000, ACK: 8.000.001" + ], + [ + "14", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "192.168.0.20:51163", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 8.000.001, ACK: 2.000.001" + ], + [ + "15", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "192.168.0.20:51163", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 8.000.001" + ], + [ + "15", + "192.168.0.20:51163", + "192.168.0.30:6346", + "GNT", + "Anwendung", + "405010602//0x00//0//8//0//192.168.0.20" + ], + [ + "16", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "192.168.0.30:6346", + "192.168.0.20:51163", + "TCP", + "Transport", + "SEQ: 2.000.001, ACK: 8.000.039" + ], + [ + "17", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "192.168.0.30:6346", + "192.168.0.20:51163", + "TCP", + "Transport", + "SEQ: 2.000.001" + ], + [ + "17", + "192.168.0.30:6346", + "192.168.0.20:51163", + "GNT", + "Anwendung", + "405010602//0x01//0//8//109//192.168.0.30//6346//0//0" + ], + [ + "18", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "192.168.0.20:51163", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 8.000.039, ACK: 2.000.053" + ], + [ + "19", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "192.168.0.30:60161", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 10.000.000" + ], + [ + "20", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "20", + "192.168.0.31:6346", + "192.168.0.30:60161", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000, ACK: 10.000.001" + ], + [ + "21", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "192.168.0.30:60161", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 10.000.001, ACK: 7.000.001" + ], + [ + "22", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "192.168.0.30:60161", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 10.000.001" + ], + [ + "22", + "192.168.0.30:60161", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "405010602//0x00//1//7//0//192.168.0.20" + ], + [ + "23", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "23", + "192.168.0.31:6346", + "192.168.0.30:60161", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 10.000.039" + ], + [ + "24", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "24", + "192.168.0.31:6346", + "192.168.0.30:60161", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "24", + "192.168.0.31:6346", + "192.168.0.30:60161", + "GNT", + "Anwendung", + "405010602//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "25", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "25", + "192.168.0.30:60161", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 10.000.039, ACK: 7.000.053" + ], + [ + "26", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "192.168.0.30:6346", + "192.168.0.20:51163", + "TCP", + "Transport", + "SEQ: 2.000.053" + ], + [ + "26", + "192.168.0.30:6346", + "192.168.0.20:51163", + "GNT", + "Anwendung", + "405010602//0x01//1//7//109//192.168.0.31//6346//0//0" + ], + [ + "27", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "192.168.0.20:51163", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 8.000.039, ACK: 2.000.105" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "3", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "192.168.0.30:56950", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "192.168.0.31:6346", + "192.168.0.30:56950", + "TCP", + "Transport", + "SYN, SEQ: 3.000.000, ACK: 6.000.001" + ], + [ + "5", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "192.168.0.30:56950", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 6.000.001, ACK: 3.000.001" + ], + [ + "6", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "192.168.0.30:56950", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "6", + "192.168.0.30:56950", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "260782001//0x00//0//8//0//192.168.0.30" + ], + [ + "7", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "192.168.0.31:6346", + "192.168.0.30:56950", + "TCP", + "Transport", + "SEQ: 3.000.001, ACK: 6.000.039" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "192.168.0.31:6346", + "192.168.0.30:56950", + "TCP", + "Transport", + "SEQ: 3.000.001" + ], + [ + "8", + "192.168.0.31:6346", + "192.168.0.30:56950", + "GNT", + "Anwendung", + "260782001//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "192.168.0.30:56950", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 6.000.039, ACK: 3.000.053" + ], + [ + "10", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "10", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "11", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "192.168.0.30:60161", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 10.000.000" + ], + [ + "12", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "192.168.0.31:6346", + "192.168.0.30:60161", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000, ACK: 10.000.001" + ], + [ + "13", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "192.168.0.30:60161", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 10.000.001, ACK: 7.000.001" + ], + [ + "14", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "192.168.0.30:60161", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 10.000.001" + ], + [ + "14", + "192.168.0.30:60161", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "405010602//0x00//1//7//0//192.168.0.20" + ], + [ + "15", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "192.168.0.31:6346", + "192.168.0.30:60161", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 10.000.039" + ], + [ + "16", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "192.168.0.31:6346", + "192.168.0.30:60161", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "16", + "192.168.0.31:6346", + "192.168.0.30:60161", + "GNT", + "Anwendung", + "405010602//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "17", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "192.168.0.30:60161", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 10.000.039, ACK: 7.000.053" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "layeredRows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "3", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:13 [op=REPLY, sender=02:00:00:00:04:13|192.168.0.30, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "4", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "51163", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 8.000.000" + ], + [ + "5", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "6346", + "51163", + "TCP", + "Transport", + "SYN, SEQ: 2.000.000, ACK: 8.000.001" + ], + [ + "6", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "51163", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.001, ACK: 2.000.001" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "51163", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.001" + ], + [ + "7", + null, + null, + "GNT", + "Anwendung", + "405010602//0x00//0//8//0//192.168.0.20" + ], + [ + "8", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "6346", + "51163", + "TCP", + "Transport", + "SEQ: 2.000.001, ACK: 8.000.039" + ], + [ + "9", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "6346", + "51163", + "TCP", + "Transport", + "SEQ: 2.000.001" + ], + [ + "9", + null, + null, + "GNT", + "Anwendung", + "405010602//0x01//0//8//109//192.168.0.30//6346//0//0" + ], + [ + "10", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "51163", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.039, ACK: 2.000.053" + ], + [ + "11", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "6346", + "51163", + "TCP", + "Transport", + "SEQ: 2.000.053" + ], + [ + "11", + null, + null, + "GNT", + "Anwendung", + "405010602//0x01//1//7//109//192.168.0.31//6346//0//0" + ], + [ + "12", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "51163", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.039, ACK: 2.000.105" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "3", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "56950", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "6346", + "56950", + "TCP", + "Transport", + "SYN, SEQ: 3.000.000, ACK: 6.000.001" + ], + [ + "5", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "56950", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.001, ACK: 3.000.001" + ], + [ + "6", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "56950", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "6", + null, + null, + "GNT", + "Anwendung", + "260782001//0x00//0//8//0//192.168.0.30" + ], + [ + "7", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "6346", + "56950", + "TCP", + "Transport", + "SEQ: 3.000.001, ACK: 6.000.039" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "6346", + "56950", + "TCP", + "Transport", + "SEQ: 3.000.001" + ], + [ + "8", + null, + null, + "GNT", + "Anwendung", + "260782001//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "56950", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.039, ACK: 3.000.053" + ], + [ + "10", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "10", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "11", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "11", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:13 [op=REPLY, sender=02:00:00:00:04:13|192.168.0.30, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "12", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "51163", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 8.000.000" + ], + [ + "13", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "6346", + "51163", + "TCP", + "Transport", + "SYN, SEQ: 2.000.000, ACK: 8.000.001" + ], + [ + "14", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "51163", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.001, ACK: 2.000.001" + ], + [ + "15", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "51163", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.001" + ], + [ + "15", + null, + null, + "GNT", + "Anwendung", + "405010602//0x00//0//8//0//192.168.0.20" + ], + [ + "16", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "6346", + "51163", + "TCP", + "Transport", + "SEQ: 2.000.001, ACK: 8.000.039" + ], + [ + "17", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "6346", + "51163", + "TCP", + "Transport", + "SEQ: 2.000.001" + ], + [ + "17", + null, + null, + "GNT", + "Anwendung", + "405010602//0x01//0//8//109//192.168.0.30//6346//0//0" + ], + [ + "18", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "51163", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.039, ACK: 2.000.053" + ], + [ + "19", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "60161", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 10.000.000" + ], + [ + "20", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "20", + "6346", + "60161", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000, ACK: 10.000.001" + ], + [ + "21", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "60161", + "6346", + "TCP", + "Transport", + "SEQ: 10.000.001, ACK: 7.000.001" + ], + [ + "22", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "60161", + "6346", + "TCP", + "Transport", + "SEQ: 10.000.001" + ], + [ + "22", + null, + null, + "GNT", + "Anwendung", + "405010602//0x00//1//7//0//192.168.0.20" + ], + [ + "23", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "23", + "6346", + "60161", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 10.000.039" + ], + [ + "24", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "24", + "6346", + "60161", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "24", + null, + null, + "GNT", + "Anwendung", + "405010602//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "25", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "25", + "60161", + "6346", + "TCP", + "Transport", + "SEQ: 10.000.039, ACK: 7.000.053" + ], + [ + "26", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "6346", + "51163", + "TCP", + "Transport", + "SEQ: 2.000.053" + ], + [ + "26", + null, + null, + "GNT", + "Anwendung", + "405010602//0x01//1//7//109//192.168.0.31//6346//0//0" + ], + [ + "27", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "51163", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.039, ACK: 2.000.105" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "3", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "56950", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "6346", + "56950", + "TCP", + "Transport", + "SYN, SEQ: 3.000.000, ACK: 6.000.001" + ], + [ + "5", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "56950", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.001, ACK: 3.000.001" + ], + [ + "6", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "56950", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "6", + null, + null, + "GNT", + "Anwendung", + "260782001//0x00//0//8//0//192.168.0.30" + ], + [ + "7", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "6346", + "56950", + "TCP", + "Transport", + "SEQ: 3.000.001, ACK: 6.000.039" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "6346", + "56950", + "TCP", + "Transport", + "SEQ: 3.000.001" + ], + [ + "8", + null, + null, + "GNT", + "Anwendung", + "260782001//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "56950", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.039, ACK: 3.000.053" + ], + [ + "10", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "10", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "11", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "60161", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 10.000.000" + ], + [ + "12", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "6346", + "60161", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000, ACK: 10.000.001" + ], + [ + "13", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "60161", + "6346", + "TCP", + "Transport", + "SEQ: 10.000.001, ACK: 7.000.001" + ], + [ + "14", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "60161", + "6346", + "TCP", + "Transport", + "SEQ: 10.000.001" + ], + [ + "14", + null, + null, + "GNT", + "Anwendung", + "405010602//0x00//1//7//0//192.168.0.20" + ], + [ + "15", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "6346", + "60161", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 10.000.039" + ], + [ + "16", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "6346", + "60161", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "16", + null, + null, + "GNT", + "Anwendung", + "405010602//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "17", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "60161", + "6346", + "TCP", + "Transport", + "SEQ: 10.000.039, ACK: 7.000.053" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "acts": [ + [ + 500, + "00000000-0000-0000-0000-000000000403", + "join 192.168.0.31" + ], + [ + 3000, + "00000000-0000-0000-0000-000000000401", + "join 192.168.0.30" + ] + ], + "events": [ + [ + 213, + "00000000-0000-0000-0000-000000000401", + "peers", + "" + ], + [ + 215, + "00000000-0000-0000-0000-000000000403", + "peers", + "" + ], + [ + 216, + "00000000-0000-0000-0000-000000000404", + "peers", + "" + ], + [ + 219, + "00000000-0000-0000-0000-000000000406", + "peers", + "" + ], + [ + 500, + "00000000-0000-0000-0000-000000000403", + "call", + "join 192.168.0.31" + ], + [ + 1151, + "00000000-0000-0000-0000-000000000404", + "peers", + "192.168.0.30" + ], + [ + 1319, + "00000000-0000-0000-0000-000000000403", + "peers", + "192.168.0.31" + ], + [ + 3001, + "00000000-0000-0000-0000-000000000401", + "call", + "join 192.168.0.30" + ], + [ + 3619, + "00000000-0000-0000-0000-000000000403", + "peers", + "192.168.0.31,192.168.0.20" + ], + [ + 3781, + "00000000-0000-0000-0000-000000000401", + "peers", + "192.168.0.30" + ], + [ + 4321, + "00000000-0000-0000-0000-000000000404", + "peers", + "192.168.0.30,192.168.0.20" + ], + [ + 4638, + "00000000-0000-0000-0000-000000000401", + "peers", + "192.168.0.30,192.168.0.31" + ] + ], + "programs": { + "00000000-0000-0000-0000-000000000401": { + "peers": [ + "192.168.0.30", + "192.168.0.31" + ], + "results": [] + }, + "00000000-0000-0000-0000-000000000403": { + "peers": [ + "192.168.0.31", + "192.168.0.20" + ], + "results": [] + }, + "00000000-0000-0000-0000-000000000404": { + "peers": [ + "192.168.0.30", + "192.168.0.20" + ], + "results": [] + }, + "00000000-0000-0000-0000-000000000406": { + "peers": [], + "results": [] + } + } +} diff --git a/packages/core/test/scenarios/gnutella-java-errors.java.json b/packages/core/test/scenarios/gnutella-java-errors.java.json new file mode 100644 index 0000000..c4e5473 --- /dev/null +++ b/packages/core/test/scenarios/gnutella-java-errors.java.json @@ -0,0 +1,927 @@ +{ + "frames": { + "00000000-0000-0000-0000-000000000401": [ + { + "time": 1018, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 1251, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.20" + }, + { + "time": 1253, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 6, + "sourcePort": 51128, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 6000000, + "acknowledgement": 0 + }, + { + "time": 20001, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 22751, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + } + ], + "00000000-0000-0000-0000-000000000402": [ + { + "time": 1138, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 1139, + "source": "02:00:00:00:04:12", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.10", + "targetIp": "192.168.0.20" + }, + { + "time": 1367, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:12", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.10", + "protocol": 6, + "sourcePort": 51128, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 6000000, + "acknowledgement": 0 + }, + { + "time": 20112, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 22863, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + } + ], + "00000000-0000-0000-0000-000000000403": [ + { + "time": 1138, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 20112, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 22863, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + } + ], + "00000000-0000-0000-0000-000000000404": [ + { + "time": 1138, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 20112, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 22863, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + } + ], + "00000000-0000-0000-0000-000000000405": [ + { + "time": 1138, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.10" + }, + { + "time": 20112, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + }, + { + "time": 22863, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.99" + } + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "rows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "192.168.0.20:51128", + "192.168.0.10:6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "5", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "192.168.0.20:51128", + "192.168.0.10:6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "5", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "3", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "3", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "3", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "layeredRows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "51128", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "5", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:12", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.10", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "3", + "02:00:00:00:04:11", + "02:00:00:00:04:12", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.20", + "192.168.0.10", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "51128", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "5", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "3", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "3", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.20", + "192.168.0.10", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ], + [ + "3", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.20", + "192.168.0.99", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.99 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.99]" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "acts": [ + [ + 500, + "00000000-0000-0000-0000-000000000401", + "join 192.168.0.20" + ], + [ + 1000, + "00000000-0000-0000-0000-000000000401", + "join 192.168.0.10" + ], + [ + 20000, + "00000000-0000-0000-0000-000000000401", + "join 192.168.0.99" + ] + ], + "events": [ + [ + 214, + "00000000-0000-0000-0000-000000000401", + "peers", + "" + ], + [ + 217, + "00000000-0000-0000-0000-000000000403", + "peers", + "" + ], + [ + 218, + "00000000-0000-0000-0000-000000000404", + "peers", + "" + ], + [ + 221, + "00000000-0000-0000-0000-000000000406", + "peers", + "" + ], + [ + 500, + "00000000-0000-0000-0000-000000000401", + "call", + "join 192.168.0.20" + ], + [ + 1000, + "00000000-0000-0000-0000-000000000401", + "call", + "join 192.168.0.10" + ], + [ + 20000, + "00000000-0000-0000-0000-000000000401", + "call", + "join 192.168.0.99" + ] + ], + "programs": { + "00000000-0000-0000-0000-000000000401": { + "peers": [], + "results": [] + }, + "00000000-0000-0000-0000-000000000403": { + "peers": [], + "results": [] + }, + "00000000-0000-0000-0000-000000000404": { + "peers": [], + "results": [] + }, + "00000000-0000-0000-0000-000000000406": { + "peers": [], + "results": [] + } + } +} diff --git a/packages/core/test/scenarios/gnutella-java-full.java.json b/packages/core/test/scenarios/gnutella-java-full.java.json new file mode 100644 index 0000000..69f247b --- /dev/null +++ b/packages/core/test/scenarios/gnutella-java-full.java.json @@ -0,0 +1,9106 @@ +{ + "frames": { + "00000000-0000-0000-0000-000000000401": [ + { + "time": 642, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + }, + { + "time": 3001, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + }, + { + "time": 3225, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.20" + }, + { + "time": 3225, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 63194, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 8000000, + "acknowledgement": 0 + }, + { + "time": 3449, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 63194, + "payload": null, + "tcpFlags": "SA", + "sequence": 7000000, + "acknowledgement": 8000001 + }, + { + "time": 3449, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 63194, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 8000001, + "acknowledgement": 7000001 + }, + { + "time": 3505, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 63194, + "destinationPort": 6346, + "payload": "1487026512//0x00//0//8//0//192.168.0.20", + "tcpFlags": "P", + "sequence": 8000001, + "acknowledgement": 0 + }, + { + "time": 3730, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 63194, + "payload": null, + "tcpFlags": "A", + "sequence": 7000001, + "acknowledgement": 8000040 + }, + { + "time": 3786, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 63194, + "payload": "1487026512//0x01//0//8//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 7000001, + "acknowledgement": 0 + }, + { + "time": 3786, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 63194, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 8000040, + "acknowledgement": 7000054 + }, + { + "time": 4643, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 63194, + "payload": "1487026512//0x01//1//7//109//192.168.0.30//6346//0//0", + "tcpFlags": "P", + "sequence": 7000054, + "acknowledgement": 0 + }, + { + "time": 4643, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 63194, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 8000040, + "acknowledgement": 7000107 + }, + { + "time": 5778, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.31" + }, + { + "time": 6945, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 58180, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 15000000, + "acknowledgement": 0 + }, + { + "time": 6946, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 58180, + "payload": null, + "tcpFlags": "SA", + "sequence": 1000000, + "acknowledgement": 15000001 + }, + { + "time": 7167, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 58180, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 15000001, + "acknowledgement": 1000001 + }, + { + "time": 7278, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 58180, + "destinationPort": 6346, + "payload": "258087658//0x00//1//7//0//10.0.0.2", + "tcpFlags": "P", + "sequence": 15000001, + "acknowledgement": 0 + }, + { + "time": 7278, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 58180, + "payload": null, + "tcpFlags": "A", + "sequence": 1000001, + "acknowledgement": 15000035 + }, + { + "time": 7334, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 58180, + "payload": "258087658//0x01//0//8//109//192.168.0.20//6346//0//0", + "tcpFlags": "P", + "sequence": 1000001, + "acknowledgement": 0 + }, + { + "time": 7666, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 58180, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 15000035, + "acknowledgement": 1000053 + } + ], + "00000000-0000-0000-0000-000000000402": [ + { + "time": 642, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + }, + { + "time": 3113, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + }, + { + "time": 5778, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.31" + } + ], + "00000000-0000-0000-0000-000000000403": [ + { + "time": 520, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + }, + { + "time": 756, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.30" + }, + { + "time": 759, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 53045, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 6000000, + "acknowledgement": 0 + }, + { + "time": 986, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 53045, + "payload": null, + "tcpFlags": "SA", + "sequence": 3000000, + "acknowledgement": 6000001 + }, + { + "time": 987, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 53045, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 6000001, + "acknowledgement": 3000001 + }, + { + "time": 1043, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 53045, + "destinationPort": 6346, + "payload": "790976280//0x00//0//8//0//192.168.0.30", + "tcpFlags": "P", + "sequence": 6000001, + "acknowledgement": 0 + }, + { + "time": 1267, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 53045, + "payload": null, + "tcpFlags": "A", + "sequence": 3000001, + "acknowledgement": 6000039 + }, + { + "time": 1323, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 53045, + "payload": "790976280//0x01//0//8//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 3000001, + "acknowledgement": 0 + }, + { + "time": 1323, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 53045, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 6000039, + "acknowledgement": 3000053 + }, + { + "time": 3114, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + }, + { + "time": 4009, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56904, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 10000000, + "acknowledgement": 0 + }, + { + "time": 4010, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56904, + "payload": null, + "tcpFlags": "SA", + "sequence": 2000000, + "acknowledgement": 10000001 + }, + { + "time": 4232, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56904, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 10000001, + "acknowledgement": 2000001 + }, + { + "time": 4309, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56904, + "destinationPort": 6346, + "payload": "1487026512//0x00//1//7//0//192.168.0.20", + "tcpFlags": "P", + "sequence": 10000001, + "acknowledgement": 0 + }, + { + "time": 4310, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56904, + "payload": null, + "tcpFlags": "A", + "sequence": 2000001, + "acknowledgement": 10000040 + }, + { + "time": 4365, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56904, + "payload": "1487026512//0x01//0//8//109//192.168.0.30//6346//0//0", + "tcpFlags": "P", + "sequence": 2000001, + "acknowledgement": 0 + }, + { + "time": 4587, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56904, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 10000040, + "acknowledgement": 2000054 + }, + { + "time": 5778, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.31" + }, + { + "time": 6890, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 49970, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 14000000, + "acknowledgement": 0 + }, + { + "time": 6890, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 49970, + "payload": null, + "tcpFlags": "SA", + "sequence": 11000000, + "acknowledgement": 14000001 + }, + { + "time": 7112, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 49970, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 14000001, + "acknowledgement": 11000001 + }, + { + "time": 7223, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 49970, + "destinationPort": 6346, + "payload": "258087658//0x00//1//7//0//10.0.0.2", + "tcpFlags": "P", + "sequence": 14000001, + "acknowledgement": 0 + }, + { + "time": 7223, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 49970, + "payload": null, + "tcpFlags": "A", + "sequence": 11000001, + "acknowledgement": 14000035 + }, + { + "time": 7278, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 49970, + "payload": "258087658//0x01//0//8//109//192.168.0.30//6346//0//0", + "tcpFlags": "P", + "sequence": 11000001, + "acknowledgement": 0 + }, + { + "time": 7555, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 49970, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 14000035, + "acknowledgement": 11000053 + } + ], + "00000000-0000-0000-0000-000000000404": [ + { + "time": 642, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + }, + { + "time": 644, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.30" + }, + { + "time": 872, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 53045, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 6000000, + "acknowledgement": 0 + }, + { + "time": 874, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 53045, + "payload": null, + "tcpFlags": "SA", + "sequence": 3000000, + "acknowledgement": 6000001 + }, + { + "time": 1099, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 53045, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 6000001, + "acknowledgement": 3000001 + }, + { + "time": 1155, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 53045, + "destinationPort": 6346, + "payload": "790976280//0x00//0//8//0//192.168.0.30", + "tcpFlags": "P", + "sequence": 6000001, + "acknowledgement": 0 + }, + { + "time": 1155, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 53045, + "payload": null, + "tcpFlags": "A", + "sequence": 3000001, + "acknowledgement": 6000039 + }, + { + "time": 1211, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 53045, + "payload": "790976280//0x01//0//8//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 3000001, + "acknowledgement": 0 + }, + { + "time": 1435, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 53045, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 6000039, + "acknowledgement": 3000053 + }, + { + "time": 3113, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + }, + { + "time": 3113, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.20" + }, + { + "time": 3337, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 63194, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 8000000, + "acknowledgement": 0 + }, + { + "time": 3337, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 63194, + "payload": null, + "tcpFlags": "SA", + "sequence": 7000000, + "acknowledgement": 8000001 + }, + { + "time": 3561, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 63194, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 8000001, + "acknowledgement": 7000001 + }, + { + "time": 3617, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 63194, + "destinationPort": 6346, + "payload": "1487026512//0x00//0//8//0//192.168.0.20", + "tcpFlags": "P", + "sequence": 8000001, + "acknowledgement": 0 + }, + { + "time": 3617, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 63194, + "payload": null, + "tcpFlags": "A", + "sequence": 7000001, + "acknowledgement": 8000040 + }, + { + "time": 3673, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 63194, + "payload": "1487026512//0x01//0//8//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 7000001, + "acknowledgement": 0 + }, + { + "time": 3897, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 63194, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 8000040, + "acknowledgement": 7000054 + }, + { + "time": 3898, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56904, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 10000000, + "acknowledgement": 0 + }, + { + "time": 4121, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56904, + "payload": null, + "tcpFlags": "SA", + "sequence": 2000000, + "acknowledgement": 10000001 + }, + { + "time": 4121, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56904, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 10000001, + "acknowledgement": 2000001 + }, + { + "time": 4198, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56904, + "destinationPort": 6346, + "payload": "1487026512//0x00//1//7//0//192.168.0.20", + "tcpFlags": "P", + "sequence": 10000001, + "acknowledgement": 0 + }, + { + "time": 4421, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56904, + "payload": null, + "tcpFlags": "A", + "sequence": 2000001, + "acknowledgement": 10000040 + }, + { + "time": 4476, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56904, + "payload": "1487026512//0x01//0//8//109//192.168.0.30//6346//0//0", + "tcpFlags": "P", + "sequence": 2000001, + "acknowledgement": 0 + }, + { + "time": 4477, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56904, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 10000040, + "acknowledgement": 2000054 + }, + { + "time": 4532, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 63194, + "payload": "1487026512//0x01//1//7//109//192.168.0.30//6346//0//0", + "tcpFlags": "P", + "sequence": 7000054, + "acknowledgement": 0 + }, + { + "time": 4754, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 63194, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 8000040, + "acknowledgement": 7000107 + }, + { + "time": 5778, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.31" + }, + { + "time": 5778, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.1" + }, + { + "time": 6000, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64281, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 12000000, + "acknowledgement": 0 + }, + { + "time": 6000, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 64281, + "payload": null, + "tcpFlags": "SA", + "sequence": 9000000, + "acknowledgement": 12000001 + }, + { + "time": 6333, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64281, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000001, + "acknowledgement": 9000001 + }, + { + "time": 6389, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64281, + "destinationPort": 6346, + "payload": "258087658//0x00//0//8//0//10.0.0.2", + "tcpFlags": "P", + "sequence": 12000001, + "acknowledgement": 0 + }, + { + "time": 6389, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 64281, + "payload": null, + "tcpFlags": "A", + "sequence": 9000001, + "acknowledgement": 12000035 + }, + { + "time": 6444, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 64281, + "payload": "258087658//0x01//0//8//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 9000001, + "acknowledgement": 0 + }, + { + "time": 6778, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64281, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000035, + "acknowledgement": 9000053 + }, + { + "time": 6779, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 49970, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 14000000, + "acknowledgement": 0 + }, + { + "time": 6834, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 58180, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 15000000, + "acknowledgement": 0 + }, + { + "time": 7001, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 49970, + "payload": null, + "tcpFlags": "SA", + "sequence": 11000000, + "acknowledgement": 14000001 + }, + { + "time": 7001, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 49970, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 14000001, + "acknowledgement": 11000001 + }, + { + "time": 7056, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 58180, + "payload": null, + "tcpFlags": "SA", + "sequence": 1000000, + "acknowledgement": 15000001 + }, + { + "time": 7057, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 58180, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 15000001, + "acknowledgement": 1000001 + }, + { + "time": 7112, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 49970, + "destinationPort": 6346, + "payload": "258087658//0x00//1//7//0//10.0.0.2", + "tcpFlags": "P", + "sequence": 14000001, + "acknowledgement": 0 + }, + { + "time": 7167, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 58180, + "destinationPort": 6346, + "payload": "258087658//0x00//1//7//0//10.0.0.2", + "tcpFlags": "P", + "sequence": 15000001, + "acknowledgement": 0 + }, + { + "time": 7334, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 49970, + "payload": null, + "tcpFlags": "A", + "sequence": 11000001, + "acknowledgement": 14000035 + }, + { + "time": 7389, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 58180, + "payload": null, + "tcpFlags": "A", + "sequence": 1000001, + "acknowledgement": 15000035 + }, + { + "time": 7444, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 49970, + "payload": "258087658//0x01//0//8//109//192.168.0.30//6346//0//0", + "tcpFlags": "P", + "sequence": 11000001, + "acknowledgement": 0 + }, + { + "time": 7445, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 49970, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 14000035, + "acknowledgement": 11000053 + }, + { + "time": 7500, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 58180, + "payload": "258087658//0x01//0//8//109//192.168.0.20//6346//0//0", + "tcpFlags": "P", + "sequence": 1000001, + "acknowledgement": 0 + }, + { + "time": 7500, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 64281, + "payload": "258087658//0x01//1//7//109//192.168.0.30//6346//0//0", + "tcpFlags": "P", + "sequence": 9000053, + "acknowledgement": 0 + }, + { + "time": 7555, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 58180, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 15000035, + "acknowledgement": 1000053 + }, + { + "time": 7833, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64281, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000035, + "acknowledgement": 9000105 + }, + { + "time": 7833, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 64281, + "payload": "258087658//0x01//1//7//109//192.168.0.20//6346//0//0", + "tcpFlags": "P", + "sequence": 9000105, + "acknowledgement": 0 + }, + { + "time": 8166, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64281, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000035, + "acknowledgement": 9000157 + } + ], + "00000000-0000-0000-0000-000000000405": [ + { + "time": 642, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + }, + { + "time": 3113, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.31" + }, + { + "time": 5667, + "source": "02:00:00:00:04:51", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.31" + }, + { + "time": 5889, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.1" + }, + { + "time": 5889, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64281, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 12000000, + "acknowledgement": 0 + }, + { + "time": 6111, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 64281, + "payload": null, + "tcpFlags": "SA", + "sequence": 9000000, + "acknowledgement": 12000001 + }, + { + "time": 6222, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64281, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000001, + "acknowledgement": 9000001 + }, + { + "time": 6278, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64281, + "destinationPort": 6346, + "payload": "258087658//0x00//0//8//0//10.0.0.2", + "tcpFlags": "P", + "sequence": 12000001, + "acknowledgement": 0 + }, + { + "time": 6500, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 64281, + "payload": null, + "tcpFlags": "A", + "sequence": 9000001, + "acknowledgement": 12000035 + }, + { + "time": 6555, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 64281, + "payload": "258087658//0x01//0//8//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 9000001, + "acknowledgement": 0 + }, + { + "time": 6667, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64281, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000035, + "acknowledgement": 