{
  "frames": {
    "00000000-0000-0000-0000-000000000401": [
      {
        "time": 1003,
        "source": "02:00:00:00:04:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.31"
      },
      {
        "time": 1240,
        "source": "02:00:00:00:04:14",
        "destination": "02:00:00:00:04:11",
        "arp": 2,
        "senderIp": "192.168.0.31",
        "targetIp": "192.168.0.20"
      },
      {
        "time": 1244,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:14",
        "icmp": 8,
        "icmpCode": 0,
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.31",
        "sequence": 1
      },
      {
        "time": 1469,
        "source": "02:00:00:00:04:14",
        "destination": "02:00:00:00:04:11",
        "icmp": 0,
        "icmpCode": 0,
        "sourceIp": "192.168.0.31",
        "destinationIp": "192.168.0.20",
        "sequence": 1
      },
      {
        "time": 2003,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:14",
        "icmp": 8,
        "icmpCode": 0,
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.31",
        "sequence": 2
      },
      {
        "time": 2226,
        "source": "02:00:00:00:04:14",
        "destination": "02:00:00:00:04:11",
        "icmp": 0,
        "icmpCode": 0,
        "sourceIp": "192.168.0.31",
        "destinationIp": "192.168.0.20",
        "sequence": 2
      },
      {
        "time": 3003,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:14",
        "icmp": 8,
        "icmpCode": 0,
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.31",
        "sequence": 3
      },
      {
        "time": 3226,
        "source": "02:00:00:00:04:14",
        "destination": "02:00:00:00:04:11",
        "icmp": 0,
        "icmpCode": 0,
        "sourceIp": "192.168.0.31",
        "destinationIp": "192.168.0.20",
        "sequence": 3
      },
      {
        "time": 4003,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:14",
        "icmp": 8,
        "icmpCode": 0,
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.31",
        "sequence": 4
      },
      {
        "time": 4226,
        "source": "02:00:00:00:04:14",
        "destination": "02:00:00:00:04:11",
        "icmp": 0,
        "icmpCode": 0,
        "sourceIp": "192.168.0.31",
        "destinationIp": "192.168.0.20",
        "sequence": 4
      },
      {
        "time": 5506,
        "source": "02:00:00:00:04:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.10"
      },
      {
        "time": 5728,
        "source": "02:00:00:00:04:12",
        "destination": "02:00:00:00:04:11",
        "arp": 2,
        "senderIp": "192.168.0.10",
        "targetIp": "192.168.0.20"
      },
      {
        "time": 5730,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:12",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.10",
        "protocol": 17,
        "sourcePort": 49379,
        "destinationPort": 53,
        "payload": "ID=30470 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
      },
      {
        "time": 5958,
        "source": "02:00:00:00:04:12",
        "destination": "02:00:00:00:04:11",
        "sourceIp": "192.168.0.10",
        "destinationIp": "192.168.0.20",
        "protocol": 17,
        "sourcePort": 53,
        "destinationPort": 49379,
        "payload": "ID=30470 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
      },
      {
        "time": 5959,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:12",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.10",
        "protocol": 17,
        "sourcePort": 56898,
        "destinationPort": 53,
        "payload": "ID=44276 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n"
      },
      {
        "time": 6183,
        "source": "02:00:00:00:04:12",
        "destination": "02:00:00:00:04:11",
        "sourceIp": "192.168.0.10",
        "destinationIp": "192.168.0.20",
        "protocol": 17,
        "sourcePort": 53,
        "destinationPort": 56898,
        "payload": "ID=44276 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
      },
      {
        "time": 6507,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:14",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.31",
        "protocol": 6,
        "sourcePort": 61489,
        "destinationPort": 55555,
        "payload": null,
        "tcpFlags": "S",
        "sequence": 4000000,
        "acknowledgement": 0
      },
      {
        "time": 6730,
        "source": "02:00:00:00:04:14",
        "destination": "02:00:00:00:04:11",
        "sourceIp": "192.168.0.31",
        "destinationIp": "192.168.0.20",
        "protocol": 6,
        "sourcePort": 55555,
        "destinationPort": 61489,
        "payload": null,
        "tcpFlags": "SA",
        "sequence": 2000000,
        "acknowledgement": 4000001
      },
      {
        "time": 6731,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:14",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.31",
        "protocol": 6,
        "sourcePort": 61489,
        "destinationPort": 55555,
        "payload": null,
        "tcpFlags": "A",
