{ "arp" : { "00000000-0000-0000-0000-000000000101" : { "192.168.0.20" : "02:00:00:00:01:12", "192.168.0.30" : "02:00:00:00:01:13" }, "00000000-0000-0000-0000-000000000102" : { "192.168.0.10" : "02:00:00:00:01:11", "192.168.0.30" : "02:00:00:00:01:13" }, "00000000-0000-0000-0000-000000000103" : { "192.168.0.10" : "02:00:00:00:01:11", "192.168.0.20" : "02:00:00:00:01:12" } }, "devices" : { "00000000-0000-0000-0000-000000000101" : [ "192.168.0.10", "255.255.255.0", "", "" ], "00000000-0000-0000-0000-000000000102" : [ "192.168.0.20", "255.255.255.0", "", "" ], "00000000-0000-0000-0000-000000000103" : [ "192.168.0.30", "255.255.255.0", "", "" ] }, "dhcp" : { "blacklist" : { }, "clients" : { }, "leases" : [ ], "offers" : [ ], "servers" : { } }, "firewallDecisions" : [ ], "icmpObservations" : { "00000000-0000-0000-0000-000000000103" : [ { "identifier" : 0, "kind" : "destinationHostUnreachable", "sender" : "192.168.0.30", "sequence" : 0 }, { "identifier" : 0, "kind" : "destinationHostUnreachable", "sender" : "192.168.0.30", "sequence" : 0 }, { "identifier" : 0, "kind" : "destinationHostUnreachable", "sender" : "192.168.0.30", "sequence" : 0 } ] }, "pendingEvents" : 0, "results" : [ "00000000-0000-0000-0000-000000000001", null, "00000000-0000-0000-0000-000000000002", "connected", [ "00000000-0000-0000-0000-000000000003" ], "00000000-0000-0000-0000-000000000003", true, "GET \/", true, "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx", null, false, 3000, false, 4000, 8000, true, false, "invalidSocket", "00000000-0000-0000-0000-000000000004", false, "timedOut", "00000000-0000-0000-0000-000000000005", "unreachable", false ], "sockets" : [ { "id" : "00000000-0000-0000-0000-000000000001", "localIp" : null, "localPort" : 80, "node" : "00000000-0000-0000-0000-000000000101", "parent" : null, "protocol" : "tcp", "queued" : 0, "remoteIp" : null, "remotePort" : null, "session" : { "assembly" : 0, "attempts" : 0, "messages" : 0, "next" : 1000000, "pending" : false, "remote" : 0 }, "tcpState" : "CLOSED" }, { "id" : "00000000-0000-0000-0000-000000000003", "localIp" : "192.168.0.10", "localPort" : 80, "node" : "00000000-0000-0000-0000-000000000101", "parent" : "00000000-0000-0000-0000-000000000001", "protocol" : "tcp", "queued" : 0, "remoteIp" : "192.168.0.20", "remotePort" : 61957, "session" : { "assembly" : 0, "attempts" : 1, "messages" : 0, "next" : 3003002, "pending" : false, "remote" : 2000006 }, "tcpState" : "CLOSED" }, { "id" : "00000000-0000-0000-0000-000000000004", "localIp" : "192.168.0.30", "localPort" : 51292, "node" : "00000000-0000-0000-0000-000000000103", "parent" : null, "protocol" : "tcp", "queued" : 0, "remoteIp" : "192.168.0.10", "remotePort" : 81, "session" : { "assembly" : 0, "attempts" : 3, "messages" : 0, "next" : 4000001, "pending" : false, "remote" : 0 }, "tcpState" : "CLOSED" }, { "id" : "00000000-0000-0000-0000-000000000005", "localIp" : "192.168.0.30", "localPort" : 5000, "node" : "00000000-0000-0000-0000-000000000103", "parent" : null, "protocol" : "tcp", "queued" : 0, "remoteIp" : "192.168.0.99", "remotePort" : 80, "session" : { "assembly" : 0, "attempts" : 3, "messages" : 0, "next" : 5000001, "pending" : false, "remote" : 0 }, "tcpState" : "CLOSED" } ], "switchTables" : { }, "time" : 53550, "traces" : [ { "after" : [ [ "state", "LISTEN" ] ], "before" : [ [ "state", "CLOSED" ] ], "detail" : "TCP CLOSED -> LISTEN", "direction" : "local", "id" : 1, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "accepted", "time" : 0 }, { "after" : [ [ "state", "SYN_SENT" ] ], "before" : [ [ "state", "CLOSED" ] ], "detail" : "TCP CLOSED -> SYN_SENT", "direction" : "local", "id" : 2, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "accepted", "time" : 0 }, { "after" : [ [ "sourcePort", "61957" ], [ "destinationPort", "80" ], [ "sequenceNumber", "2000000" ], [ "acknowledgementNumber", "0" ], [ "flags", "SYN" ], [ "payloadLength", "0" ] ], "before" : [ ], "detail" : "TCP SYN", "direction" : "outbound", "id" : 3, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "sent", "packet" : 1, "time" : 0 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "ARP request for 192.168.0.10", "direction" : "outbound", "frame" : 1, "id" : 4, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "created", "time" : 0 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 1, "id" : 5, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "sent", "time" : 0 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 1, "id" : 6, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "time" : 55 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 1, "id" : 7, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "time" : 55 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "switch broadcast flooding", "direction" : "outbound", "frame" : 1, "id" : 8, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "time" : 55 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 1, "id" : 9, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "time" : 55 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "switch broadcast flooding", "direction" : "outbound", "frame" : 1, "id" : 10, "interface" : "00000000-0000-0000-0000-000000000123", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "time" : 55 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 1, "id" : 11, "interface" : "00000000-0000-0000-0000-000000000123", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "time" : 55 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 1, "id" : 12, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "time" : 110 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 1, "id" : 13, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "time" : 110 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:01:12" ], [ "senderIP", "192.168.0.20" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "192.168.0.10" ] ], "direction" : "inbound", "frame" : 1, "id" : 14, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "accepted", "time" : 110 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "detail" : "ARP reply for 192.168.0.10", "direction" : "outbound", "frame" : 2, "id" : 15, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "created", "time" : 110 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "direction" : "outbound", "frame" : 2, "id" : 16, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "sent", "time" : 110 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 1, "id" : 17, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "received", "time" : 110 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 1, "id" : 18, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "received", "time" : 110 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:01:12" ], [ "senderIP", "192.168.0.20" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "192.168.0.10" ] ], "direction" : "inbound", "frame" : 1, "id" : 19, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "accepted", "time" : 110 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "direction" : "inbound", "frame" : 2, "id" : 20, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "time" : 165 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 2, "id" : 21, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "time" : 165 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "detail" : "switch learned unicast forwarding", "direction" : "outbound", "frame" : 2, "id" : 22, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "time" : 165 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "direction" : "outbound", "frame" : 2, "id" : 23, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "time" : 165 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "direction" : "inbound", "frame" : 2, "id" : 24, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "time" : 220 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "direction" : "inbound", "frame" : 2, "id" : 25, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "time" : 220 }, { "after" : [ ], "before" : [ [ "operation", "reply" ], [ "senderMAC", "02:00:00:00:01:11" ], [ "senderIP", "192.168.0.10" ], [ "targetMAC", "02:00:00:00:01:12" ], [ "targetIP", "192.168.0.20" ] ], "direction" : "inbound", "frame" : 2, "id" : 26, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "accepted", "time" : 220 }, { "after" : [ [ "senderIP", "192.168.0.20" ], [ "receiverIP", "192.168.0.10" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 3, "id" : 27, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "sent", "packet" : 1, "time" : 220 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 3, "id" : 28, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "created", "packet" : 1, "time" : 220 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 3, "id" : 29, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "sent", "packet" : 1, "time" : 220 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 3, "id" : 30, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "packet" : 1, "time" : 275 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 3, "id" : 31, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "packet" : 1, "time" : 275 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "detail" : "switch learned unicast forwarding", "direction" : "outbound", "frame" : 3, "id" : 32, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "packet" : 1, "time" : 275 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 3, "id" : 33, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "packet" : 1, "time" : 275 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 3, "id" : 34, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 1, "time" : 330 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 3, "id" : 35, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 1, "time" : 330 }, { "after" : [ ], "before" : [ [ "senderIP", "192.168.0.20" ], [ "receiverIP", "192.168.0.10" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 3, "id" : 36, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 1, "time" : 330 }, { "after" : [ ], "before" : [ [ "sourcePort", "61957" ], [ "destinationPort", "80" ], [ "sequenceNumber", "2000000" ], [ "acknowledgementNumber", "0" ], [ "flags", "SYN" ], [ "payloadLength", "0" ] ], "detail" : "TCP segment received", "direction" : "local", "id" : 37, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "accepted", "packet" : 1, "time" : 330 }, { "after" : [ [ "state", "SYN_RCVD" ] ], "before" : [ [ "state", "LISTEN" ] ], "detail" : "TCP