9000053 + }, + { + "time": 7611, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 64281, + "payload": "258087658//0x01//1//7//109//192.168.0.30//6346//0//0", + "tcpFlags": "P", + "sequence": 9000053, + "acknowledgement": 0 + }, + { + "time": 7722, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64281, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000035, + "acknowledgement": 9000105 + }, + { + "time": 7944, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 64281, + "payload": "258087658//0x01//1//7//109//192.168.0.20//6346//0//0", + "tcpFlags": "P", + "sequence": 9000105, + "acknowledgement": 0 + }, + { + "time": 8055, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64281, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000035, + "acknowledgement": 9000157 + } + ], + "00000000-0000-0000-0000-000000000405#1": [ + { + "time": 5556, + "source": "02:00:00:00:04:16", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "10.0.0.2", + "targetIp": "10.0.0.1" + }, + { + "time": 5556, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "arp": 2, + "senderIp": "10.0.0.1", + "targetIp": "10.0.0.2" + }, + { + "time": 5667, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64281, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 12000000, + "acknowledgement": 0 + }, + { + "time": 6111, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 64281, + "payload": null, + "tcpFlags": "SA", + "sequence": 9000000, + "acknowledgement": 12000001 + }, + { + "time": 6222, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64281, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000001, + "acknowledgement": 9000001 + }, + { + "time": 6278, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64281, + "destinationPort": 6346, + "payload": "258087658//0x00//0//8//0//10.0.0.2", + "tcpFlags": "P", + "sequence": 12000001, + "acknowledgement": 0 + }, + { + "time": 6500, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 64281, + "payload": null, + "tcpFlags": "A", + "sequence": 9000001, + "acknowledgement": 12000035 + }, + { + "time": 6555, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 64281, + "payload": "258087658//0x01//0//8//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 9000001, + "acknowledgement": 0 + }, + { + "time": 6667, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64281, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000035, + "acknowledgement": 9000053 + }, + { + "time": 7611, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 64281, + "payload": "258087658//0x01//1//7//109//192.168.0.30//6346//0//0", + "tcpFlags": "P", + "sequence": 9000053, + "acknowledgement": 0 + }, + { + "time": 7722, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64281, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000035, + "acknowledgement": 9000105 + }, + { + "time": 7944, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 64281, + "payload": "258087658//0x01//1//7//109//192.168.0.20//6346//0//0", + "tcpFlags": "P", + "sequence": 9000105, + "acknowledgement": 0 + }, + { + "time": 8055, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64281, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000035, + "acknowledgement": 9000157 + } + ], + "00000000-0000-0000-0000-000000000406": [ + { + "time": 5501, + "source": "02:00:00:00:04:16", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "10.0.0.2", + "targetIp": "10.0.0.1" + }, + { + "time": 5612, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "arp": 2, + "senderIp": "10.0.0.1", + "targetIp": "10.0.0.2" + }, + { + "time": 5612, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64281, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 12000000, + "acknowledgement": 0 + }, + { + "time": 6167, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 64281, + "payload": null, + "tcpFlags": "SA", + "sequence": 9000000, + "acknowledgement": 12000001 + }, + { + "time": 6167, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64281, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000001, + "acknowledgement": 9000001 + }, + { + "time": 6222, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64281, + "destinationPort": 6346, + "payload": "258087658//0x00//0//8//0//10.0.0.2", + "tcpFlags": "P", + "sequence": 12000001, + "acknowledgement": 0 + }, + { + "time": 6555, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 64281, + "payload": null, + "tcpFlags": "A", + "sequence": 9000001, + "acknowledgement": 12000035 + }, + { + "time": 6611, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 64281, + "payload": "258087658//0x01//0//8//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 9000001, + "acknowledgement": 0 + }, + { + "time": 6611, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64281, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000035, + "acknowledgement": 9000053 + }, + { + "time": 7666, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 64281, + "payload": "258087658//0x01//1//7//109//192.168.0.30//6346//0//0", + "tcpFlags": "P", + "sequence": 9000053, + "acknowledgement": 0 + }, + { + "time": 7666, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64281, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000035, + "acknowledgement": 9000105 + }, + { + "time": 7999, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 64281, + "payload": "258087658//0x01//1//7//109//192.168.0.20//6346//0//0", + "tcpFlags": "P", + "sequence": 9000105, + "acknowledgement": 0 + }, + { + "time": 7999, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 64281, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000035, + "acknowledgement": 9000157 + } + ] + }, + "rows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "3", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "4", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "192.168.0.20:63194", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 8.000.000" + ], + [ + "5", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "192.168.0.31:6346", + "192.168.0.20:63194", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000, ACK: 8.000.001" + ], + [ + "6", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "192.168.0.20:63194", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 8.000.001, ACK: 7.000.001" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "192.168.0.20:63194", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 8.000.001" + ], + [ + "7", + "192.168.0.20:63194", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "1487026512//0x00//0//8//0//192.168.0.20" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "192.168.0.31:6346", + "192.168.0.20:63194", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 8.000.040" + ], + [ + "9", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "192.168.0.31:6346", + "192.168.0.20:63194", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "9", + "192.168.0.31:6346", + "192.168.0.20:63194", + "GNT", + "Anwendung", + "1487026512//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "10", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "192.168.0.20:63194", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 8.000.040, ACK: 7.000.054" + ], + [ + "11", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "192.168.0.31:6346", + "192.168.0.20:63194", + "TCP", + "Transport", + "SEQ: 7.000.054" + ], + [ + "11", + "192.168.0.31:6346", + "192.168.0.20:63194", + "GNT", + "Anwendung", + "1487026512//0x01//1//7//109//192.168.0.30//6346//0//0" + ], + [ + "12", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "192.168.0.20:63194", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 8.000.040, ACK: 7.000.107" + ], + [ + "13", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "13", + "192.168.0.1", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "14", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "192.168.0.31:58180", + "192.168.0.20:6346", + "TCP", + "Transport", + "SYN, SEQ: 15.000.000" + ], + [ + "15", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "192.168.0.20:6346", + "192.168.0.31:58180", + "TCP", + "Transport", + "SYN, SEQ: 1.000.000, ACK: 15.000.001" + ], + [ + "16", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "192.168.0.31:58180", + "192.168.0.20:6346", + "TCP", + "Transport", + "SEQ: 15.000.001, ACK: 1.000.001" + ], + [ + "17", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "192.168.0.31:58180", + "192.168.0.20:6346", + "TCP", + "Transport", + "SEQ: 15.000.001" + ], + [ + "17", + "192.168.0.31:58180", + "192.168.0.20:6346", + "GNT", + "Anwendung", + "258087658//0x00//1//7//0//10.0.0.2" + ], + [ + "18", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "192.168.0.20:6346", + "192.168.0.31:58180", + "TCP", + "Transport", + "SEQ: 1.000.001, ACK: 15.000.035" + ], + [ + "19", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "192.168.0.20:6346", + "192.168.0.31:58180", + "TCP", + "Transport", + "SEQ: 1.000.001" + ], + [ + "19", + "192.168.0.20:6346", + "192.168.0.31:58180", + "GNT", + "Anwendung", + "258087658//0x01//0//8//109//192.168.0.20//6346//0//0" + ], + [ + "20", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "20", + "192.168.0.31:58180", + "192.168.0.20:6346", + "TCP", + "Transport", + "SEQ: 15.000.035, ACK: 1.000.053" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "3", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.1", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "3", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "192.168.0.30:53045", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "192.168.0.31:6346", + "192.168.0.30:53045", + "TCP", + "Transport", + "SYN, SEQ: 3.000.000, ACK: 6.000.001" + ], + [ + "5", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "192.168.0.30:53045", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 6.000.001, ACK: 3.000.001" + ], + [ + "6", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "192.168.0.30:53045", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "6", + "192.168.0.30:53045", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "790976280//0x00//0//8//0//192.168.0.30" + ], + [ + "7", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "192.168.0.31:6346", + "192.168.0.30:53045", + "TCP", + "Transport", + "SEQ: 3.000.001, ACK: 6.000.039" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "192.168.0.31:6346", + "192.168.0.30:53045", + "TCP", + "Transport", + "SEQ: 3.000.001" + ], + [ + "8", + "192.168.0.31:6346", + "192.168.0.30:53045", + "GNT", + "Anwendung", + "790976280//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "192.168.0.30:53045", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 6.000.039, ACK: 3.000.053" + ], + [ + "10", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "10", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "11", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "192.168.0.31:56904", + "192.168.0.30:6346", + "TCP", + "Transport", + "SYN, SEQ: 10.000.000" + ], + [ + "12", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "192.168.0.30:6346", + "192.168.0.31:56904", + "TCP", + "Transport", + "SYN, SEQ: 2.000.000, ACK: 10.000.001" + ], + [ + "13", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "192.168.0.31:56904", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 10.000.001, ACK: 2.000.001" + ], + [ + "14", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "192.168.0.31:56904", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 10.000.001" + ], + [ + "14", + "192.168.0.31:56904", + "192.168.0.30:6346", + "GNT", + "Anwendung", + "1487026512//0x00//1//7//0//192.168.0.20" + ], + [ + "15", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "192.168.0.30:6346", + "192.168.0.31:56904", + "TCP", + "Transport", + "SEQ: 2.000.001, ACK: 10.000.040" + ], + [ + "16", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "192.168.0.30:6346", + "192.168.0.31:56904", + "TCP", + "Transport", + "SEQ: 2.000.001" + ], + [ + "16", + "192.168.0.30:6346", + "192.168.0.31:56904", + "GNT", + "Anwendung", + "1487026512//0x01//0//8//109//192.168.0.30//6346//0//0" + ], + [ + "17", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "192.168.0.31:56904", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 10.000.040, ACK: 2.000.054" + ], + [ + "18", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "18", + "192.168.0.1", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "19", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "192.168.0.31:49970", + "192.168.0.30:6346", + "TCP", + "Transport", + "SYN, SEQ: 14.000.000" + ], + [ + "20", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "20", + "192.168.0.30:6346", + "192.168.0.31:49970", + "TCP", + "Transport", + "SYN, SEQ: 11.000.000, ACK: 14.000.001" + ], + [ + "21", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "192.168.0.31:49970", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 14.000.001, ACK: 11.000.001" + ], + [ + "22", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "192.168.0.31:49970", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 14.000.001" + ], + [ + "22", + "192.168.0.31:49970", + "192.168.0.30:6346", + "GNT", + "Anwendung", + "258087658//0x00//1//7//0//10.0.0.2" + ], + [ + "23", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "23", + "192.168.0.30:6346", + "192.168.0.31:49970", + "TCP", + "Transport", + "SEQ: 11.000.001, ACK: 14.000.035" + ], + [ + "24", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "24", + "192.168.0.30:6346", + "192.168.0.31:49970", + "TCP", + "Transport", + "SEQ: 11.000.001" + ], + [ + "24", + "192.168.0.30:6346", + "192.168.0.31:49970", + "GNT", + "Anwendung", + "258087658//0x01//0//8//109//192.168.0.30//6346//0//0" + ], + [ + "25", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "25", + "192.168.0.31:49970", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 14.000.035, ACK: 11.000.053" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "3", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "192.168.0.30:53045", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "192.168.0.31:6346", + "192.168.0.30:53045", + "TCP", + "Transport", + "SYN, SEQ: 3.000.000, ACK: 6.000.001" + ], + [ + "5", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "192.168.0.30:53045", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 6.000.001, ACK: 3.000.001" + ], + [ + "6", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "192.168.0.30:53045", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "6", + "192.168.0.30:53045", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "790976280//0x00//0//8//0//192.168.0.30" + ], + [ + "7", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "192.168.0.31:6346", + "192.168.0.30:53045", + "TCP", + "Transport", + "SEQ: 3.000.001, ACK: 6.000.039" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "192.168.0.31:6346", + "192.168.0.30:53045", + "TCP", + "Transport", + "SEQ: 3.000.001" + ], + [ + "8", + "192.168.0.31:6346", + "192.168.0.30:53045", + "GNT", + "Anwendung", + "790976280//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "192.168.0.30:53045", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 6.000.039, ACK: 3.000.053" + ], + [ + "10", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "10", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "11", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "11", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "12", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "192.168.0.20:63194", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 8.000.000" + ], + [ + "13", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "192.168.0.31:6346", + "192.168.0.20:63194", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000, ACK: 8.000.001" + ], + [ + "14", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "192.168.0.20:63194", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 8.000.001, ACK: 7.000.001" + ], + [ + "15", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "192.168.0.20:63194", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 8.000.001" + ], + [ + "15", + "192.168.0.20:63194", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "1487026512//0x00//0//8//0//192.168.0.20" + ], + [ + "16", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "192.168.0.31:6346", + "192.168.0.20:63194", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 8.000.040" + ], + [ + "17", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "192.168.0.31:6346", + "192.168.0.20:63194", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "17", + "192.168.0.31:6346", + "192.168.0.20:63194", + "GNT", + "Anwendung", + "1487026512//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "18", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "192.168.0.20:63194", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 8.000.040, ACK: 7.000.054" + ], + [ + "19", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "192.168.0.31:56904", + "192.168.0.30:6346", + "TCP", + "Transport", + "SYN, SEQ: 10.000.000" + ], + [ + "20", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "20", + "192.168.0.30:6346", + "192.168.0.31:56904", + "TCP", + "Transport", + "SYN, SEQ: 2.000.000, ACK: 10.000.001" + ], + [ + "21", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "192.168.0.31:56904", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 10.000.001, ACK: 2.000.001" + ], + [ + "22", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "192.168.0.31:56904", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 10.000.001" + ], + [ + "22", + "192.168.0.31:56904", + "192.168.0.30:6346", + "GNT", + "Anwendung", + "1487026512//0x00//1//7//0//192.168.0.20" + ], + [ + "23", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "23", + "192.168.0.30:6346", + "192.168.0.31:56904", + "TCP", + "Transport", + "SEQ: 2.000.001, ACK: 10.000.040" + ], + [ + "24", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "24", + "192.168.0.30:6346", + "192.168.0.31:56904", + "TCP", + "Transport", + "SEQ: 2.000.001" + ], + [ + "24", + "192.168.0.30:6346", + "192.168.0.31:56904", + "GNT", + "Anwendung", + "1487026512//0x01//0//8//109//192.168.0.30//6346//0//0" + ], + [ + "25", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "25", + "192.168.0.31:56904", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 10.000.040, ACK: 2.000.054" + ], + [ + "26", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "192.168.0.31:6346", + "192.168.0.20:63194", + "TCP", + "Transport", + "SEQ: 7.000.054" + ], + [ + "26", + "192.168.0.31:6346", + "192.168.0.20:63194", + "GNT", + "Anwendung", + "1487026512//0x01//1//7//109//192.168.0.30//6346//0//0" + ], + [ + "27", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "192.168.0.20:63194", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 8.000.040, ACK: 7.000.107" + ], + [ + "28", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "28", + "192.168.0.1", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "29", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x806" + ], + [ + "29", + "192.168.0.31", + "192.168.0.1", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:51|192.168.0.1]" + ], + [ + "30", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "30", + "10.0.0.2:64281", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 12.000.000" + ], + [ + "31", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "31", + "192.168.0.31:6346", + "10.0.0.2:64281", + "TCP", + "Transport", + "SYN, SEQ: 9.000.000, ACK: 12.000.001" + ], + [ + "32", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "32", + "10.0.0.2:64281", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 12.000.001, ACK: 9.000.001" + ], + [ + "33", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "33", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "33", + "10.0.0.2:64281", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 12.000.001" + ], + [ + "33", + "10.0.0.2:64281", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "258087658//0x00//0//8//0//10.0.0.2" + ], + [ + "34", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "34", + "192.168.0.31:6346", + "10.0.0.2:64281", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 12.000.035" + ], + [ + "35", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "35", + "192.168.0.31:6346", + "10.0.0.2:64281", + "TCP", + "Transport", + "SEQ: 9.000.001" + ], + [ + "35", + "192.168.0.31:6346", + "10.0.0.2:64281", + "GNT", + "Anwendung", + "258087658//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "36", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "36", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "36", + "10.0.0.2:64281", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 12.000.035, ACK: 9.000.053" + ], + [ + "37", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "192.168.0.31:49970", + "192.168.0.30:6346", + "TCP", + "Transport", + "SYN, SEQ: 14.000.000" + ], + [ + "38", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "38", + "192.168.0.31:58180", + "192.168.0.20:6346", + "TCP", + "Transport", + "SYN, SEQ: 15.000.000" + ], + [ + "39", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "39", + "192.168.0.30:6346", + "192.168.0.31:49970", + "TCP", + "Transport", + "SYN, SEQ: 11.000.000, ACK: 14.000.001" + ], + [ + "40", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "40", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "40", + "192.168.0.31:49970", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 14.000.001, ACK: 11.000.001" + ], + [ + "41", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "41", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "41", + "192.168.0.20:6346", + "192.168.0.31:58180", + "TCP", + "Transport", + "SYN, SEQ: 1.000.000, ACK: 15.000.001" + ], + [ + "42", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "42", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "42", + "192.168.0.31:58180", + "192.168.0.20:6346", + "TCP", + "Transport", + "SEQ: 15.000.001, ACK: 1.000.001" + ], + [ + "43", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "43", + "192.168.0.31:49970", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 14.000.001" + ], + [ + "43", + "192.168.0.31:49970", + "192.168.0.30:6346", + "GNT", + "Anwendung", + "258087658//0x00//1//7//0//10.0.0.2" + ], + [ + "44", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "44", + "192.168.0.31:58180", + "192.168.0.20:6346", + "TCP", + "Transport", + "SEQ: 15.000.001" + ], + [ + "44", + "192.168.0.31:58180", + "192.168.0.20:6346", + "GNT", + "Anwendung", + "258087658//0x00//1//7//0//10.0.0.2" + ], + [ + "45", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "45", + "192.168.0.30:6346", + "192.168.0.31:49970", + "TCP", + "Transport", + "SEQ: 11.000.001, ACK: 14.000.035" + ], + [ + "46", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "46", + "192.168.0.20:6346", + "192.168.0.31:58180", + "TCP", + "Transport", + "SEQ: 1.000.001, ACK: 15.000.035" + ], + [ + "47", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "47", + "192.168.0.30:6346", + "192.168.0.31:49970", + "TCP", + "Transport", + "SEQ: 11.000.001" + ], + [ + "47", + "192.168.0.30:6346", + "192.168.0.31:49970", + "GNT", + "Anwendung", + "258087658//0x01//0//8//109//192.168.0.30//6346//0//0" + ], + [ + "48", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "48", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "48", + "192.168.0.31:49970", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 14.000.035, ACK: 11.000.053" + ], + [ + "49", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "49", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "49", + "192.168.0.20:6346", + "192.168.0.31:58180", + "TCP", + "Transport", + "SEQ: 1.000.001" + ], + [ + "49", + "192.168.0.20:6346", + "192.168.0.31:58180", + "GNT", + "Anwendung", + "258087658//0x01//0//8//109//192.168.0.20//6346//0//0" + ], + [ + "50", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "50", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "50", + "192.168.0.31:6346", + "10.0.0.2:64281", + "TCP", + "Transport", + "SEQ: 9.000.053" + ], + [ + "50", + "192.168.0.31:6346", + "10.0.0.2:64281", + "GNT", + "Anwendung", + "258087658//0x01//1//7//109//192.168.0.30//6346//0//0" + ], + [ + "51", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "51", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "51", + "192.168.0.31:58180", + "192.168.0.20:6346", + "TCP", + "Transport", + "SEQ: 15.000.035, ACK: 1.000.053" + ], + [ + "52", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "52", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "52", + "10.0.0.2:64281", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 12.000.035, ACK: 9.000.105" + ], + [ + "53", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "53", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "53", + "192.168.0.31:6346", + "10.0.0.2:64281", + "TCP", + "Transport", + "SEQ: 9.000.105" + ], + [ + "53", + "192.168.0.31:6346", + "10.0.0.2:64281", + "GNT", + "Anwendung", + "258087658//0x01//1//7//109//192.168.0.20//6346//0//0" + ], + [ + "54", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "54", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "54", + "10.0.0.2:64281", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 12.000.035, ACK: 9.000.157" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "3", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.1", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.31", + "192.168.0.1", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:51|192.168.0.1]" + ], + [ + "5", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "5", + "10.0.0.2:64281", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 12.000.000" + ], + [ + "6", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "192.168.0.31:6346", + "10.0.0.2:64281", + "TCP", + "Transport", + "SYN, SEQ: 9.000.000, ACK: 12.000.001" + ], + [ + "7", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "7", + "10.0.0.2:64281", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 12.000.001, ACK: 9.000.001" + ], + [ + "8", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "8", + "10.0.0.2:64281", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 12.000.001" + ], + [ + "8", + "10.0.0.2:64281", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "258087658//0x00//0//8//0//10.0.0.2" + ], + [ + "9", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "192.168.0.31:6346", + "10.0.0.2:64281", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 12.000.035" + ], + [ + "10", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "192.168.0.31:6346", + "10.0.0.2:64281", + "TCP", + "Transport", + "SEQ: 9.000.001" + ], + [ + "10", + "192.168.0.31:6346", + "10.0.0.2:64281", + "GNT", + "Anwendung", + "258087658//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "11", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "11", + "10.0.0.2:64281", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 12.000.035, ACK: 9.000.053" + ], + [ + "12", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "192.168.0.31:6346", + "10.0.0.2:64281", + "TCP", + "Transport", + "SEQ: 9.000.053" + ], + [ + "12", + "192.168.0.31:6346", + "10.0.0.2:64281", + "GNT", + "Anwendung", + "258087658//0x01//1//7//109//192.168.0.30//6346//0//0" + ], + [ + "13", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "13", + "10.0.0.2:64281", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 12.000.035, ACK: 9.000.105" + ], + [ + "14", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "192.168.0.31:6346", + "10.0.0.2:64281", + "TCP", + "Transport", + "SEQ: 9.000.105" + ], + [ + "14", + "192.168.0.31:6346", + "10.0.0.2:64281", + "GNT", + "Anwendung", + "258087658//0x01//1//7//109//192.168.0.20//6346//0//0" + ], + [ + "15", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "15", + "10.0.0.2:64281", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 12.000.035, ACK: 9.000.157" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [ + [ + "1", + "02:00:00:00:04:16", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "10.0.0.2", + "10.0.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:04:16|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" + ], + [ + "2", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "10.0.0.1", + "10.0.0.2", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:52 [op=REPLY, sender=02:00:00:00:04:52|10.0.0.1, target=02:00:00:00:04:16|10.0.0.2]" + ], + [ + "3", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "10.0.0.2:64281", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 12.000.000" + ], + [ + "4", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "4", + "192.168.0.31:6346", + "10.0.0.2:64281", + "TCP", + "Transport", + "SYN, SEQ: 9.000.000, ACK: 12.000.001" + ], + [ + "5", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "10.0.0.2:64281", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 12.000.001, ACK: 9.000.001" + ], + [ + "6", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "10.0.0.2:64281", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 12.000.001" + ], + [ + "6", + "10.0.0.2:64281", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "258087658//0x00//0//8//0//10.0.0.2" + ], + [ + "7", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "7", + "192.168.0.31:6346", + "10.0.0.2:64281", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 12.000.035" + ], + [ + "8", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "8", + "192.168.0.31:6346", + "10.0.0.2:64281", + "TCP", + "Transport", + "SEQ: 9.000.001" + ], + [ + "8", + "192.168.0.31:6346", + "10.0.0.2:64281", + "GNT", + "Anwendung", + "258087658//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "10.0.0.2:64281", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 12.000.035, ACK: 9.000.053" + ], + [ + "10", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "10", + "192.168.0.31:6346", + "10.0.0.2:64281", + "TCP", + "Transport", + "SEQ: 9.000.053" + ], + [ + "10", + "192.168.0.31:6346", + "10.0.0.2:64281", + "GNT", + "Anwendung", + "258087658//0x01//1//7//109//192.168.0.30//6346//0//0" + ], + [ + "11", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "10.0.0.2:64281", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 12.000.035, ACK: 9.000.105" + ], + [ + "12", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "12", + "192.168.0.31:6346", + "10.0.0.2:64281", + "TCP", + "Transport", + "SEQ: 9.000.105" + ], + [ + "12", + "192.168.0.31:6346", + "10.0.0.2:64281", + "GNT", + "Anwendung", + "258087658//0x01//1//7//109//192.168.0.20//6346//0//0" + ], + [ + "13", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "10.0.0.2:64281", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 12.000.035, ACK: 9.000.157" + ] + ], + "00000000-0000-0000-0000-000000000406": [ + [ + "1", + "02:00:00:00:04:16", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "10.0.0.2", + "10.0.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:04:16|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" + ], + [ + "2", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "10.0.0.1", + "10.0.0.2", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:52 [op=REPLY, sender=02:00:00:00:04:52|10.0.0.1, target=02:00:00:00:04:16|10.0.0.2]" + ], + [ + "3", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "10.0.0.2:64281", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 12.000.000" + ], + [ + "4", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "4", + "192.168.0.31:6346", + "10.0.0.2:64281", + "TCP", + "Transport", + "SYN, SEQ: 9.000.000, ACK: 12.000.001" + ], + [ + "5", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "10.0.0.2:64281", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 12.000.001, ACK: 9.000.001" + ], + [ + "6", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "10.0.0.2:64281", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 12.000.001" + ], + [ + "6", + "10.0.0.2:64281", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "258087658//0x00//0//8//0//10.0.0.2" + ], + [ + "7", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "7", + "192.168.0.31:6346", + "10.0.0.2:64281", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 12.000.035" + ], + [ + "8", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "8", + "192.168.0.31:6346", + "10.0.0.2:64281", + "TCP", + "Transport", + "SEQ: 9.000.001" + ], + [ + "8", + "192.168.0.31:6346", + "10.0.0.2:64281", + "GNT", + "Anwendung", + "258087658//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "10.0.0.2:64281", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 12.000.035, ACK: 9.000.053" + ], + [ + "10", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "10", + "192.168.0.31:6346", + "10.0.0.2:64281", + "TCP", + "Transport", + "SEQ: 9.000.053" + ], + [ + "10", + "192.168.0.31:6346", + "10.0.0.2:64281", + "GNT", + "Anwendung", + "258087658//0x01//1//7//109//192.168.0.30//6346//0//0" + ], + [ + "11", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "10.0.0.2:64281", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 12.000.035, ACK: 9.000.105" + ], + [ + "12", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "12", + "192.168.0.31:6346", + "10.0.0.2:64281", + "TCP", + "Transport", + "SEQ: 9.000.105" + ], + [ + "12", + "192.168.0.31:6346", + "10.0.0.2:64281", + "GNT", + "Anwendung", + "258087658//0x01//1//7//109//192.168.0.20//6346//0//0" + ], + [ + "13", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "10.0.0.2:64281", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 12.000.035, ACK: 9.000.157" + ] + ] + }, + "layeredRows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "3", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "4", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "63194", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 8.000.000" + ], + [ + "5", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "6346", + "63194", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000, ACK: 8.000.001" + ], + [ + "6", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "63194", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.001, ACK: 7.000.001" + ], + [ + "7", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "63194", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.001" + ], + [ + "7", + null, + null, + "GNT", + "Anwendung", + "1487026512//0x00//0//8//0//192.168.0.20" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "6346", + "63194", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 8.000.040" + ], + [ + "9", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "6346", + "63194", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "9", + null, + null, + "GNT", + "Anwendung", + "1487026512//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "10", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "63194", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.040, ACK: 7.000.054" + ], + [ + "11", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "6346", + "63194", + "TCP", + "Transport", + "SEQ: 7.000.054" + ], + [ + "11", + null, + null, + "GNT", + "Anwendung", + "1487026512//0x01//1//7//109//192.168.0.30//6346//0//0" + ], + [ + "12", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "63194", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.040, ACK: 7.000.107" + ], + [ + "13", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "13", + "192.168.0.1", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "14", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "58180", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 15.000.000" + ], + [ + "15", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "6346", + "58180", + "TCP", + "Transport", + "SYN, SEQ: 1.000.000, ACK: 15.000.001" + ], + [ + "16", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "58180", + "6346", + "TCP", + "Transport", + "SEQ: 15.000.001, ACK: 1.000.001" + ], + [ + "17", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "58180", + "6346", + "TCP", + "Transport", + "SEQ: 15.000.001" + ], + [ + "17", + null, + null, + "GNT", + "Anwendung", + "258087658//0x00//1//7//0//10.0.0.2" + ], + [ + "18", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "6346", + "58180", + "TCP", + "Transport", + "SEQ: 1.000.001, ACK: 15.000.035" + ], + [ + "19", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "6346", + "58180", + "TCP", + "Transport", + "SEQ: 1.000.001" + ], + [ + "19", + null, + null, + "GNT", + "Anwendung", + "258087658//0x01//0//8//109//192.168.0.20//6346//0//0" + ], + [ + "20", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "20", + "58180", + "6346", + "TCP", + "Transport", + "SEQ: 15.000.035, ACK: 1.000.053" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "3", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.1", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "3", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "53045", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "6346", + "53045", + "TCP", + "Transport", + "SYN, SEQ: 3.000.000, ACK: 6.000.001" + ], + [ + "5", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "53045", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.001, ACK: 3.000.001" + ], + [ + "6", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "53045", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "6", + null, + null, + "GNT", + "Anwendung", + "790976280//0x00//0//8//0//192.168.0.30" + ], + [ + "7", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "6346", + "53045", + "TCP", + "Transport", + "SEQ: 3.000.001, ACK: 6.000.039" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "6346", + "53045", + "TCP", + "Transport", + "SEQ: 3.000.001" + ], + [ + "8", + null, + null, + "GNT", + "Anwendung", + "790976280//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "53045", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.039, ACK: 3.000.053" + ], + [ + "10", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "10", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "11", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "56904", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 10.000.000" + ], + [ + "12", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "6346", + "56904", + "TCP", + "Transport", + "SYN, SEQ: 2.000.000, ACK: 10.000.001" + ], + [ + "13", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "56904", + "6346", + "TCP", + "Transport", + "SEQ: 10.000.001, ACK: 2.000.001" + ], + [ + "14", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "56904", + "6346", + "TCP", + "Transport", + "SEQ: 10.000.001" + ], + [ + "14", + null, + null, + "GNT", + "Anwendung", + "1487026512//0x00//1//7//0//192.168.0.20" + ], + [ + "15", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "6346", + "56904", + "TCP", + "Transport", + "SEQ: 2.000.001, ACK: 10.000.040" + ], + [ + "16", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "6346", + "56904", + "TCP", + "Transport", + "SEQ: 2.000.001" + ], + [ + "16", + null, + null, + "GNT", + "Anwendung", + "1487026512//0x01//0//8//109//192.168.0.30//6346//0//0" + ], + [ + "17", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "56904", + "6346", + "TCP", + "Transport", + "SEQ: 10.000.040, ACK: 2.000.054" + ], + [ + "18", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "18", + "192.168.0.1", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "19", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "49970", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 14.000.000" + ], + [ + "20", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "20", + "6346", + "49970", + "TCP", + "Transport", + "SYN, SEQ: 11.000.000, ACK: 14.000.001" + ], + [ + "21", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "49970", + "6346", + "TCP", + "Transport", + "SEQ: 14.000.001, ACK: 11.000.001" + ], + [ + "22", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "49970", + "6346", + "TCP", + "Transport", + "SEQ: 14.000.001" + ], + [ + "22", + null, + null, + "GNT", + "Anwendung", + "258087658//0x00//1//7//0//10.0.0.2" + ], + [ + "23", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "23", + "6346", + "49970", + "TCP", + "Transport", + "SEQ: 11.000.001, ACK: 14.000.035" + ], + [ + "24", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "24", + "6346", + "49970", + "TCP", + "Transport", + "SEQ: 11.000.001" + ], + [ + "24", + null, + null, + "GNT", + "Anwendung", + "258087658//0x01//0//8//109//192.168.0.30//6346//0//0" + ], + [ + "25", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "25", + "49970", + "6346", + "TCP", + "Transport", + "SEQ: 14.000.035, ACK: 11.000.053" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "3", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "53045", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "6346", + "53045", + "TCP", + "Transport", + "SYN, SEQ: 3.000.000, ACK: 6.000.001" + ], + [ + "5", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "53045", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.001, ACK: 