        "sequence": 4000001,
        "acknowledgement": 2000001
      }
    ],
    "00000000-0000-0000-0000-000000000402": [
      {
        "time": 1126,
        "source": "02:00:00:00:04:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.31"
      },
      {
        "time": 5617,
        "source": "02:00:00:00:04:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.10"
      },
      {
        "time": 5617,
        "source": "02:00:00:00:04:12",
        "destination": "02:00:00:00:04:11",
        "arp": 2,
        "senderIp": "192.168.0.10",
        "targetIp": "192.168.0.20"
      },
      {
        "time": 5842,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:12",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.10",
        "protocol": 17,
        "sourcePort": 49379,
        "destinationPort": 53,
        "payload": "ID=30470 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
      },
      {
        "time": 5846,
        "source": "02:00:00:00:04:12",
        "destination": "02:00:00:00:04:11",
        "sourceIp": "192.168.0.10",
        "destinationIp": "192.168.0.20",
        "protocol": 17,
        "sourcePort": 53,
        "destinationPort": 49379,
        "payload": "ID=30470 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
      },
      {
        "time": 6070,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:12",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.10",
        "protocol": 17,
        "sourcePort": 56898,
        "destinationPort": 53,
        "payload": "ID=44276 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n"
      },
      {
        "time": 6072,
        "source": "02:00:00:00:04:12",
        "destination": "02:00:00:00:04:11",
        "sourceIp": "192.168.0.10",
        "destinationIp": "192.168.0.20",
        "protocol": 17,
        "sourcePort": 53,
        "destinationPort": 56898,
        "payload": "ID=44276 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
      }
    ],
    "00000000-0000-0000-0000-000000000403": [
      {
        "time": 1126,
        "source": "02:00:00:00:04:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.31"
      },
      {
        "time": 5617,
        "source": "02:00:00:00:04:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.10"
      }
    ],
    "00000000-0000-0000-0000-000000000404": [
      {
        "time": 1126,
        "source": "02:00:00:00:04:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.31"
      },
      {
        "time": 1129,
        "source": "02:00:00:00:04:14",
        "destination": "02:00:00:00:04:11",
        "arp": 2,
        "senderIp": "192.168.0.31",
        "targetIp": "192.168.0.20"
      },
      {
        "time": 1358,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:14",
        "icmp": 8,
        "icmpCode": 0,
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.31",
        "sequence": 1
      },
      {
        "time": 1358,
        "source": "02:00:00:00:04:14",
        "destination": "02:00:00:00:04:11",
        "icmp": 0,
        "icmpCode": 0,
        "sourceIp": "192.168.0.31",
        "destinationIp": "192.168.0.20",
        "sequence": 1
      },
      {
        "time": 2115,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:14",
        "icmp": 8,
        "icmpCode": 0,
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.31",
        "sequence": 2
      },
      {
        "time": 2115,
        "source": "02:00:00:00:04:14",
        "destination": "02:00:00:00:04:11",
        "icmp": 0,
        "icmpCode": 0,
        "sourceIp": "192.168.0.31",
        "destinationIp": "192.168.0.20",
        "sequence": 2
      },
      {
        "time": 3115,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:14",
        "icmp": 8,
        "icmpCode": 0,
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.31",
        "sequence": 3
      },
      {
        "time": 3115,
        "source": "02:00:00:00:04:14",
        "destination": "02:00:00:00:04:11",
        "icmp": 0,
        "icmpCode": 0,
        "sourceIp": "192.168.0.31",
        "destinationIp": "192.168.0.20",
        "sequence": 3
      },
      {
        "time": 4115,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:14",
        "icmp": 8,
        "icmpCode": 0,
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.31",
        "sequence": 4
      },
      {
        "time": 4115,
        "source": "02:00:00:00:04:14",
        "destination": "02:00:00:00:04:11",
        "icmp": 0,
        "icmpCode": 0,
        "sourceIp": "192.168.0.31",
        "destinationIp": "192.168.0.20",
        "sequence": 4
      },
      {
        "time": 5617,
        "source": "02:00:00:00:04:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.10"
      },
      {
        "time": 6619,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:14",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.31",
        "protocol": 6,
        "sourcePort": 61489,
        "destinationPort": 55555,
        "payload": null,
        "tcpFlags": "S",
        "sequence": 4000000,
        "acknowledgement": 0
      },
      {