LISTEN -> SYN_RCVD", "direction" : "local", "id" : 38, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "accepted", "time" : 330 }, { "after" : [ [ "sourcePort", "80" ], [ "destinationPort", "61957" ], [ "sequenceNumber", "3000000" ], [ "acknowledgementNumber", "2000001" ], [ "flags", "SYN+ACK" ], [ "payloadLength", "0" ] ], "before" : [ ], "detail" : "TCP SYN+ACK", "direction" : "outbound", "id" : 39, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "sent", "packet" : 2, "time" : 330 }, { "after" : [ [ "senderIP", "192.168.0.10" ], [ "receiverIP", "192.168.0.20" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 4, "id" : 40, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "sent", "packet" : 2, "time" : 330 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "direction" : "outbound", "frame" : 4, "id" : 41, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "created", "packet" : 2, "time" : 330 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "direction" : "outbound", "frame" : 4, "id" : 42, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "sent", "packet" : 2, "time" : 330 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "direction" : "inbound", "frame" : 4, "id" : 43, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "packet" : 2, "time" : 385 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 4, "id" : 44, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "packet" : 2, "time" : 385 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "detail" : "switch learned unicast forwarding", "direction" : "outbound", "frame" : 4, "id" : 45, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "packet" : 2, "time" : 385 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "direction" : "outbound", "frame" : 4, "id" : 46, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "packet" : 2, "time" : 385 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "direction" : "inbound", "frame" : 4, "id" : 47, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "packet" : 2, "time" : 440 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "direction" : "inbound", "frame" : 4, "id" : 48, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "packet" : 2, "time" : 440 }, { "after" : [ ], "before" : [ [ "senderIP", "192.168.0.10" ], [ "receiverIP", "192.168.0.20" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 4, "id" : 49, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "packet" : 2, "time" : 440 }, { "after" : [ ], "before" : [ [ "sourcePort", "80" ], [ "destinationPort", "61957" ], [ "sequenceNumber", "3000000" ], [ "acknowledgementNumber", "2000001" ], [ "flags", "SYN+ACK" ], [ "payloadLength", "0" ] ], "detail" : "TCP segment received", "direction" : "local", "id" : 50, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "accepted", "packet" : 2, "time" : 440 }, { "after" : [ [ "state", "ESTABLISHED" ] ], "before" : [ [ "state", "SYN_SENT" ] ], "detail" : "TCP SYN_SENT -> ESTABLISHED", "direction" : "local", "id" : 51, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "accepted", "time" : 440 }, { "after" : [ [ "sourcePort", "61957" ], [ "destinationPort", "80" ], [ "sequenceNumber", "2000001" ], [ "acknowledgementNumber", "3000001" ], [ "flags", "ACK" ], [ "payloadLength", "0" ] ], "before" : [ ], "detail" : "TCP ACK", "direction" : "outbound", "id" : 52, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "sent", "packet" : 3, "time" : 440 }, { "after" : [ [ "senderIP", "192.168.0.20" ], [ "receiverIP", "192.168.0.10" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 5, "id" : 53, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "sent", "packet" : 3, "time" : 440 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 5, "id" : 54, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "created", "packet" : 3, "time" : 440 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 5, "id" : 55, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "sent", "packet" : 3, "time" : 440 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 5, "id" : 56, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "packet" : 3, "time" : 495 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 5, "id" : 57, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "packet" : 3, "time" : 495 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "detail" : "switch learned unicast forwarding", "direction" : "outbound", "frame" : 5, "id" : 58, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "packet" : 3, "time" : 495 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 5, "id" : 59, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "packet" : 3, "time" : 495 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 5, "id" : 60, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 3, "time" : 550 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 5, "id" : 61, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 3, "time" : 550 }, { "after" : [ ], "before" : [ [ "senderIP", "192.168.0.20" ], [ "receiverIP", "192.168.0.10" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 5, "id" : 62, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 3, "time" : 550 }, { "after" : [ ], "before" : [ [ "sourcePort", "61957" ], [ "destinationPort", "80" ], [ "sequenceNumber", "2000001" ], [ "acknowledgementNumber", "3000001" ], [ "flags", "ACK" ], [ "payloadLength", "0" ] ], "detail" : "TCP segment received", "direction" : "local", "id" : 63, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "accepted", "packet" : 3, "time" : 550 }, { "after" : [ [ "state", "ESTABLISHED" ] ], "before" : [ [ "state", "SYN_RCVD" ] ], "detail" : "TCP SYN_RCVD -> ESTABLISHED", "direction" : "local", "id" : 64, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "accepted", "time" : 550 }, { "after" : [ [ "sourcePort", "61957" ], [ "destinationPort", "80" ], [ "sequenceNumber", "2000001" ], [ "acknowledgementNumber", "0" ], [ "flags", "PSH" ], [ "payloadLength", "5" ] ], "before" : [ ], "detail" : "TCP data segment 1\/1", "direction" : "outbound", "id" : 65, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "sent", "packet" : 4, "time" : 550 }, { "after" : [ [ "senderIP", "192.168.0.20" ], [ "receiverIP", "192.168.0.10" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 6, "id" : 66, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "sent", "packet" : 4, "time" : 550 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 6, "id" : 67, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "created", "packet" : 4, "time" : 550 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 6, "id" : 68, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "sent", "packet" : 4, "time" : 550 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 6, "id" : 69, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "packet" : 4, "time" : 605 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 6, "id" : 70, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "packet" : 4, "time" : 605 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "detail" : "switch learned unicast forwarding", "direction" : "outbound", "frame" : 6, "id" : 71, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "packet" : 4, "time" : 605 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 6, "id" : 72, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "packet" : 4, "time" : 605 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 6, "id" : 73, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 4, "time" : 660 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 6, "id" : 74, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 4, "time" : 660 }, { "after" : [ ], "before" : [ [ "senderIP", "192.168.0.20" ], [ "receiverIP", "192.168.0.10" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 6, "id" : 75, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 4, "time" : 660 }, { "after" : [ ], "before" : [ [ "sourcePort", "61957" ], [ "destinationPort", "80" ], [ "sequenceNumber", "2000001" ], [ "acknowledgementNumber", "0" ], [ "flags", "PSH" ], [ "payloadLength", "5" ] ], "detail" : "TCP segment received", "direction" : "local", "id" : 76, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "accepted", "packet" : 4, "time" : 660 }, { "after" : [ [ "sourcePort", "80" ], [ "destinationPort", "61957" ], [ "sequenceNumber", "3000001" ], [ "acknowledgementNumber", "2000006" ], [ "flags", "ACK" ], [ "payloadLength", "0" ] ], "before" : [ ], "detail" : "TCP ACK", "direction" : "outbound", "id" : 77, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "sent", "packet" : 5, "time" : 660 }, { "after" : [ [ "senderIP", "192.168.0.10" ], [ "receiverIP", "192.168.0.20" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 7, "id" : 78, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "sent", "packet" : 5, "time" : 660 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "direction" : "outbound", "frame" : 7, "id" : 79, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "created", "packet" : 5, "time" : 660 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "direction" : "outbound", "frame" : 7, "id" : 80, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "sent", "packet" : 5, "time" : 660 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "direction" : "inbound", "frame" : 7, "id" : 81, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "packet" : 5, "time" : 715 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 7, "id" : 82, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "packet" : 5, "time" : 715 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "detail" : "switch learned unicast forwarding", "direction" : "outbound", "frame" : 7, "id" : 83, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "packet" : 5, "time" : 715 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "direction" : "outbound", "frame" : 7, "id" : 84, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "packet" : 5, "time" : 715 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "direction" : "inbound", "frame" : 7, "id" : 85, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "packet" : 5, "time" : 770 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "direction" : "inbound", "frame" : 7, "id" : 86, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "packet" : 5, "time" : 770 }, { "after" : [ ], "before" : [ [ "senderIP", "192.168.0.10" ], [ "receiverIP", "192.168.0.20" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 7, "id" : 87, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "packet" : 