3.000.001" + ], + [ + "6", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "53045", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "6", + null, + null, + "GNT", + "Anwendung", + "790976280//0x00//0//8//0//192.168.0.30" + ], + [ + "7", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "6346", + "53045", + "TCP", + "Transport", + "SEQ: 3.000.001, ACK: 6.000.039" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "6346", + "53045", + "TCP", + "Transport", + "SEQ: 3.000.001" + ], + [ + "8", + null, + null, + "GNT", + "Anwendung", + "790976280//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "53045", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.039, ACK: 3.000.053" + ], + [ + "10", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "10", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "11", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "11", + "192.168.0.31", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "12", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "63194", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 8.000.000" + ], + [ + "13", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "6346", + "63194", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000, ACK: 8.000.001" + ], + [ + "14", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "63194", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.001, ACK: 7.000.001" + ], + [ + "15", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "63194", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.001" + ], + [ + "15", + null, + null, + "GNT", + "Anwendung", + "1487026512//0x00//0//8//0//192.168.0.20" + ], + [ + "16", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "6346", + "63194", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 8.000.040" + ], + [ + "17", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "6346", + "63194", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "17", + null, + null, + "GNT", + "Anwendung", + "1487026512//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "18", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "63194", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.040, ACK: 7.000.054" + ], + [ + "19", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "56904", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 10.000.000" + ], + [ + "20", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "20", + "6346", + "56904", + "TCP", + "Transport", + "SYN, SEQ: 2.000.000, ACK: 10.000.001" + ], + [ + "21", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "56904", + "6346", + "TCP", + "Transport", + "SEQ: 10.000.001, ACK: 2.000.001" + ], + [ + "22", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "56904", + "6346", + "TCP", + "Transport", + "SEQ: 10.000.001" + ], + [ + "22", + null, + null, + "GNT", + "Anwendung", + "1487026512//0x00//1//7//0//192.168.0.20" + ], + [ + "23", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "23", + "6346", + "56904", + "TCP", + "Transport", + "SEQ: 2.000.001, ACK: 10.000.040" + ], + [ + "24", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "24", + "6346", + "56904", + "TCP", + "Transport", + "SEQ: 2.000.001" + ], + [ + "24", + null, + null, + "GNT", + "Anwendung", + "1487026512//0x01//0//8//109//192.168.0.30//6346//0//0" + ], + [ + "25", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "25", + "56904", + "6346", + "TCP", + "Transport", + "SEQ: 10.000.040, ACK: 2.000.054" + ], + [ + "26", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "6346", + "63194", + "TCP", + "Transport", + "SEQ: 7.000.054" + ], + [ + "26", + null, + null, + "GNT", + "Anwendung", + "1487026512//0x01//1//7//109//192.168.0.30//6346//0//0" + ], + [ + "27", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "63194", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.040, ACK: 7.000.107" + ], + [ + "28", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "28", + "192.168.0.1", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "29", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x806" + ], + [ + "29", + "192.168.0.31", + "192.168.0.1", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:51|192.168.0.1]" + ], + [ + "30", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "30", + "64281", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 12.000.000" + ], + [ + "31", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "31", + "6346", + "64281", + "TCP", + "Transport", + "SYN, SEQ: 9.000.000, ACK: 12.000.001" + ], + [ + "32", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "32", + "64281", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.001, ACK: 9.000.001" + ], + [ + "33", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "33", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "33", + "64281", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.001" + ], + [ + "33", + null, + null, + "GNT", + "Anwendung", + "258087658//0x00//0//8//0//10.0.0.2" + ], + [ + "34", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "34", + "6346", + "64281", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 12.000.035" + ], + [ + "35", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "35", + "6346", + "64281", + "TCP", + "Transport", + "SEQ: 9.000.001" + ], + [ + "35", + null, + null, + "GNT", + "Anwendung", + "258087658//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "36", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "36", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "36", + "64281", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.035, ACK: 9.000.053" + ], + [ + "37", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "49970", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 14.000.000" + ], + [ + "38", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "38", + "58180", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 15.000.000" + ], + [ + "39", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "39", + "6346", + "49970", + "TCP", + "Transport", + "SYN, SEQ: 11.000.000, ACK: 14.000.001" + ], + [ + "40", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "40", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "40", + "49970", + "6346", + "TCP", + "Transport", + "SEQ: 14.000.001, ACK: 11.000.001" + ], + [ + "41", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "41", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "41", + "6346", + "58180", + "TCP", + "Transport", + "SYN, SEQ: 1.000.000, ACK: 15.000.001" + ], + [ + "42", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "42", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "42", + "58180", + "6346", + "TCP", + "Transport", + "SEQ: 15.000.001, ACK: 1.000.001" + ], + [ + "43", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "43", + "49970", + "6346", + "TCP", + "Transport", + "SEQ: 14.000.001" + ], + [ + "43", + null, + null, + "GNT", + "Anwendung", + "258087658//0x00//1//7//0//10.0.0.2" + ], + [ + "44", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "44", + "58180", + "6346", + "TCP", + "Transport", + "SEQ: 15.000.001" + ], + [ + "44", + null, + null, + "GNT", + "Anwendung", + "258087658//0x00//1//7//0//10.0.0.2" + ], + [ + "45", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "45", + "6346", + "49970", + "TCP", + "Transport", + "SEQ: 11.000.001, ACK: 14.000.035" + ], + [ + "46", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "46", + "6346", + "58180", + "TCP", + "Transport", + "SEQ: 1.000.001, ACK: 15.000.035" + ], + [ + "47", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "47", + "6346", + "49970", + "TCP", + "Transport", + "SEQ: 11.000.001" + ], + [ + "47", + null, + null, + "GNT", + "Anwendung", + "258087658//0x01//0//8//109//192.168.0.30//6346//0//0" + ], + [ + "48", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "48", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "48", + "49970", + "6346", + "TCP", + "Transport", + "SEQ: 14.000.035, ACK: 11.000.053" + ], + [ + "49", + "02:00:00:00:04:11", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "49", + "192.168.0.20", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "49", + "6346", + "58180", + "TCP", + "Transport", + "SEQ: 1.000.001" + ], + [ + "49", + null, + null, + "GNT", + "Anwendung", + "258087658//0x01//0//8//109//192.168.0.20//6346//0//0" + ], + [ + "50", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "50", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "50", + "6346", + "64281", + "TCP", + "Transport", + "SEQ: 9.000.053" + ], + [ + "50", + null, + null, + "GNT", + "Anwendung", + "258087658//0x01//1//7//109//192.168.0.30//6346//0//0" + ], + [ + "51", + "02:00:00:00:04:14", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "51", + "192.168.0.31", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "51", + "58180", + "6346", + "TCP", + "Transport", + "SEQ: 15.000.035, ACK: 1.000.053" + ], + [ + "52", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "52", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "52", + "64281", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.035, ACK: 9.000.105" + ], + [ + "53", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "53", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "53", + "6346", + "64281", + "TCP", + "Transport", + "SEQ: 9.000.105" + ], + [ + "53", + null, + null, + "GNT", + "Anwendung", + "258087658//0x01//1//7//109//192.168.0.20//6346//0//0" + ], + [ + "54", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "54", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "54", + "64281", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.035, ACK: 9.000.157" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.20", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "3", + "02:00:00:00:04:51", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.1", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:51|192.168.0.1, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.31", + "192.168.0.1", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:51|192.168.0.1]" + ], + [ + "5", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "5", + "64281", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 12.000.000" + ], + [ + "6", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "6346", + "64281", + "TCP", + "Transport", + "SYN, SEQ: 9.000.000, ACK: 12.000.001" + ], + [ + "7", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "7", + "64281", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.001, ACK: 9.000.001" + ], + [ + "8", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "8", + "64281", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.001" + ], + [ + "8", + null, + null, + "GNT", + "Anwendung", + "258087658//0x00//0//8//0//10.0.0.2" + ], + [ + "9", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "6346", + "64281", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 12.000.035" + ], + [ + "10", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "6346", + "64281", + "TCP", + "Transport", + "SEQ: 9.000.001" + ], + [ + "10", + null, + null, + "GNT", + "Anwendung", + "258087658//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "11", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "11", + "64281", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.035, ACK: 9.000.053" + ], + [ + "12", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "6346", + "64281", + "TCP", + "Transport", + "SEQ: 9.000.053" + ], + [ + "12", + null, + null, + "GNT", + "Anwendung", + "258087658//0x01//1//7//109//192.168.0.30//6346//0//0" + ], + [ + "13", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "13", + "64281", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.035, ACK: 9.000.105" + ], + [ + "14", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "6346", + "64281", + "TCP", + "Transport", + "SEQ: 9.000.105" + ], + [ + "14", + null, + null, + "GNT", + "Anwendung", + "258087658//0x01//1//7//109//192.168.0.20//6346//0//0" + ], + [ + "15", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "15", + "64281", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.035, ACK: 9.000.157" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [ + [ + "1", + "02:00:00:00:04:16", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "10.0.0.2", + "10.0.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:04:16|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" + ], + [ + "2", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "10.0.0.1", + "10.0.0.2", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:52 [op=REPLY, sender=02:00:00:00:04:52|10.0.0.1, target=02:00:00:00:04:16|10.0.0.2]" + ], + [ + "3", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "64281", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 12.000.000" + ], + [ + "4", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "4", + "6346", + "64281", + "TCP", + "Transport", + "SYN, SEQ: 9.000.000, ACK: 12.000.001" + ], + [ + "5", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "64281", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.001, ACK: 9.000.001" + ], + [ + "6", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "64281", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.001" + ], + [ + "6", + null, + null, + "GNT", + "Anwendung", + "258087658//0x00//0//8//0//10.0.0.2" + ], + [ + "7", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "7", + "6346", + "64281", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 12.000.035" + ], + [ + "8", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "8", + "6346", + "64281", + "TCP", + "Transport", + "SEQ: 9.000.001" + ], + [ + "8", + null, + null, + "GNT", + "Anwendung", + "258087658//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "64281", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.035, ACK: 9.000.053" + ], + [ + "10", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "10", + "6346", + "64281", + "TCP", + "Transport", + "SEQ: 9.000.053" + ], + [ + "10", + null, + null, + "GNT", + "Anwendung", + "258087658//0x01//1//7//109//192.168.0.30//6346//0//0" + ], + [ + "11", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "64281", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.035, ACK: 9.000.105" + ], + [ + "12", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "12", + "6346", + "64281", + "TCP", + "Transport", + "SEQ: 9.000.105" + ], + [ + "12", + null, + null, + "GNT", + "Anwendung", + "258087658//0x01//1//7//109//192.168.0.20//6346//0//0" + ], + [ + "13", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "64281", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.035, ACK: 9.000.157" + ] + ], + "00000000-0000-0000-0000-000000000406": [ + [ + "1", + "02:00:00:00:04:16", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "10.0.0.2", + "10.0.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:04:16|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" + ], + [ + "2", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "10.0.0.1", + "10.0.0.2", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:52 [op=REPLY, sender=02:00:00:00:04:52|10.0.0.1, target=02:00:00:00:04:16|10.0.0.2]" + ], + [ + "3", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "64281", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 12.000.000" + ], + [ + "4", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "4", + "6346", + "64281", + "TCP", + "Transport", + "SYN, SEQ: 9.000.000, ACK: 12.000.001" + ], + [ + "5", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "64281", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.001, ACK: 9.000.001" + ], + [ + "6", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "64281", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.001" + ], + [ + "6", + null, + null, + "GNT", + "Anwendung", + "258087658//0x00//0//8//0//10.0.0.2" + ], + [ + "7", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "7", + "6346", + "64281", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 12.000.035" + ], + [ + "8", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "8", + "6346", + "64281", + "TCP", + "Transport", + "SEQ: 9.000.001" + ], + [ + "8", + null, + null, + "GNT", + "Anwendung", + "258087658//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "64281", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.035, ACK: 9.000.053" + ], + [ + "10", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "10", + "6346", + "64281", + "TCP", + "Transport", + "SEQ: 9.000.053" + ], + [ + "10", + null, + null, + "GNT", + "Anwendung", + "258087658//0x01//1//7//109//192.168.0.30//6346//0//0" + ], + [ + "11", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "64281", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.035, ACK: 9.000.105" + ], + [ + "12", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "12", + "6346", + "64281", + "TCP", + "Transport", + "SEQ: 9.000.105" + ], + [ + "12", + null, + null, + "GNT", + "Anwendung", + "258087658//0x01//1//7//109//192.168.0.20//6346//0//0" + ], + [ + "13", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "64281", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.035, ACK: 9.000.157" + ] + ] + }, + "acts": [ + [ + 500, + "00000000-0000-0000-0000-000000000403", + "join 192.168.0.31" + ], + [ + 3000, + "00000000-0000-0000-0000-000000000401", + "join 192.168.0.31" + ], + [ + 5500, + "00000000-0000-0000-0000-000000000406", + "join 192.168.0.31" + ] + ], + "events": [ + [ + 222, + "00000000-0000-0000-0000-000000000401", + "peers", + "" + ], + [ + 224, + "00000000-0000-0000-0000-000000000403", + "peers", + "" + ], + [ + 225, + "00000000-0000-0000-0000-000000000404", + "peers", + "" + ], + [ + 228, + "00000000-0000-0000-0000-000000000406", + "peers", + "" + ], + [ + 500, + "00000000-0000-0000-0000-000000000403", + "call", + "join 192.168.0.31" + ], + [ + 1156, + "00000000-0000-0000-0000-000000000404", + "peers", + "192.168.0.30" + ], + [ + 1323, + "00000000-0000-0000-0000-000000000403", + "peers", + "192.168.0.31" + ], + [ + 3000, + "00000000-0000-0000-0000-000000000401", + "call", + "join 192.168.0.31" + ], + [ + 3631, + "00000000-0000-0000-0000-000000000404", + "peers", + "192.168.0.30,192.168.0.20" + ], + [ + 3786, + "00000000-0000-0000-0000-000000000401", + "peers", + "192.168.0.31" + ], + [ + 5500, + "00000000-0000-0000-0000-000000000406", + "call", + "join 192.168.0.31" + ], + [ + 6611, + "00000000-0000-0000-0000-000000000406", + "peers", + "192.168.0.31" + ], + [ + 7666, + "00000000-0000-0000-0000-000000000406", + "peers", + "192.168.0.31,192.168.0.30" + ], + [ + 7999, + "00000000-0000-0000-0000-000000000406", + "peers", + "192.168.0.31,192.168.0.30,192.168.0.20" + ] + ], + "programs": { + "00000000-0000-0000-0000-000000000401": { + "peers": [ + "192.168.0.31" + ], + "results": [] + }, + "00000000-0000-0000-0000-000000000403": { + "peers": [ + "192.168.0.31" + ], + "results": [] + }, + "00000000-0000-0000-0000-000000000404": { + "peers": [ + "192.168.0.30", + "192.168.0.20" + ], + "results": [] + }, + "00000000-0000-0000-0000-000000000406": { + "peers": [ + "192.168.0.31", + "192.168.0.30", + "192.168.0.20" + ], + "results": [] + } + } +} diff --git a/packages/core/test/scenarios/gnutella-java-pair.java.json b/packages/core/test/scenarios/gnutella-java-pair.java.json new file mode 100644 index 0000000..4031ffb --- /dev/null +++ b/packages/core/test/scenarios/gnutella-java-pair.java.json @@ -0,0 +1,1329 @@ +{ + "frames": { + "00000000-0000-0000-0000-000000000401": [ + { + "time": 640, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + } + ], + "00000000-0000-0000-0000-000000000402": [ + { + "time": 640, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + } + ], + "00000000-0000-0000-0000-000000000403": [ + { + "time": 519, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + }, + { + "time": 754, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.30" + }, + { + "time": 756, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56888, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 6000000, + "acknowledgement": 0 + }, + { + "time": 983, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56888, + "payload": null, + "tcpFlags": "SA", + "sequence": 3000000, + "acknowledgement": 6000001 + }, + { + "time": 984, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56888, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 6000001, + "acknowledgement": 3000001 + }, + { + "time": 1039, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56888, + "destinationPort": 6346, + "payload": "1784268837//0x00//0//8//0//192.168.0.30", + "tcpFlags": "P", + "sequence": 6000001, + "acknowledgement": 0 + }, + { + "time": 1262, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56888, + "payload": null, + "tcpFlags": "A", + "sequence": 3000001, + "acknowledgement": 6000040 + }, + { + "time": 1318, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56888, + "payload": "1784268837//0x01//0//8//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 3000001, + "acknowledgement": 0 + }, + { + "time": 1318, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56888, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 6000040, + "acknowledgement": 3000054 + } + ], + "00000000-0000-0000-0000-000000000404": [ + { + "time": 640, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + }, + { + "time": 642, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.30" + }, + { + "time": 870, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56888, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 6000000, + "acknowledgement": 0 + }, + { + "time": 872, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56888, + "payload": null, + "tcpFlags": "SA", + "sequence": 3000000, + "acknowledgement": 6000001 + }, + { + "time": 1095, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56888, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 6000001, + "acknowledgement": 3000001 + }, + { + "time": 1151, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56888, + "destinationPort": 6346, + "payload": "1784268837//0x00//0//8//0//192.168.0.30", + "tcpFlags": "P", + "sequence": 6000001, + "acknowledgement": 0 + }, + { + "time": 1151, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56888, + "payload": null, + "tcpFlags": "A", + "sequence": 3000001, + "acknowledgement": 6000040 + }, + { + "time": 1207, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56888, + "payload": "1784268837//0x01//0//8//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 3000001, + "acknowledgement": 0 + }, + { + "time": 1430, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56888, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 6000040, + "acknowledgement": 3000054 + } + ], + "00000000-0000-0000-0000-000000000405": [ + { + "time": 640, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + } + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "rows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "3", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "192.168.0.30:56888", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "192.168.0.31:6346", + "192.168.0.30:56888", + "TCP", + "Transport", + "SYN, SEQ: 3.000.000, ACK: 6.000.001" + ], + [ + "5", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "192.168.0.30:56888", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 6.000.001, ACK: 3.000.001" + ], + [ + "6", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "192.168.0.30:56888", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "6", + "192.168.0.30:56888", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "1784268837//0x00//0//8//0//192.168.0.30" + ], + [ + "7", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "192.168.0.31:6346", + "192.168.0.30:56888", + "TCP", + "Transport", + "SEQ: 3.000.001, ACK: 6.000.040" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "192.168.0.31:6346", + "192.168.0.30:56888", + "TCP", + "Transport", + "SEQ: 3.000.001" + ], + [ + "8", + "192.168.0.31:6346", + "192.168.0.30:56888", + "GNT", + "Anwendung", + "1784268837//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "192.168.0.30:56888", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 6.000.040, ACK: 3.000.054" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "3", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "192.168.0.30:56888", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "192.168.0.31:6346", + "192.168.0.30:56888", + "TCP", + "Transport", + "SYN, SEQ: 3.000.000, ACK: 6.000.001" + ], + [ + "5", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "192.168.0.30:56888", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 6.000.001, ACK: 3.000.001" + ], + [ + "6", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "192.168.0.30:56888", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "6", + "192.168.0.30:56888", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "1784268837//0x00//0//8//0//192.168.0.30" + ], + [ + "7", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "192.168.0.31:6346", + "192.168.0.30:56888", + "TCP", + "Transport", + "SEQ: 3.000.001, ACK: 6.000.040" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "192.168.0.31:6346", + "192.168.0.30:56888", + "TCP", + "Transport", + "SEQ: 3.000.001" + ], + [ + "8", + "192.168.0.31:6346", + "192.168.0.30:56888", + "GNT", + "Anwendung", + "1784268837//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "192.168.0.30:56888", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 6.000.040, ACK: 3.000.054" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "layeredRows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "3", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "56888", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "6346", + "56888", + "TCP", + "Transport", + "SYN, SEQ: 3.000.000, ACK: 6.000.001" + ], + [ + "5", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "56888", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.001, ACK: 3.000.001" + ], + [ + "6", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "56888", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "6", + null, + null, + "GNT", + "Anwendung", + "1784268837//0x00//0//8//0//192.168.0.30" + ], + [ + "7", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "6346", + "56888", + "TCP", + "Transport", + "SEQ: 3.000.001, ACK: 6.000.040" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "6346", + "56888", + "TCP", + "Transport", + "SEQ: 3.000.001" + ], + [ + "8", + null, + null, + "GNT", + "Anwendung", + "1784268837//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "56888", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.040, ACK: 3.000.054" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "3", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "56888", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "6346", + "56888", + "TCP", + "Transport", + "SYN, SEQ: 3.000.000, ACK: 6.000.001" + ], + [ + "5", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "56888", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.001, ACK: 3.000.001" + ], + [ + "6", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "56888", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "6", + null, + null, + "GNT", + "Anwendung", + "1784268837//0x00//0//8//0//192.168.0.30" + ], + [ + "7", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "6346", + "56888", + "TCP", + "Transport", + "SEQ: 3.000.001, ACK: 6.000.040" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "6346", + "56888", + "TCP", + "Transport", + "SEQ: 3.000.001" + ], + [ + "8", + null, + null, + "GNT", + "Anwendung", + "1784268837//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "56888", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.040, ACK: 3.000.054" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "acts": [ + [ + 500, + "00000000-0000-0000-0000-000000000403", + "join 192.168.0.31" + ] + ], + "events": [ + [ + 209, + "00000000-0000-0000-0000-000000000401", + "peers", + "" + ], + [ + 212, + "00000000-0000-0000-0000-000000000403", + "peers", + "" + ], + [ + 213, + "00000000-0000-0000-0000-000000000404", + "peers", + "" + ], + [ + 216, + "00000000-0000-0000-0000-000000000406", + "peers", + "" + ], + [ + 500, + "00000000-0000-0000-0000-000000000403", + "call", + "join 192.168.0.31" + ], + [ + 1151, + "00000000-0000-0000-0000-000000000404", + "peers", + "192.168.0.30" + ], + [ + 1319, + "00000000-0000-0000-0000-000000000403", + "peers", + "192.168.0.31" + ] + ], + "programs": { + "00000000-0000-0000-0000-000000000401": { + "peers": [], + "results": [] + }, + "00000000-0000-0000-0000-000000000403": { + "peers": [ + "192.168.0.31" + ], + "results": [] + }, + "00000000-0000-0000-0000-000000000404": { + "peers": [ + "192.168.0.30" + ], + "results": [] + }, + "00000000-0000-0000-0000-000000000406": { + "peers": [], + "results": [] + } + } +} diff --git a/packages/core/test/scenarios/gnutella-java-reset.java.json b/packages/core/test/scenarios/gnutella-java-reset.java.json new file mode 100644 index 0000000..28fa72b --- /dev/null +++ b/packages/core/test/scenarios/gnutella-java-reset.java.json @@ -0,0 +1,2295 @@ +{ + "frames": { + "00000000-0000-0000-0000-000000000401": [ + { + "time": 661, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + } + ], + "00000000-0000-0000-0000-000000000402": [ + { + "time": 652, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + } + ], + "00000000-0000-0000-0000-000000000403": [ + { + "time": 525, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + }, + { + "time": 769, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.30" + }, + { + "time": 773, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 52150, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 6000000, + "acknowledgement": 0 + }, + { + "time": 1001, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 52150, + "payload": null, + "tcpFlags": "SA", + "sequence": 3000000, + "acknowledgement": 6000001 + }, + { + "time": 1002, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 52150, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 6000001, + "acknowledgement": 3000001 + }, + { + "time": 1058, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 52150, + "destinationPort": 6346, + "payload": "125023423//0x00//0//8//0//192.168.0.30", + "tcpFlags": "P", + "sequence": 6000001, + "acknowledgement": 0 + }, + { + "time": 1284, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 52150, + "payload": null, + "tcpFlags": "A", + "sequence": 3000001, + "acknowledgement": 6000039 + }, + { + "time": 1341, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 52150, + "payload": "125023423//0x01//0//8//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 3000001, + "acknowledgement": 0 + }, + { + "time": 1341, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 52150, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 6000039, + "acknowledgement": 3000053 + }, + { + "time": 3501, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 51261, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 8000000, + "acknowledgement": 0 + }, + { + "time": 3729, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 51261, + "payload": null, + "tcpFlags": "SA", + "sequence": 7000000, + "acknowledgement": 8000001 + }, + { + "time": 3729, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 51261, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 8000001, + "acknowledgement": 7000001 + }, + { + "time": 3801, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 51261, + "destinationPort": 6346, + "payload": "1762145005//0x00//0//8//0//192.168.0.30", + "tcpFlags": "P", + "sequence": 8000001, + "acknowledgement": 0 + }, + { + "time": 4024, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 51261, + "payload": null, + "tcpFlags": "A", + "sequence": 7000001, + "acknowledgement": 8000040 + }, + { + "time": 4080, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 51261, + "payload": "1762145005//0x01//0//8//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 7000001, + "acknowledgement": 0 + }, + { + "time": 4080, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 51261, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 8000040, + "acknowledgement": 7000054 + } + ], + "00000000-0000-0000-0000-000000000404": [ + { + "time": 652, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + }, + { + "time": 655, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.30" + }, + { + "time": 887, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 52150, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 6000000, + "acknowledgement": 0 + }, + { + "time": 889, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 52150, + "payload": null, + "tcpFlags": "SA", + "sequence": 3000000, + "acknowledgement": 6000001 + }, + { + "time": 1115, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 52150, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 6000001, + "acknowledgement": 3000001 + }, + { + "time": 1171, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 52150, + "destinationPort": 6346, + "payload": "125023423//0x00//0//8//0//192.168.0.30", + "tcpFlags": "P", + "sequence": 6000001, + "acknowledgement": 0 + }, + { + "time": 1171, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 52150, + "payload": null, + "tcpFlags": "A", + "sequence": 3000001, + "acknowledgement": 6000039 + }, + { + "time": 1227, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 52150, + "payload": "125023423//0x01//0//8//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 3000001, + "acknowledgement": 0 + }, + { + "time": 1453, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 52150, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 6000039, + "acknowledgement": 3000053 + }, + { + "time": 3617, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 51261, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 8000000, + "acknowledgement": 0 + }, + { + "time": 3617, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 51261, + "payload": null, + "tcpFlags": "SA", + "sequence": 7000000, + "acknowledgement": 8000001 + }, + { + "time": 3840, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 51261, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 8000001, + "acknowledgement": 7000001 + }, + { + "time": 3912, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 51261, + "destinationPort": 6346, + "payload": "1762145005//0x00//0//8//0//192.168.0.30", + "tcpFlags": "P", + "sequence": 8000001, + "acknowledgement": 0 + }, + { + "time": 3913, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 51261, + "payload": null, + "tcpFlags": "A", + "sequence": 7000001, + "acknowledgement": 8000040 + }, + { + "time": 3968, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 51261, + "payload": "1762145005//0x01//0//8//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 7000001, + "acknowledgement": 0 + }, + { + "time": 4192, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 51261, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 8000040, + "acknowledgement": 7000054 + } + ], + "00000000-0000-0000-0000-000000000405": [ + { + "time": 651, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + } + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "rows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "3", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "192.168.0.30:52150", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "192.168.0.31:6346", + "192.168.0.30:52150", + "TCP", + "Transport", + "SYN, SEQ: 3.000.000, ACK: 6.000.001" + ], + [ + "5", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "192.168.0.30:52150", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 6.000.001, ACK: 3.000.001" + ], + [ + "6", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "192.168.0.30:52150", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "6", + "192.168.0.30:52150", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "125023423//0x00//0//8//0//192.168.0.30" + ], + [ + "7", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "192.168.0.31:6346", + "192.168.0.30:52150", + "TCP", + "Transport", + "SEQ: 3.000.001, ACK: 6.000.039" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "192.168.0.31:6346", + "192.168.0.30:52150", + "TCP", + "Transport", + "SEQ: 3.000.001" + ], + [ + "8", + "192.168.0.31:6346", + "192.168.0.30:52150", + "GNT", + "Anwendung", + "125023423//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "192.168.0.30:52150", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 6.000.039, ACK: 3.000.053" + ], + [ + "10", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "192.168.0.30:51261", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 8.000.000" + ], + [ + "11", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "192.168.0.31:6346", + "192.168.0.30:51261", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000, ACK: 8.000.001" + ], + [ + "12", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "192.168.0.30:51261", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 8.000.001, ACK: 7.000.001" + ], + [ + "13", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "192.168.0.30:51261", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 8.000.001" + ], + [ + "13", + "192.168.0.30:51261", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "1762145005//0x00//0//8//0//192.168.0.30" + ], + [ + "14", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "192.168.0.31:6346", + "192.168.0.30:51261", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 8.000.040" + ], + [ + "15", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "192.168.0.31:6346", + "192.168.0.30:51261", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "15", + "192.168.0.31:6346", + "192.168.0.30:51261", + "GNT", + "Anwendung", + "1762145005//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "16", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "192.168.0.30:51261", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 8.000.040, ACK: 7.000.054" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "3", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "192.168.0.30:52150", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "192.168.0.31:6346", + "192.168.0.30:52150", + "TCP", + "Transport", + "SYN, SEQ: 3.000.000, ACK: 6.000.001" + ], + [ + "5", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "192.168.0.30:52150", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 6.000.001, ACK: 3.000.001" + ], + [ + "6", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "192.168.0.30:52150", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "6", + "192.168.0.30:52150", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "125023423//0x00//0//8//0//192.168.0.30" + ], + [ + "7", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "192.168.0.31:6346", + "192.168.0.30:52150", + "TCP", + "Transport", + "SEQ: 3.000.001, ACK: 6.000.039" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "192.168.0.31:6346", + "192.168.0.30:52150", + "TCP", + "Transport", + "SEQ: 3.000.001" + ], + [ + "8", + "192.168.0.31:6346", + "192.168.0.30:52150", + "GNT", + "Anwendung", + "125023423//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "192.168.0.30:52150", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 6.000.039, ACK: 3.000.053" + ], + [ + "10", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "192.168.0.30:51261", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 8.000.000" + ], + [ + "11", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "192.168.0.31:6346", + "192.168.0.30:51261", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000, ACK: 8.000.001" + ], + [ + "12", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "192.168.0.30:51261", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 8.000.001, ACK: 7.000.001" + ], + [ + "13", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "192.168.0.30:51261", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 8.000.001" + ], + [ + "13", + "192.168.0.30:51261", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "1762145005//0x00//0//8//0//192.168.0.30" + ], + [ + "14", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "192.168.0.31:6346", + "192.168.0.30:51261", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 8.000.040" + ], + [ + "15", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "192.168.0.31:6346", + "192.168.0.30:51261", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "15", + "192.168.0.31:6346", + "192.168.0.30:51261", + "GNT", + "Anwendung", + "1762145005//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "16", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "192.168.0.30:51261", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 8.000.040, ACK: 7.000.054" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "layeredRows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "3", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "52150", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "6346", + "52150", + "TCP", + "Transport", + "SYN, SEQ: 