        "time": 6619,
        "source": "02:00:00:00:04:14",
        "destination": "02:00:00:00:04:11",
        "sourceIp": "192.168.0.31",
        "destinationIp": "192.168.0.20",
        "protocol": 6,
        "sourcePort": 55555,
        "destinationPort": 61489,
        "payload": null,
        "tcpFlags": "SA",
        "sequence": 2000000,
        "acknowledgement": 4000001
      },
      {
        "time": 6842,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:14",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.31",
        "protocol": 6,
        "sourcePort": 61489,
        "destinationPort": 55555,
        "payload": null,
        "tcpFlags": "A",
        "sequence": 4000001,
        "acknowledgement": 2000001
      }
    ],
    "00000000-0000-0000-0000-000000000405": [
      {
        "time": 1126,
        "source": "02:00:00:00:04:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.31"
      },
      {
        "time": 5617,
        "source": "02:00:00:00:04:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.10"
      }
    ],
    "00000000-0000-0000-0000-000000000405#1": [],
    "00000000-0000-0000-0000-000000000406": []
  },
  "rows": {
    "00000000-0000-0000-0000-000000000401": [
      [
        "1",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.31",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
      ],
      [
        "2",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.31",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]"
      ],
      [
        "3",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "3",
        "192.168.0.20",
        "192.168.0.31",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 1"
      ],
      [
        "4",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "4",
        "192.168.0.31",
        "192.168.0.20",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 1"
      ],
      [
        "5",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "5",
        "192.168.0.20",
        "192.168.0.31",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 2"
      ],
      [
        "6",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "6",
        "192.168.0.31",
        "192.168.0.20",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 2"
      ],
      [
        "7",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "7",
        "192.168.0.20",
        "192.168.0.31",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 3"
      ],
      [
        "8",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "8",
        "192.168.0.31",
        "192.168.0.20",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 3"
      ],
      [
        "9",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "9",
        "192.168.0.20",
        "192.168.0.31",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 4"
      ],
      [
        "10",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "10",
        "192.168.0.31",
        "192.168.0.20",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 4"
      ],
      [
        "11",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "11",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "12",
        "02:00:00:00:04:12",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "12",
        "192.168.0.10",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]"
      ],
      [
        "13",
        "02:00:00:00:04:11",
        "02:00:00:00:04:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "13",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "13",
        "192.168.0.20:49379",
        "192.168.0.10:53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "13",
        "192.168.0.20:49379",
        "192.168.0.10:53",
        "DNS",
        "Anwendung",
        "ID=30470 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
      ],
      [
        "14",
        "02:00:00:00:04:12",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "14",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "14",
        "192.168.0.10:53",
        "192.168.0.20:49379",
        "UDP",
        "Transport",
        ""
      ],
      [
        "14",
        "192.168.0.10:53",
        "192.168.0.20:49379",
        "DNS",
        "Anwendung",
        "ID=30470 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
      ],
      [
        "15",
        "02:00:00:00:04:11",
        "02:00:00:00:04:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "15",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "15",
        "192.168.0.20:56898",
        "192.168.0.10:53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "15",
        "192.168.0.20:56898",
        "192.168.0.10:53",
        "DNS",
        "Anwendung",
        "ID=44276 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n"
      ],
      [
        "16",
        "02:00:00:00:04:12",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "16",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "16",
        "192.168.0.10:53",
        "192.168.0.20:56898",
        "UDP",
        "Transport",
        ""
      ],
      [
        "16",
        "192.168.0.10:53",