5, "time" : 770 }, { "after" : [ ], "before" : [ [ "sourcePort", "80" ], [ "destinationPort", "61957" ], [ "sequenceNumber", "3000001" ], [ "acknowledgementNumber", "2000006" ], [ "flags", "ACK" ], [ "payloadLength", "0" ] ], "detail" : "TCP segment received", "direction" : "local", "id" : 88, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "accepted", "packet" : 5, "time" : 770 }, { "after" : [ [ "sourcePort", "80" ], [ "destinationPort", "61957" ], [ "sequenceNumber", "3000001" ], [ "acknowledgementNumber", "0" ], [ "flags", "" ], [ "payloadLength", "1460" ] ], "before" : [ ], "detail" : "TCP data segment 1\/3", "direction" : "outbound", "id" : 89, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "sent", "packet" : 6, "time" : 770 }, { "after" : [ [ "senderIP", "192.168.0.10" ], [ "receiverIP", "192.168.0.20" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 8, "id" : 90, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "sent", "packet" : 6, "time" : 770 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "direction" : "outbound", "frame" : 8, "id" : 91, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "created", "packet" : 6, "time" : 770 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "direction" : "outbound", "frame" : 8, "id" : 92, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "sent", "packet" : 6, "time" : 770 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "direction" : "inbound", "frame" : 8, "id" : 93, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "packet" : 6, "time" : 825 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 8, "id" : 94, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "packet" : 6, "time" : 825 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "detail" : "switch learned unicast forwarding", "direction" : "outbound", "frame" : 8, "id" : 95, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "packet" : 6, "time" : 825 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "direction" : "outbound", "frame" : 8, "id" : 96, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "packet" : 6, "time" : 825 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "direction" : "inbound", "frame" : 8, "id" : 97, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "packet" : 6, "time" : 880 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "direction" : "inbound", "frame" : 8, "id" : 98, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "packet" : 6, "time" : 880 }, { "after" : [ ], "before" : [ [ "senderIP", "192.168.0.10" ], [ "receiverIP", "192.168.0.20" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 8, "id" : 99, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "packet" : 6, "time" : 880 }, { "after" : [ ], "before" : [ [ "sourcePort", "80" ], [ "destinationPort", "61957" ], [ "sequenceNumber", "3000001" ], [ "acknowledgementNumber", "0" ], [ "flags", "" ], [ "payloadLength", "1460" ] ], "detail" : "TCP segment received", "direction" : "local", "id" : 100, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "accepted", "packet" : 6, "time" : 880 }, { "after" : [ [ "sourcePort", "61957" ], [ "destinationPort", "80" ], [ "sequenceNumber", "2000006" ], [ "acknowledgementNumber", "3001461" ], [ "flags", "ACK" ], [ "payloadLength", "0" ] ], "before" : [ ], "detail" : "TCP ACK", "direction" : "outbound", "id" : 101, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "sent", "packet" : 7, "time" : 880 }, { "after" : [ [ "senderIP", "192.168.0.20" ], [ "receiverIP", "192.168.0.10" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 9, "id" : 102, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "sent", "packet" : 7, "time" : 880 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 9, "id" : 103, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "created", "packet" : 7, "time" : 880 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 9, "id" : 104, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "sent", "packet" : 7, "time" : 880 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 9, "id" : 105, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "packet" : 7, "time" : 935 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 9, "id" : 106, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "packet" : 7, "time" : 935 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "detail" : "switch learned unicast forwarding", "direction" : "outbound", "frame" : 9, "id" : 107, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "packet" : 7, "time" : 935 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 9, "id" : 108, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "packet" : 7, "time" : 935 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 9, "id" : 109, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 7, "time" : 990 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 9, "id" : 110, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 7, "time" : 990 }, { "after" : [ ], "before" : [ [ "senderIP", "192.168.0.20" ], [ "receiverIP", "192.168.0.10" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 9, "id" : 111, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 7, "time" : 990 }, { "after" : [ ], "before" : [ [ "sourcePort", "61957" ], [ "destinationPort", "80" ], [ "sequenceNumber", "2000006" ], [ "acknowledgementNumber", "3001461" ], [ "flags", "ACK" ], [ "payloadLength", "0" ] ], "detail" : "TCP segment received", "direction" : "local", "id" : 112, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "accepted", "packet" : 7, "time" : 990 }, { "after" : [ [ "sourcePort", "80" ], [ "destinationPort", "61957" ], [ "sequenceNumber", "3001461" ], [ "acknowledgementNumber", "0" ], [ "flags", "" ], [ "payloadLength", "1460" ] ], "before" : [ ], "detail" : "TCP data segment 2\/3", "direction" : "outbound", "id" : 113, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "sent", "packet" : 8, "time" : 990 }, { "after" : [ [ "senderIP", "192.168.0.10" ], [ "receiverIP", "192.168.0.20" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 10, "id" : 114, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "sent", "packet" : 8, "time" : 990 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "direction" : "outbound", "frame" : 10, "id" : 115, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "created", "packet" : 8, "time" : 990 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "direction" : "outbound", "frame" : 10, "id" : 116, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "sent", "packet" : 8, "time" : 990 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "direction" : "inbound", "frame" : 10, "id" : 117, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "packet" : 8, "time" : 1045 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 10, "id" : 118, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "packet" : 8, "time" : 1045 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "detail" : "switch learned unicast forwarding", "direction" : "outbound", "frame" : 10, "id" : 119, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "packet" : 8, "time" : 1045 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "direction" : "outbound", "frame" : 10, "id" : 120, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "packet" : 8, "time" : 1045 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "direction" : "inbound", "frame" : 10, "id" : 121, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "packet" : 8, "time" : 1100 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "direction" : "inbound", "frame" : 10, "id" : 122, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "packet" : 8, "time" : 1100 }, { "after" : [ ], "before" : [ [ "senderIP", "192.168.0.10" ], [ "receiverIP", "192.168.0.20" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 10, "id" : 123, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "packet" : 8, "time" : 1100 }, { "after" : [ ], "before" : [ [ "sourcePort", "80" ], [ "destinationPort", "61957" ], [ "sequenceNumber", "3001461" ], [ "acknowledgementNumber", "0" ], [ "flags", "" ], [ "payloadLength", "1460" ] ], "detail" : "TCP segment received", "direction" : "local", "id" : 124, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "accepted", "packet" : 8, "time" : 1100 }, { "after" : [ [ "sourcePort", "61957" ], [ "destinationPort", "80" ], [ "sequenceNumber", "2000006" ], [ "acknowledgementNumber", "3002921" ], [ "flags", "ACK" ], [ "payloadLength", "0" ] ], "before" : [ ], "detail" : "TCP ACK", "direction" : "outbound", "id" : 125, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "sent", "packet" : 9, "time" : 1100 }, { "after" : [ [ "senderIP", "192.168.0.20" ], [ "receiverIP", "192.168.0.10" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 11, "id" : 126, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "sent", "packet" : 9, "time" : 1100 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 11, "id" : 127, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "created", "packet" : 9, "time" : 1100 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 11, "id" : 128, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "sent", "packet" : 9, "time" : 1100 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 11, "id" : 129, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "packet" : 9, "time" : 1155 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 11, "id" : 130, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "packet" : 9, "time" : 1155 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "detail" : "switch learned unicast forwarding", "direction" : "outbound", "frame" : 11, "id" : 131, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "packet" : 9, "time" : 1155 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 11, "id" : 132, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "packet" : 9, "time" : 1155 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 11, "id" : 133, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 9, "time" : 1210 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 11, "id" : 134, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 9, "time" : 1210 }, { "after" : [ ], "before" : [ [ "senderIP", "192.168.0.20" ], [ "receiverIP", "192.168.0.10" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 11, "id" : 135, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 9, "time" : 1210 }, { "after" : [ ], "before" : [ [ "sourcePort", "61957" ], [ "destinationPort", "80" ], [ "sequenceNumber", "2000006" ], [ "acknowledgementNumber", "3002921" ], [ "flags", "ACK" ], [ "payloadLength", "0" ] ], "detail" : "TCP segment received", "direction" : "local", "id" : 136, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "accepted", "packet" : 9, "time" : 1210 }, { "after" : [ [ "sourcePort", "80" ], [ "destinationPort", "61957" ], [ "sequenceNumber", "3002921" ], [ "acknowledgementNumber", "0" ], [ "flags", "PSH" ], [ "payloadLength", "80" ] ], "before" : [ ], "detail" : "TCP data segment 3\/3", "direction" : "outbound", "id" : 137, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "sent", "packet" : 10, "time" : 1210 }, { "after" : [ [ "senderIP", "192.168.0.10" ], [ "receiverIP", "192.168.0.20" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 12, "id" : 138, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "sent", "packet" : 10, "time" : 1210 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "direction" : "outbound", "frame" : 12, "id" : 139, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "created", "packet" : 10, "time" : 1210 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "direction" : "outbound", "frame" : 12, "id" : 140, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "sent", "packet" : 10, "time" : 1210 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "direction" : "inbound", "frame" : 12, "id" : 141, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "packet" : 10, "time" : 1265 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 12, "id" : 142, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "packet" : 10, "time" : 1265 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "detail" : "switch learned unicast forwarding", "direction" : "outbound", "frame" : 12, "id" : 143, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "packet" : 10, "time" : 1265 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "direction" : "outbound", "frame" : 12, "id" : 144, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "packet" : 10, "time" : 1265 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "direction" : "inbound", "frame" : 12, "id" : 145, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "packet" : 10, "time" : 1320 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "direction" : "inbound", "frame" : 12, "id" : 146, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "packet" : 10, "time" : 1320 }, { "after" : [ ], "before" : [ [ "senderIP", "192.168.0.10" ], [ "receiverIP", "192.168.0.20" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 12, "id" : 147, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "packet" : 10, "time" : 1320 }, { "after" : [ ], "before" : [ [ "sourcePort", "80" ], [ "destinationPort", "61957" ], [ "sequenceNumber", "3002921" ], [ "acknowledgementNumber", "0" ], [ "flags", "PSH" ], [ "payloadLength", "80" ] ], "detail" : "TCP segment received", "direction" : "local", "id" : 148, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "accepted", "packet" : 10, "time" : 1320 }, { "after" : [ [ "sourcePort", "61957" ], [ "destinationPort", "80" ], [ "sequenceNumber", "2000006" ], [ "acknowledgementNumber", "3003001" ], [ "flags", "ACK" ], [ "payloadLength", "0" ] ], "before" : [ ], "detail" : "TCP ACK", "direction" : "outbound", "id" : 149, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "sent", "packet" : 11, "time" : 1320 }, { "after" : [ [ "senderIP", "192.168.0.20" ], [ "receiverIP", "192.168.0.10" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 13, "id" : 150, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "sent", "packet" : 11, "time" : 1320 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 13, "id" : 151, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "created", "packet" : 11, "time" : 1320 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 13, "id" : 152, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "sent", "packet" : 11, "time" : 1320 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 13, "id" : 153, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "packet" : 11, "time" : 1375 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 13, "id" : 154, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "packet" : 11, "time" : 1375 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "detail" : "switch learned unicast forwarding", "direction" : "outbound", "frame" : 13, "id" : 155, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "packet" : 11, "time" : 1375 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 13, "id" : 156, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "packet" : 11, "time" : 1375 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 13, "id" : 157, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 11, "time" : 1430 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 13, "id" : 158, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 11, "time" : 1430 }, { "after" : [ ], "before" : [ [ "senderIP", "192.168.0.20" ], [ "receiverIP", "192.168.0.10" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 13, "id" : 159, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 11, "time" : 1430 }, { "after" : [ ], "before" : [ [ "sourcePort", "61957" ], [ "destinationPort", "80" ], [ "sequenceNumber", "2000006" ], [ "acknowledgementNumber", "3003001" ], [ "flags", "ACK" ], [ "payloadLength", "0" ] ], "detail" : "TCP segment received", "direction" : "local", "id" : 160, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "accepted", "packet" : 11, "time" : 1430 }, { "after" : [ [ "state", "FIN_WAIT_1" ] ], "before" : [ [ "state", "ESTABLISHED" ] ], "detail" : "TCP ESTABLISHED -> FIN_WAIT_1", "direction" : "local", "id" : 161, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "accepted", "time" : 1430 }, { "after" : [ [ "sourcePort", "61957" ], [ "destinationPort", "80" ], [ "sequenceNumber", "2000006" ], [ "acknowledgementNumber", "0" ], [ "flags", "FIN" ], [ "payloadLength", "0" ] ], "before" : [ ], "detail" : "TCP FIN", "direction" : "outbound", "id" : 162, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "sent", "packet" : 12, "time" : 1430 }, { "after" : [ [ "senderIP", "192.168.0.20" ], [ "receiverIP", "192.168.0.10" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 14, "id" : 163, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "sent", "packet" : 12, "time" : 1430 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 14, "id" : 164, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "created", "packet" : 12, "time" : 1430 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 14, "id" : 165, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "sent", "packet" : 12, "time" : 1430 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 14, "id" : 166, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "packet" : 12, "time" : 1485 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 14, "id" : 167, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "packet" : 12, "time" : 1485 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "detail" : "switch learned unicast forwarding", "direction" : "outbound", "frame" : 14, "id" : 168, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "packet" : 12, "time" : 1485 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 14, "id" : 169, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "packet" : 12, "time" : 1485 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 14, "id" : 170, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 12, "time" : 1540 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 14, "id" : 171, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 12, "time" : 1540 }, { "after" : [ ], "before" : [ [ "senderIP", "192.168.0.20" ], [ "receiverIP", "192.168.0.10" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 14, "id" : 172, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 12, "time" : 1540 }, { "after" : [ ], "before" : [ [ "sourcePort", "61957" ], [ "destinationPort", "80" ], [ "sequenceNumber", "2000006" ], [ "acknowledgementNumber", "0" ], [ "flags", "FIN" ], [ "payloadLength", "0" ] ], "detail" : "TCP segment received", "direction" : "local", "id" : 173, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "accepted", "packet" : 12, "time" : 1540 }, { "after" : [ [ "sourcePort", "80" ], [ "destinationPort", "61957" ], [ "sequenceNumber", "3003001" ], [ "acknowledgementNumber", "2000007" ], [ "flags", "ACK" ], [ "payloadLength", "0" ] ], "before" : [ ], "detail" : "TCP ACK", "direction" : "outbound", "id" : 174, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "sent", "packet" : 13, "time" : 1540 }, { "after" : [ [ "senderIP", "192.168.0.10" ], [ "receiverIP", "192.168.0.20" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 15, "id" : 175, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "sent", "packet" : 13, "time" : 1540 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "direction" : "outbound", "frame" : 15, "id" : 176, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "created", "packet" : 13, "time" : 1540 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "direction" : "outbound", "frame" : 15, "id" : 177, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "sent", "packet" : 13, "time" : 1540 }, { "after" : [ [ "state", "CLOSE_WAIT" ] ], "before" : [ [ "state", "ESTABLISHED" ] ], "detail" : "TCP ESTABLISHED -> CLOSE_WAIT", "direction" : "local", "id" : 178, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "accepted", "time" : 1540 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "direction" : "inbound", "frame" : 15, "id" : 179, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "packet" : 13, "time" : 1595 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 15, "id" : 180, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "packet" : 13, "time" : 1595 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "detail" : "switch learned unicast forwarding", "direction" : "outbound", "frame" : 15, "id" : 181, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "packet" : 13, "time" : 1595 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "direction" : "outbound", "frame" : 15, "id" : 182, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "packet" : 13, "time" : 1595 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "direction" : "inbound", "frame" : 15, "id" : 183, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "packet" : 13, "time" : 1650 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "direction" : "inbound", "frame" : 15, "id" : 184, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "packet" : 13, "time" : 1650 }, { "after" : [ ], "before" : [ [ "senderIP", "192.168.0.10" ], [ "receiverIP", "192.168.0.20" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 15, "id" : 185, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "packet" : 13, "time" : 1650 }, { "after" : [ ], "before" : [ [ "sourcePort", "80" ], [ "destinationPort", "61957" ], [ "sequenceNumber", "3003001" ], [ "acknowledgementNumber", "2000007" ], [ "flags", "ACK" ], [ "payloadLength", "0" ] ], "detail" : "TCP segment received", "direction" : "local", "id" : 186, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "accepted", "packet" : 13, "time" : 1650 }, { "after" : [ [ "state", "FIN_WAIT_2" ] ], "before" : [ [ "state", "FIN_WAIT_1" ] ], "detail" : "TCP FIN_WAIT_1 -> FIN_WAIT_2", "direction" : "local", "id" : 187, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "accepted", "time" : 1650 }, { "after" : [ [ "state", "LAST_ACK" ] ], "before" : [ [ "state", "CLOSE_WAIT" ] ], "detail" : "TCP CLOSE_WAIT -> LAST_ACK", "direction" : "local", "id" : 188, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "accepted", "time" : 3000 }, { "after" : [ [ "sourcePort", "80" ], [ "destinationPort", "61957" ], [ "sequenceNumber", "3003001" ], [ "acknowledgementNumber", "0" ], [ "flags", "FIN" ], [ "payloadLength", "0" ] ], "before" : [ ], "detail" : "TCP FIN after CLOSE_WAIT", "direction" : "outbound", "id" : 189, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "sent", "packet" : 14, "time" : 3000 }, { "after" : [ [ "senderIP", "192.168.0.10" ], [ "receiverIP", "192.168.0.20" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 16, "id" : 190, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "sent", "packet" : 14, "time" : 3000 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "direction" : "outbound", "frame" : 16, "id" : 191, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "created", "packet" : 14, "time" : 3000 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "direction" : "outbound", "frame" : 16, "id" : 192, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "sent", "packet" : 14, "time" : 3000 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "direction" : "inbound", "frame" : 16, "id" : 193, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "packet" : 14, "time" : 3055 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 16, "id" : 194, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "packet" : 14, "time" : 3055 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "detail" : "switch learned unicast forwarding", "direction" : "outbound", "frame" : 16, "id" : 195, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "packet" : 14, "time" : 3055 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "before" : [ ], "direction" : "outbound", "frame" : 16, "id" : 196, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "packet" : 14, "time" : 3055 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "direction" : "inbound", "frame" : 16, "id" : 197, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "packet" : 14, "time" : 3110 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:12" ] ], "direction" : "inbound", "frame" : 16, "id" : 198, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "packet" : 14, "time" : 3110 }, { "after" : [ ], "before" : [ [ "senderIP", "192.168.0.10" ], [ "receiverIP", "192.168.0.20" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 16, "id" : 199, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "packet" : 14, "time" : 3110 }, { "after" : [ ], "before" : [ [ "sourcePort", "80" ], [ "destinationPort", "61957" ], [ "sequenceNumber", "3003001" ], [ "acknowledgementNumber", "0" ], [ "flags", "FIN" ], [ "payloadLength", "0" ] ], "detail" : "TCP segment received", "direction" : "local", "id" : 200, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "accepted", "packet" : 14, "time" : 3110 }, { "after" : [ [ "sourcePort", "61957" ], [ "destinationPort", "80" ], [ "sequenceNumber", "2000007" ], [ "acknowledgementNumber", "3003002" ], [ "flags", "ACK" ], [ "payloadLength", "0" ] ], "before" : [ ], "detail" : "TCP ACK", "direction" : "outbound", "id" : 201, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "sent", "packet" : 15, "time" : 3110 }, { "after" : [ [ "senderIP", "192.168.0.20" ], [ "receiverIP", "192.168.0.10" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 17, "id" : 202, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "sent", "packet" : 15, "time" : 3110 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 17, "id" : 203, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "created", "packet" : 15, "time" : 3110 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 17, "id" : 204, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "sent", "packet" : 15, "time" : 3110 }, { "after" : [ [ "state", "TIME_WAIT" ] ], "before" : [ [ "state", "FIN_WAIT_2" ] ], "detail" : "TCP FIN_WAIT_2 -> TIME_WAIT", "direction" : "local", "id" : 205, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "accepted", "time" : 3110 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 17, "id" : 206, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "packet" : 15, "time" : 3165 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 17, "id" : 207, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "packet" : 15, "time" : 3165 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "detail" : "switch learned unicast forwarding", "direction" : "outbound", "frame" : 17, "id" : 208, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "packet" : 15, "time" : 3165 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 17, "id" : 209, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "packet" : 15, "time" : 3165 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 17, "id" : 210, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 15, "time" : 3220 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:12" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 17, "id" : 211, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 15, "time" : 3220 }, { "after" : [ ], "before" : [ [ "senderIP", "192.168.0.20" ], [ "receiverIP", "192.168.0.10" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 17, "id" : 212, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 15, "time" : 3220 }, { "after" : [ ], "before" : [ [ "sourcePort", "61957" ], [ "destinationPort", "80" ], [ "sequenceNumber", "2000007" ], [ "acknowledgementNumber", "3003002" ], [ "flags", "ACK" ], [ "payloadLength", "0" ] ], "detail" : "TCP segment received", "direction" : "local", "id" : 213, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "accepted", "packet" : 15, "time" : 3220 }, { "after" : [ [ "state", "CLOSED" ] ], "before" : [ [ "state", "LAST_ACK" ] ], "detail" : "TCP LAST_ACK -> CLOSED", "direction" : "local", "id" : 214, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "accepted", "time" : 3220 }, { "after" : [ [ "state", "CLOSED" ] ], "before" : [ [ "state", "TIME_WAIT" ] ], "detail" : "TCP TIME_WAIT -> CLOSED", "direction" : "local", "id" : 215, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "accepted", "time" : 5610 }, { "after" : [ [ "state", "SYN_SENT" ] ], "before" : [ [ "state", "CLOSED" ] ], "detail" : "TCP CLOSED -> SYN_SENT", "direction" : "local", "id" : 216, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "accepted", "time" : 8000 }, { "after" : [ [ "sourcePort", "51292" ], [ "destinationPort", "81" ], [ "sequenceNumber", "4000000" ], [ "acknowledgementNumber", "0" ], [ "flags", "SYN" ], [ "payloadLength", "0" ] ], "before" : [ ], "detail" : "TCP SYN", "direction" : "outbound", "id" : 217, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "sent", "packet" : 16, "time" : 8000 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "ARP request for 192.168.0.10", "direction" : "outbound", "frame" : 18, "id" : 218, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "created", "time" : 8000 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 18, "id" : 219, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "sent", "time" : 8000 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 18, "id" : 220, "interface" : "00000000-0000-0000-0000-000000000123", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "time" : 8055 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 18, "id" : 221, "interface" : "00000000-0000-0000-0000-000000000123", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "time" : 8055 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "switch broadcast flooding", "direction" : "outbound", "frame" : 18, "id" : 222, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "time" : 8055 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 18, "id" : 223, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "time" : 8055 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "switch broadcast flooding", "direction" : "outbound", "frame" : 18, "id" : 224, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "time" : 8055 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 18, "id" : 225, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "time" : 8055 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 18, "id" : 226, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "time" : 8110 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 18, "id" : 227, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "time" : 8110 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:01:13" ], [ "senderIP", "192.168.0.30" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "192.168.0.10" ] ], "direction" : "inbound", "frame" : 18, "id" : 228, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "accepted", "time" : 8110 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:13" ] ], "before" : [ ], "detail" : "ARP reply for 192.168.0.10", "direction" : "outbound", "frame" : 19, "id" : 229, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "created", "time" : 8110 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:13" ] ], "before" : [ ], "direction" : "outbound", "frame" : 19, "id" : 230, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "sent", "time" : 8110 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 18, "id" : 231, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "time" : 8110 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 18, "id" : 232, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "time" : 8110 