3.000.000, ACK: 6.000.001" + ], + [ + "5", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "52150", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.001, ACK: 3.000.001" + ], + [ + "6", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "52150", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "6", + null, + null, + "GNT", + "Anwendung", + "125023423//0x00//0//8//0//192.168.0.30" + ], + [ + "7", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "6346", + "52150", + "TCP", + "Transport", + "SEQ: 3.000.001, ACK: 6.000.039" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "6346", + "52150", + "TCP", + "Transport", + "SEQ: 3.000.001" + ], + [ + "8", + null, + null, + "GNT", + "Anwendung", + "125023423//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "52150", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.039, ACK: 3.000.053" + ], + [ + "10", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "51261", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 8.000.000" + ], + [ + "11", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "6346", + "51261", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000, ACK: 8.000.001" + ], + [ + "12", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "51261", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.001, ACK: 7.000.001" + ], + [ + "13", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "51261", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.001" + ], + [ + "13", + null, + null, + "GNT", + "Anwendung", + "1762145005//0x00//0//8//0//192.168.0.30" + ], + [ + "14", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "6346", + "51261", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 8.000.040" + ], + [ + "15", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "6346", + "51261", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "15", + null, + null, + "GNT", + "Anwendung", + "1762145005//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "16", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "51261", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.040, ACK: 7.000.054" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "2", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "3", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "52150", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "6346", + "52150", + "TCP", + "Transport", + "SYN, SEQ: 3.000.000, ACK: 6.000.001" + ], + [ + "5", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "52150", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.001, ACK: 3.000.001" + ], + [ + "6", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "52150", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "6", + null, + null, + "GNT", + "Anwendung", + "125023423//0x00//0//8//0//192.168.0.30" + ], + [ + "7", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "6346", + "52150", + "TCP", + "Transport", + "SEQ: 3.000.001, ACK: 6.000.039" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "6346", + "52150", + "TCP", + "Transport", + "SEQ: 3.000.001" + ], + [ + "8", + null, + null, + "GNT", + "Anwendung", + "125023423//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "52150", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.039, ACK: 3.000.053" + ], + [ + "10", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "51261", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 8.000.000" + ], + [ + "11", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "6346", + "51261", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000, ACK: 8.000.001" + ], + [ + "12", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "51261", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.001, ACK: 7.000.001" + ], + [ + "13", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "51261", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.001" + ], + [ + "13", + null, + null, + "GNT", + "Anwendung", + "1762145005//0x00//0//8//0//192.168.0.30" + ], + [ + "14", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "6346", + "51261", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 8.000.040" + ], + [ + "15", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "6346", + "51261", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "15", + null, + null, + "GNT", + "Anwendung", + "1762145005//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "16", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "51261", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.040, ACK: 7.000.054" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [], + "00000000-0000-0000-0000-000000000406": [] + }, + "acts": [ + [ + 500, + "00000000-0000-0000-0000-000000000403", + "join 192.168.0.31" + ], + [ + 3000, + "00000000-0000-0000-0000-000000000403", + "reset" + ], + [ + 3500, + "00000000-0000-0000-0000-000000000403", + "join 192.168.0.31" + ] + ], + "events": [ + [ + 230, + "00000000-0000-0000-0000-000000000401", + "peers", + "" + ], + [ + 233, + "00000000-0000-0000-0000-000000000403", + "peers", + "" + ], + [ + 234, + "00000000-0000-0000-0000-000000000404", + "peers", + "" + ], + [ + 237, + "00000000-0000-0000-0000-000000000406", + "peers", + "" + ], + [ + 500, + "00000000-0000-0000-0000-000000000403", + "call", + "join 192.168.0.31" + ], + [ + 1172, + "00000000-0000-0000-0000-000000000404", + "peers", + "192.168.0.30" + ], + [ + 1341, + "00000000-0000-0000-0000-000000000403", + "peers", + "192.168.0.31" + ], + [ + 3001, + "00000000-0000-0000-0000-000000000403", + "call", + "reset" + ], + [ + 3001, + "00000000-0000-0000-0000-000000000403", + "peers", + "" + ], + [ + 3500, + "00000000-0000-0000-0000-000000000403", + "call", + "join 192.168.0.31" + ], + [ + 4080, + "00000000-0000-0000-0000-000000000403", + "peers", + "192.168.0.31" + ] + ], + "programs": { + "00000000-0000-0000-0000-000000000401": { + "peers": [], + "results": [] + }, + "00000000-0000-0000-0000-000000000403": { + "peers": [ + "192.168.0.31" + ], + "results": [] + }, + "00000000-0000-0000-0000-000000000404": { + "peers": [ + "192.168.0.30" + ], + "results": [] + }, + "00000000-0000-0000-0000-000000000406": { + "peers": [], + "results": [] + } + } +} diff --git a/packages/core/test/scenarios/gnutella-java-twoPaths.java.json b/packages/core/test/scenarios/gnutella-java-twoPaths.java.json new file mode 100644 index 0000000..7a5b016 --- /dev/null +++ b/packages/core/test/scenarios/gnutella-java-twoPaths.java.json @@ -0,0 +1,19616 @@ +{ + "frames": { + "00000000-0000-0000-0000-000000000401": [ + { + "time": 642, + "source": "02:00:00:00:04:14", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.1" + }, + { + "time": 3112, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + }, + { + "time": 5612, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.1" + }, + { + "time": 8000, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + }, + { + "time": 8222, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.20" + }, + { + "time": 8222, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56465, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 16000000, + "acknowledgement": 0 + }, + { + "time": 8443, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56465, + "payload": null, + "tcpFlags": "SA", + "sequence": 2000000, + "acknowledgement": 16000001 + }, + { + "time": 8444, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56465, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 16000001, + "acknowledgement": 2000001 + }, + { + "time": 8501, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56465, + "destinationPort": 6346, + "payload": "829504624//0x00//0//8//0//192.168.0.20", + "tcpFlags": "P", + "sequence": 16000001, + "acknowledgement": 0 + }, + { + "time": 8722, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56465, + "payload": null, + "tcpFlags": "A", + "sequence": 2000001, + "acknowledgement": 16000039 + }, + { + "time": 8777, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56465, + "payload": "829504624//0x01//0//8//109//192.168.0.30//6346//0//0", + "tcpFlags": "P", + "sequence": 2000001, + "acknowledgement": 0 + }, + { + "time": 8777, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56465, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 16000039, + "acknowledgement": 2000053 + }, + { + "time": 9632, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56465, + "payload": "829504624//0x01//1//7//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 2000053, + "acknowledgement": 0 + }, + { + "time": 9632, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56465, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 16000039, + "acknowledgement": 2000105 + }, + { + "time": 9888, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56465, + "payload": "829504624//0x01//1//7//77//10.0.0.2//6346//0//0", + "tcpFlags": "P", + "sequence": 2000105, + "acknowledgement": 0 + }, + { + "time": 9888, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56465, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 16000039, + "acknowledgement": 2000152 + } + ], + "00000000-0000-0000-0000-000000000402": [ + { + "time": 642, + "source": "02:00:00:00:04:14", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.1" + }, + { + "time": 3112, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + }, + { + "time": 5612, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.1" + }, + { + "time": 8111, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + } + ], + "00000000-0000-0000-0000-000000000403": [ + { + "time": 642, + "source": "02:00:00:00:04:14", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.1" + }, + { + "time": 3001, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + }, + { + "time": 3223, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.30" + }, + { + "time": 3223, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 61938, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 8000000, + "acknowledgement": 0 + }, + { + "time": 3446, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 61938, + "payload": null, + "tcpFlags": "SA", + "sequence": 3000000, + "acknowledgement": 8000001 + }, + { + "time": 3446, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 61938, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 8000001, + "acknowledgement": 3000001 + }, + { + "time": 3502, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 61938, + "destinationPort": 6346, + "payload": "612664560//0x00//0//8//0//192.168.0.30", + "tcpFlags": "P", + "sequence": 8000001, + "acknowledgement": 0 + }, + { + "time": 3724, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 61938, + "payload": null, + "tcpFlags": "A", + "sequence": 3000001, + "acknowledgement": 8000039 + }, + { + "time": 3780, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 61938, + "payload": "612664560//0x01//0//8//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 3000001, + "acknowledgement": 0 + }, + { + "time": 3780, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 61938, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 8000039, + "acknowledgement": 3000053 + }, + { + "time": 4847, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 61938, + "payload": "612664560//0x01//1//7//77//10.0.0.2//6346//0//0", + "tcpFlags": "P", + "sequence": 3000053, + "acknowledgement": 0 + }, + { + "time": 4848, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 61938, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 8000039, + "acknowledgement": 3000100 + }, + { + "time": 5501, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.1" + }, + { + "time": 5723, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:13", + "arp": 2, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.30" + }, + { + "time": 5723, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 62022, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 12000000, + "acknowledgement": 0 + }, + { + "time": 6056, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:13", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 62022, + "payload": null, + "tcpFlags": "SA", + "sequence": 11000000, + "acknowledgement": 12000001 + }, + { + "time": 6057, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 62022, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000001, + "acknowledgement": 11000001 + }, + { + "time": 6112, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 62022, + "destinationPort": 6346, + "payload": "219206720//0x00//0//8//0//192.168.0.30", + "tcpFlags": "P", + "sequence": 12000001, + "acknowledgement": 0 + }, + { + "time": 6445, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:13", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 62022, + "payload": null, + "tcpFlags": "A", + "sequence": 11000001, + "acknowledgement": 12000039 + }, + { + "time": 6500, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:13", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 62022, + "payload": "219206720//0x01//0//8//77//10.0.0.2//6346//0//0", + "tcpFlags": "P", + "sequence": 11000001, + "acknowledgement": 0 + }, + { + "time": 6501, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 62022, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000039, + "acknowledgement": 11000048 + }, + { + "time": 7678, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:13", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 62022, + "payload": "219206720//0x01//1//7//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 11000048, + "acknowledgement": 0 + }, + { + "time": 7678, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 62022, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000039, + "acknowledgement": 11000100 + }, + { + "time": 8111, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + }, + { + "time": 8111, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "arp": 2, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.20" + }, + { + "time": 8333, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56465, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 16000000, + "acknowledgement": 0 + }, + { + "time": 8333, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56465, + "payload": null, + "tcpFlags": "SA", + "sequence": 2000000, + "acknowledgement": 16000001 + }, + { + "time": 8554, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56465, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 16000001, + "acknowledgement": 2000001 + }, + { + "time": 8611, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56465, + "destinationPort": 6346, + "payload": "829504624//0x00//0//8//0//192.168.0.20", + "tcpFlags": "P", + "sequence": 16000001, + "acknowledgement": 0 + }, + { + "time": 8612, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56465, + "payload": null, + "tcpFlags": "A", + "sequence": 2000001, + "acknowledgement": 16000039 + }, + { + "time": 8667, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56465, + "payload": "829504624//0x01//0//8//109//192.168.0.30//6346//0//0", + "tcpFlags": "P", + "sequence": 2000001, + "acknowledgement": 0 + }, + { + "time": 8888, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56465, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 16000039, + "acknowledgement": 2000053 + }, + { + "time": 8889, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 51726, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 18000000, + "acknowledgement": 0 + }, + { + "time": 8944, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 58194, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 19000000, + "acknowledgement": 0 + }, + { + "time": 9111, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 51726, + "payload": null, + "tcpFlags": "SA", + "sequence": 15000000, + "acknowledgement": 18000001 + }, + { + "time": 9111, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 51726, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 18000001, + "acknowledgement": 15000001 + }, + { + "time": 9189, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 51726, + "destinationPort": 6346, + "payload": "829504624//0x00//1//7//0//192.168.0.20", + "tcpFlags": "P", + "sequence": 18000001, + "acknowledgement": 0 + }, + { + "time": 9277, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:13", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 58194, + "payload": null, + "tcpFlags": "SA", + "sequence": 13000000, + "acknowledgement": 19000001 + }, + { + "time": 9277, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 58194, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 19000001, + "acknowledgement": 13000001 + }, + { + "time": 9332, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 58194, + "destinationPort": 6346, + "payload": "829504624//0x00//1//7//0//192.168.0.20", + "tcpFlags": "P", + "sequence": 19000001, + "acknowledgement": 0 + }, + { + "time": 9410, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 51726, + "payload": null, + "tcpFlags": "A", + "sequence": 15000001, + "acknowledgement": 18000039 + }, + { + "time": 9466, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 51726, + "payload": "829504624//0x01//0//8//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 15000001, + "acknowledgement": 0 + }, + { + "time": 9466, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 51726, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 18000039, + "acknowledgement": 15000053 + }, + { + "time": 9521, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56465, + "payload": "829504624//0x01//1//7//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 2000053, + "acknowledgement": 0 + }, + { + "time": 9667, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:13", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 58194, + "payload": null, + "tcpFlags": "A", + "sequence": 13000001, + "acknowledgement": 19000039 + }, + { + "time": 9722, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:13", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 58194, + "payload": "829504624//0x01//0//8//77//10.0.0.2//6346//0//0", + "tcpFlags": "P", + "sequence": 13000001, + "acknowledgement": 0 + }, + { + "time": 9722, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 58194, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 19000039, + "acknowledgement": 13000048 + }, + { + "time": 9777, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56465, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 16000039, + "acknowledgement": 2000105 + }, + { + "time": 9778, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:11", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.20", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56465, + "payload": "829504624//0x01//1//7//77//10.0.0.2//6346//0//0", + "tcpFlags": "P", + "sequence": 2000105, + "acknowledgement": 0 + }, + { + "time": 9999, + "source": "02:00:00:00:04:11", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.20", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 56465, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 16000039, + "acknowledgement": 2000152 + } + ], + "00000000-0000-0000-0000-000000000404": [ + { + "time": 520, + "source": "02:00:00:00:04:14", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.1" + }, + { + "time": 755, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "arp": 2, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.31" + }, + { + "time": 757, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 63045, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 6000000, + "acknowledgement": 0 + }, + { + "time": 1207, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 63045, + "payload": null, + "tcpFlags": "SA", + "sequence": 5000000, + "acknowledgement": 6000001 + }, + { + "time": 1208, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 63045, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 6000001, + "acknowledgement": 5000001 + }, + { + "time": 1306, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 63045, + "destinationPort": 6346, + "payload": "2132446730//0x00//0//8//0//192.168.0.31", + "tcpFlags": "P", + "sequence": 6000001, + "acknowledgement": 0 + }, + { + "time": 1641, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 63045, + "payload": null, + "tcpFlags": "A", + "sequence": 5000001, + "acknowledgement": 6000040 + }, + { + "time": 1697, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 63045, + "payload": "2132446730//0x01//0//8//77//10.0.0.2//6346//0//0", + "tcpFlags": "P", + "sequence": 5000001, + "acknowledgement": 0 + }, + { + "time": 1697, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 63045, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 6000040, + "acknowledgement": 5000049 + }, + { + "time": 3112, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + }, + { + "time": 3112, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "arp": 2, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.30" + }, + { + "time": 3335, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 61938, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 8000000, + "acknowledgement": 0 + }, + { + "time": 3335, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 61938, + "payload": null, + "tcpFlags": "SA", + "sequence": 3000000, + "acknowledgement": 8000001 + }, + { + "time": 3557, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 61938, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 8000001, + "acknowledgement": 3000001 + }, + { + "time": 3613, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 61938, + "destinationPort": 6346, + "payload": "612664560//0x00//0//8//0//192.168.0.30", + "tcpFlags": "P", + "sequence": 8000001, + "acknowledgement": 0 + }, + { + "time": 3613, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 61938, + "payload": null, + "tcpFlags": "A", + "sequence": 3000001, + "acknowledgement": 8000039 + }, + { + "time": 3669, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 61938, + "payload": "612664560//0x01//0//8//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 3000001, + "acknowledgement": 0 + }, + { + "time": 3891, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 61938, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 8000039, + "acknowledgement": 3000053 + }, + { + "time": 3892, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 54369, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 10000000, + "acknowledgement": 0 + }, + { + "time": 4226, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54369, + "payload": null, + "tcpFlags": "SA", + "sequence": 7000000, + "acknowledgement": 10000001 + }, + { + "time": 4226, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 54369, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 10000001, + "acknowledgement": 7000001 + }, + { + "time": 4292, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 54369, + "destinationPort": 6346, + "payload": "612664560//0x00//1//7//0//192.168.0.30", + "tcpFlags": "P", + "sequence": 10000001, + "acknowledgement": 0 + }, + { + "time": 4625, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54369, + "payload": null, + "tcpFlags": "A", + "sequence": 7000001, + "acknowledgement": 10000039 + }, + { + "time": 4681, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54369, + "payload": "612664560//0x01//0//8//77//10.0.0.2//6346//0//0", + "tcpFlags": "P", + "sequence": 7000001, + "acknowledgement": 0 + }, + { + "time": 4681, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 54369, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 10000039, + "acknowledgement": 7000048 + }, + { + "time": 4736, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 61938, + "payload": "612664560//0x01//1//7//77//10.0.0.2//6346//0//0", + "tcpFlags": "P", + "sequence": 3000053, + "acknowledgement": 0 + }, + { + "time": 4959, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 61938, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 8000039, + "acknowledgement": 3000100 + }, + { + "time": 5612, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.1" + }, + { + "time": 6834, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56447, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 14000000, + "acknowledgement": 0 + }, + { + "time": 6834, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56447, + "payload": null, + "tcpFlags": "SA", + "sequence": 9000000, + "acknowledgement": 14000001 + }, + { + "time": 7167, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56447, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 14000001, + "acknowledgement": 9000001 + }, + { + "time": 7234, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56447, + "destinationPort": 6346, + "payload": "219206720//0x00//1//7//0//192.168.0.30", + "tcpFlags": "P", + "sequence": 14000001, + "acknowledgement": 0 + }, + { + "time": 7234, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56447, + "payload": null, + "tcpFlags": "A", + "sequence": 9000001, + "acknowledgement": 14000039 + }, + { + "time": 7290, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56447, + "payload": "219206720//0x01//0//8//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 9000001, + "acknowledgement": 0 + }, + { + "time": 7622, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56447, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 14000039, + "acknowledgement": 9000053 + }, + { + "time": 8111, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + }, + { + "time": 9000, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 51726, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 18000000, + "acknowledgement": 0 + }, + { + "time": 9000, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 51726, + "payload": null, + "tcpFlags": "SA", + "sequence": 15000000, + "acknowledgement": 18000001 + }, + { + "time": 9222, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 51726, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 18000001, + "acknowledgement": 15000001 + }, + { + "time": 9300, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 51726, + "destinationPort": 6346, + "payload": "829504624//0x00//1//7//0//192.168.0.20", + "tcpFlags": "P", + "sequence": 18000001, + "acknowledgement": 0 + }, + { + "time": 9300, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 51726, + "payload": null, + "tcpFlags": "A", + "sequence": 15000001, + "acknowledgement": 18000039 + }, + { + "time": 9355, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:13", + "sourceIp": "192.168.0.31", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 51726, + "payload": "829504624//0x01//0//8//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 15000001, + "acknowledgement": 0 + }, + { + "time": 9577, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:14", + "sourceIp": "192.168.0.30", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 51726, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 18000039, + "acknowledgement": 15000053 + }, + { + "time": 9577, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 49870, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 22000000, + "acknowledgement": 0 + }, + { + "time": 9909, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 49870, + "payload": null, + "tcpFlags": "SA", + "sequence": 21000000, + "acknowledgement": 22000001 + }, + { + "time": 9909, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 49870, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 22000001, + "acknowledgement": 21000001 + }, + { + "time": 9978, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 49870, + "destinationPort": 6346, + "payload": "829504624//0x00//2//6//0//192.168.0.20", + "tcpFlags": "P", + "sequence": 22000001, + "acknowledgement": 0 + }, + { + "time": 10055, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 54065, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 23000000, + "acknowledgement": 0 + }, + { + "time": 10055, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54065, + "payload": null, + "tcpFlags": "SA", + "sequence": 20000000, + "acknowledgement": 23000001 + }, + { + "time": 10310, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 49870, + "payload": null, + "tcpFlags": "A", + "sequence": 21000001, + "acknowledgement": 22000039 + }, + { + "time": 10365, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 49870, + "payload": null, + "tcpFlags": "F", + "sequence": 21000001, + "acknowledgement": 0 + }, + { + "time": 10365, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 49870, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 22000039, + "acknowledgement": 21000002 + }, + { + "time": 10420, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 54065, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 23000001, + "acknowledgement": 20000001 + }, + { + "time": 10420, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 49870, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "F", + "sequence": 22000039, + "acknowledgement": 0 + }, + { + "time": 10476, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 54065, + "destinationPort": 6346, + "payload": "829504624//0x00//2//6//0//192.168.0.20", + "tcpFlags": "P", + "sequence": 23000001, + "acknowledgement": 0 + }, + { + "time": 10476, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54065, + "payload": null, + "tcpFlags": "A", + "sequence": 20000001, + "acknowledgement": 23000039 + }, + { + "time": 10531, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54065, + "payload": null, + "tcpFlags": "F", + "sequence": 20000001, + "acknowledgement": 0 + }, + { + "time": 10753, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 49870, + "payload": null, + "tcpFlags": "A", + "sequence": 21000002, + "acknowledgement": 22000040 + }, + { + "time": 10863, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 54065, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 23000039, + "acknowledgement": 20000002 + }, + { + "time": 10919, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 54065, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "F", + "sequence": 23000039, + "acknowledgement": 0 + }, + { + "time": 10919, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54065, + "payload": null, + "tcpFlags": "A", + "sequence": 20000002, + "acknowledgement": 23000040 + } + ], + "00000000-0000-0000-0000-000000000405": [ + { + "time": 642, + "source": "02:00:00:00:04:14", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.31", + "targetIp": "192.168.0.1" + }, + { + "time": 644, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "arp": 2, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.31" + }, + { + "time": 871, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 63045, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 6000000, + "acknowledgement": 0 + }, + { + "time": 1096, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 63045, + "payload": null, + "tcpFlags": "SA", + "sequence": 5000000, + "acknowledgement": 6000001 + }, + { + "time": 1319, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 63045, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 6000001, + "acknowledgement": 5000001 + }, + { + "time": 1418, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 63045, + "destinationPort": 6346, + "payload": "2132446730//0x00//0//8//0//192.168.0.31", + "tcpFlags": "P", + "sequence": 6000001, + "acknowledgement": 0 + }, + { + "time": 1530, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 63045, + "payload": null, + "tcpFlags": "A", + "sequence": 5000001, + "acknowledgement": 6000040 + }, + { + "time": 1586, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 63045, + "payload": "2132446730//0x01//0//8//77//10.0.0.2//6346//0//0", + "tcpFlags": "P", + "sequence": 5000001, + "acknowledgement": 0 + }, + { + "time": 1808, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 63045, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 6000040, + "acknowledgement": 5000049 + }, + { + "time": 3112, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.31" + }, + { + "time": 4003, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 54369, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 10000000, + "acknowledgement": 0 + }, + { + "time": 4115, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54369, + "payload": null, + "tcpFlags": "SA", + "sequence": 7000000, + "acknowledgement": 10000001 + }, + { + "time": 4337, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 54369, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 10000001, + "acknowledgement": 7000001 + }, + { + "time": 4403, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 54369, + "destinationPort": 6346, + "payload": "612664560//0x00//1//7//0//192.168.0.30", + "tcpFlags": "P", + "sequence": 10000001, + "acknowledgement": 0 + }, + { + "time": 4515, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54369, + "payload": null, + "tcpFlags": "A", + "sequence": 7000001, + "acknowledgement": 10000039 + }, + { + "time": 4570, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54369, + "payload": "612664560//0x01//0//8//77//10.0.0.2//6346//0//0", + "tcpFlags": "P", + "sequence": 7000001, + "acknowledgement": 0 + }, + { + "time": 4792, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 54369, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 10000039, + "acknowledgement": 7000048 + }, + { + "time": 5612, + "source": "02:00:00:00:04:13", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.30", + "targetIp": "192.168.0.1" + }, + { + "time": 5612, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:13", + "arp": 2, + "senderIp": "192.168.0.1", + "targetIp": "192.168.0.30" + }, + { + "time": 5834, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 62022, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 12000000, + "acknowledgement": 0 + }, + { + "time": 5946, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:13", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 62022, + "payload": null, + "tcpFlags": "SA", + "sequence": 11000000, + "acknowledgement": 12000001 + }, + { + "time": 6168, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 62022, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000001, + "acknowledgement": 11000001 + }, + { + "time": 6223, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 62022, + "destinationPort": 6346, + "payload": "219206720//0x00//0//8//0//192.168.0.30", + "tcpFlags": "P", + "sequence": 12000001, + "acknowledgement": 0 + }, + { + "time": 6334, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:13", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 62022, + "payload": null, + "tcpFlags": "A", + "sequence": 11000001, + "acknowledgement": 12000039 + }, + { + "time": 6390, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:13", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 62022, + "payload": "219206720//0x01//0//8//77//10.0.0.2//6346//0//0", + "tcpFlags": "P", + "sequence": 11000001, + "acknowledgement": 0 + }, + { + "time": 6611, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 62022, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000039, + "acknowledgement": 11000048 + }, + { + "time": 6723, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56447, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 14000000, + "acknowledgement": 0 + }, + { + "time": 6945, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56447, + "payload": null, + "tcpFlags": "SA", + "sequence": 9000000, + "acknowledgement": 14000001 + }, + { + "time": 7056, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56447, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 14000001, + "acknowledgement": 9000001 + }, + { + "time": 7123, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56447, + "destinationPort": 6346, + "payload": "219206720//0x00//1//7//0//192.168.0.30", + "tcpFlags": "P", + "sequence": 14000001, + "acknowledgement": 0 + }, + { + "time": 7345, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56447, + "payload": null, + "tcpFlags": "A", + "sequence": 9000001, + "acknowledgement": 14000039 + }, + { + "time": 7400, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56447, + "payload": "219206720//0x01//0//8//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 9000001, + "acknowledgement": 0 + }, + { + "time": 7511, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56447, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 14000039, + "acknowledgement": 9000053 + }, + { + "time": 7567, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:13", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 62022, + "payload": "219206720//0x01//1//7//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 11000048, + "acknowledgement": 0 + }, + { + "time": 7789, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 62022, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000039, + "acknowledgement": 11000100 + }, + { + "time": 8111, + "source": "02:00:00:00:04:11", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "192.168.0.20", + "targetIp": "192.168.0.30" + }, + { + "time": 9055, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 58194, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 19000000, + "acknowledgement": 0 + }, + { + "time": 9166, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:13", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 58194, + "payload": null, + "tcpFlags": "SA", + "sequence": 13000000, + "acknowledgement": 19000001 + }, + { + "time": 9388, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 58194, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 19000001, + "acknowledgement": 13000001 + }, + { + "time": 9445, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 58194, + "destinationPort": 6346, + "payload": "829504624//0x00//1//7//0//192.168.0.20", + "tcpFlags": "P", + "sequence": 19000001, + "acknowledgement": 0 + }, + { + "time": 9556, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:13", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 58194, + "payload": null, + "tcpFlags": "A", + "sequence": 13000001, + "acknowledgement": 19000039 + }, + { + "time": 9612, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:13", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 58194, + "payload": "829504624//0x01//0//8//77//10.0.0.2//6346//0//0", + "tcpFlags": "P", + "sequence": 13000001, + "acknowledgement": 0 + }, + { + "time": 9688, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 49870, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 22000000, + "acknowledgement": 0 + }, + { + "time": 9799, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 49870, + "payload": null, + "tcpFlags": "SA", + "sequence": 21000000, + "acknowledgement": 22000001 + }, + { + "time": 9833, + "source": "02:00:00:00:04:13", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 58194, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 19000039, + "acknowledgement": 13000048 + }, + { + "time": 9944, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 54065, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 23000000, + "acknowledgement": 0 + }, + { + "time": 10020, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 49870, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 22000001, + "acknowledgement": 21000001 + }, + { + "time": 10088, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 49870, + "destinationPort": 6346, + "payload": "829504624//0x00//2//6//0//192.168.0.20", + "tcpFlags": "P", + "sequence": 22000001, + "acknowledgement": 0 + }, + { + "time": 10165, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54065, + "payload": null, + "tcpFlags": "SA", + "sequence": 20000000, + "acknowledgement": 23000001 + }, + { + "time": 10199, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 49870, + "payload": null, + "tcpFlags": "A", + "sequence": 21000001, + "acknowledgement": 22000039 + }, + { + "time": 10255, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 49870, + "payload": null, + "tcpFlags": "F", + "sequence": 21000001, + "acknowledgement": 0 + }, + { + "time": 10310, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 54065, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 23000001, + "acknowledgement": 20000001 + }, + { + "time": 10365, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 54065, + "destinationPort": 6346, + "payload": "829504624//0x00//2//6//0//192.168.0.20", + "tcpFlags": "P", + "sequence": 23000001, + "acknowledgement": 0 + }, + { + "time": 10476, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 49870, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 22000039, + "acknowledgement": 21000002 + }, + { + "time": 10531, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 49870, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "F", + "sequence": 22000039, + "acknowledgement": 0 + }, + { + "time": 10586, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54065, + "payload": null, + "tcpFlags": "A", + "sequence": 20000001, + "acknowledgement": 23000039 + }, + { + "time": 