        "192.168.0.20:56898",
        "DNS",
        "Anwendung",
        "ID=44276 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
      ],
      [
        "17",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "17",
        "192.168.0.20",
        "192.168.0.31",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "17",
        "192.168.0.20:61489",
        "192.168.0.31:55555",
        "TCP",
        "Transport",
        "SYN, SEQ: 4.000.000"
      ],
      [
        "18",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "18",
        "192.168.0.31",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "18",
        "192.168.0.31:55555",
        "192.168.0.20:61489",
        "TCP",
        "Transport",
        "SYN, SEQ: 2.000.000, ACK: 4.000.001"
      ],
      [
        "19",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "19",
        "192.168.0.20",
        "192.168.0.31",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "19",
        "192.168.0.20:61489",
        "192.168.0.31:55555",
        "TCP",
        "Transport",
        "SEQ: 4.000.001, ACK: 2.000.001"
      ]
    ],
    "00000000-0000-0000-0000-000000000402": [
      [
        "1",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.31",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
      ],
      [
        "2",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "3",
        "02:00:00:00:04:12",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "3",
        "192.168.0.10",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]"
      ],
      [
        "4",
        "02:00:00:00:04:11",
        "02:00:00:00:04:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "4",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "4",
        "192.168.0.20:49379",
        "192.168.0.10:53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "4",
        "192.168.0.20:49379",
        "192.168.0.10:53",
        "DNS",
        "Anwendung",
        "ID=30470 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
      ],
      [
        "5",
        "02:00:00:00:04:12",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "5",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "5",
        "192.168.0.10:53",
        "192.168.0.20:49379",
        "UDP",
        "Transport",
        ""
      ],
      [
        "5",
        "192.168.0.10:53",
        "192.168.0.20:49379",
        "DNS",
        "Anwendung",
        "ID=30470 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
      ],
      [
        "6",
        "02:00:00:00:04:11",
        "02:00:00:00:04:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "6",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "6",
        "192.168.0.20:56898",
        "192.168.0.10:53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "6",
        "192.168.0.20:56898",
        "192.168.0.10:53",
        "DNS",
        "Anwendung",
        "ID=44276 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n"
      ],
      [
        "7",
        "02:00:00:00:04:12",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "7",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "7",
        "192.168.0.10:53",
        "192.168.0.20:56898",
        "UDP",
        "Transport",
        ""
      ],
      [
        "7",
        "192.168.0.10:53",
        "192.168.0.20:56898",
        "DNS",
        "Anwendung",
        "ID=44276 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
      ]
    ],
    "00000000-0000-0000-0000-000000000403": [
      [
        "1",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.31",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
      ],
      [
        "2",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ]
    ],
    "00000000-0000-0000-0000-000000000404": [
      [
        "1",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.31",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
      ],
      [
        "2",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.31",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]"
      ],
      [
        "3",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "3",
        "192.168.0.20",
        "192.168.0.31",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 1"
      ],
      [
        "4",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "4",
        "192.168.0.31",
        "192.168.0.20",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 1"
      ],
      [
        "5",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "5",
        "192.168.0.20",
        "192.168.0.31",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 2"
      ],
      [
        "6",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "6",
        "192.168.0.31",
        "192.168.0.20",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 2"
      ],
      [
        "7",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "7",
        "192.168.0.20",
        "192.168.0.31",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 3"
      ],
      [
        "8",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "8",