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:01:13" ], [ "senderIP", "192.168.0.30" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "192.168.0.10" ] ], "direction" : "inbound", "frame" : 18, "id" : 233, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "accepted", "time" : 8110 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:13" ] ], "direction" : "inbound", "frame" : 19, "id" : 234, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "time" : 8165 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:13" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 19, "id" : 235, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "time" : 8165 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:13" ] ], "before" : [ ], "detail" : "switch learned unicast forwarding", "direction" : "outbound", "frame" : 19, "id" : 236, "interface" : "00000000-0000-0000-0000-000000000123", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "time" : 8165 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:13" ] ], "before" : [ ], "direction" : "outbound", "frame" : 19, "id" : 237, "interface" : "00000000-0000-0000-0000-000000000123", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "time" : 8165 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:13" ] ], "direction" : "inbound", "frame" : 19, "id" : 238, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "received", "time" : 8220 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:11" ], [ "destinationMAC", "02:00:00:00:01:13" ] ], "direction" : "inbound", "frame" : 19, "id" : 239, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "received", "time" : 8220 }, { "after" : [ ], "before" : [ [ "operation", "reply" ], [ "senderMAC", "02:00:00:00:01:11" ], [ "senderIP", "192.168.0.10" ], [ "targetMAC", "02:00:00:00:01:13" ], [ "targetIP", "192.168.0.30" ] ], "direction" : "inbound", "frame" : 19, "id" : 240, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "accepted", "time" : 8220 }, { "after" : [ [ "senderIP", "192.168.0.30" ], [ "receiverIP", "192.168.0.10" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 20, "id" : 241, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "sent", "packet" : 16, "time" : 8220 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 20, "id" : 242, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "created", "packet" : 16, "time" : 8220 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 20, "id" : 243, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "sent", "packet" : 16, "time" : 8220 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 20, "id" : 244, "interface" : "00000000-0000-0000-0000-000000000123", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "packet" : 16, "time" : 8275 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 20, "id" : 245, "interface" : "00000000-0000-0000-0000-000000000123", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "packet" : 16, "time" : 8275 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "detail" : "switch learned unicast forwarding", "direction" : "outbound", "frame" : 20, "id" : 246, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "packet" : 16, "time" : 8275 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 20, "id" : 247, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "packet" : 16, "time" : 8275 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 20, "id" : 248, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 16, "time" : 8330 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 20, "id" : 249, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 16, "time" : 8330 }, { "after" : [ ], "before" : [ [ "senderIP", "192.168.0.30" ], [ "receiverIP", "192.168.0.10" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 20, "id" : 250, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 16, "time" : 8330 }, { "after" : [ ], "before" : [ [ "sourcePort", "51292" ], [ "destinationPort", "81" ], [ "sequenceNumber", "4000000" ], [ "acknowledgementNumber", "0" ], [ "flags", "SYN" ], [ "payloadLength", "0" ] ], "detail" : "TCP segment received", "direction" : "local", "id" : 251, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "accepted", "packet" : 16, "time" : 8330 }, { "after" : [ ], "before" : [ [ "sourcePort", "51292" ], [ "destinationPort", "81" ], [ "sequenceNumber", "4000000" ], [ "acknowledgementNumber", "0" ], [ "flags", "SYN" ], [ "payloadLength", "0" ] ], "detail" : "TCP destination port closed", "direction" : "local", "id" : 252, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "dropped", "packet" : 16, "time" : 8330 }, { "after" : [ [ "sourcePort", "51292" ], [ "destinationPort", "81" ], [ "sequenceNumber", "4000000" ], [ "acknowledgementNumber", "0" ], [ "flags", "SYN" ], [ "payloadLength", "0" ] ], "before" : [ ], "detail" : "TCP SYN retransmission attempt 2", "direction" : "outbound", "id" : 253, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "retransmitted", "packet" : 17, "time" : 15830 }, { "after" : [ [ "senderIP", "192.168.0.30" ], [ "receiverIP", "192.168.0.10" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 21, "id" : 254, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "sent", "packet" : 17, "time" : 15830 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 21, "id" : 255, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "created", "packet" : 17, "time" : 15830 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 21, "id" : 256, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "sent", "packet" : 17, "time" : 15830 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 21, "id" : 257, "interface" : "00000000-0000-0000-0000-000000000123", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "packet" : 17, "time" : 15885 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 21, "id" : 258, "interface" : "00000000-0000-0000-0000-000000000123", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "packet" : 17, "time" : 15885 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "detail" : "switch unknown unicast flooding", "direction" : "outbound", "frame" : 21, "id" : 259, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "packet" : 17, "time" : 15885 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 21, "id" : 260, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "packet" : 17, "time" : 15885 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "detail" : "switch unknown unicast flooding", "direction" : "outbound", "frame" : 21, "id" : 261, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "packet" : 17, "time" : 15885 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 21, "id" : 262, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "packet" : 17, "time" : 15885 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 21, "id" : 263, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 17, "time" : 15940 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 21, "id" : 264, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 17, "time" : 15940 }, { "after" : [ ], "before" : [ [ "senderIP", "192.168.0.30" ], [ "receiverIP", "192.168.0.10" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 21, "id" : 265, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 17, "time" : 15940 }, { "after" : [ ], "before" : [ [ "sourcePort", "51292" ], [ "destinationPort", "81" ], [ "sequenceNumber", "4000000" ], [ "acknowledgementNumber", "0" ], [ "flags", "SYN" ], [ "payloadLength", "0" ] ], "detail" : "TCP segment received", "direction" : "local", "id" : 266, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "accepted", "packet" : 17, "time" : 15940 }, { "after" : [ ], "before" : [ [ "sourcePort", "51292" ], [ "destinationPort", "81" ], [ "sequenceNumber", "4000000" ], [ "acknowledgementNumber", "0" ], [ "flags", "SYN" ], [ "payloadLength", "0" ] ], "detail" : "TCP destination port closed", "direction" : "local", "id" : 267, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "dropped", "packet" : 17, "time" : 15940 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 21, "id" : 268, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "packet" : 17, "time" : 15940 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 21, "id" : 269, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "packet" : 17, "time" : 15940 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "detail" : "destination MAC does not match interface", "direction" : "inbound", "frame" : 21, "id" : 270, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "dropped", "packet" : 17, "time" : 15940 }, { "after" : [ [ "sourcePort", "51292" ], [ "destinationPort", "81" ], [ "sequenceNumber", "4000000" ], [ "acknowledgementNumber", "0" ], [ "flags", "SYN" ], [ "payloadLength", "0" ] ], "before" : [ ], "detail" : "TCP SYN retransmission attempt 3", "direction" : "outbound", "id" : 271, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "retransmitted", "packet" : 18, "time" : 23330 }, { "after" : [ [ "senderIP", "192.168.0.30" ], [ "receiverIP", "192.168.0.10" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 22, "id" : 272, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "sent", "packet" : 18, "time" : 23330 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 22, "id" : 273, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "created", "packet" : 18, "time" : 23330 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 22, "id" : 274, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "sent", "packet" : 18, "time" : 23330 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 22, "id" : 275, "interface" : "00000000-0000-0000-0000-000000000123", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "packet" : 18, "time" : 23385 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 22, "id" : 276, "interface" : "00000000-0000-0000-0000-000000000123", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "packet" : 18, "time" : 23385 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "detail" : "switch unknown unicast flooding", "direction" : "outbound", "frame" : 22, "id" : 277, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "packet" : 18, "time" : 23385 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 22, "id" : 278, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "packet" : 18, "time" : 23385 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "detail" : "switch unknown unicast flooding", "direction" : "outbound", "frame" : 22, "id" : 279, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "packet" : 