10642, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54065, + "payload": null, + "tcpFlags": "F", + "sequence": 20000001, + "acknowledgement": 0 + }, + { + "time": 10642, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 49870, + "payload": null, + "tcpFlags": "A", + "sequence": 21000002, + "acknowledgement": 22000040 + }, + { + "time": 10753, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 54065, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 23000039, + "acknowledgement": 20000002 + }, + { + "time": 10808, + "source": "02:00:00:00:04:51", + "destination": "02:00:00:00:04:14", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 54065, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "F", + "sequence": 23000039, + "acknowledgement": 0 + }, + { + "time": 11030, + "source": "02:00:00:00:04:14", + "destination": "02:00:00:00:04:51", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54065, + "payload": null, + "tcpFlags": "A", + "sequence": 20000002, + "acknowledgement": 23000040 + } + ], + "00000000-0000-0000-0000-000000000405#1": [ + { + "time": 871, + "source": "02:00:00:00:04:52", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "10.0.0.1", + "targetIp": "10.0.0.2" + }, + { + "time": 982, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "arp": 2, + "senderIp": "10.0.0.2", + "targetIp": "10.0.0.1" + }, + { + "time": 983, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 63045, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 6000000, + "acknowledgement": 0 + }, + { + "time": 1096, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 63045, + "payload": null, + "tcpFlags": "SA", + "sequence": 5000000, + "acknowledgement": 6000001 + }, + { + "time": 1320, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 63045, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 6000001, + "acknowledgement": 5000001 + }, + { + "time": 1418, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 63045, + "destinationPort": 6346, + "payload": "2132446730//0x00//0//8//0//192.168.0.31", + "tcpFlags": "P", + "sequence": 6000001, + "acknowledgement": 0 + }, + { + "time": 1530, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 63045, + "payload": null, + "tcpFlags": "A", + "sequence": 5000001, + "acknowledgement": 6000040 + }, + { + "time": 1585, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 63045, + "payload": "2132446730//0x01//0//8//77//10.0.0.2//6346//0//0", + "tcpFlags": "P", + "sequence": 5000001, + "acknowledgement": 0 + }, + { + "time": 1808, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 63045, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 6000040, + "acknowledgement": 5000049 + }, + { + "time": 4003, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 54369, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 10000000, + "acknowledgement": 0 + }, + { + "time": 4114, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54369, + "payload": null, + "tcpFlags": "SA", + "sequence": 7000000, + "acknowledgement": 10000001 + }, + { + "time": 4337, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 54369, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 10000001, + "acknowledgement": 7000001 + }, + { + "time": 4403, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 54369, + "destinationPort": 6346, + "payload": "612664560//0x00//1//7//0//192.168.0.30", + "tcpFlags": "P", + "sequence": 10000001, + "acknowledgement": 0 + }, + { + "time": 4514, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54369, + "payload": null, + "tcpFlags": "A", + "sequence": 7000001, + "acknowledgement": 10000039 + }, + { + "time": 4570, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54369, + "payload": "612664560//0x01//0//8//77//10.0.0.2//6346//0//0", + "tcpFlags": "P", + "sequence": 7000001, + "acknowledgement": 0 + }, + { + "time": 4792, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 54369, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 10000039, + "acknowledgement": 7000048 + }, + { + "time": 5834, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 62022, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 12000000, + "acknowledgement": 0 + }, + { + "time": 5945, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 62022, + "payload": null, + "tcpFlags": "SA", + "sequence": 11000000, + "acknowledgement": 12000001 + }, + { + "time": 6168, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 62022, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000001, + "acknowledgement": 11000001 + }, + { + "time": 6223, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 62022, + "destinationPort": 6346, + "payload": "219206720//0x00//0//8//0//192.168.0.30", + "tcpFlags": "P", + "sequence": 12000001, + "acknowledgement": 0 + }, + { + "time": 6334, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 62022, + "payload": null, + "tcpFlags": "A", + "sequence": 11000001, + "acknowledgement": 12000039 + }, + { + "time": 6389, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 62022, + "payload": "219206720//0x01//0//8//77//10.0.0.2//6346//0//0", + "tcpFlags": "P", + "sequence": 11000001, + "acknowledgement": 0 + }, + { + "time": 6612, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 62022, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000039, + "acknowledgement": 11000048 + }, + { + "time": 6723, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56447, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 14000000, + "acknowledgement": 0 + }, + { + "time": 6945, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56447, + "payload": null, + "tcpFlags": "SA", + "sequence": 9000000, + "acknowledgement": 14000001 + }, + { + "time": 7056, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56447, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 14000001, + "acknowledgement": 9000001 + }, + { + "time": 7123, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56447, + "destinationPort": 6346, + "payload": "219206720//0x00//1//7//0//192.168.0.30", + "tcpFlags": "P", + "sequence": 14000001, + "acknowledgement": 0 + }, + { + "time": 7345, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56447, + "payload": null, + "tcpFlags": "A", + "sequence": 9000001, + "acknowledgement": 14000039 + }, + { + "time": 7400, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56447, + "payload": "219206720//0x01//0//8//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 9000001, + "acknowledgement": 0 + }, + { + "time": 7511, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56447, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 14000039, + "acknowledgement": 9000053 + }, + { + "time": 7566, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 62022, + "payload": "219206720//0x01//1//7//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 11000048, + "acknowledgement": 0 + }, + { + "time": 7789, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 62022, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000039, + "acknowledgement": 11000100 + }, + { + "time": 9055, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 58194, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 19000000, + "acknowledgement": 0 + }, + { + "time": 9166, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 58194, + "payload": null, + "tcpFlags": "SA", + "sequence": 13000000, + "acknowledgement": 19000001 + }, + { + "time": 9388, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 58194, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 19000001, + "acknowledgement": 13000001 + }, + { + "time": 9446, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 58194, + "destinationPort": 6346, + "payload": "829504624//0x00//1//7//0//192.168.0.20", + "tcpFlags": "P", + "sequence": 19000001, + "acknowledgement": 0 + }, + { + "time": 9556, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 58194, + "payload": null, + "tcpFlags": "A", + "sequence": 13000001, + "acknowledgement": 19000039 + }, + { + "time": 9611, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 58194, + "payload": "829504624//0x01//0//8//77//10.0.0.2//6346//0//0", + "tcpFlags": "P", + "sequence": 13000001, + "acknowledgement": 0 + }, + { + "time": 9688, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 49870, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 22000000, + "acknowledgement": 0 + }, + { + "time": 9799, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 49870, + "payload": null, + "tcpFlags": "SA", + "sequence": 21000000, + "acknowledgement": 22000001 + }, + { + "time": 9833, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 58194, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 19000039, + "acknowledgement": 13000048 + }, + { + "time": 9944, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 54065, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 23000000, + "acknowledgement": 0 + }, + { + "time": 10020, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 49870, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 22000001, + "acknowledgement": 21000001 + }, + { + "time": 10088, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 49870, + "destinationPort": 6346, + "payload": "829504624//0x00//2//6//0//192.168.0.20", + "tcpFlags": "P", + "sequence": 22000001, + "acknowledgement": 0 + }, + { + "time": 10166, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54065, + "payload": null, + "tcpFlags": "SA", + "sequence": 20000000, + "acknowledgement": 23000001 + }, + { + "time": 10199, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 49870, + "payload": null, + "tcpFlags": "A", + "sequence": 21000001, + "acknowledgement": 22000039 + }, + { + "time": 10255, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 49870, + "payload": null, + "tcpFlags": "F", + "sequence": 21000001, + "acknowledgement": 0 + }, + { + "time": 10310, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 54065, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 23000001, + "acknowledgement": 20000001 + }, + { + "time": 10365, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 54065, + "destinationPort": 6346, + "payload": "829504624//0x00//2//6//0//192.168.0.20", + "tcpFlags": "P", + "sequence": 23000001, + "acknowledgement": 0 + }, + { + "time": 10476, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 49870, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 22000039, + "acknowledgement": 21000002 + }, + { + "time": 10531, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 49870, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "F", + "sequence": 22000039, + "acknowledgement": 0 + }, + { + "time": 10587, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54065, + "payload": null, + "tcpFlags": "A", + "sequence": 20000001, + "acknowledgement": 23000039 + }, + { + "time": 10642, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 49870, + "payload": null, + "tcpFlags": "A", + "sequence": 21000002, + "acknowledgement": 22000040 + }, + { + "time": 10642, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54065, + "payload": null, + "tcpFlags": "F", + "sequence": 20000001, + "acknowledgement": 0 + }, + { + "time": 10753, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 54065, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 23000039, + "acknowledgement": 20000002 + }, + { + "time": 10808, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 54065, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "F", + "sequence": 23000039, + "acknowledgement": 0 + }, + { + "time": 11030, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54065, + "payload": null, + "tcpFlags": "A", + "sequence": 20000002, + "acknowledgement": 23000040 + } + ], + "00000000-0000-0000-0000-000000000406": [ + { + "time": 927, + "source": "02:00:00:00:04:52", + "destination": "FF:FF:FF:FF:FF:FF", + "arp": 1, + "senderIp": "10.0.0.1", + "targetIp": "10.0.0.2" + }, + { + "time": 927, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "arp": 2, + "senderIp": "10.0.0.2", + "targetIp": "10.0.0.1" + }, + { + "time": 1038, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 63045, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 6000000, + "acknowledgement": 0 + }, + { + "time": 1040, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 63045, + "payload": null, + "tcpFlags": "SA", + "sequence": 5000000, + "acknowledgement": 6000001 + }, + { + "time": 1375, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 63045, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 6000001, + "acknowledgement": 5000001 + }, + { + "time": 1474, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 63045, + "destinationPort": 6346, + "payload": "2132446730//0x00//0//8//0//192.168.0.31", + "tcpFlags": "P", + "sequence": 6000001, + "acknowledgement": 0 + }, + { + "time": 1474, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 63045, + "payload": null, + "tcpFlags": "A", + "sequence": 5000001, + "acknowledgement": 6000040 + }, + { + "time": 1530, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 63045, + "payload": "2132446730//0x01//0//8//77//10.0.0.2//6346//0//0", + "tcpFlags": "P", + "sequence": 5000001, + "acknowledgement": 0 + }, + { + "time": 1864, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 63045, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 6000040, + "acknowledgement": 5000049 + }, + { + "time": 4059, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 54369, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 10000000, + "acknowledgement": 0 + }, + { + "time": 4059, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54369, + "payload": null, + "tcpFlags": "SA", + "sequence": 7000000, + "acknowledgement": 10000001 + }, + { + "time": 4393, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 54369, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 10000001, + "acknowledgement": 7000001 + }, + { + "time": 4459, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 54369, + "destinationPort": 6346, + "payload": "612664560//0x00//1//7//0//192.168.0.30", + "tcpFlags": "P", + "sequence": 10000001, + "acknowledgement": 0 + }, + { + "time": 4459, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54369, + "payload": null, + "tcpFlags": "A", + "sequence": 7000001, + "acknowledgement": 10000039 + }, + { + "time": 4514, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54369, + "payload": "612664560//0x01//0//8//77//10.0.0.2//6346//0//0", + "tcpFlags": "P", + "sequence": 7000001, + "acknowledgement": 0 + }, + { + "time": 4847, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 54369, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 10000039, + "acknowledgement": 7000048 + }, + { + "time": 5889, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 62022, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 12000000, + "acknowledgement": 0 + }, + { + "time": 5890, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 62022, + "payload": null, + "tcpFlags": "SA", + "sequence": 11000000, + "acknowledgement": 12000001 + }, + { + "time": 6223, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 62022, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000001, + "acknowledgement": 11000001 + }, + { + "time": 6278, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 62022, + "destinationPort": 6346, + "payload": "219206720//0x00//0//8//0//192.168.0.30", + "tcpFlags": "P", + "sequence": 12000001, + "acknowledgement": 0 + }, + { + "time": 6279, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 62022, + "payload": null, + "tcpFlags": "A", + "sequence": 11000001, + "acknowledgement": 12000039 + }, + { + "time": 6334, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 62022, + "payload": "219206720//0x01//0//8//77//10.0.0.2//6346//0//0", + "tcpFlags": "P", + "sequence": 11000001, + "acknowledgement": 0 + }, + { + "time": 6667, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 62022, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000039, + "acknowledgement": 11000048 + }, + { + "time": 6668, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56447, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 14000000, + "acknowledgement": 0 + }, + { + "time": 7000, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56447, + "payload": null, + "tcpFlags": "SA", + "sequence": 9000000, + "acknowledgement": 14000001 + }, + { + "time": 7000, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56447, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 14000001, + "acknowledgement": 9000001 + }, + { + "time": 7068, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56447, + "destinationPort": 6346, + "payload": "219206720//0x00//1//7//0//192.168.0.30", + "tcpFlags": "P", + "sequence": 14000001, + "acknowledgement": 0 + }, + { + "time": 7400, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56447, + "payload": null, + "tcpFlags": "A", + "sequence": 9000001, + "acknowledgement": 14000039 + }, + { + "time": 7456, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 56447, + "payload": "219206720//0x01//0//8//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 9000001, + "acknowledgement": 0 + }, + { + "time": 7456, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 56447, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 14000039, + "acknowledgement": 9000053 + }, + { + "time": 7511, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 62022, + "payload": "219206720//0x01//1//7//109//192.168.0.31//6346//0//0", + "tcpFlags": "P", + "sequence": 11000048, + "acknowledgement": 0 + }, + { + "time": 7844, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 62022, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 12000039, + "acknowledgement": 11000100 + }, + { + "time": 9111, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 58194, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 19000000, + "acknowledgement": 0 + }, + { + "time": 9111, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 58194, + "payload": null, + "tcpFlags": "SA", + "sequence": 13000000, + "acknowledgement": 19000001 + }, + { + "time": 9444, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 58194, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 19000001, + "acknowledgement": 13000001 + }, + { + "time": 9501, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 58194, + "destinationPort": 6346, + "payload": "829504624//0x00//1//7//0//192.168.0.20", + "tcpFlags": "P", + "sequence": 19000001, + "acknowledgement": 0 + }, + { + "time": 9501, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 58194, + "payload": null, + "tcpFlags": "A", + "sequence": 13000001, + "acknowledgement": 19000039 + }, + { + "time": 9556, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.30", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 58194, + "payload": "829504624//0x01//0//8//77//10.0.0.2//6346//0//0", + "tcpFlags": "P", + "sequence": 13000001, + "acknowledgement": 0 + }, + { + "time": 9743, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 49870, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 22000000, + "acknowledgement": 0 + }, + { + "time": 9743, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 49870, + "payload": null, + "tcpFlags": "SA", + "sequence": 21000000, + "acknowledgement": 22000001 + }, + { + "time": 9888, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.30", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 58194, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 19000039, + "acknowledgement": 13000048 + }, + { + "time": 9889, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 54065, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "S", + "sequence": 23000000, + "acknowledgement": 0 + }, + { + "time": 10075, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 49870, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 22000001, + "acknowledgement": 21000001 + }, + { + "time": 10144, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 49870, + "destinationPort": 6346, + "payload": "829504624//0x00//2//6//0//192.168.0.20", + "tcpFlags": "P", + "sequence": 22000001, + "acknowledgement": 0 + }, + { + "time": 10144, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 49870, + "payload": null, + "tcpFlags": "A", + "sequence": 21000001, + "acknowledgement": 22000039 + }, + { + "time": 10199, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 49870, + "payload": null, + "tcpFlags": "F", + "sequence": 21000001, + "acknowledgement": 0 + }, + { + "time": 10221, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54065, + "payload": null, + "tcpFlags": "SA", + "sequence": 20000000, + "acknowledgement": 23000001 + }, + { + "time": 10254, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 54065, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 23000001, + "acknowledgement": 20000001 + }, + { + "time": 10310, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 54065, + "destinationPort": 6346, + "payload": "829504624//0x00//2//6//0//192.168.0.20", + "tcpFlags": "P", + "sequence": 23000001, + "acknowledgement": 0 + }, + { + "time": 10531, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 49870, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 22000039, + "acknowledgement": 21000002 + }, + { + "time": 10586, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 49870, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "F", + "sequence": 22000039, + "acknowledgement": 0 + }, + { + "time": 10587, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 49870, + "payload": null, + "tcpFlags": "A", + "sequence": 21000002, + "acknowledgement": 22000040 + }, + { + "time": 10642, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54065, + "payload": null, + "tcpFlags": "A", + "sequence": 20000001, + "acknowledgement": 23000039 + }, + { + "time": 10697, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54065, + "payload": null, + "tcpFlags": "F", + "sequence": 20000001, + "acknowledgement": 0 + }, + { + "time": 10697, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 54065, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "A", + "sequence": 23000039, + "acknowledgement": 20000002 + }, + { + "time": 10753, + "source": "02:00:00:00:04:16", + "destination": "02:00:00:00:04:52", + "sourceIp": "10.0.0.2", + "destinationIp": "192.168.0.31", + "protocol": 6, + "sourcePort": 54065, + "destinationPort": 6346, + "payload": null, + "tcpFlags": "F", + "sequence": 23000039, + "acknowledgement": 0 + }, + { + "time": 11085, + "source": "02:00:00:00:04:52", + "destination": "02:00:00:00:04:16", + "sourceIp": "192.168.0.31", + "destinationIp": "10.0.0.2", + "protocol": 6, + "sourcePort": 6346, + "destinationPort": 54065, + "payload": null, + "tcpFlags": "A", + "sequence": 20000002, + "acknowledgement": 23000040 + } + ] + }, + "rows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.31", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "2", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "3", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.30", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "4", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "5", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:13 [op=REPLY, sender=02:00:00:00:04:13|192.168.0.30, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "6", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "192.168.0.20:56465", + "192.168.0.30:6346", + "TCP", + "Transport", + "SYN, SEQ: 16.000.000" + ], + [ + "7", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "192.168.0.30:6346", + "192.168.0.20:56465", + "TCP", + "Transport", + "SYN, SEQ: 2.000.000, ACK: 16.000.001" + ], + [ + "8", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "192.168.0.20:56465", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 16.000.001, ACK: 2.000.001" + ], + [ + "9", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "192.168.0.20:56465", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 16.000.001" + ], + [ + "9", + "192.168.0.20:56465", + "192.168.0.30:6346", + "GNT", + "Anwendung", + "829504624//0x00//0//8//0//192.168.0.20" + ], + [ + "10", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "192.168.0.30:6346", + "192.168.0.20:56465", + "TCP", + "Transport", + "SEQ: 2.000.001, ACK: 16.000.039" + ], + [ + "11", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "192.168.0.30:6346", + "192.168.0.20:56465", + "TCP", + "Transport", + "SEQ: 2.000.001" + ], + [ + "11", + "192.168.0.30:6346", + "192.168.0.20:56465", + "GNT", + "Anwendung", + "829504624//0x01//0//8//109//192.168.0.30//6346//0//0" + ], + [ + "12", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "192.168.0.20:56465", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 16.000.039, ACK: 2.000.053" + ], + [ + "13", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "192.168.0.30:6346", + "192.168.0.20:56465", + "TCP", + "Transport", + "SEQ: 2.000.053" + ], + [ + "13", + "192.168.0.30:6346", + "192.168.0.20:56465", + "GNT", + "Anwendung", + "829504624//0x01//1//7//109//192.168.0.31//6346//0//0" + ], + [ + "14", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "192.168.0.20:56465", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 16.000.039, ACK: 2.000.105" + ], + [ + "15", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "192.168.0.30:6346", + "192.168.0.20:56465", + "TCP", + "Transport", + "SEQ: 2.000.105" + ], + [ + "15", + "192.168.0.30:6346", + "192.168.0.20:56465", + "GNT", + "Anwendung", + "829504624//0x01//1//7//77//10.0.0.2//6346//0//0" + ], + [ + "16", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "192.168.0.20:56465", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 16.000.039, ACK: 2.000.152" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.31", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "2", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "3", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.30", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "4", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.31", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "2", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "3", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "4", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "192.168.0.30:61938", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 8.000.000" + ], + [ + "5", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "192.168.0.31:6346", + "192.168.0.30:61938", + "TCP", + "Transport", + "SYN, SEQ: 3.000.000, ACK: 8.000.001" + ], + [ + "6", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "192.168.0.30:61938", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 8.000.001, ACK: 3.000.001" + ], + [ + "7", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "192.168.0.30:61938", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 8.000.001" + ], + [ + "7", + "192.168.0.30:61938", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "612664560//0x00//0//8//0//192.168.0.30" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "192.168.0.31:6346", + "192.168.0.30:61938", + "TCP", + "Transport", + "SEQ: 3.000.001, ACK: 8.000.039" + ], + [ + "9", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "192.168.0.31:6346", + "192.168.0.30:61938", + "TCP", + "Transport", + "SEQ: 3.000.001" + ], + [ + "9", + "192.168.0.31:6346", + "192.168.0.30:61938", + "GNT", + "Anwendung", + "612664560//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "10", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "192.168.0.30:61938", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 8.000.039, ACK: 3.000.053" + ], + [ + "11", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "192.168.0.31:6346", + "192.168.0.30:61938", + "TCP", + "Transport", + "SEQ: 3.000.053" + ], + [ + "11", + "192.168.0.31:6346", + "192.168.0.30:61938", + "GNT", + "Anwendung", + "612664560//0x01//1//7//77//10.0.0.2//6346//0//0" + ], + [ + "12", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "192.168.0.30:61938", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 8.000.039, ACK: 3.000.100" + ], + [ + "13", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "13", + "192.168.0.30", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "14", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "14", + "192.168.0.1", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:51 [op=REPLY, sender=02:00:00:00:04:51|192.168.0.1, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "15", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "192.168.0.30:62022", + "10.0.0.2:6346", + "TCP", + "Transport", + "SYN, SEQ: 12.000.000" + ], + [ + "16", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "16", + "10.0.0.2:6346", + "192.168.0.30:62022", + "TCP", + "Transport", + "SYN, SEQ: 11.000.000, ACK: 12.000.001" + ], + [ + "17", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "192.168.0.30:62022", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 12.000.001, ACK: 11.000.001" + ], + [ + "18", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "192.168.0.30:62022", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 12.000.001" + ], + [ + "18", + "192.168.0.30:62022", + "10.0.0.2:6346", + "GNT", + "Anwendung", + "219206720//0x00//0//8//0//192.168.0.30" + ], + [ + "19", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "19", + "10.0.0.2:6346", + "192.168.0.30:62022", + "TCP", + "Transport", + "SEQ: 11.000.001, ACK: 12.000.039" + ], + [ + "20", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "20", + "10.0.0.2:6346", + "192.168.0.30:62022", + "TCP", + "Transport", + "SEQ: 11.000.001" + ], + [ + "20", + "10.0.0.2:6346", + "192.168.0.30:62022", + "GNT", + "Anwendung", + "219206720//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "21", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "192.168.0.30:62022", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 12.000.039, ACK: 11.000.048" + ], + [ + "22", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "22", + "10.0.0.2:6346", + "192.168.0.30:62022", + "TCP", + "Transport", + "SEQ: 11.000.048" + ], + [ + "22", + "10.0.0.2:6346", + "192.168.0.30:62022", + "GNT", + "Anwendung", + "219206720//0x01//1//7//109//192.168.0.31//6346//0//0" + ], + [ + "23", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "23", + "192.168.0.30:62022", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 12.000.039, ACK: 11.000.100" + ], + [ + "24", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "24", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "25", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "25", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:13 [op=REPLY, sender=02:00:00:00:04:13|192.168.0.30, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "26", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "192.168.0.20:56465", + "192.168.0.30:6346", + "TCP", + "Transport", + "SYN, SEQ: 16.000.000" + ], + [ + "27", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "192.168.0.30:6346", + "192.168.0.20:56465", + "TCP", + "Transport", + "SYN, SEQ: 2.000.000, ACK: 16.000.001" + ], + [ + "28", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "28", + "192.168.0.20:56465", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 16.000.001, ACK: 2.000.001" + ], + [ + "29", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "29", + "192.168.0.20:56465", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 16.000.001" + ], + [ + "29", + "192.168.0.20:56465", + "192.168.0.30:6346", + "GNT", + "Anwendung", + "829504624//0x00//0//8//0//192.168.0.20" + ], + [ + "30", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "30", + "192.168.0.30:6346", + "192.168.0.20:56465", + "TCP", + "Transport", + "SEQ: 2.000.001, ACK: 16.000.039" + ], + [ + "31", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "31", + "192.168.0.30:6346", + "192.168.0.20:56465", + "TCP", + "Transport", + "SEQ: 2.000.001" + ], + [ + "31", + "192.168.0.30:6346", + "192.168.0.20:56465", + "GNT", + "Anwendung", + "829504624//0x01//0//8//109//192.168.0.30//6346//0//0" + ], + [ + "32", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "32", + "192.168.0.20:56465", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 16.000.039, ACK: 2.000.053" + ], + [ + "33", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "33", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "33", + "192.168.0.30:51726", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 18.000.000" + ], + [ + "34", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "34", + "192.168.0.30:58194", + "10.0.0.2:6346", + "TCP", + "Transport", + "SYN, SEQ: 19.000.000" + ], + [ + "35", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "35", + "192.168.0.31:6346", + "192.168.0.30:51726", + "TCP", + "Transport", + "SYN, SEQ: 15.000.000, ACK: 18.000.001" + ], + [ + "36", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "36", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "36", + "192.168.0.30:51726", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 18.000.001, ACK: 15.000.001" + ], + [ + "37", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "192.168.0.30:51726", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 18.000.001" + ], + [ + "37", + "192.168.0.30:51726", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "829504624//0x00//1//7//0//192.168.0.20" + ], + [ + "38", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "38", + "10.0.0.2:6346", + "192.168.0.30:58194", + "TCP", + "Transport", + "SYN, SEQ: 13.000.000, ACK: 19.000.001" + ], + [ + "39", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "39", + "192.168.0.30:58194", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 19.000.001, ACK: 13.000.001" + ], + [ + "40", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "40", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "40", + "192.168.0.30:58194", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 19.000.001" + ], + [ + "40", + "192.168.0.30:58194", + "10.0.0.2:6346", + "GNT", + "Anwendung", + "829504624//0x00//1//7//0//192.168.0.20" + ], + [ + "41", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "41", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "41", + "192.168.0.31:6346", + "192.168.0.30:51726", + "TCP", + "Transport", + "SEQ: 15.000.001, ACK: 18.000.039" + ], + [ + "42", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "42", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "42", + "192.168.0.31:6346", + "192.168.0.30:51726", + "TCP", + "Transport", + "SEQ: 15.000.001" + ], + [ + "42", + "192.168.0.31:6346", + "192.168.0.30:51726", + "GNT", + "Anwendung", + "829504624//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "43", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "43", + "192.168.0.30:51726", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 18.000.039, ACK: 15.000.053" + ], + [ + "44", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "44", + "192.168.0.30:6346", + "192.168.0.20:56465", + "TCP", + "Transport", + "SEQ: 2.000.053" + ], + [ + "44", + "192.168.0.30:6346", + "192.168.0.20:56465", + "GNT", + "Anwendung", + "829504624//0x01//1//7//109//192.168.0.31//6346//0//0" + ], + [ + "45", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "45", + "10.0.0.2:6346", + "192.168.0.30:58194", + "TCP", + "Transport", + "SEQ: 13.000.001, ACK: 19.000.039" + ], + [ + "46", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "46", + "10.0.0.2:6346", + "192.168.0.30:58194", + "TCP", + "Transport", + "SEQ: 13.000.001" + ], + [ + "46", + "10.0.0.2:6346", + "192.168.0.30:58194", + "GNT", + "Anwendung", + "829504624//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "47", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "47", + "192.168.0.30:58194", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 19.000.039, ACK: 13.000.048" + ], + [ + "48", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "48", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "48", + "192.168.0.20:56465", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 16.000.039, ACK: 2.000.105" + ], + [ + "49", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "49", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "49", + "192.168.0.30:6346", + "192.168.0.20:56465", + "TCP", + "Transport", + "SEQ: 2.000.105" + ], + [ + "49", + "192.168.0.30:6346", + "192.168.0.20:56465", + "GNT", + "Anwendung", + "829504624//0x01//1//7//77//10.0.0.2//6346//0//0" + ], + [ + "50", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "50", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "50", + "192.168.0.20:56465", + "192.168.0.30:6346", + "TCP", + "Transport", + "SEQ: 16.000.039, ACK: 2.000.152" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.31", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "2", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.1", + "192.168.0.31", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:51 [op=REPLY, sender=02:00:00:00:04:51|192.168.0.1, target=02:00:00:00:04:14|192.168.0.31]" + ], + [ + "3", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "192.168.0.31:63045", + "10.0.0.2:6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "4", + "10.0.0.2:6346", + "192.168.0.31:63045", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000, ACK: 6.000.001" + ], + [ + "5", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "192.168.0.31:63045", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 6.000.001, ACK: 5.000.001" + ], + [ + "6", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "192.168.0.31:63045", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "6", + "192.168.0.31:63045", + "10.0.0.2:6346", + "GNT", + "Anwendung", + "2132446730//0x00//0//8//0//192.168.0.31" + ], + [ + "7", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "7", + "10.0.0.2:6346", + "192.168.0.31:63045", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 6.000.040" + ], + [ + "8", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "8", + "10.0.0.2:6346", + "192.168.0.31:63045", + "TCP", + "Transport", + "SEQ: 5.000.001" + ], + [ + "8", + "10.0.0.2:6346", + "192.168.0.31:63045", + "GNT", + "Anwendung", + "2132446730//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "192.168.0.31:63045", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 6.000.040, ACK: 5.000.049" + ], + [ + "10", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "10", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "11", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "11", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "12", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "192.168.0.30:61938", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 8.000.000" + ], + [ + "13", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "192.168.0.31:6346", + "192.168.0.30:61938", + "TCP", + "Transport", + "SYN, SEQ: 3.000.000, ACK: 8.000.001" + ], + [ + "14", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "192.168.0.30:61938", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 8.000.001, ACK: 3.000.001" + ], + [ + "15", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "192.168.0.30:61938", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 8.000.001" + ], + [ + "15", + "192.168.0.30:61938", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "612664560//0x00//0//8//0//192.168.0.30" + ], + [ + "16", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "192.168.0.31:6346", + "192.168.0.30:61938", + "TCP", + "Transport", + "SEQ: 3.000.001, ACK: 8.000.039" + ], + [ + "17", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "192.168.0.31:6346", + "192.168.0.30:61938", + "TCP", + "Transport", + "SEQ: 3.000.001" + ], + [ + "17", + "192.168.0.31:6346", + "192.168.0.30:61938", + "GNT", + "Anwendung", + "612664560//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "18", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "192.168.0.30:61938", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 8.000.039, ACK: 3.000.053" + ], + [ + "19", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "192.168.0.31:54369", + "10.0.0.2:6346", + "TCP", + "Transport", + "SYN, SEQ: 10.000.000" + ], + [ + "20", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "20", + "10.0.0.2:6346", + "192.168.0.31:54369", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000, ACK: 10.000.001" + ], + [ + "21", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "192.168.0.31:54369", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 10.000.001, ACK: 7.000.001" + ], + [ + "22", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "192.168.0.31:54369", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 10.000.001" + ], + [ + "22", + "192.168.0.31:54369", + "10.0.0.2:6346", + "GNT", + "Anwendung", + "612664560//0x00//1//7//0//192.168.0.30" + ], + [ + "23", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "23", + "10.0.0.2:6346", + "192.168.0.31:54369", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 10.000.039" + ], + [ + "24", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "24", + "10.0.0.2:6346", + "192.168.0.31:54369", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "24", + "10.0.0.2:6346", + "192.168.0.31:54369", + "GNT", + "Anwendung", + "612664560//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "25", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "25", + "192.168.0.31:54369", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 10.000.039, ACK: 7.000.048" + ], + [ + "26", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "192.168.0.31:6346", + "192.168.0.30:61938", + "TCP", + "Transport", + "SEQ: 3.000.053" + ], + [ + "26", + "192.168.0.31:6346", + "192.168.0.30:61938", + "GNT", + "Anwendung", + "612664560//0x01//1//7//77//10.0.0.2//6346//0//0" + ], + [ + "27", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "192.168.0.30:61938", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 8.000.039, ACK: 3.000.100" + ], + [ + "28", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "28", + "192.168.0.30", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "29", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "29", + "10.0.0.2:56447", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 14.000.000" + ], + [ + "30", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "30", + "192.168.0.31:6346", + "10.0.0.2:56447", + "TCP", + "Transport", + "SYN, SEQ: 9.000.000, ACK: 14.000.001" + ], + [ + "31", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "31", + "10.0.0.2:56447", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 14.000.001, ACK: 9.000.001" + ], + [ + "32", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "32", + "10.0.0.2:56447", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 14.000.001" + ], + [ + "32", + "10.0.0.2:56447", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "219206720//0x00//1//7//0//192.168.0.30" + ], + [ + "33", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "33", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "33", + "192.168.0.31:6346", + "10.0.0.2:56447", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 14.000.039" + ], + [ + "34", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "34", + "192.168.0.31:6346", + "10.0.0.2:56447", + "TCP", + "Transport", + "SEQ: 9.000.001" + ], + [ + "34", + "192.168.0.31:6346", + "10.0.0.2:56447", + "GNT", + "Anwendung", + "219206720//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "35", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "35", + "10.0.0.2:56447", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 14.000.039, ACK: 9.000.053" + ], + [ + "36", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "36", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "37", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "192.168.0.30:51726", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 18.000.000" + ], + [ + "38", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "38", + "192.168.0.31:6346", + "192.168.0.30:51726", + "TCP", + "Transport", + "SYN, SEQ: 15.000.000, ACK: 18.000.001" + ], + [ + "39", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "39", + "192.168.0.30:51726", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 18.000.001, ACK: 15.000.001" + ], + [ + "40", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "40", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "40", + "192.168.0.30:51726", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 18.000.001" + ], + [ + "40", + "192.168.0.30:51726", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "829504624//0x00//1//7//0//192.168.0.20" + ], + [ + "41", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "41", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "41", + "192.168.0.31:6346", + "192.168.0.30:51726", + "TCP", + "Transport", + "SEQ: 15.000.001, ACK: 18.000.039" + ], + [ + "42", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "42", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "42", + "192.168.0.31:6346", + "192.168.0.30:51726", + "TCP", + "Transport", + "SEQ: 15.000.001" + ], + [ + "42", + "192.168.0.31:6346", + "192.168.0.30:51726", + "GNT", + "Anwendung", + "829504624//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "43", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "43", + "192.168.0.30:51726", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 18.000.039, ACK: 15.000.053" + ], + [ + "44", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "44", + "192.168.0.31:49870", + "10.0.0.2:6346", + "TCP", + "Transport", + "SYN, SEQ: 22.000.000" + ], + [ + "45", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "45", + "10.0.0.2:6346", + "192.168.0.31:49870", + "TCP", + "Transport", + "SYN, SEQ: 21.000.000, ACK: 22.000.001" + ], + [ + "46", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "46", + "192.168.0.31:49870", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 22.000.001, ACK: 21.000.001" + ], + [ + "47", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "47", + "192.168.0.31:49870", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 22.000.001" + ], + [ + "47", + "192.168.0.31:49870", + "10.0.0.2:6346", + "GNT", + "Anwendung", + "829504624//0x00//2//6//0//192.168.0.20" + ], + [ + "48", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "48", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "48", + "10.0.0.2:54065", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 23.000.000" + ], + [ + "49", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "49", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "49", + "192.168.0.31:6346", + "10.0.0.2:54065", + "TCP", + "Transport", + "SYN, SEQ: 20.000.000, ACK: 23.000.001" + ], + [ + "50", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "50", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "50", + "10.0.0.2:6346", + "192.168.0.31:49870", + "TCP", + "Transport", + "SEQ: 21.000.001, ACK: 22.000.039" + ], + [ + "51", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "51", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "51", + "10.0.0.2:6346", + "192.168.0.31:49870", + "TCP", + "Transport", + "FIN, SEQ: 21.000.001" + ], + [ + "52", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "52", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "52", + "192.168.0.31:49870", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 22.000.039, ACK: 21.000.002" + ], + [ + "53", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "53", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "53", + "10.0.0.2:54065", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 23.000.001, ACK: 20.000.001" + ], + [ + "54", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "54", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "54", + "192.168.0.31:49870", + "10.0.0.2:6346", + "TCP", + "Transport", + "FIN, SEQ: 22.000.039" + ], + [ + "55", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "55", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "55", + "10.0.0.2:54065", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 23.000.001" + ], + [ + "55", + "10.0.0.2:54065", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "829504624//0x00//2//6//0//192.168.0.20" + ], + [ + "56", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "56", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "56", + "192.168.0.31:6346", + "10.0.0.2:54065", + "TCP", + "Transport", + "SEQ: 20.000.001, ACK: 23.000.039" + ], + [ + "57", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "57", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "57", + "192.168.0.31:6346", + "10.0.0.2:54065", + "TCP", + "Transport", + "FIN, SEQ: 20.000.001" + ], + [ + "58", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "58", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "58", + "10.0.0.2:6346", + "192.168.0.31:49870", + "TCP", + "Transport", + "SEQ: 21.000.002, ACK: 22.000.040" + ], + [ + "59", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "59", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "59", + "10.0.0.2:54065", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 23.000.039, ACK: 20.000.002" + ], + [ + "60", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "60", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "60", + "10.0.0.2:54065", + "192.168.0.31:6346", + "TCP", + "Transport", + "FIN, SEQ: 23.000.039" + ], + [ + "61", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "61", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "61", + "192.168.0.31:6346", + "10.0.0.2:54065", + "TCP", + "Transport", + "SEQ: 20.000.002, ACK: 23.000.040" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.31", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "2", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.1", + "192.168.0.31", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:51 [op=REPLY, sender=02:00:00:00:04:51|192.168.0.1, target=02:00:00:00:04:14|192.168.0.31]" + ], + [ + "3", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "192.168.0.31:63045", + "10.0.0.2:6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "4", + "10.0.0.2:6346", + "192.168.0.31:63045", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000, ACK: 6.000.001" + ], + [ + "5", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "192.168.0.31:63045", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 6.000.001, ACK: 5.000.001" + ], + [ + "6", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "192.168.0.31:63045", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "6", + "192.168.0.31:63045", + "10.0.0.2:6346", + "GNT", + "Anwendung", + "2132446730//0x00//0//8//0//192.168.0.31" + ], + [ + "7", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "7", + "10.0.0.2:6346", + "192.168.0.31:63045", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 6.000.040" + ], + [ + "8", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "8", + "10.0.0.2:6346", + "192.168.0.31:63045", + "TCP", + "Transport", + "SEQ: 5.000.001" + ], + [ + "8", + "10.0.0.2:6346", + "192.168.0.31:63045", + "GNT", + "Anwendung", + "2132446730//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "192.168.0.31:63045", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 6.000.040, ACK: 5.000.049" + ], + [ + "10", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "10", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "11", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "192.168.0.31:54369", + "10.0.0.2:6346", + "TCP", + "Transport", + "SYN, SEQ: 10.000.000" + ], + [ + "12", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "12", + "10.0.0.2:6346", + "192.168.0.31:54369", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000, ACK: 10.000.001" + ], + [ + "13", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "192.168.0.31:54369", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 10.000.001, ACK: 7.000.001" + ], + [ + "14", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "192.168.0.31:54369", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 10.000.001" + ], + [ + "14", + "192.168.0.31:54369", + "10.0.0.2:6346", + "GNT", + "Anwendung", + "612664560//0x00//1//7//0//192.168.0.30" + ], + [ + "15", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "15", + "10.0.0.2:6346", + "192.168.0.31:54369", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 10.000.039" + ], + [ + "16", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "16", + "10.0.0.2:6346", + "192.168.0.31:54369", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "16", + "10.0.0.2:6346", + "192.168.0.31:54369", + "GNT", + "Anwendung", + "612664560//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "17", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "192.168.0.31:54369", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 10.000.039, ACK: 7.000.048" + ], + [ + "18", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "18", + "192.168.0.30", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "19", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "19", + "192.168.0.1", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:51 [op=REPLY, sender=02:00:00:00:04:51|192.168.0.1, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "20", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "20", + "192.168.0.30:62022", + "10.0.0.2:6346", + "TCP", + "Transport", + "SYN, SEQ: 12.000.000" + ], + [ + "21", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "21", + "10.0.0.2:6346", + "192.168.0.30:62022", + "TCP", + "Transport", + "SYN, SEQ: 11.000.000, ACK: 12.000.001" + ], + [ + "22", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "192.168.0.30:62022", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 12.000.001, ACK: 11.000.001" + ], + [ + "23", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "23", + "192.168.0.30:62022", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 12.000.001" + ], + [ + "23", + "192.168.0.30:62022", + "10.0.0.2:6346", + "GNT", + "Anwendung", + "219206720//0x00//0//8//0//192.168.0.30" + ], + [ + "24", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "24", + "10.0.0.2:6346", + "192.168.0.30:62022", + "TCP", + "Transport", + "SEQ: 11.000.001, ACK: 12.000.039" + ], + [ + "25", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "25", + "10.0.0.2:6346", + "192.168.0.30:62022", + "TCP", + "Transport", + "SEQ: 11.000.001" + ], + [ + "25", + "10.0.0.2:6346", + "192.168.0.30:62022", + "GNT", + "Anwendung", + "219206720//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "26", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "192.168.0.30:62022", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 12.000.039, ACK: 11.000.048" + ], + [ + "27", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "27", + "10.0.0.2:56447", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 14.000.000" + ], + [ + "28", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "28", + "192.168.0.31:6346", + "10.0.0.2:56447", + "TCP", + "Transport", + "SYN, SEQ: 9.000.000, ACK: 14.000.001" + ], + [ + "29", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "29", + "10.0.0.2:56447", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 14.000.001, ACK: 9.000.001" + ], + [ + "30", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "30", + "10.0.0.2:56447", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 14.000.001" + ], + [ + "30", + "10.0.0.2:56447", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "219206720//0x00//1//7//0//192.168.0.30" + ], + [ + "31", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "31", + "192.168.0.31:6346", + "10.0.0.2:56447", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 14.000.039" + ], + [ + "32", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "32", + "192.168.0.31:6346", + "10.0.0.2:56447", + "TCP", + "Transport", + "SEQ: 9.000.001" + ], + [ + "32", + "192.168.0.31:6346", + "10.0.0.2:56447", + "GNT", + "Anwendung", + "219206720//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "33", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "33", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "33", + "10.0.0.2:56447", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 14.000.039, ACK: 9.000.053" + ], + [ + "34", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "34", + "10.0.0.2:6346", + "192.168.0.30:62022", + "TCP", + "Transport", + "SEQ: 11.000.048" + ], + [ + "34", + "10.0.0.2:6346", + "192.168.0.30:62022", + "GNT", + "Anwendung", + "219206720//0x01//1//7//109//192.168.0.31//6346//0//0" + ], + [ + "35", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "35", + "192.168.0.30:62022", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 12.000.039, ACK: 11.000.100" + ], + [ + "36", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "36", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "37", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "192.168.0.30:58194", + "10.0.0.2:6346", + "TCP", + "Transport", + "SYN, SEQ: 19.000.000" + ], + [ + "38", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "38", + "10.0.0.2:6346", + "192.168.0.30:58194", + "TCP", + "Transport", + "SYN, SEQ: 13.000.000, ACK: 19.000.001" + ], + [ + "39", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "39", + "192.168.0.30:58194", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 19.000.001, ACK: 13.000.001" + ], + [ + "40", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "40", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "40", + "192.168.0.30:58194", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 19.000.001" + ], + [ + "40", + "192.168.0.30:58194", + "10.0.0.2:6346", + "GNT", + "Anwendung", + "829504624//0x00//1//7//0//192.168.0.20" + ], + [ + "41", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "41", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "41", + "10.0.0.2:6346", + "192.168.0.30:58194", + "TCP", + "Transport", + "SEQ: 13.000.001, ACK: 19.000.039" + ], + [ + "42", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "42", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "42", + "10.0.0.2:6346", + "192.168.0.30:58194", + "TCP", + "Transport", + "SEQ: 13.000.001" + ], + [ + "42", + "10.0.0.2:6346", + "192.168.0.30:58194", + "GNT", + "Anwendung", + "829504624//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "43", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "43", + "192.168.0.31:49870", + "10.0.0.2:6346", + "TCP", + "Transport", + "SYN, SEQ: 22.000.000" + ], + [ + "44", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "44", + "10.0.0.2:6346", + "192.168.0.31:49870", + "TCP", + "Transport", + "SYN, SEQ: 21.000.000, ACK: 22.000.001" + ], + [ + "45", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "45", + "192.168.0.30:58194", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 19.000.039, ACK: 13.000.048" + ], + [ + "46", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "46", + "10.0.0.2:54065", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 23.000.000" + ], + [ + "47", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "47", + "192.168.0.31:49870", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 22.000.001, ACK: 21.000.001" + ], + [ + "48", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "48", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "48", + "192.168.0.31:49870", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 22.000.001" + ], + [ + "48", + "192.168.0.31:49870", + "10.0.0.2:6346", + "GNT", + "Anwendung", + "829504624//0x00//2//6//0//192.168.0.20" + ], + [ + "49", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "49", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "49", + "192.168.0.31:6346", + "10.0.0.2:54065", + "TCP", + "Transport", + "SYN, SEQ: 20.000.000, ACK: 23.000.001" + ], + [ + "50", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "50", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "50", + "10.0.0.2:6346", + "192.168.0.31:49870", + "TCP", + "Transport", + "SEQ: 21.000.001, ACK: 22.000.039" + ], + [ + "51", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "51", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "51", + "10.0.0.2:6346", + "192.168.0.31:49870", + "TCP", + "Transport", + "FIN, SEQ: 21.000.001" + ], + [ + "52", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "52", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "52", + "10.0.0.2:54065", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 23.000.001, ACK: 20.000.001" + ], + [ + "53", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "53", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "53", + "10.0.0.2:54065", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 23.000.001" + ], + [ + "53", + "10.0.0.2:54065", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "829504624//0x00//2//6//0//192.168.0.20" + ], + [ + "54", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "54", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "54", + "192.168.0.31:49870", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 22.000.039, ACK: 21.000.002" + ], + [ + "55", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "55", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "55", + "192.168.0.31:49870", + "10.0.0.2:6346", + "TCP", + "Transport", + "FIN, SEQ: 22.000.039" + ], + [ + "56", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "56", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "56", + "192.168.0.31:6346", + "10.0.0.2:54065", + "TCP", + "Transport", + "SEQ: 20.000.001, ACK: 23.000.039" + ], + [ + "57", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "57", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "57", + "192.168.0.31:6346", + "10.0.0.2:54065", + "TCP", + "Transport", + "FIN, SEQ: 20.000.001" + ], + [ + "58", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "58", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "58", + "10.0.0.2:6346", + "192.168.0.31:49870", + "TCP", + "Transport", + "SEQ: 21.000.002, ACK: 22.000.040" + ], + [ + "59", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "59", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "59", + "10.0.0.2:54065", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 23.000.039, ACK: 20.000.002" + ], + [ + "60", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "60", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "60", + "10.0.0.2:54065", + "192.168.0.31:6346", + "TCP", + "Transport", + "FIN, SEQ: 23.000.039" + ], + [ + "61", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "61", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "61", + "192.168.0.31:6346", + "10.0.0.2:54065", + "TCP", + "Transport", + "SEQ: 20.000.002, ACK: 23.000.040" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [ + [ + "1", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "10.0.0.1", + "10.0.0.2", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.2 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.2]" + ], + [ + "2", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "10.0.0.2", + "10.0.0.1", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:16 [op=REPLY, sender=02:00:00:00:04:16|10.0.0.2, target=02:00:00:00:04:52|10.0.0.1]" + ], + [ + "3", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "3", + "192.168.0.31:63045", + "10.0.0.2:6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "10.0.0.2:6346", + "192.168.0.31:63045", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000, ACK: 6.000.001" + ], + [ + "5", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "5", + "192.168.0.31:63045", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 6.000.001, ACK: 5.000.001" + ], + [ + "6", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "6", + "192.168.0.31:63045", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "6", + "192.168.0.31:63045", + "10.0.0.2:6346", + "GNT", + "Anwendung", + "2132446730//0x00//0//8//0//192.168.0.31" + ], + [ + "7", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "10.0.0.2:6346", + "192.168.0.31:63045", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 6.000.040" + ], + [ + "8", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "10.0.0.2:6346", + "192.168.0.31:63045", + "TCP", + "Transport", + "SEQ: 5.000.001" + ], + [ + "8", + "10.0.0.2:6346", + "192.168.0.31:63045", + "GNT", + "Anwendung", + "2132446730//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "9", + "192.168.0.31:63045", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 6.000.040, ACK: 5.000.049" + ], + [ + "10", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "10", + "192.168.0.31:54369", + "10.0.0.2:6346", + "TCP", + "Transport", + "SYN, SEQ: 10.000.000" + ], + [ + "11", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "10.0.0.2:6346", + "192.168.0.31:54369", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000, ACK: 10.000.001" + ], + [ + "12", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "12", + "192.168.0.31:54369", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 10.000.001, ACK: 7.000.001" + ], + [ + "13", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "13", + "192.168.0.31:54369", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 10.000.001" + ], + [ + "13", + "192.168.0.31:54369", + "10.0.0.2:6346", + "GNT", + "Anwendung", + "612664560//0x00//1//7//0//192.168.0.30" + ], + [ + "14", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "10.0.0.2:6346", + "192.168.0.31:54369", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 10.000.039" + ], + [ + "15", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "10.0.0.2:6346", + "192.168.0.31:54369", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "15", + "10.0.0.2:6346", + "192.168.0.31:54369", + "GNT", + "Anwendung", + "612664560//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "16", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "16", + "192.168.0.31:54369", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 10.000.039, ACK: 7.000.048" + ], + [ + "17", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "17", + "192.168.0.30:62022", + "10.0.0.2:6346", + "TCP", + "Transport", + "SYN, SEQ: 12.000.000" + ], + [ + "18", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "10.0.0.2:6346", + "192.168.0.30:62022", + "TCP", + "Transport", + "SYN, SEQ: 11.000.000, ACK: 12.000.001" + ], + [ + "19", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "19", + "192.168.0.30:62022", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 12.000.001, ACK: 11.000.001" + ], + [ + "20", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "20", + "192.168.0.30:62022", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 12.000.001" + ], + [ + "20", + "192.168.0.30:62022", + "10.0.0.2:6346", + "GNT", + "Anwendung", + "219206720//0x00//0//8//0//192.168.0.30" + ], + [ + "21", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "10.0.0.2:6346", + "192.168.0.30:62022", + "TCP", + "Transport", + "SEQ: 11.000.001, ACK: 12.000.039" + ], + [ + "22", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "10.0.0.2:6346", + "192.168.0.30:62022", + "TCP", + "Transport", + "SEQ: 11.000.001" + ], + [ + "22", + "10.0.0.2:6346", + "192.168.0.30:62022", + "GNT", + "Anwendung", + "219206720//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "23", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "23", + "192.168.0.30:62022", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 12.000.039, ACK: 11.000.048" + ], + [ + "24", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "24", + "10.0.0.2:56447", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 14.000.000" + ], + [ + "25", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "25", + "192.168.0.31:6346", + "10.0.0.2:56447", + "TCP", + "Transport", + "SYN, SEQ: 9.000.000, ACK: 14.000.001" + ], + [ + "26", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "10.0.0.2:56447", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 14.000.001, ACK: 9.000.001" + ], + [ + "27", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "10.0.0.2:56447", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 14.000.001" + ], + [ + "27", + "10.0.0.2:56447", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "219206720//0x00//1//7//0//192.168.0.30" + ], + [ + "28", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "28", + "192.168.0.31:6346", + "10.0.0.2:56447", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 14.000.039" + ], + [ + "29", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "29", + "192.168.0.31:6346", + "10.0.0.2:56447", + "TCP", + "Transport", + "SEQ: 9.000.001" + ], + [ + "29", + "192.168.0.31:6346", + "10.0.0.2:56447", + "GNT", + "Anwendung", + "219206720//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "30", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "30", + "10.0.0.2:56447", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 14.000.039, ACK: 9.000.053" + ], + [ + "31", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "31", + "10.0.0.2:6346", + "192.168.0.30:62022", + "TCP", + "Transport", + "SEQ: 11.000.048" + ], + [ + "31", + "10.0.0.2:6346", + "192.168.0.30:62022", + "GNT", + "Anwendung", + "219206720//0x01//1//7//109//192.168.0.31//6346//0//0" + ], + [ + "32", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "32", + "192.168.0.30:62022", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 12.000.039, ACK: 11.000.100" + ], + [ + "33", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "33", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "33", + "192.168.0.30:58194", + "10.0.0.2:6346", + "TCP", + "Transport", + "SYN, SEQ: 19.000.000" + ], + [ + "34", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "34", + "10.0.0.2:6346", + "192.168.0.30:58194", + "TCP", + "Transport", + "SYN, SEQ: 13.000.000, ACK: 19.000.001" + ], + [ + "35", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "35", + "192.168.0.30:58194", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 19.000.001, ACK: 13.000.001" + ], + [ + "36", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "36", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "36", + "192.168.0.30:58194", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 19.000.001" + ], + [ + "36", + "192.168.0.30:58194", + "10.0.0.2:6346", + "GNT", + "Anwendung", + "829504624//0x00//1//7//0//192.168.0.20" + ], + [ + "37", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "10.0.0.2:6346", + "192.168.0.30:58194", + "TCP", + "Transport", + "SEQ: 13.000.001, ACK: 19.000.039" + ], + [ + "38", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "38", + "10.0.0.2:6346", + "192.168.0.30:58194", + "TCP", + "Transport", + "SEQ: 13.000.001" + ], + [ + "38", + "10.0.0.2:6346", + "192.168.0.30:58194", + "GNT", + "Anwendung", + "829504624//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "39", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "39", + "192.168.0.31:49870", + "10.0.0.2:6346", + "TCP", + "Transport", + "SYN, SEQ: 22.000.000" + ], + [ + "40", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "40", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "40", + "10.0.0.2:6346", + "192.168.0.31:49870", + "TCP", + "Transport", + "SYN, SEQ: 21.000.000, ACK: 22.000.001" + ], + [ + "41", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "41", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "41", + "192.168.0.30:58194", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 19.000.039, ACK: 13.000.048" + ], + [ + "42", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "42", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "42", + "10.0.0.2:54065", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 23.000.000" + ], + [ + "43", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "43", + "192.168.0.31:49870", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 22.000.001, ACK: 21.000.001" + ], + [ + "44", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "44", + "192.168.0.31:49870", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 22.000.001" + ], + [ + "44", + "192.168.0.31:49870", + "10.0.0.2:6346", + "GNT", + "Anwendung", + "829504624//0x00//2//6//0//192.168.0.20" + ], + [ + "45", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "45", + "192.168.0.31:6346", + "10.0.0.2:54065", + "TCP", + "Transport", + "SYN, SEQ: 20.000.000, ACK: 23.000.001" + ], + [ + "46", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "46", + "10.0.0.2:6346", + "192.168.0.31:49870", + "TCP", + "Transport", + "SEQ: 21.000.001, ACK: 22.000.039" + ], + [ + "47", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "47", + "10.0.0.2:6346", + "192.168.0.31:49870", + "TCP", + "Transport", + "FIN, SEQ: 21.000.001" + ], + [ + "48", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "48", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "48", + "10.0.0.2:54065", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 23.000.001, ACK: 20.000.001" + ], + [ + "49", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "49", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "49", + "10.0.0.2:54065", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 23.000.001" + ], + [ + "49", + "10.0.0.2:54065", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "829504624//0x00//2//6//0//192.168.0.20" + ], + [ + "50", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "50", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "50", + "192.168.0.31:49870", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 22.000.039, ACK: 21.000.002" + ], + [ + "51", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "51", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "51", + "192.168.0.31:49870", + "10.0.0.2:6346", + "TCP", + "Transport", + "FIN, SEQ: 22.000.039" + ], + [ + "52", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "52", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "52", + "192.168.0.31:6346", + "10.0.0.2:54065", + "TCP", + "Transport", + "SEQ: 20.000.001, ACK: 23.000.039" + ], + [ + "53", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "53", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "53", + "10.0.0.2:6346", + "192.168.0.31:49870", + "TCP", + "Transport", + "SEQ: 21.000.002, ACK: 22.000.040" + ], + [ + "54", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "54", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "54", + "192.168.0.31:6346", + "10.0.0.2:54065", + "TCP", + "Transport", + "FIN, SEQ: 20.000.001" + ], + [ + "55", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "55", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "55", + "10.0.0.2:54065", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 23.000.039, ACK: 20.000.002" + ], + [ + "56", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "56", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "56", + "10.0.0.2:54065", + "192.168.0.31:6346", + "TCP", + "Transport", + "FIN, SEQ: 23.000.039" + ], + [ + "57", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "57", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "57", + "192.168.0.31:6346", + "10.0.0.2:54065", + "TCP", + "Transport", + "SEQ: 20.000.002, ACK: 23.000.040" + ] + ], + "00000000-0000-0000-0000-000000000406": [ + [ + "1", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "10.0.0.1", + "10.0.0.2", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.2 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.2]" + ], + [ + "2", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "10.0.0.2", + "10.0.0.1", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:16 [op=REPLY, sender=02:00:00:00:04:16|10.0.0.2, target=02:00:00:00:04:52|10.0.0.1]" + ], + [ + "3", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "3", + "192.168.0.31:63045", + "10.0.0.2:6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "10.0.0.2:6346", + "192.168.0.31:63045", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000, ACK: 6.000.001" + ], + [ + "5", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "5", + "192.168.0.31:63045", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 6.000.001, ACK: 5.000.001" + ], + [ + "6", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "6", + "192.168.0.31:63045", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "6", + "192.168.0.31:63045", + "10.0.0.2:6346", + "GNT", + "Anwendung", + "2132446730//0x00//0//8//0//192.168.0.31" + ], + [ + "7", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "10.0.0.2:6346", + "192.168.0.31:63045", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 6.000.040" + ], + [ + "8", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "10.0.0.2:6346", + "192.168.0.31:63045", + "TCP", + "Transport", + "SEQ: 5.000.001" + ], + [ + "8", + "10.0.0.2:6346", + "192.168.0.31:63045", + "GNT", + "Anwendung", + "2132446730//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "9", + "192.168.0.31:63045", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 6.000.040, ACK: 5.000.049" + ], + [ + "10", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "10", + "192.168.0.31:54369", + "10.0.0.2:6346", + "TCP", + "Transport", + "SYN, SEQ: 10.000.000" + ], + [ + "11", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "10.0.0.2:6346", + "192.168.0.31:54369", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000, ACK: 10.000.001" + ], + [ + "12", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "12", + "192.168.0.31:54369", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 10.000.001, ACK: 7.000.001" + ], + [ + "13", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "13", + "192.168.0.31:54369", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 10.000.001" + ], + [ + "13", + "192.168.0.31:54369", + "10.0.0.2:6346", + "GNT", + "Anwendung", + "612664560//0x00//1//7//0//192.168.0.30" + ], + [ + "14", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "10.0.0.2:6346", + "192.168.0.31:54369", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 10.000.039" + ], + [ + "15", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "10.0.0.2:6346", + "192.168.0.31:54369", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "15", + "10.0.0.2:6346", + "192.168.0.31:54369", + "GNT", + "Anwendung", + "612664560//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "16", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "16", + "192.168.0.31:54369", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 10.000.039, ACK: 7.000.048" + ], + [ + "17", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "17", + "192.168.0.30:62022", + "10.0.0.2:6346", + "TCP", + "Transport", + "SYN, SEQ: 12.000.000" + ], + [ + "18", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "10.0.0.2:6346", + "192.168.0.30:62022", + "TCP", + "Transport", + "SYN, SEQ: 11.000.000, ACK: 12.000.001" + ], + [ + "19", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "19", + "192.168.0.30:62022", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 12.000.001, ACK: 11.000.001" + ], + [ + "20", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "20", + "192.168.0.30:62022", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 12.000.001" + ], + [ + "20", + "192.168.0.30:62022", + "10.0.0.2:6346", + "GNT", + "Anwendung", + "219206720//0x00//0//8//0//192.168.0.30" + ], + [ + "21", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "10.0.0.2:6346", + "192.168.0.30:62022", + "TCP", + "Transport", + "SEQ: 11.000.001, ACK: 12.000.039" + ], + [ + "22", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "10.0.0.2:6346", + "192.168.0.30:62022", + "TCP", + "Transport", + "SEQ: 11.000.001" + ], + [ + "22", + "10.0.0.2:6346", + "192.168.0.30:62022", + "GNT", + "Anwendung", + "219206720//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "23", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "23", + "192.168.0.30:62022", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 12.000.039, ACK: 11.000.048" + ], + [ + "24", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "24", + "10.0.0.2:56447", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 14.000.000" + ], + [ + "25", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "25", + "192.168.0.31:6346", + "10.0.0.2:56447", + "TCP", + "Transport", + "SYN, SEQ: 9.000.000, ACK: 14.000.001" + ], + [ + "26", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "10.0.0.2:56447", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 14.000.001, ACK: 9.000.001" + ], + [ + "27", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "10.0.0.2:56447", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 14.000.001" + ], + [ + "27", + "10.0.0.2:56447", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "219206720//0x00//1//7//0//192.168.0.30" + ], + [ + "28", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "28", + "192.168.0.31:6346", + "10.0.0.2:56447", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 14.000.039" + ], + [ + "29", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "29", + "192.168.0.31:6346", + "10.0.0.2:56447", + "TCP", + "Transport", + "SEQ: 9.000.001" + ], + [ + "29", + "192.168.0.31:6346", + "10.0.0.2:56447", + "GNT", + "Anwendung", + "219206720//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "30", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "30", + "10.0.0.2:56447", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 14.000.039, ACK: 9.000.053" + ], + [ + "31", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "31", + "10.0.0.2:6346", + "192.168.0.30:62022", + "TCP", + "Transport", + "SEQ: 11.000.048" + ], + [ + "31", + "10.0.0.2:6346", + "192.168.0.30:62022", + "GNT", + "Anwendung", + "219206720//0x01//1//7//109//192.168.0.31//6346//0//0" + ], + [ + "32", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "32", + "192.168.0.30:62022", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 12.000.039, ACK: 11.000.100" + ], + [ + "33", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "33", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "33", + "192.168.0.30:58194", + "10.0.0.2:6346", + "TCP", + "Transport", + "SYN, SEQ: 19.000.000" + ], + [ + "34", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "34", + "10.0.0.2:6346", + "192.168.0.30:58194", + "TCP", + "Transport", + "SYN, SEQ: 