        "192.168.0.31",
        "192.168.0.20",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 3"
      ],
      [
        "9",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "9",
        "192.168.0.20",
        "192.168.0.31",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 4"
      ],
      [
        "10",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "10",
        "192.168.0.31",
        "192.168.0.20",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 4"
      ],
      [
        "11",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "11",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "12",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "12",
        "192.168.0.20",
        "192.168.0.31",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "12",
        "192.168.0.20:61489",
        "192.168.0.31:55555",
        "TCP",
        "Transport",
        "SYN, SEQ: 4.000.000"
      ],
      [
        "13",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "13",
        "192.168.0.31",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "13",
        "192.168.0.31:55555",
        "192.168.0.20:61489",
        "TCP",
        "Transport",
        "SYN, SEQ: 2.000.000, ACK: 4.000.001"
      ],
      [
        "14",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "14",
        "192.168.0.20",
        "192.168.0.31",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "14",
        "192.168.0.20:61489",
        "192.168.0.31:55555",
        "TCP",
        "Transport",
        "SEQ: 4.000.001, ACK: 2.000.001"
      ]
    ],
    "00000000-0000-0000-0000-000000000405": [
      [
        "1",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.31",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
      ],
      [
        "2",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ]
    ],
    "00000000-0000-0000-0000-000000000405#1": [],
    "00000000-0000-0000-0000-000000000406": []
  },
  "layeredRows": {
    "00000000-0000-0000-0000-000000000401": [
      [
        "1",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.31",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
      ],
      [
        "2",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.31",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]"
      ],
      [
        "3",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "3",
        "192.168.0.20",
        "192.168.0.31",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 1"
      ],
      [
        "4",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "4",
        "192.168.0.31",
        "192.168.0.20",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 1"
      ],
      [
        "5",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "5",
        "192.168.0.20",
        "192.168.0.31",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 2"
      ],
      [
        "6",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "6",
        "192.168.0.31",
        "192.168.0.20",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 2"
      ],
      [
        "7",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "7",
        "192.168.0.20",
        "192.168.0.31",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 3"
      ],
      [
        "8",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "8",
        "192.168.0.31",
        "192.168.0.20",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 3"
      ],
      [
        "9",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "9",
        "192.168.0.20",
        "192.168.0.31",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 4"
      ],
      [
        "10",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "10",
        "192.168.0.31",
        "192.168.0.20",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 4"
      ],
      [
        "11",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "11",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "12",
        "02:00:00:00:04:12",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "12",
        "192.168.0.10",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]"
      ],
      [
        "13",
        "02:00:00:00:04:11",
        "02:00:00:00:04:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "13",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "13",
        "49379",
        "53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "13",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=30470 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
      ],
      [
        "14",
        "02:00:00:00:04:12",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "14",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "14",
        "53",
        "49379",
        "UDP",
        "Transport",
        ""
      ],
      [
        "14",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=30470 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
      ],
      [
        "15",
        "02:00:00:00:04:11",
        "02:00:00:00:04:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "15",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "15",