18, "time" : 23385 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 22, "id" : 280, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "packet" : 18, "time" : 23385 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 22, "id" : 281, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 18, "time" : 23440 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 22, "id" : 282, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 18, "time" : 23440 }, { "after" : [ ], "before" : [ [ "senderIP", "192.168.0.30" ], [ "receiverIP", "192.168.0.10" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 22, "id" : 283, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "packet" : 18, "time" : 23440 }, { "after" : [ ], "before" : [ [ "sourcePort", "51292" ], [ "destinationPort", "81" ], [ "sequenceNumber", "4000000" ], [ "acknowledgementNumber", "0" ], [ "flags", "SYN" ], [ "payloadLength", "0" ] ], "detail" : "TCP segment received", "direction" : "local", "id" : 284, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "accepted", "packet" : 18, "time" : 23440 }, { "after" : [ ], "before" : [ [ "sourcePort", "51292" ], [ "destinationPort", "81" ], [ "sequenceNumber", "4000000" ], [ "acknowledgementNumber", "0" ], [ "flags", "SYN" ], [ "payloadLength", "0" ] ], "detail" : "TCP destination port closed", "direction" : "local", "id" : 285, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "dropped", "packet" : 18, "time" : 23440 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 22, "id" : 286, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "packet" : 18, "time" : 23440 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "direction" : "inbound", "frame" : 22, "id" : 287, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "packet" : 18, "time" : 23440 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "02:00:00:00:01:11" ] ], "detail" : "destination MAC does not match interface", "direction" : "inbound", "frame" : 22, "id" : 288, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "dropped", "packet" : 18, "time" : 23440 }, { "after" : [ [ "state", "CLOSED" ] ], "before" : [ [ "state", "SYN_SENT" ] ], "detail" : "TCP SYN_SENT -> CLOSED", "direction" : "local", "id" : 289, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "accepted", "time" : 30830 }, { "after" : [ [ "state", "SYN_SENT" ] ], "before" : [ [ "state", "CLOSED" ] ], "detail" : "TCP CLOSED -> SYN_SENT", "direction" : "local", "id" : 290, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "accepted", "time" : 30830 }, { "after" : [ [ "sourcePort", "5000" ], [ "destinationPort", "80" ], [ "sequenceNumber", "5000000" ], [ "acknowledgementNumber", "0" ], [ "flags", "SYN" ], [ "payloadLength", "0" ] ], "before" : [ ], "detail" : "TCP SYN", "direction" : "outbound", "id" : 291, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "sent", "packet" : 19, "time" : 30830 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "ARP request for 192.168.0.99", "direction" : "outbound", "frame" : 23, "id" : 292, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "created", "time" : 30830 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 23, "id" : 293, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "sent", "time" : 30830 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 23, "id" : 294, "interface" : "00000000-0000-0000-0000-000000000123", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "time" : 30885 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 23, "id" : 295, "interface" : "00000000-0000-0000-0000-000000000123", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "time" : 30885 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "switch broadcast flooding", "direction" : "outbound", "frame" : 23, "id" : 296, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "time" : 30885 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 23, "id" : 297, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "time" : 30885 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "switch broadcast flooding", "direction" : "outbound", "frame" : 23, "id" : 298, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "time" : 30885 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 23, "id" : 299, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "time" : 30885 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 23, "id" : 300, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "time" : 30940 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 23, "id" : 301, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "time" : 30940 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:01:13" ], [ "senderIP", "192.168.0.30" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "192.168.0.99" ] ], "direction" : "inbound", "frame" : 23, "id" : 302, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "accepted", "time" : 30940 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 23, "id" : 303, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "time" : 30940 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 23, "id" : 304, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "time" : 30940 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:01:13" ], [ "senderIP", "192.168.0.30" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "192.168.0.99" ] ], "direction" : "inbound", "frame" : 23, "id" : 305, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "accepted", "time" : 30940 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "ARP request for 192.168.0.99", "direction" : "outbound", "frame" : 24, "id" : 306, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "created", "time" : 30940 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 24, "id" : 307, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "sent", "time" : 30940 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 24, "id" : 308, "interface" : "00000000-0000-0000-0000-000000000123", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "time" : 30995 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 24, "id" : 309, "interface" : "00000000-0000-0000-0000-000000000123", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "time" : 30995 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "switch broadcast flooding", "direction" : "outbound", "frame" : 24, "id" : 310, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "time" : 30995 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 24, "id" : 311, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "time" : 30995 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "switch broadcast flooding", "direction" : "outbound", "frame" : 24, "id" : 312, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "time" : 30995 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 24, "id" : 313, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "time" : 30995 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 24, "id" : 314, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "time" : 31050 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 24, "id" : 315, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "time" : 31050 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:01:13" ], [ "senderIP", "192.168.0.30" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "192.168.0.99" ] ], "direction" : "inbound", "frame" : 24, "id" : 316, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "accepted", "time" : 31050 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 24, "id" : 317, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "time" : 31050 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 24, "id" : 318, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "time" : 31050 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:01:13" ], [ "senderIP", "192.168.0.30" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "192.168.0.99" ] ], "direction" : "inbound", "frame" : 24, "id" : 319, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "accepted", "time" : 31050 }, { "after" : [ [ "senderIP", "192.168.0.30" ], [ "receiverIP", "192.168.0.30" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "before" : [ ], "detail" : "ICMP destinationHostUnreachable", "direction" : "local", "id" : 320, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "created", "packet" : 20, "time" : 31050 }, { "after" : [ [ "sourcePort", "5000" ], [ "destinationPort", "80" ], [ "sequenceNumber", "5000000" ], [ "acknowledgementNumber", "0" ], [ "flags", "SYN" ], [ "payloadLength", "0" ] ], "before" : [ ], "detail" : "TCP SYN retransmission attempt 2", "direction" : "outbound", "id" : 321, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "retransmitted", "packet" : 21, "time" : 38550 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "ARP request for 192.168.0.99", "direction" : "outbound", "frame" : 25, "id" : 322, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "created", "time" : 38550 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 25, "id" : 323, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "sent", "time" : 38550 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "ARP request for 192.168.0.99", "direction" : "outbound", "frame" : 26, "id" : 324, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "created", "time" : 38550 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 26, "id" : 325, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "sent", "time" : 38550 }, { "after" : [ [ "senderIP", "192.168.0.30" ], [ "receiverIP", "192.168.0.30" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "before" : [ ], "detail" : "ICMP destinationHostUnreachable", "direction" : "local", "id" : 326, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "created", "packet" : 22, "time" : 38550 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 25, "id" : 327, "interface" : "00000000-0000-0000-0000-000000000123", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "time" : 38605 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 25, "id" : 328, "interface" : "00000000-0000-0000-0000-000000000123", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "time" : 38605 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "switch broadcast flooding", "direction" : "outbound", "frame" : 25, "id" : 329, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "time" : 38605 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 25, "id" : 330, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "time" : 38605 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "switch