13.000.000, ACK: 19.000.001" + ], + [ + "35", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "35", + "192.168.0.30:58194", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 19.000.001, ACK: 13.000.001" + ], + [ + "36", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "36", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "36", + "192.168.0.30:58194", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 19.000.001" + ], + [ + "36", + "192.168.0.30:58194", + "10.0.0.2:6346", + "GNT", + "Anwendung", + "829504624//0x00//1//7//0//192.168.0.20" + ], + [ + "37", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "10.0.0.2:6346", + "192.168.0.30:58194", + "TCP", + "Transport", + "SEQ: 13.000.001, ACK: 19.000.039" + ], + [ + "38", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "38", + "10.0.0.2:6346", + "192.168.0.30:58194", + "TCP", + "Transport", + "SEQ: 13.000.001" + ], + [ + "38", + "10.0.0.2:6346", + "192.168.0.30:58194", + "GNT", + "Anwendung", + "829504624//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "39", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "39", + "192.168.0.31:49870", + "10.0.0.2:6346", + "TCP", + "Transport", + "SYN, SEQ: 22.000.000" + ], + [ + "40", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "40", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "40", + "10.0.0.2:6346", + "192.168.0.31:49870", + "TCP", + "Transport", + "SYN, SEQ: 21.000.000, ACK: 22.000.001" + ], + [ + "41", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "41", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "41", + "192.168.0.30:58194", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 19.000.039, ACK: 13.000.048" + ], + [ + "42", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "42", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "42", + "10.0.0.2:54065", + "192.168.0.31:6346", + "TCP", + "Transport", + "SYN, SEQ: 23.000.000" + ], + [ + "43", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "43", + "192.168.0.31:49870", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 22.000.001, ACK: 21.000.001" + ], + [ + "44", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "44", + "192.168.0.31:49870", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 22.000.001" + ], + [ + "44", + "192.168.0.31:49870", + "10.0.0.2:6346", + "GNT", + "Anwendung", + "829504624//0x00//2//6//0//192.168.0.20" + ], + [ + "45", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "45", + "10.0.0.2:6346", + "192.168.0.31:49870", + "TCP", + "Transport", + "SEQ: 21.000.001, ACK: 22.000.039" + ], + [ + "46", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "46", + "10.0.0.2:6346", + "192.168.0.31:49870", + "TCP", + "Transport", + "FIN, SEQ: 21.000.001" + ], + [ + "47", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "47", + "192.168.0.31:6346", + "10.0.0.2:54065", + "TCP", + "Transport", + "SYN, SEQ: 20.000.000, ACK: 23.000.001" + ], + [ + "48", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "48", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "48", + "10.0.0.2:54065", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 23.000.001, ACK: 20.000.001" + ], + [ + "49", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "49", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "49", + "10.0.0.2:54065", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 23.000.001" + ], + [ + "49", + "10.0.0.2:54065", + "192.168.0.31:6346", + "GNT", + "Anwendung", + "829504624//0x00//2//6//0//192.168.0.20" + ], + [ + "50", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "50", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "50", + "192.168.0.31:49870", + "10.0.0.2:6346", + "TCP", + "Transport", + "SEQ: 22.000.039, ACK: 21.000.002" + ], + [ + "51", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "51", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "51", + "192.168.0.31:49870", + "10.0.0.2:6346", + "TCP", + "Transport", + "FIN, SEQ: 22.000.039" + ], + [ + "52", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "52", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "52", + "10.0.0.2:6346", + "192.168.0.31:49870", + "TCP", + "Transport", + "SEQ: 21.000.002, ACK: 22.000.040" + ], + [ + "53", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "53", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "53", + "192.168.0.31:6346", + "10.0.0.2:54065", + "TCP", + "Transport", + "SEQ: 20.000.001, ACK: 23.000.039" + ], + [ + "54", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "54", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "54", + "192.168.0.31:6346", + "10.0.0.2:54065", + "TCP", + "Transport", + "FIN, SEQ: 20.000.001" + ], + [ + "55", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "55", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "55", + "10.0.0.2:54065", + "192.168.0.31:6346", + "TCP", + "Transport", + "SEQ: 23.000.039, ACK: 20.000.002" + ], + [ + "56", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "56", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "56", + "10.0.0.2:54065", + "192.168.0.31:6346", + "TCP", + "Transport", + "FIN, SEQ: 23.000.039" + ], + [ + "57", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "57", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "57", + "192.168.0.31:6346", + "10.0.0.2:54065", + "TCP", + "Transport", + "SEQ: 20.000.002, ACK: 23.000.040" + ] + ] + }, + "layeredRows": { + "00000000-0000-0000-0000-000000000401": [ + [ + "1", + "02:00:00:00:04:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.31", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "2", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "3", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.30", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "4", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "5", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "5", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:13 [op=REPLY, sender=02:00:00:00:04:13|192.168.0.30, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "6", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "56465", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 16.000.000" + ], + [ + "7", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "6346", + "56465", + "TCP", + "Transport", + "SYN, SEQ: 2.000.000, ACK: 16.000.001" + ], + [ + "8", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "56465", + "6346", + "TCP", + "Transport", + "SEQ: 16.000.001, ACK: 2.000.001" + ], + [ + "9", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "56465", + "6346", + "TCP", + "Transport", + "SEQ: 16.000.001" + ], + [ + "9", + null, + null, + "GNT", + "Anwendung", + "829504624//0x00//0//8//0//192.168.0.20" + ], + [ + "10", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "6346", + "56465", + "TCP", + "Transport", + "SEQ: 2.000.001, ACK: 16.000.039" + ], + [ + "11", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "6346", + "56465", + "TCP", + "Transport", + "SEQ: 2.000.001" + ], + [ + "11", + null, + null, + "GNT", + "Anwendung", + "829504624//0x01//0//8//109//192.168.0.30//6346//0//0" + ], + [ + "12", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "56465", + "6346", + "TCP", + "Transport", + "SEQ: 16.000.039, ACK: 2.000.053" + ], + [ + "13", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "6346", + "56465", + "TCP", + "Transport", + "SEQ: 2.000.053" + ], + [ + "13", + null, + null, + "GNT", + "Anwendung", + "829504624//0x01//1//7//109//192.168.0.31//6346//0//0" + ], + [ + "14", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "56465", + "6346", + "TCP", + "Transport", + "SEQ: 16.000.039, ACK: 2.000.105" + ], + [ + "15", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "6346", + "56465", + "TCP", + "Transport", + "SEQ: 2.000.105" + ], + [ + "15", + null, + null, + "GNT", + "Anwendung", + "829504624//0x01//1//7//77//10.0.0.2//6346//0//0" + ], + [ + "16", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "56465", + "6346", + "TCP", + "Transport", + "SEQ: 16.000.039, ACK: 2.000.152" + ] + ], + "00000000-0000-0000-0000-000000000402": [ + [ + "1", + "02:00:00:00:04:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.31", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "2", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "3", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.30", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "4", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "4", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ] + ], + "00000000-0000-0000-0000-000000000403": [ + [ + "1", + "02:00:00:00:04:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.31", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "2", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "3", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "3", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "4", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "61938", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 8.000.000" + ], + [ + "5", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "6346", + "61938", + "TCP", + "Transport", + "SYN, SEQ: 3.000.000, ACK: 8.000.001" + ], + [ + "6", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "61938", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.001, ACK: 3.000.001" + ], + [ + "7", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "61938", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.001" + ], + [ + "7", + null, + null, + "GNT", + "Anwendung", + "612664560//0x00//0//8//0//192.168.0.30" + ], + [ + "8", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "6346", + "61938", + "TCP", + "Transport", + "SEQ: 3.000.001, ACK: 8.000.039" + ], + [ + "9", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "6346", + "61938", + "TCP", + "Transport", + "SEQ: 3.000.001" + ], + [ + "9", + null, + null, + "GNT", + "Anwendung", + "612664560//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "10", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "10", + "61938", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.039, ACK: 3.000.053" + ], + [ + "11", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "6346", + "61938", + "TCP", + "Transport", + "SEQ: 3.000.053" + ], + [ + "11", + null, + null, + "GNT", + "Anwendung", + "612664560//0x01//1//7//77//10.0.0.2//6346//0//0" + ], + [ + "12", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "61938", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.039, ACK: 3.000.100" + ], + [ + "13", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "13", + "192.168.0.30", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "14", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "14", + "192.168.0.1", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:51 [op=REPLY, sender=02:00:00:00:04:51|192.168.0.1, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "15", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "62022", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 12.000.000" + ], + [ + "16", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "16", + "6346", + "62022", + "TCP", + "Transport", + "SYN, SEQ: 11.000.000, ACK: 12.000.001" + ], + [ + "17", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "62022", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.001, ACK: 11.000.001" + ], + [ + "18", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "62022", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.001" + ], + [ + "18", + null, + null, + "GNT", + "Anwendung", + "219206720//0x00//0//8//0//192.168.0.30" + ], + [ + "19", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "19", + "6346", + "62022", + "TCP", + "Transport", + "SEQ: 11.000.001, ACK: 12.000.039" + ], + [ + "20", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "20", + "6346", + "62022", + "TCP", + "Transport", + "SEQ: 11.000.001" + ], + [ + "20", + null, + null, + "GNT", + "Anwendung", + "219206720//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "21", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "62022", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.039, ACK: 11.000.048" + ], + [ + "22", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "22", + "6346", + "62022", + "TCP", + "Transport", + "SEQ: 11.000.048" + ], + [ + "22", + null, + null, + "GNT", + "Anwendung", + "219206720//0x01//1//7//109//192.168.0.31//6346//0//0" + ], + [ + "23", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "23", + "62022", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.039, ACK: 11.000.100" + ], + [ + "24", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "24", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "25", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x806" + ], + [ + "25", + "192.168.0.30", + "192.168.0.20", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:13 [op=REPLY, sender=02:00:00:00:04:13|192.168.0.30, target=02:00:00:00:04:11|192.168.0.20]" + ], + [ + "26", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "56465", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 16.000.000" + ], + [ + "27", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "6346", + "56465", + "TCP", + "Transport", + "SYN, SEQ: 2.000.000, ACK: 16.000.001" + ], + [ + "28", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "28", + "56465", + "6346", + "TCP", + "Transport", + "SEQ: 16.000.001, ACK: 2.000.001" + ], + [ + "29", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "29", + "56465", + "6346", + "TCP", + "Transport", + "SEQ: 16.000.001" + ], + [ + "29", + null, + null, + "GNT", + "Anwendung", + "829504624//0x00//0//8//0//192.168.0.20" + ], + [ + "30", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "30", + "6346", + "56465", + "TCP", + "Transport", + "SEQ: 2.000.001, ACK: 16.000.039" + ], + [ + "31", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "31", + "6346", + "56465", + "TCP", + "Transport", + "SEQ: 2.000.001" + ], + [ + "31", + null, + null, + "GNT", + "Anwendung", + "829504624//0x01//0//8//109//192.168.0.30//6346//0//0" + ], + [ + "32", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "32", + "56465", + "6346", + "TCP", + "Transport", + "SEQ: 16.000.039, ACK: 2.000.053" + ], + [ + "33", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "33", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "33", + "51726", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 18.000.000" + ], + [ + "34", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "34", + "58194", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 19.000.000" + ], + [ + "35", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "35", + "6346", + "51726", + "TCP", + "Transport", + "SYN, SEQ: 15.000.000, ACK: 18.000.001" + ], + [ + "36", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "36", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "36", + "51726", + "6346", + "TCP", + "Transport", + "SEQ: 18.000.001, ACK: 15.000.001" + ], + [ + "37", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "51726", + "6346", + "TCP", + "Transport", + "SEQ: 18.000.001" + ], + [ + "37", + null, + null, + "GNT", + "Anwendung", + "829504624//0x00//1//7//0//192.168.0.20" + ], + [ + "38", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "38", + "6346", + "58194", + "TCP", + "Transport", + "SYN, SEQ: 13.000.000, ACK: 19.000.001" + ], + [ + "39", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "39", + "58194", + "6346", + "TCP", + "Transport", + "SEQ: 19.000.001, ACK: 13.000.001" + ], + [ + "40", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "40", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "40", + "58194", + "6346", + "TCP", + "Transport", + "SEQ: 19.000.001" + ], + [ + "40", + null, + null, + "GNT", + "Anwendung", + "829504624//0x00//1//7//0//192.168.0.20" + ], + [ + "41", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "41", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "41", + "6346", + "51726", + "TCP", + "Transport", + "SEQ: 15.000.001, ACK: 18.000.039" + ], + [ + "42", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "42", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "42", + "6346", + "51726", + "TCP", + "Transport", + "SEQ: 15.000.001" + ], + [ + "42", + null, + null, + "GNT", + "Anwendung", + "829504624//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "43", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "43", + "51726", + "6346", + "TCP", + "Transport", + "SEQ: 18.000.039, ACK: 15.000.053" + ], + [ + "44", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "44", + "6346", + "56465", + "TCP", + "Transport", + "SEQ: 2.000.053" + ], + [ + "44", + null, + null, + "GNT", + "Anwendung", + "829504624//0x01//1//7//109//192.168.0.31//6346//0//0" + ], + [ + "45", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "45", + "6346", + "58194", + "TCP", + "Transport", + "SEQ: 13.000.001, ACK: 19.000.039" + ], + [ + "46", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "46", + "6346", + "58194", + "TCP", + "Transport", + "SEQ: 13.000.001" + ], + [ + "46", + null, + null, + "GNT", + "Anwendung", + "829504624//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "47", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "47", + "58194", + "6346", + "TCP", + "Transport", + "SEQ: 19.000.039, ACK: 13.000.048" + ], + [ + "48", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "48", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "48", + "56465", + "6346", + "TCP", + "Transport", + "SEQ: 16.000.039, ACK: 2.000.105" + ], + [ + "49", + "02:00:00:00:04:13", + "02:00:00:00:04:11", + "", + "Netzzugang", + "0x800" + ], + [ + "49", + "192.168.0.30", + "192.168.0.20", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "49", + "6346", + "56465", + "TCP", + "Transport", + "SEQ: 2.000.105" + ], + [ + "49", + null, + null, + "GNT", + "Anwendung", + "829504624//0x01//1//7//77//10.0.0.2//6346//0//0" + ], + [ + "50", + "02:00:00:00:04:11", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "50", + "192.168.0.20", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "50", + "56465", + "6346", + "TCP", + "Transport", + "SEQ: 16.000.039, ACK: 2.000.152" + ] + ], + "00000000-0000-0000-0000-000000000404": [ + [ + "1", + "02:00:00:00:04:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.31", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "2", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.1", + "192.168.0.31", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:51 [op=REPLY, sender=02:00:00:00:04:51|192.168.0.1, target=02:00:00:00:04:14|192.168.0.31]" + ], + [ + "3", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "63045", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "4", + "6346", + "63045", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000, ACK: 6.000.001" + ], + [ + "5", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "63045", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.001, ACK: 5.000.001" + ], + [ + "6", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "63045", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "6", + null, + null, + "GNT", + "Anwendung", + "2132446730//0x00//0//8//0//192.168.0.31" + ], + [ + "7", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "7", + "6346", + "63045", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 6.000.040" + ], + [ + "8", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "8", + "6346", + "63045", + "TCP", + "Transport", + "SEQ: 5.000.001" + ], + [ + "8", + null, + null, + "GNT", + "Anwendung", + "2132446730//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "63045", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.040, ACK: 5.000.049" + ], + [ + "10", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "10", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "11", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "11", + "192.168.0.31", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "12", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "12", + "61938", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 8.000.000" + ], + [ + "13", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "6346", + "61938", + "TCP", + "Transport", + "SYN, SEQ: 3.000.000, ACK: 8.000.001" + ], + [ + "14", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "61938", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.001, ACK: 3.000.001" + ], + [ + "15", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "61938", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.001" + ], + [ + "15", + null, + null, + "GNT", + "Anwendung", + "612664560//0x00//0//8//0//192.168.0.30" + ], + [ + "16", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "16", + "6346", + "61938", + "TCP", + "Transport", + "SEQ: 3.000.001, ACK: 8.000.039" + ], + [ + "17", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "6346", + "61938", + "TCP", + "Transport", + "SEQ: 3.000.001" + ], + [ + "17", + null, + null, + "GNT", + "Anwendung", + "612664560//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "18", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "61938", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.039, ACK: 3.000.053" + ], + [ + "19", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "19", + "54369", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 10.000.000" + ], + [ + "20", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "20", + "6346", + "54369", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000, ACK: 10.000.001" + ], + [ + "21", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "54369", + "6346", + "TCP", + "Transport", + "SEQ: 10.000.001, ACK: 7.000.001" + ], + [ + "22", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "54369", + "6346", + "TCP", + "Transport", + "SEQ: 10.000.001" + ], + [ + "22", + null, + null, + "GNT", + "Anwendung", + "612664560//0x00//1//7//0//192.168.0.30" + ], + [ + "23", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "23", + "6346", + "54369", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 10.000.039" + ], + [ + "24", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "24", + "6346", + "54369", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "24", + null, + null, + "GNT", + "Anwendung", + "612664560//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "25", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "25", + "54369", + "6346", + "TCP", + "Transport", + "SEQ: 10.000.039, ACK: 7.000.048" + ], + [ + "26", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "6346", + "61938", + "TCP", + "Transport", + "SEQ: 3.000.053" + ], + [ + "26", + null, + null, + "GNT", + "Anwendung", + "612664560//0x01//1//7//77//10.0.0.2//6346//0//0" + ], + [ + "27", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "61938", + "6346", + "TCP", + "Transport", + "SEQ: 8.000.039, ACK: 3.000.100" + ], + [ + "28", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "28", + "192.168.0.30", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "29", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "29", + "56447", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 14.000.000" + ], + [ + "30", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "30", + "6346", + "56447", + "TCP", + "Transport", + "SYN, SEQ: 9.000.000, ACK: 14.000.001" + ], + [ + "31", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "31", + "56447", + "6346", + "TCP", + "Transport", + "SEQ: 14.000.001, ACK: 9.000.001" + ], + [ + "32", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "32", + "56447", + "6346", + "TCP", + "Transport", + "SEQ: 14.000.001" + ], + [ + "32", + null, + null, + "GNT", + "Anwendung", + "219206720//0x00//1//7//0//192.168.0.30" + ], + [ + "33", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "33", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "33", + "6346", + "56447", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 14.000.039" + ], + [ + "34", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "34", + "6346", + "56447", + "TCP", + "Transport", + "SEQ: 9.000.001" + ], + [ + "34", + null, + null, + "GNT", + "Anwendung", + "219206720//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "35", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "35", + "56447", + "6346", + "TCP", + "Transport", + "SEQ: 14.000.039, ACK: 9.000.053" + ], + [ + "36", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "36", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "37", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "51726", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 18.000.000" + ], + [ + "38", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "38", + "6346", + "51726", + "TCP", + "Transport", + "SYN, SEQ: 15.000.000, ACK: 18.000.001" + ], + [ + "39", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "39", + "51726", + "6346", + "TCP", + "Transport", + "SEQ: 18.000.001, ACK: 15.000.001" + ], + [ + "40", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "40", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "40", + "51726", + "6346", + "TCP", + "Transport", + "SEQ: 18.000.001" + ], + [ + "40", + null, + null, + "GNT", + "Anwendung", + "829504624//0x00//1//7//0//192.168.0.20" + ], + [ + "41", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "41", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "41", + "6346", + "51726", + "TCP", + "Transport", + "SEQ: 15.000.001, ACK: 18.000.039" + ], + [ + "42", + "02:00:00:00:04:14", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "42", + "192.168.0.31", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "42", + "6346", + "51726", + "TCP", + "Transport", + "SEQ: 15.000.001" + ], + [ + "42", + null, + null, + "GNT", + "Anwendung", + "829504624//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "43", + "02:00:00:00:04:13", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.30", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "43", + "51726", + "6346", + "TCP", + "Transport", + "SEQ: 18.000.039, ACK: 15.000.053" + ], + [ + "44", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "44", + "49870", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 22.000.000" + ], + [ + "45", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "45", + "6346", + "49870", + "TCP", + "Transport", + "SYN, SEQ: 21.000.000, ACK: 22.000.001" + ], + [ + "46", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "46", + "49870", + "6346", + "TCP", + "Transport", + "SEQ: 22.000.001, ACK: 21.000.001" + ], + [ + "47", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "47", + "49870", + "6346", + "TCP", + "Transport", + "SEQ: 22.000.001" + ], + [ + "47", + null, + null, + "GNT", + "Anwendung", + "829504624//0x00//2//6//0//192.168.0.20" + ], + [ + "48", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "48", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "48", + "54065", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 23.000.000" + ], + [ + "49", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "49", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "49", + "6346", + "54065", + "TCP", + "Transport", + "SYN, SEQ: 20.000.000, ACK: 23.000.001" + ], + [ + "50", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "50", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "50", + "6346", + "49870", + "TCP", + "Transport", + "SEQ: 21.000.001, ACK: 22.000.039" + ], + [ + "51", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "51", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "51", + "6346", + "49870", + "TCP", + "Transport", + "FIN, SEQ: 21.000.001" + ], + [ + "52", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "52", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "52", + "49870", + "6346", + "TCP", + "Transport", + "SEQ: 22.000.039, ACK: 21.000.002" + ], + [ + "53", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "53", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "53", + "54065", + "6346", + "TCP", + "Transport", + "SEQ: 23.000.001, ACK: 20.000.001" + ], + [ + "54", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "54", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "54", + "49870", + "6346", + "TCP", + "Transport", + "FIN, SEQ: 22.000.039" + ], + [ + "55", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "55", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "55", + "54065", + "6346", + "TCP", + "Transport", + "SEQ: 23.000.001" + ], + [ + "55", + null, + null, + "GNT", + "Anwendung", + "829504624//0x00//2//6//0//192.168.0.20" + ], + [ + "56", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "56", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "56", + "6346", + "54065", + "TCP", + "Transport", + "SEQ: 20.000.001, ACK: 23.000.039" + ], + [ + "57", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "57", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "57", + "6346", + "54065", + "TCP", + "Transport", + "FIN, SEQ: 20.000.001" + ], + [ + "58", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "58", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "58", + "6346", + "49870", + "TCP", + "Transport", + "SEQ: 21.000.002, ACK: 22.000.040" + ], + [ + "59", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "59", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "59", + "54065", + "6346", + "TCP", + "Transport", + "SEQ: 23.000.039, ACK: 20.000.002" + ], + [ + "60", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "60", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "60", + "54065", + "6346", + "TCP", + "Transport", + "FIN, SEQ: 23.000.039" + ], + [ + "61", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "61", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "61", + "6346", + "54065", + "TCP", + "Transport", + "SEQ: 20.000.002, ACK: 23.000.040" + ] + ], + "00000000-0000-0000-0000-000000000405": [ + [ + "1", + "02:00:00:00:04:14", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "192.168.0.31", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:14|192.168.0.31, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "2", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "192.168.0.1", + "192.168.0.31", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:51 [op=REPLY, sender=02:00:00:00:04:51|192.168.0.1, target=02:00:00:00:04:14|192.168.0.31]" + ], + [ + "3", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "3", + "63045", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "4", + "6346", + "63045", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000, ACK: 6.000.001" + ], + [ + "5", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "5", + "63045", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.001, ACK: 5.000.001" + ], + [ + "6", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "6", + "63045", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "6", + null, + null, + "GNT", + "Anwendung", + "2132446730//0x00//0//8//0//192.168.0.31" + ], + [ + "7", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "7", + "6346", + "63045", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 6.000.040" + ], + [ + "8", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "8", + "6346", + "63045", + "TCP", + "Transport", + "SEQ: 5.000.001" + ], + [ + "8", + null, + null, + "GNT", + "Anwendung", + "2132446730//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "9", + "63045", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.040, ACK: 5.000.049" + ], + [ + "10", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "10", + "192.168.0.30", + "192.168.0.31", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.31]" + ], + [ + "11", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "54369", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 10.000.000" + ], + [ + "12", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "12", + "6346", + "54369", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000, ACK: 10.000.001" + ], + [ + "13", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "13", + "54369", + "6346", + "TCP", + "Transport", + "SEQ: 10.000.001, ACK: 7.000.001" + ], + [ + "14", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "54369", + "6346", + "TCP", + "Transport", + "SEQ: 10.000.001" + ], + [ + "14", + null, + null, + "GNT", + "Anwendung", + "612664560//0x00//1//7//0//192.168.0.30" + ], + [ + "15", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "15", + "6346", + "54369", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 10.000.039" + ], + [ + "16", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "16", + "6346", + "54369", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "16", + null, + null, + "GNT", + "Anwendung", + "612664560//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "17", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "17", + "54369", + "6346", + "TCP", + "Transport", + "SEQ: 10.000.039, ACK: 7.000.048" + ], + [ + "18", + "02:00:00:00:04:13", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "18", + "192.168.0.30", + "192.168.0.1", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.1 [op=REQUEST, sender=02:00:00:00:04:13|192.168.0.30, target=FF:FF:FF:FF:FF:FF|192.168.0.1]" + ], + [ + "19", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x806" + ], + [ + "19", + "192.168.0.1", + "192.168.0.30", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:51 [op=REPLY, sender=02:00:00:00:04:51|192.168.0.1, target=02:00:00:00:04:13|192.168.0.30]" + ], + [ + "20", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "20", + "62022", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 12.000.000" + ], + [ + "21", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "21", + "6346", + "62022", + "TCP", + "Transport", + "SYN, SEQ: 11.000.000, ACK: 12.000.001" + ], + [ + "22", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "62022", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.001, ACK: 11.000.001" + ], + [ + "23", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "23", + "62022", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.001" + ], + [ + "23", + null, + null, + "GNT", + "Anwendung", + "219206720//0x00//0//8//0//192.168.0.30" + ], + [ + "24", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "24", + "6346", + "62022", + "TCP", + "Transport", + "SEQ: 11.000.001, ACK: 12.000.039" + ], + [ + "25", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "25", + "6346", + "62022", + "TCP", + "Transport", + "SEQ: 11.000.001" + ], + [ + "25", + null, + null, + "GNT", + "Anwendung", + "219206720//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "26", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "62022", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.039, ACK: 11.000.048" + ], + [ + "27", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "27", + "56447", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 14.000.000" + ], + [ + "28", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "28", + "6346", + "56447", + "TCP", + "Transport", + "SYN, SEQ: 9.000.000, ACK: 14.000.001" + ], + [ + "29", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "29", + "56447", + "6346", + "TCP", + "Transport", + "SEQ: 14.000.001, ACK: 9.000.001" + ], + [ + "30", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "30", + "56447", + "6346", + "TCP", + "Transport", + "SEQ: 14.000.001" + ], + [ + "30", + null, + null, + "GNT", + "Anwendung", + "219206720//0x00//1//7//0//192.168.0.30" + ], + [ + "31", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "31", + "6346", + "56447", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 14.000.039" + ], + [ + "32", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "32", + "6346", + "56447", + "TCP", + "Transport", + "SEQ: 9.000.001" + ], + [ + "32", + null, + null, + "GNT", + "Anwendung", + "219206720//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "33", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "33", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "33", + "56447", + "6346", + "TCP", + "Transport", + "SEQ: 14.000.039, ACK: 9.000.053" + ], + [ + "34", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "34", + "6346", + "62022", + "TCP", + "Transport", + "SEQ: 11.000.048" + ], + [ + "34", + null, + null, + "GNT", + "Anwendung", + "219206720//0x01//1//7//109//192.168.0.31//6346//0//0" + ], + [ + "35", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "35", + "62022", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.039, ACK: 11.000.100" + ], + [ + "36", + "02:00:00:00:04:11", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "36", + "192.168.0.20", + "192.168.0.30", + "ARP", + "Vermittlung", + "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" + ], + [ + "37", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "58194", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 19.000.000" + ], + [ + "38", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "38", + "6346", + "58194", + "TCP", + "Transport", + "SYN, SEQ: 13.000.000, ACK: 19.000.001" + ], + [ + "39", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "39", + "58194", + "6346", + "TCP", + "Transport", + "SEQ: 19.000.001, ACK: 13.000.001" + ], + [ + "40", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "40", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "40", + "58194", + "6346", + "TCP", + "Transport", + "SEQ: 19.000.001" + ], + [ + "40", + null, + null, + "GNT", + "Anwendung", + "829504624//0x00//1//7//0//192.168.0.20" + ], + [ + "41", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "41", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "41", + "6346", + "58194", + "TCP", + "Transport", + "SEQ: 13.000.001, ACK: 19.000.039" + ], + [ + "42", + "02:00:00:00:04:51", + "02:00:00:00:04:13", + "", + "Netzzugang", + "0x800" + ], + [ + "42", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "42", + "6346", + "58194", + "TCP", + "Transport", + "SEQ: 13.000.001" + ], + [ + "42", + null, + null, + "GNT", + "Anwendung", + "829504624//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "43", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "43", + "49870", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 22.000.000" + ], + [ + "44", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "44", + "6346", + "49870", + "TCP", + "Transport", + "SYN, SEQ: 21.000.000, ACK: 22.000.001" + ], + [ + "45", + "02:00:00:00:04:13", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "45", + "58194", + "6346", + "TCP", + "Transport", + "SEQ: 19.000.039, ACK: 13.000.048" + ], + [ + "46", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "46", + "54065", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 23.000.000" + ], + [ + "47", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "47", + "49870", + "6346", + "TCP", + "Transport", + "SEQ: 22.000.001, ACK: 21.000.001" + ], + [ + "48", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "48", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "48", + "49870", + "6346", + "TCP", + "Transport", + "SEQ: 22.000.001" + ], + [ + "48", + null, + null, + "GNT", + "Anwendung", + "829504624//0x00//2//6//0//192.168.0.20" + ], + [ + "49", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "49", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "49", + "6346", + "54065", + "TCP", + "Transport", + "SYN, SEQ: 20.000.000, ACK: 23.000.001" + ], + [ + "50", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "50", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "50", + "6346", + "49870", + "TCP", + "Transport", + "SEQ: 21.000.001, ACK: 22.000.039" + ], + [ + "51", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "51", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "51", + "6346", + "49870", + "TCP", + "Transport", + "FIN, SEQ: 21.000.001" + ], + [ + "52", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "52", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "52", + "54065", + "6346", + "TCP", + "Transport", + "SEQ: 23.000.001, ACK: 20.000.001" + ], + [ + "53", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "53", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "53", + "54065", + "6346", + "TCP", + "Transport", + "SEQ: 23.000.001" + ], + [ + "53", + null, + null, + "GNT", + "Anwendung", + "829504624//0x00//2//6//0//192.168.0.20" + ], + [ + "54", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "54", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "54", + "49870", + "6346", + "TCP", + "Transport", + "SEQ: 22.000.039, ACK: 21.000.002" + ], + [ + "55", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "55", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "55", + "49870", + "6346", + "TCP", + "Transport", + "FIN, SEQ: 22.000.039" + ], + [ + "56", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "56", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "56", + "6346", + "54065", + "TCP", + "Transport", + "SEQ: 20.000.001, ACK: 23.000.039" + ], + [ + "57", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "57", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "57", + "6346", + "54065", + "TCP", + "Transport", + "FIN, SEQ: 