        "56898",
        "53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "15",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=44276 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n"
      ],
      [
        "16",
        "02:00:00:00:04:12",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "16",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "16",
        "53",
        "56898",
        "UDP",
        "Transport",
        ""
      ],
      [
        "16",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=44276 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
      ],
      [
        "17",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "17",
        "192.168.0.20",
        "192.168.0.31",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "17",
        "61489",
        "55555",
        "TCP",
        "Transport",
        "SYN, SEQ: 4.000.000"
      ],
      [
        "18",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "18",
        "192.168.0.31",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "18",
        "55555",
        "61489",
        "TCP",
        "Transport",
        "SYN, SEQ: 2.000.000, ACK: 4.000.001"
      ],
      [
        "19",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "19",
        "192.168.0.20",
        "192.168.0.31",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "19",
        "61489",
        "55555",
        "TCP",
        "Transport",
        "SEQ: 4.000.001, ACK: 2.000.001"
      ]
    ],
    "00000000-0000-0000-0000-000000000402": [
      [
        "1",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.31",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
      ],
      [
        "2",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "3",
        "02:00:00:00:04:12",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "3",
        "192.168.0.10",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]"
      ],
      [
        "4",
        "02:00:00:00:04:11",
        "02:00:00:00:04:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "4",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "4",
        "49379",
        "53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "4",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=30470 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
      ],
      [
        "5",
        "02:00:00:00:04:12",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "5",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "5",
        "53",
        "49379",
        "UDP",
        "Transport",
        ""
      ],
      [
        "5",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=30470 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
      ],
      [
        "6",
        "02:00:00:00:04:11",
        "02:00:00:00:04:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "6",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "6",
        "56898",
        "53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "6",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=44276 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n"
      ],
      [
        "7",
        "02:00:00:00:04:12",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "7",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "7",
        "53",
        "56898",
        "UDP",
        "Transport",
        ""
      ],
      [
        "7",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=44276 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
      ]
    ],
    "00000000-0000-0000-0000-000000000403": [
      [
        "1",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.31",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
      ],
      [
        "2",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ]
    ],
    "00000000-0000-0000-0000-000000000404": [
      [
        "1",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.31",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
      ],
      [
        "2",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.31",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]"
      ],
      [
        "3",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "3",
        "192.168.0.20",
        "192.168.0.31",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 1"
      ],
      [
        "4",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "4",
        "192.168.0.31",
        "192.168.0.20",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 1"
      ],
      [
        "5",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "5",
        "192.168.0.20",
        "192.168.0.31",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 2"
      ],
      [
        "6",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "6",
        "192.168.0.31",
        "192.168.0.20",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 2"
      ],
      [
        "7",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "7",
        "192.168.0.20",
        "192.168.0.31",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 3"