broadcast flooding", "direction" : "outbound", "frame" : 25, "id" : 331, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "time" : 38605 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 25, "id" : 332, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "time" : 38605 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 26, "id" : 333, "interface" : "00000000-0000-0000-0000-000000000123", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "time" : 38605 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 26, "id" : 334, "interface" : "00000000-0000-0000-0000-000000000123", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "time" : 38605 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "switch broadcast flooding", "direction" : "outbound", "frame" : 26, "id" : 335, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "time" : 38605 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 26, "id" : 336, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "time" : 38605 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "switch broadcast flooding", "direction" : "outbound", "frame" : 26, "id" : 337, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "time" : 38605 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 26, "id" : 338, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "time" : 38605 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 25, "id" : 339, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "time" : 38660 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 25, "id" : 340, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "time" : 38660 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:01:13" ], [ "senderIP", "192.168.0.30" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "192.168.0.99" ] ], "direction" : "inbound", "frame" : 25, "id" : 341, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "accepted", "time" : 38660 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 25, "id" : 342, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "time" : 38660 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 25, "id" : 343, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "time" : 38660 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:01:13" ], [ "senderIP", "192.168.0.30" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "192.168.0.99" ] ], "direction" : "inbound", "frame" : 25, "id" : 344, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "accepted", "time" : 38660 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 26, "id" : 345, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "time" : 38660 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 26, "id" : 346, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "time" : 38660 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:01:13" ], [ "senderIP", "192.168.0.30" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "192.168.0.99" ] ], "direction" : "inbound", "frame" : 26, "id" : 347, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "accepted", "time" : 38660 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 26, "id" : 348, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "time" : 38660 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 26, "id" : 349, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "time" : 38660 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:01:13" ], [ "senderIP", "192.168.0.30" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "192.168.0.99" ] ], "direction" : "inbound", "frame" : 26, "id" : 350, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "accepted", "time" : 38660 }, { "after" : [ [ "sourcePort", "5000" ], [ "destinationPort", "80" ], [ "sequenceNumber", "5000000" ], [ "acknowledgementNumber", "0" ], [ "flags", "SYN" ], [ "payloadLength", "0" ] ], "before" : [ ], "detail" : "TCP SYN retransmission attempt 3", "direction" : "outbound", "id" : 351, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "retransmitted", "packet" : 23, "time" : 46050 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "ARP request for 192.168.0.99", "direction" : "outbound", "frame" : 27, "id" : 352, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "created", "time" : 46050 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 27, "id" : 353, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "sent", "time" : 46050 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "ARP request for 192.168.0.99", "direction" : "outbound", "frame" : 28, "id" : 354, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "created", "time" : 46050 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 28, "id" : 355, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "sent", "time" : 46050 }, { "after" : [ [ "senderIP", "192.168.0.30" ], [ "receiverIP", "192.168.0.30" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "before" : [ ], "detail" : "ICMP destinationHostUnreachable", "direction" : "local", "id" : 356, "interface" : "00000000-0000-0000-0000-000000000113", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "created", "packet" : 24, "time" : 46050 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 27, "id" : 357, "interface" : "00000000-0000-0000-0000-000000000123", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "time" : 46105 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 27, "id" : 358, "interface" : "00000000-0000-0000-0000-000000000123", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "time" : 46105 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "switch broadcast flooding", "direction" : "outbound", "frame" : 27, "id" : 359, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "time" : 46105 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 27, "id" : 360, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "time" : 46105 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "switch broadcast flooding", "direction" : "outbound", "frame" : 27, "id" : 361, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "time" : 46105 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 27, "id" : 362, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "time" : 46105 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 28, "id" : 363, "interface" : "00000000-0000-0000-0000-000000000123", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "received", "time" : 46105 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "detail" : "switch learned source MAC", "direction" : "inbound", "frame" : 28, "id" : 364, "interface" : "00000000-0000-0000-0000-000000000123", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "accepted", "time" : 46105 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "switch broadcast flooding", "direction" : "outbound", "frame" : 28, "id" : 365, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "time" : 46105 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 28, "id" : 366, "interface" : "00000000-0000-0000-0000-000000000121", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "time" : 46105 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "switch broadcast flooding", "direction" : "outbound", "frame" : 28, "id" : 367, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "forwarded", "time" : 46105 }, { "after" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 28, "id" : 368, "interface" : "00000000-0000-0000-0000-000000000122", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000104", "operation" : "sent", "time" : 46105 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 27, "id" : 369, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "time" : 46160 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 27, "id" : 370, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "time" : 46160 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:01:13" ], [ "senderIP", "192.168.0.30" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "192.168.0.99" ] ], "direction" : "inbound", "frame" : 27, "id" : 371, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "accepted", "time" : 46160 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 27, "id" : 372, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "time" : 46160 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 27, "id" : 373, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "time" : 46160 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:01:13" ], [ "senderIP", "192.168.0.30" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "192.168.0.99" ] ], "direction" : "inbound", "frame" : 27, "id" : 374, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "accepted", "time" : 46160 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 28, "id" : 375, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "time" : 46160 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 28, "id" : 376, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "received", "time" : 46160 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:01:13" ], [ "senderIP", "192.168.0.30" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "192.168.0.99" ] ], "direction" : "inbound", "frame" : 28, "id" : 377, "interface" : "00000000-0000-0000-0000-000000000111", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "accepted", "time" : 46160 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 28, "id" : 378, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "time" : 46160 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:01:13" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 28, "id" : 379, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "received", "time" : 46160 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:01:13" ], [ "senderIP", "192.168.0.30" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "192.168.0.99" ] ], "direction" : "inbound", "frame" : 28, "id" : 380, "interface" : "00000000-0000-0000-0000-000000000112", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000102", "operation" : "accepted", "time" : 46160 }, { "after" : [ [ "state", "CLOSED" ] ], "before" : [ [ "state", "SYN_SENT" ] ], "detail" : "TCP SYN_SENT -> CLOSED", "direction" : "local", "id" : 381, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000103", "operation" : "accepted", "time" : 53550 }, { "after" : [ [ "state", "CLOSED" ] ], "before" : [ [ "state", "LISTEN" ] ], "detail" : "TCP LISTEN -> CLOSED", "direction" : "local", "id" : 382, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000101", "operation" : "accepted", "time" : 53550 } ] }