20.000.001" + ], + [ + "58", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "58", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "58", + "6346", + "49870", + "TCP", + "Transport", + "SEQ: 21.000.002, ACK: 22.000.040" + ], + [ + "59", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "59", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "59", + "54065", + "6346", + "TCP", + "Transport", + "SEQ: 23.000.039, ACK: 20.000.002" + ], + [ + "60", + "02:00:00:00:04:51", + "02:00:00:00:04:14", + "", + "Netzzugang", + "0x800" + ], + [ + "60", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "60", + "54065", + "6346", + "TCP", + "Transport", + "FIN, SEQ: 23.000.039" + ], + [ + "61", + "02:00:00:00:04:14", + "02:00:00:00:04:51", + "", + "Netzzugang", + "0x800" + ], + [ + "61", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "61", + "6346", + "54065", + "TCP", + "Transport", + "SEQ: 20.000.002, ACK: 23.000.040" + ] + ], + "00000000-0000-0000-0000-000000000405#1": [ + [ + "1", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "10.0.0.1", + "10.0.0.2", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.2 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.2]" + ], + [ + "2", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "10.0.0.2", + "10.0.0.1", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:16 [op=REPLY, sender=02:00:00:00:04:16|10.0.0.2, target=02:00:00:00:04:52|10.0.0.1]" + ], + [ + "3", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "3", + "63045", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "6346", + "63045", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000, ACK: 6.000.001" + ], + [ + "5", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "5", + "63045", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.001, ACK: 5.000.001" + ], + [ + "6", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "6", + "63045", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "6", + null, + null, + "GNT", + "Anwendung", + "2132446730//0x00//0//8//0//192.168.0.31" + ], + [ + "7", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "6346", + "63045", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 6.000.040" + ], + [ + "8", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "6346", + "63045", + "TCP", + "Transport", + "SEQ: 5.000.001" + ], + [ + "8", + null, + null, + "GNT", + "Anwendung", + "2132446730//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "9", + "63045", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.040, ACK: 5.000.049" + ], + [ + "10", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "10", + "54369", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 10.000.000" + ], + [ + "11", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "6346", + "54369", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000, ACK: 10.000.001" + ], + [ + "12", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "12", + "54369", + "6346", + "TCP", + "Transport", + "SEQ: 10.000.001, ACK: 7.000.001" + ], + [ + "13", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "13", + "54369", + "6346", + "TCP", + "Transport", + "SEQ: 10.000.001" + ], + [ + "13", + null, + null, + "GNT", + "Anwendung", + "612664560//0x00//1//7//0//192.168.0.30" + ], + [ + "14", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "6346", + "54369", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 10.000.039" + ], + [ + "15", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "6346", + "54369", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "15", + null, + null, + "GNT", + "Anwendung", + "612664560//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "16", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "16", + "54369", + "6346", + "TCP", + "Transport", + "SEQ: 10.000.039, ACK: 7.000.048" + ], + [ + "17", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "17", + "62022", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 12.000.000" + ], + [ + "18", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "6346", + "62022", + "TCP", + "Transport", + "SYN, SEQ: 11.000.000, ACK: 12.000.001" + ], + [ + "19", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "19", + "62022", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.001, ACK: 11.000.001" + ], + [ + "20", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "20", + "62022", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.001" + ], + [ + "20", + null, + null, + "GNT", + "Anwendung", + "219206720//0x00//0//8//0//192.168.0.30" + ], + [ + "21", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "6346", + "62022", + "TCP", + "Transport", + "SEQ: 11.000.001, ACK: 12.000.039" + ], + [ + "22", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "6346", + "62022", + "TCP", + "Transport", + "SEQ: 11.000.001" + ], + [ + "22", + null, + null, + "GNT", + "Anwendung", + "219206720//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "23", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "23", + "62022", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.039, ACK: 11.000.048" + ], + [ + "24", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "24", + "56447", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 14.000.000" + ], + [ + "25", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "25", + "6346", + "56447", + "TCP", + "Transport", + "SYN, SEQ: 9.000.000, ACK: 14.000.001" + ], + [ + "26", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "56447", + "6346", + "TCP", + "Transport", + "SEQ: 14.000.001, ACK: 9.000.001" + ], + [ + "27", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "56447", + "6346", + "TCP", + "Transport", + "SEQ: 14.000.001" + ], + [ + "27", + null, + null, + "GNT", + "Anwendung", + "219206720//0x00//1//7//0//192.168.0.30" + ], + [ + "28", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "28", + "6346", + "56447", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 14.000.039" + ], + [ + "29", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "29", + "6346", + "56447", + "TCP", + "Transport", + "SEQ: 9.000.001" + ], + [ + "29", + null, + null, + "GNT", + "Anwendung", + "219206720//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "30", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "30", + "56447", + "6346", + "TCP", + "Transport", + "SEQ: 14.000.039, ACK: 9.000.053" + ], + [ + "31", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "31", + "6346", + "62022", + "TCP", + "Transport", + "SEQ: 11.000.048" + ], + [ + "31", + null, + null, + "GNT", + "Anwendung", + "219206720//0x01//1//7//109//192.168.0.31//6346//0//0" + ], + [ + "32", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "32", + "62022", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.039, ACK: 11.000.100" + ], + [ + "33", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "33", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "33", + "58194", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 19.000.000" + ], + [ + "34", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "34", + "6346", + "58194", + "TCP", + "Transport", + "SYN, SEQ: 13.000.000, ACK: 19.000.001" + ], + [ + "35", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "35", + "58194", + "6346", + "TCP", + "Transport", + "SEQ: 19.000.001, ACK: 13.000.001" + ], + [ + "36", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "36", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "36", + "58194", + "6346", + "TCP", + "Transport", + "SEQ: 19.000.001" + ], + [ + "36", + null, + null, + "GNT", + "Anwendung", + "829504624//0x00//1//7//0//192.168.0.20" + ], + [ + "37", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "6346", + "58194", + "TCP", + "Transport", + "SEQ: 13.000.001, ACK: 19.000.039" + ], + [ + "38", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "38", + "6346", + "58194", + "TCP", + "Transport", + "SEQ: 13.000.001" + ], + [ + "38", + null, + null, + "GNT", + "Anwendung", + "829504624//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "39", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "39", + "49870", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 22.000.000" + ], + [ + "40", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "40", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "40", + "6346", + "49870", + "TCP", + "Transport", + "SYN, SEQ: 21.000.000, ACK: 22.000.001" + ], + [ + "41", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "41", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "41", + "58194", + "6346", + "TCP", + "Transport", + "SEQ: 19.000.039, ACK: 13.000.048" + ], + [ + "42", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "42", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "42", + "54065", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 23.000.000" + ], + [ + "43", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "43", + "49870", + "6346", + "TCP", + "Transport", + "SEQ: 22.000.001, ACK: 21.000.001" + ], + [ + "44", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "44", + "49870", + "6346", + "TCP", + "Transport", + "SEQ: 22.000.001" + ], + [ + "44", + null, + null, + "GNT", + "Anwendung", + "829504624//0x00//2//6//0//192.168.0.20" + ], + [ + "45", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "45", + "6346", + "54065", + "TCP", + "Transport", + "SYN, SEQ: 20.000.000, ACK: 23.000.001" + ], + [ + "46", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "46", + "6346", + "49870", + "TCP", + "Transport", + "SEQ: 21.000.001, ACK: 22.000.039" + ], + [ + "47", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "47", + "6346", + "49870", + "TCP", + "Transport", + "FIN, SEQ: 21.000.001" + ], + [ + "48", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "48", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "48", + "54065", + "6346", + "TCP", + "Transport", + "SEQ: 23.000.001, ACK: 20.000.001" + ], + [ + "49", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "49", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "49", + "54065", + "6346", + "TCP", + "Transport", + "SEQ: 23.000.001" + ], + [ + "49", + null, + null, + "GNT", + "Anwendung", + "829504624//0x00//2//6//0//192.168.0.20" + ], + [ + "50", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "50", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "50", + "49870", + "6346", + "TCP", + "Transport", + "SEQ: 22.000.039, ACK: 21.000.002" + ], + [ + "51", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "51", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "51", + "49870", + "6346", + "TCP", + "Transport", + "FIN, SEQ: 22.000.039" + ], + [ + "52", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "52", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "52", + "6346", + "54065", + "TCP", + "Transport", + "SEQ: 20.000.001, ACK: 23.000.039" + ], + [ + "53", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "53", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "53", + "6346", + "49870", + "TCP", + "Transport", + "SEQ: 21.000.002, ACK: 22.000.040" + ], + [ + "54", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "54", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "54", + "6346", + "54065", + "TCP", + "Transport", + "FIN, SEQ: 20.000.001" + ], + [ + "55", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "55", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "55", + "54065", + "6346", + "TCP", + "Transport", + "SEQ: 23.000.039, ACK: 20.000.002" + ], + [ + "56", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "56", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "56", + "54065", + "6346", + "TCP", + "Transport", + "FIN, SEQ: 23.000.039" + ], + [ + "57", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "57", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "57", + "6346", + "54065", + "TCP", + "Transport", + "SEQ: 20.000.002, ACK: 23.000.040" + ] + ], + "00000000-0000-0000-0000-000000000406": [ + [ + "1", + "02:00:00:00:04:52", + "FF:FF:FF:FF:FF:FF", + "", + "Netzzugang", + "0x806" + ], + [ + "1", + "10.0.0.1", + "10.0.0.2", + "ARP", + "Vermittlung", + "Suche nach MAC für 10.0.0.2 [op=REQUEST, sender=02:00:00:00:04:52|10.0.0.1, target=FF:FF:FF:FF:FF:FF|10.0.0.2]" + ], + [ + "2", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x806" + ], + [ + "2", + "10.0.0.2", + "10.0.0.1", + "ARP", + "Vermittlung", + "MAC ist 02:00:00:00:04:16 [op=REPLY, sender=02:00:00:00:04:16|10.0.0.2, target=02:00:00:00:04:52|10.0.0.1]" + ], + [ + "3", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "3", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "3", + "63045", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 6.000.000" + ], + [ + "4", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "4", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "4", + "6346", + "63045", + "TCP", + "Transport", + "SYN, SEQ: 5.000.000, ACK: 6.000.001" + ], + [ + "5", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "5", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "5", + "63045", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.001, ACK: 5.000.001" + ], + [ + "6", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "6", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "6", + "63045", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.001" + ], + [ + "6", + null, + null, + "GNT", + "Anwendung", + "2132446730//0x00//0//8//0//192.168.0.31" + ], + [ + "7", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "7", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "7", + "6346", + "63045", + "TCP", + "Transport", + "SEQ: 5.000.001, ACK: 6.000.040" + ], + [ + "8", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "8", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "8", + "6346", + "63045", + "TCP", + "Transport", + "SEQ: 5.000.001" + ], + [ + "8", + null, + null, + "GNT", + "Anwendung", + "2132446730//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "9", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "9", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "9", + "63045", + "6346", + "TCP", + "Transport", + "SEQ: 6.000.040, ACK: 5.000.049" + ], + [ + "10", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "10", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "10", + "54369", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 10.000.000" + ], + [ + "11", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "11", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "11", + "6346", + "54369", + "TCP", + "Transport", + "SYN, SEQ: 7.000.000, ACK: 10.000.001" + ], + [ + "12", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "12", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "12", + "54369", + "6346", + "TCP", + "Transport", + "SEQ: 10.000.001, ACK: 7.000.001" + ], + [ + "13", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "13", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "13", + "54369", + "6346", + "TCP", + "Transport", + "SEQ: 10.000.001" + ], + [ + "13", + null, + null, + "GNT", + "Anwendung", + "612664560//0x00//1//7//0//192.168.0.30" + ], + [ + "14", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "14", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "14", + "6346", + "54369", + "TCP", + "Transport", + "SEQ: 7.000.001, ACK: 10.000.039" + ], + [ + "15", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "15", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "15", + "6346", + "54369", + "TCP", + "Transport", + "SEQ: 7.000.001" + ], + [ + "15", + null, + null, + "GNT", + "Anwendung", + "612664560//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "16", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "16", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "16", + "54369", + "6346", + "TCP", + "Transport", + "SEQ: 10.000.039, ACK: 7.000.048" + ], + [ + "17", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "17", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "17", + "62022", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 12.000.000" + ], + [ + "18", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "18", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "18", + "6346", + "62022", + "TCP", + "Transport", + "SYN, SEQ: 11.000.000, ACK: 12.000.001" + ], + [ + "19", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "19", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "19", + "62022", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.001, ACK: 11.000.001" + ], + [ + "20", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "20", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "20", + "62022", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.001" + ], + [ + "20", + null, + null, + "GNT", + "Anwendung", + "219206720//0x00//0//8//0//192.168.0.30" + ], + [ + "21", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "21", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "21", + "6346", + "62022", + "TCP", + "Transport", + "SEQ: 11.000.001, ACK: 12.000.039" + ], + [ + "22", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "22", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "22", + "6346", + "62022", + "TCP", + "Transport", + "SEQ: 11.000.001" + ], + [ + "22", + null, + null, + "GNT", + "Anwendung", + "219206720//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "23", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "23", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "23", + "62022", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.039, ACK: 11.000.048" + ], + [ + "24", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "24", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "24", + "56447", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 14.000.000" + ], + [ + "25", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "25", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "25", + "6346", + "56447", + "TCP", + "Transport", + "SYN, SEQ: 9.000.000, ACK: 14.000.001" + ], + [ + "26", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "26", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "26", + "56447", + "6346", + "TCP", + "Transport", + "SEQ: 14.000.001, ACK: 9.000.001" + ], + [ + "27", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "27", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "27", + "56447", + "6346", + "TCP", + "Transport", + "SEQ: 14.000.001" + ], + [ + "27", + null, + null, + "GNT", + "Anwendung", + "219206720//0x00//1//7//0//192.168.0.30" + ], + [ + "28", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "28", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "28", + "6346", + "56447", + "TCP", + "Transport", + "SEQ: 9.000.001, ACK: 14.000.039" + ], + [ + "29", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "29", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "29", + "6346", + "56447", + "TCP", + "Transport", + "SEQ: 9.000.001" + ], + [ + "29", + null, + null, + "GNT", + "Anwendung", + "219206720//0x01//0//8//109//192.168.0.31//6346//0//0" + ], + [ + "30", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "30", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "30", + "56447", + "6346", + "TCP", + "Transport", + "SEQ: 14.000.039, ACK: 9.000.053" + ], + [ + "31", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "31", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "31", + "6346", + "62022", + "TCP", + "Transport", + "SEQ: 11.000.048" + ], + [ + "31", + null, + null, + "GNT", + "Anwendung", + "219206720//0x01//1//7//109//192.168.0.31//6346//0//0" + ], + [ + "32", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "32", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "32", + "62022", + "6346", + "TCP", + "Transport", + "SEQ: 12.000.039, ACK: 11.000.100" + ], + [ + "33", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "33", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "33", + "58194", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 19.000.000" + ], + [ + "34", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "34", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "34", + "6346", + "58194", + "TCP", + "Transport", + "SYN, SEQ: 13.000.000, ACK: 19.000.001" + ], + [ + "35", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "35", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "35", + "58194", + "6346", + "TCP", + "Transport", + "SEQ: 19.000.001, ACK: 13.000.001" + ], + [ + "36", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "36", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "36", + "58194", + "6346", + "TCP", + "Transport", + "SEQ: 19.000.001" + ], + [ + "36", + null, + null, + "GNT", + "Anwendung", + "829504624//0x00//1//7//0//192.168.0.20" + ], + [ + "37", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "37", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "37", + "6346", + "58194", + "TCP", + "Transport", + "SEQ: 13.000.001, ACK: 19.000.039" + ], + [ + "38", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "38", + "10.0.0.2", + "192.168.0.30", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "38", + "6346", + "58194", + "TCP", + "Transport", + "SEQ: 13.000.001" + ], + [ + "38", + null, + null, + "GNT", + "Anwendung", + "829504624//0x01//0//8//77//10.0.0.2//6346//0//0" + ], + [ + "39", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "39", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "39", + "49870", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 22.000.000" + ], + [ + "40", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "40", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "40", + "6346", + "49870", + "TCP", + "Transport", + "SYN, SEQ: 21.000.000, ACK: 22.000.001" + ], + [ + "41", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "41", + "192.168.0.30", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "41", + "58194", + "6346", + "TCP", + "Transport", + "SEQ: 19.000.039, ACK: 13.000.048" + ], + [ + "42", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "42", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "42", + "54065", + "6346", + "TCP", + "Transport", + "SYN, SEQ: 23.000.000" + ], + [ + "43", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "43", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "43", + "49870", + "6346", + "TCP", + "Transport", + "SEQ: 22.000.001, ACK: 21.000.001" + ], + [ + "44", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "44", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "44", + "49870", + "6346", + "TCP", + "Transport", + "SEQ: 22.000.001" + ], + [ + "44", + null, + null, + "GNT", + "Anwendung", + "829504624//0x00//2//6//0//192.168.0.20" + ], + [ + "45", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "45", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "45", + "6346", + "49870", + "TCP", + "Transport", + "SEQ: 21.000.001, ACK: 22.000.039" + ], + [ + "46", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "46", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "46", + "6346", + "49870", + "TCP", + "Transport", + "FIN, SEQ: 21.000.001" + ], + [ + "47", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "47", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "47", + "6346", + "54065", + "TCP", + "Transport", + "SYN, SEQ: 20.000.000, ACK: 23.000.001" + ], + [ + "48", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "48", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "48", + "54065", + "6346", + "TCP", + "Transport", + "SEQ: 23.000.001, ACK: 20.000.001" + ], + [ + "49", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "49", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "49", + "54065", + "6346", + "TCP", + "Transport", + "SEQ: 23.000.001" + ], + [ + "49", + null, + null, + "GNT", + "Anwendung", + "829504624//0x00//2//6//0//192.168.0.20" + ], + [ + "50", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "50", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "50", + "49870", + "6346", + "TCP", + "Transport", + "SEQ: 22.000.039, ACK: 21.000.002" + ], + [ + "51", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "51", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "51", + "49870", + "6346", + "TCP", + "Transport", + "FIN, SEQ: 22.000.039" + ], + [ + "52", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "52", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "52", + "6346", + "49870", + "TCP", + "Transport", + "SEQ: 21.000.002, ACK: 22.000.040" + ], + [ + "53", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "53", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "53", + "6346", + "54065", + "TCP", + "Transport", + "SEQ: 20.000.001, ACK: 23.000.039" + ], + [ + "54", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "54", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "54", + "6346", + "54065", + "TCP", + "Transport", + "FIN, SEQ: 20.000.001" + ], + [ + "55", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "55", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "55", + "54065", + "6346", + "TCP", + "Transport", + "SEQ: 23.000.039, ACK: 20.000.002" + ], + [ + "56", + "02:00:00:00:04:16", + "02:00:00:00:04:52", + "", + "Netzzugang", + "0x800" + ], + [ + "56", + "10.0.0.2", + "192.168.0.31", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 64" + ], + [ + "56", + "54065", + "6346", + "TCP", + "Transport", + "FIN, SEQ: 23.000.039" + ], + [ + "57", + "02:00:00:00:04:52", + "02:00:00:00:04:16", + "", + "Netzzugang", + "0x800" + ], + [ + "57", + "192.168.0.31", + "10.0.0.2", + "IP", + "Vermittlung", + "Protokoll: 6, TTL: 63" + ], + [ + "57", + "6346", + "54065", + "TCP", + "Transport", + "SEQ: 20.000.002, ACK: 23.000.040" + ] + ] + }, + "acts": [ + [ + 500, + "00000000-0000-0000-0000-000000000404", + "join 10.0.0.2" + ], + [ + 3000, + "00000000-0000-0000-0000-000000000403", + "join 192.168.0.31" + ], + [ + 5500, + "00000000-0000-0000-0000-000000000403", + "join 10.0.0.2" + ], + [ + 8000, + "00000000-0000-0000-0000-000000000401", + "join 192.168.0.30" + ] + ], + "events": [ + [ + 212, + "00000000-0000-0000-0000-000000000401", + "peers", + "" + ], + [ + 215, + "00000000-0000-0000-0000-000000000403", + "peers", + "" + ], + [ + 216, + "00000000-0000-0000-0000-000000000404", + "peers", + "" + ], + [ + 219, + "00000000-0000-0000-0000-000000000406", + "peers", + "" + ], + [ + 501, + "00000000-0000-0000-0000-000000000404", + "call", + "join 10.0.0.2" + ], + [ + 1474, + "00000000-0000-0000-0000-000000000406", + "peers", + "192.168.0.31" + ], + [ + 1697, + "00000000-0000-0000-0000-000000000404", + "peers", + "10.0.0.2" + ], + [ + 3000, + "00000000-0000-0000-0000-000000000403", + "call", + "join 192.168.0.31" + ], + [ + 3619, + "00000000-0000-0000-0000-000000000404", + "peers", + "10.0.0.2,192.168.0.30" + ], + [ + 3780, + "00000000-0000-0000-0000-000000000403", + "peers", + "192.168.0.31" + ], + [ + 4459, + "00000000-0000-0000-0000-000000000406", + "peers", + "192.168.0.31,192.168.0.30" + ], + [ + 4848, + "00000000-0000-0000-0000-000000000403", + "peers", + "192.168.0.31,10.0.0.2" + ], + [ + 5500, + "00000000-0000-0000-0000-000000000403", + "call", + "join 10.0.0.2" + ], + [ + 8000, + "00000000-0000-0000-0000-000000000401", + "call", + "join 192.168.0.30" + ], + [ + 8621, + "00000000-0000-0000-0000-000000000403", + "peers", + "192.168.0.31,10.0.0.2,192.168.0.20" + ], + [ + 8777, + "00000000-0000-0000-0000-000000000401", + "peers", + "192.168.0.30" + ], + [ + 9300, + "00000000-0000-0000-0000-000000000404", + "peers", + "10.0.0.2,192.168.0.30,192.168.0.20" + ], + [ + 9528, + "00000000-0000-0000-0000-000000000406", + "peers", + "192.168.0.31,192.168.0.30,192.168.0.20" + ], + [ + 9632, + "00000000-0000-0000-0000-000000000401", + "peers", + "192.168.0.30,192.168.0.31" + ], + [ + 9888, + "00000000-0000-0000-0000-000000000401", + "peers", + "192.168.0.30,192.168.0.31,10.0.0.2" + ] + ], + "programs": { + "00000000-0000-0000-0000-000000000401": { + "peers": [ + "192.168.0.30", + "192.168.0.31", + "10.0.0.2" + ], + "results": [] + }, + "00000000-0000-0000-0000-000000000403": { + "peers": [ + "192.168.0.31", + "10.0.0.2", + "192.168.0.20" + ], + "results": [] + }, + "00000000-0000-0000-0000-000000000404": { + "peers": [ + "10.0.0.2", + "192.168.0.30", + "192.168.0.20" + ], + "results": [] + }, + "00000000-0000-0000-0000-000000000406": { + "peers": [ + "192.168.0.31", + "192.168.0.30", + "192.168.0.20" + ], + "results": [] + } + } +} diff --git a/packages/fls/src/projectSnapshot.ts b/packages/fls/src/projectSnapshot.ts index fda116a..9a76ea4 100644 --- a/packages/fls/src/projectSnapshot.ts +++ b/packages/fls/src/projectSnapshot.ts @@ -39,6 +39,7 @@ export function projectSnapshot(project: ImportedProject): TopologySnapshot { emailServers.set(nodeId, { domain: configuration.domain, accounts: configuration.accounts, isActive: project.activePrograms.get(nodeId)?.has('emailServer') === true }); } const emailClients = new Map([...project.emailClientConfigurations].filter(([nodeId]) => project.installedPrograms.get(nodeId)?.has('emailClient') === true)); + const gnutella = new Map([...project.gnutellaConfigurations].filter(([nodeId]) => project.installedPrograms.get(nodeId)?.has('gnutella') === true)); const terminals = new Set([...project.installedPrograms].filter(([, programs]) => programs.has('commandPrompt')).map(([nodeId]) => nodeId)); const webBrowsers = new Set([...project.installedPrograms].filter(([, programs]) => programs.has('webBrowser')).map(([nodeId]) => nodeId)); return topologySnapshot({ @@ -66,6 +67,7 @@ export function projectSnapshot(project: ImportedProject): TopologySnapshot { emailServersByNodeId: emailServers, emailClientsByNodeId: emailClients, terminalNodeIds: terminals, + gnutellaByNodeId: gnutella, fileSystemsByNodeId: project.virtualFileSystems, }); } diff --git a/tools/java-oracle/README.md b/tools/java-oracle/README.md index b431a33..7de12f0 100644 --- a/tools/java-oracle/README.md +++ b/tools/java-oracle/README.md @@ -870,6 +870,41 @@ Gemessen (02.10.2026): ebenso eine unter Last (andere Sitzungen auf dem Rechner: die erste ARP-Runde dauert dann knapp 300 statt 225 ms). +## Gnutella, Beitreten (F3.6a) + +`GnutellaRun` installiert Javas Gnutella-Programm (`PeerToPeerAnwendung`) +auf vier Rechnern von `terminal-net` (192.168.0.20, .30, .31 und 10.0.0.2 +hinter dem Router; .10 ohne) und ruft `beitretenNetzwerk` und +`resetNetwork` zu festen Zeiten, wie das Fenster es tut. Geschrieben werden +je Karte die Frames samt Tabellen, die bekannten Teilnehmer jedes Programms +bei jeder Meldung an sein Fenster und am Ende. + +Gemessen (02.10.2026): + +* Ein Paket ist Text, seine Felder durch `//` getrennt (`PeerToPeerPaket + .toString`): Ping `guid//0x00//hops//ttl//0//IP`, Pong + `guid//0x01//0//8//Bits//IP//6346//Dateien//Bytes`; die Bitlänge zählt + die Zeichen der Adresse mal acht und für jede Zahl die kleinste + Zweierpotenz, die sie fasst. Die GUID ist zufällig (`new Random()`). +* Beitreten: eine Verbindung zum Port 6346 des Teilnehmers, der Ping; der + Teilnehmer nimmt den Absender des Pings auf, antwortet mit einem Pong und + schickt den Ping (hops+1, ttl−1) über je eine neue Verbindung an seine + anderen Teilnehmer, außer an den Absender und den Rechner des Pings; + deren Pongs gehen (hops+1, ttl−1) über die Verbindung zurück, auf der der + Ping kam (`sendePaket` nach GUID). Wer einen Pong auf seinen eigenen Ping + bekommt, nimmt dessen Rechner auf; jeder höchstens so viele, wie er + behält. Keine Verbindung wird je geschlossen. +* Fehler Javas: kommt derselbe Ping ein zweites Mal an, gibt `erstellePong` + `null` zurück, und `toString()` darauf wirft; der Arbeiter schließt die + Verbindung (gemeint war: kein Pong). Ein Text ohne Paketkopf wirft + ebenso und schließt die Verbindung. +* Zu sich selbst kein Ping; zu einem Rechner ohne Programm ein SYN (Javas + eines statt drei); ins Leere nur ARP. +* Wo viele Verbindungen zugleich laufen, kommen die Frames zweier + Verbindungen (oder beider Richtungen einer) an einer Karte mal so, mal so + herum, einige zehn Millisekunden auseinander: Javas Thread-Takt über + mehrere Sprünge. + ## Datei-Explorer, Texteditor, Bildbetrachter (F3.5b) `FileCases` tut, was die Fenster dieser Programme mit den Dateien eines diff --git a/tools/java-oracle/run.sh b/tools/java-oracle/run.sh index b541b5f..e04b3a2 100755 --- a/tools/java-oracle/run.sh +++ b/tools/java-oracle/run.sh @@ -21,7 +21,7 @@ if [ ! -f "$upstream/target/filius.jar" ]; then fi classpath="$upstream/target/filius.jar:$upstream/target/lib/*" mkdir -p "$here/.build" -javac -encoding UTF-8 -d "$here/.build" -cp "$classpath" "$here/src/FlsOracle.java" "$here/src/GetterDefaults.java" "$here/src/IpCheckCases.java" "$here/src/DnsHostsCases.java" "$here/src/EmailFileCases.java" "$here/src/BeansDump.java" "$here/src/Base64Cases.java" "$here/src/ScenarioNetwork.java" "$here/src/DhcpRun.java" "$here/src/TcpRun.java" "$here/src/DnsRun.java" "$here/src/ArpRun.java" "$here/src/RipRun.java" "$here/src/NatRun.java" "$here/src/WlanRun.java" "$here/src/ExampleRun.java" "$here/src/EchoRun.java" "$here/src/WebRun.java" "$here/src/RouterWebRun.java" "$here/src/KonfigCases.java" "$here/src/EmailRun.java" "$here/src/MailCases.java" "$here/src/EmailClientRun.java" "$here/src/TerminalCases.java" "$here/src/TerminalRun.java" "$here/src/FileCases.java" +javac -encoding UTF-8 -d "$here/.build" -cp "$classpath" "$here/src/FlsOracle.java" "$here/src/GetterDefaults.java" "$here/src/IpCheckCases.java" "$here/src/DnsHostsCases.java" "$here/src/EmailFileCases.java" "$here/src/BeansDump.java" "$here/src/Base64Cases.java" "$here/src/ScenarioNetwork.java" "$here/src/DhcpRun.java" "$here/src/TcpRun.java" "$here/src/DnsRun.java" "$here/src/ArpRun.java" "$here/src/RipRun.java" "$here/src/NatRun.java" "$here/src/WlanRun.java" "$here/src/ExampleRun.java" "$here/src/EchoRun.java" "$here/src/WebRun.java" "$here/src/RouterWebRun.java" "$here/src/KonfigCases.java" "$here/src/EmailRun.java" "$here/src/MailCases.java" "$here/src/EmailClientRun.java" "$here/src/TerminalCases.java" "$here/src/TerminalRun.java" "$here/src/FileCases.java" "$here/src/GnutellaRun.java" # FILIUS writes its settings below $HOME; keep them out of the real one. mkdir -p "$here/.build/home" # Removed first: a crashed run must not leave the previous result standing. @@ -286,6 +286,17 @@ for language in de en; do test -s "$output" done +# The Gnutella program joining peers on terminal-net (GnutellaRun; +# packages/core/test/gnutellaJava.test.ts). +for run in pair:6000 chain:9000 twoPaths:15000 full:11000 reset:7000 errors:40000; do + story="${run%%:*}" + output="$root/packages/core/test/scenarios/gnutella-java-$story.java.json" + rm -f "$output" + HOME="$here/.build/home" xvfb-run -a java $german -cp "$classpath:$here/.build" GnutellaRun \ + "$root/packages/core/test/scenarios/terminal-net.scenario.json" "$story" "${run##*:}" "$output" 2>&1 | grep -v 'logback\|^$\|^\s*at \|scrollpane' || true + test -s "$output" +done + # What the file explorer and the text editor do to a host's files, without a # running network, in both languages (FileCases; packages/core/test/filePrograms.test.ts). for language in de en; do diff --git a/tools/java-oracle/src/GnutellaRun.java b/tools/java-oracle/src/GnutellaRun.java new file mode 100644 index 0000000..7d600c3 --- /dev/null +++ b/tools/java-oracle/src/GnutellaRun.java @@ -0,0 +1,140 @@ +// Runs a story of FILIUS' Gnutella program (PeerToPeerAnwendung with its +// PeerToPeerServer on port 6346 and PeerToPeerClient) on terminal-net in Java +// FILIUS and records what really happens: every frame each card saw, Java's +// tables of them, each program's known peers whenever it tells its window, +// and at the end each program's known peers and search results. +// +// GnutellaRun +// +// terminal-net: the program on 192.168.0.20, .30, .31 and 10.0.0.2 (behind +// the router), each keeping at most three peers unless the story says +// otherwise; .10 has none. A call comes as the program's window makes it +// (beitretenNetzwerk, resetNetwork); the acts are in the output. +// pair .30 joins .31 +// chain .30 joins .31, then .20 joins .30 (the ping goes on to .31) +// twoPaths .31 joins 10.0.0.2, .30 joins .31 and 10.0.0.2, then .20 joins +// .30: the ping reaches .31 and 10.0.0.2 each on two paths +// full .31 keeps two peers, .30 and .20 one; .30, .20 and 10.0.0.2 join .31 +// reset .30 joins .31, resets, joins again +// errors .20 joins itself, .10 (no program), .99 (no one) + +import filius.software.dateiaustausch.PeerToPeerAnwendung; + +import java.util.ArrayList; +import java.util.LinkedHashMap; +import java.util.List; +import java.util.Map; + +public class GnutellaRun { + static final String CLIENT = "00000000-0000-0000-0000-000000000401"; + static final String WEB = "00000000-0000-0000-0000-000000000403"; + static final String ECHO = "00000000-0000-0000-0000-000000000404"; + static final String FAR = "00000000-0000-0000-0000-000000000406"; + static final String[] PEERS = { CLIENT, WEB, ECHO, FAR }; + static final String CLASS = "filius.software.dateiaustausch.PeerToPeerAnwendung"; + + static ScenarioNetwork network; + static final List events = new ArrayList<>(); + + static synchronized void event(String host, String kind, String text) { + events.add(new Object[] { System.currentTimeMillis() - network.start, host, kind, text }); + } + + static void sleepUntil(long milliseconds) throws InterruptedException { + long rest = network.start + milliseconds - System.currentTimeMillis(); + if (rest > 0) Thread.sleep(rest); + } + + /** The story's calls: time, host, call ("join
" or "reset"). */ + static List acts(String story) { + List acts = new ArrayList<>(); + switch (story) { + case "pair": + acts.add(new Object[] { 500L, WEB, "join 192.168.0.31" }); + break; + case "chain": + acts.add(new Object[] { 500L, WEB, "join 192.168.0.31" }); + acts.add(new Object[] { 3000L, CLIENT, "join 192.168.0.30" }); + break; + case "twoPaths": + acts.add(new Object[] { 500L, ECHO, "join 10.0.0.2" }); + acts.add(new Object[] { 3000L, WEB, "join 192.168.0.31" }); + acts.add(new Object[] { 5500L, WEB, "join 10.0.0.2" }); + acts.add(new Object[] { 8000L, CLIENT, "join 192.168.0.30" }); + break; + case "full": + acts.add(new Object[] { 500L, WEB, "join 192.168.0.31" }); + acts.add(new Object[] { 3000L, CLIENT, "join 192.168.0.31" }); + acts.add(new Object[] { 5500L, FAR, "join 192.168.0.31" }); + break; + case "reset": + acts.add(new Object[] { 500L, WEB, "join 192.168.0.31" }); + acts.add(new Object[] { 3000L, WEB, "reset" }); + acts.add(new Object[] { 3500L, WEB, "join 192.168.0.31" }); + break; + case "errors": + acts.add(new Object[] { 500L, CLIENT, "join 192.168.0.20" }); + acts.add(new Object[] { 1000L, CLIENT, "join 192.168.0.10" }); + acts.add(new Object[] { 20000L, CLIENT, "join 192.168.0.99" }); + break; + default: + throw new IllegalArgumentException("unknown story " + story); + } + return acts; + } + + public static void main(String[] args) throws Exception { + network = ScenarioNetwork.read(args[0]); + String story = args[1]; + long end = Long.parseLong(args[2]); + List acts = acts(story); + + Map programs = new LinkedHashMap<>(); + for (String host : PEERS) { + network.system(host).installApp(CLASS, false); + PeerToPeerAnwendung program = (PeerToPeerAnwendung) network.system(host).holeSoftware(CLASS); + program.setMaxTeilnehmerZahl(!story.equals("full") ? 3 : host.equals(ECHO) ? 2 : host.equals(FAR) ? 3 : 1); + program.hinzuBeobachter((observable, data) -> event(host, "peers", String.join(",", program.holeBekanntePeerToPeerTeilnehmer()))); + programs.put(host, program); + } + network.start(); + for (Object[] act : acts) { + sleepUntil((Long) act[0]); + String host = (String) act[1]; + String call = (String) act[2]; + event(host, "call", call); + if (call.startsWith("join ")) programs.get(host).beitretenNetzwerk(call.substring("join ".length())); + else programs.get(host).resetNetwork(); + } + sleepUntil(end); + + ScenarioNetwork.Json out = new ScenarioNetwork.Json(); + out.open('{'); + network.writeFrames(out); + out.key("acts").open('['); + for (Object[] act : acts) out.open('[').number((Long) act[0]).string((String) act[1]).string((String) act[2]).close(']'); + out.close(']'); + synchronized (GnutellaRun.class) { + out.key("events").open('['); + for (Object[] each : events) out.open('[').number((Long) each[0]).string((String) each[1]).string((String) each[2]).string((String) each[3]).close(']'); + out.close(']'); + } + out.key("programs").open('{'); + for (Map.Entry entry : programs.entrySet()) { + PeerToPeerAnwendung program = entry.getValue(); + out.key(entry.getKey()).open('{'); + out.key("peers").open('['); + for (String peer : program.holeBekanntePeerToPeerTeilnehmer()) out.string(peer); + out.close(']'); + out.key("results").open('['); + for (String result : program.holeErgebnisse()) out.string(result); + out.close(']'); + out.close('}'); + } + out.close('}'); + out.close('}'); + network.stop(); + ScenarioNetwork.write(args[3], out); + System.exit(0); + } +}