      ],
      [
        "8",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "8",
        "192.168.0.31",
        "192.168.0.20",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 3"
      ],
      [
        "9",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "9",
        "192.168.0.20",
        "192.168.0.31",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 4"
      ],
      [
        "10",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "10",
        "192.168.0.31",
        "192.168.0.20",
        "ICMP",
        "Vermittlung",
        "ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 4"
      ],
      [
        "11",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "11",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "12",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "12",
        "192.168.0.20",
        "192.168.0.31",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "12",
        "61489",
        "55555",
        "TCP",
        "Transport",
        "SYN, SEQ: 4.000.000"
      ],
      [
        "13",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "13",
        "192.168.0.31",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "13",
        "55555",
        "61489",
        "TCP",
        "Transport",
        "SYN, SEQ: 2.000.000, ACK: 4.000.001"
      ],
      [
        "14",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "14",
        "192.168.0.20",
        "192.168.0.31",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "14",
        "61489",
        "55555",
        "TCP",
        "Transport",
        "SEQ: 4.000.001, ACK: 2.000.001"
      ]
    ],
    "00000000-0000-0000-0000-000000000405": [
      [
        "1",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.31",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
      ],
      [
        "2",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ]
    ],
    "00000000-0000-0000-0000-000000000405#1": [],
    "00000000-0000-0000-0000-000000000406": []
  },
  "acts": [
    [
      500,
      "00000000-0000-0000-0000-000000000404",
      "tcpdump"
    ],
    [
      600,
      "00000000-0000-0000-0000-000000000402",
      "tcpdump"
    ],
    [
      1000,
      "00000000-0000-0000-0000-000000000401",
      "ping 192.168.0.31"
    ],
    [
      3000,
      "00000000-0000-0000-0000-000000000404",
      "arp"
    ],
    [
      5500,
      "00000000-0000-0000-0000-000000000401",
      "host www.filius.de"
    ],
    [
      6500,
      "00000000-0000-0000-0000-000000000401",
      "connect"
    ],
    [
      8000,
      "00000000-0000-0000-0000-000000000404",
      "^C"
    ],
    [
      8100,
      "00000000-0000-0000-0000-000000000402",
      "^C"
    ]
  ],
  "events": [
    [
      500,
      "00000000-0000-0000-0000-000000000404",
      "call",
      "tcpdump"
    ],
    [
      501,
      "00000000-0000-0000-0000-000000000404",
      "busy",
      "true"
    ],
    [
      501,
      "00000000-0000-0000-0000-000000000404",
      "text",
      "Beenden mit Strg+C"
    ],
    [
      600,
      "00000000-0000-0000-0000-000000000402",
      "call",
      "tcpdump"
    ],
    [
      600,
      "00000000-0000-0000-0000-000000000402",
      "busy",
      "true"
    ],
    [
      600,
      "00000000-0000-0000-0000-000000000402",
      "text",
      "Beenden mit Strg+C"
    ],
    [
      1000,
      "00000000-0000-0000-0000-000000000401",
      "call",
      "ping 192.168.0.31"
    ],
    [
      1001,
      "00000000-0000-0000-0000-000000000401",
      "busy",
      "true"
    ],
    [
      1001,
      "00000000-0000-0000-0000-000000000401",
      "text",
      "PING 192.168.0.31 (192.168.0.31)"
    ],
    [
      1201,
      "00000000-0000-0000-0000-000000000402",
      "text",
      "\n  10:37:06.217 ARP 192.168.0.20 > 192.168.0.31 Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
    ],
    [
      1205,
      "00000000-0000-0000-0000-000000000404",
      "text",
      "\n  10:37:06.217 ARP 192.168.0.20 > 192.168.0.31 Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
    ],
    [
      1205,
      "00000000-0000-0000-0000-000000000404",
      "text",
      "\n  10:37:06.220 ARP 192.168.0.31 > 192.168.0.20 MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]"
    ],
    [
      1407,
      "00000000-0000-0000-0000-000000000404",
      "text",
      "\n  10:37:06.449 ICMP 192.168.0.20 > 192.168.0.31 ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 1"
    ],
    [
      1407,
      "00000000-0000-0000-0000-000000000404",
      "text",
      "\n  10:37:06.449 ICMP 192.168.0.31 > 192.168.0.20 ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 1"
    ],
    [
      1471,
      "00000000-0000-0000-0000-000000000401",
      "text",
      "\nFrom 192.168.0.31: icmp_seq=1 ttl=64 time=468ms"
    ],
    [
      2207,
      "00000000-0000-0000-0000-000000000404",
      "text",
      "\n  10:37:07.206 ICMP 192.168.0.20 > 192.168.0.31 ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 2"
    ],
    [
      2207,
      "00000000-0000-0000-0000-000000000404",
      "text",
      "\n  10:37:07.206 ICMP 192.168.0.31 > 192.168.0.20 ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 2"
    ],
    [
      2226,
      "00000000-0000-0000-0000-000000000401",
      "text",
      "\nFrom 192.168.0.31: icmp_seq=2 ttl=64 time=223ms"
    ],
    [
      3000,
      "00000000-0000-0000-0000-000000000404",
      "call",
      "arp"
    ],
    [
      3208,
      "00000000-0000-0000-0000-000000000404",
      "text",
      "\n  10:37:08.206 ICMP 192.168.0.20 > 192.168.0.31 ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 3"
    ],
    [
      3208,
      "00000000-0000-0000-0000-000000000404",
      "text",
      "\n  10:37:08.206 ICMP 192.168.0.31 > 192.168.0.20 ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 3"
    ],
    [
      3226,
      "00000000-0000-0000-0000-000000000401",
      "text",
      "\nFrom 192.168.0.31: icmp_seq=3 ttl=64 time=223ms"
    ],
    [
      4209,
      "00000000-0000-0000-0000-000000000404",
      "text",
      "\n  10:37:09.206 ICMP 192.168.0.20 > 192.168.0.31 ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 4"
    ],
    [
      4209,
      "00000000-0000-0000-0000-000000000404",
      "text",
      "\n  10:37:09.206 ICMP 192.168.0.31 > 192.168.0.20 ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 4"
    ],
    [
      4226,
      "00000000-0000-0000-0000-000000000401",
      "text",
      "\nFrom 192.168.0.31: icmp_seq=4 ttl=64 time=223ms"
    ],
    [
      5005,
      "00000000-0000-0000-0000-000000000401",
      "text",
      "\n--- 192.168.0.31 Paketstatistik ---\n4 Paket(e) gesendet, 4 Paket(e) empfangen, 0% Paketverlust\n"
    ],
    [
      5005,
      "00000000-0000-0000-0000-000000000401",
      "busy",
      "false"
    ],
    [
      5500,
      "00000000-0000-0000-0000-000000000401",
      "call",
      "host www.filius.de"
    ],
    [
      5501,
      "00000000-0000-0000-0000-000000000401",
      "busy",
      "true"
    ],
    [
      5706,
      "00000000-0000-0000-0000-000000000402",
      "text",
      "\n  10:37:10.708 ARP 192.168.0.20 > 192.168.0.10 Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
    ],
    [
      5706,
      "00000000-0000-0000-0000-000000000402",
      "text",
      "\n  10:37:10.708 ARP 192.168.0.10 > 192.168.0.20 MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]"
    ],
    [
      5711,
      "00000000-0000-0000-0000-000000000404",
      "text",
      "\n  10:37:10.708 ARP 192.168.0.20 > 192.168.0.10 Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
    ],
    [
      5917,
      "00000000-0000-0000-0000-000000000402",
      "text",
      "\n  10:37:10.933 DNS 192.168.0.20:49379 > 192.168.0.10:53 ID=30470 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0   www.filius.de. A IN"
    ],
    [
      5917,
      "00000000-0000-0000-0000-000000000402",
      "text",
      "\n  10:37:10.937 DNS 192.168.0.10:53 > 192.168.0.20:49379 ID=30470 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0   www.filius.de. A 3600 192.168.0.30"
    ],
    [
      5958,
      "00000000-0000-0000-0000-000000000401",
      "text",
      "www.filius.de. hat die IP-Adresse 192.168.0.30\n"
    ],
    [
      6117,
      "00000000-0000-0000-0000-000000000402",
      "text",
      "\n  10:37:11.161 DNS 192.168.0.20:56898 > 192.168.0.10:53 ID=44276 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0   www.filius.de. MX IN"
    ],
    [
      6117,
      "00000000-0000-0000-0000-000000000402",
      "text",
      "\n  10:37:11.163 DNS 192.168.0.10:53 > 192.168.0.20:56898 ID=44276 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0"
    ],
    [
      6183,
      "00000000-0000-0000-0000-000000000401",
      "busy",
      "false"
    ],
    [
      6500,
      "00000000-0000-0000-0000-000000000401",
      "call",
      "connect 192.168.0.31:55555"
    ],
    [
      6712,
      "00000000-0000-0000-0000-000000000404",
      "text",
      "\n  10:37:11.710 TCP 192.168.0.20:61489 > 192.168.0.31:55555 SYN, SEQ: 4.000.000"
    ],
    [
      6712,
      "00000000-0000-0000-0000-000000000404",
      "text",
      "\n  10:37:11.710 TCP 192.168.0.31:55555 > 192.168.0.20:61489 SYN, SEQ: 2.000.000, ACK: 4.000.001"
    ],
    [
      6913,
      "00000000-0000-0000-0000-000000000404",
      "text",
      "\n  10:37:11.933 TCP 192.168.0.20:61489 > 192.168.0.31:55555 SEQ: 4.000.001, ACK: 2.000.001"
    ],
    [
      8000,
      "00000000-0000-0000-0000-000000000404",
      "call",
      "^C"
    ],
    [
      8014,
      "00000000-0000-0000-0000-000000000404",
      "busy",
      "false"
    ],
    [
      8014,
      "00000000-0000-0000-0000-000000000404",
      "text",
      "| Internetadresse  | Physische Adresse |\n----------------------------------------\n| 192.168.0.20     | 02:00:00:00:04:11 |\n| 255.255.255.255  | FF:FF:FF:FF:FF:FF |\n----------------------------------------\n"
    ],
    [
      8100,
      "00000000-0000-0000-0000-000000000402",
      "call",
      "^C"
    ],
    [
      8119,
      "00000000-0000-0000-0000-000000000402",
      "busy",
      "false"
    ]
  ]
}