{ "steps": [ { "step": "open", "at": 1076, "titles": [ "Anna - 192.168.0.20" ], "selected": 0, "visible": true, "tables": { "00000000-0000-0000-0000-000000000201": { "rows": [], "layerRows": [] } } }, { "step": "after the fetch", "at": 15280, "titles": [ "Anna - 192.168.0.20" ], "selected": 0, "visible": true, "tables": { "00000000-0000-0000-0000-000000000201": { "rows": [ [ "1", "08:34:12.286", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "08:34:12.523", "192.168.0.10", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" ], [ "3", "08:34:12.526", "192.168.0.20:61663", "192.168.0.10:53", "DNS", "Anwendung", "ID=26498 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" ], [ "4", "08:34:12.756", "192.168.0.10:53", "192.168.0.20:61663", "DNS", "Anwendung", "ID=26498 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" ], [ "5", "08:34:12.760", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ], [ "6", "08:34:12.983", "192.168.0.30", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" ], [ "7", "08:34:12.984", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SYN, SEQ: 2.000.000" ], [ "8", "08:34:13.207", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 2.000.001" ], [ "9", "08:34:13.208", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.001, ACK: 1.000.001" ], [ "10", "08:34:13.264", "192.168.0.20:50668", "192.168.0.30:80", "HTTP", "Anwendung", "GET /text.txt HTTP/1.1\nHost: www.filius.de\n" ], [ "11", "08:34:13.486", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SEQ: 1.000.001, ACK: 2.000.044" ], [ "12", "08:34:13.542", "192.168.0.30:80", "192.168.0.20:50668", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen" ], [ "13", "08:34:13.543", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.044, ACK: 1.000.063" ], [ "14", "08:34:13.598", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "FIN, SEQ: 2.000.044" ], [ "15", "08:34:13.821", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SEQ: 1.000.063, ACK: 2.000.045" ], [ "16", "08:34:13.877", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "FIN, SEQ: 1.000.063" ], [ "17", "08:34:13.878", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.045, ACK: 1.000.064" ] ], "layerRows": [ [ "1", "08:34:12.286", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "08:34:12.286", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "08:34:12.523", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x806" ], [ "2", "08:34:12.523", "192.168.0.10", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" ], [ "3", "08:34:12.526", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "3", "08:34:12.526", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "3", "08:34:12.526", "192.168.0.20:61663", "192.168.0.10:53", "UDP", "Transport", "" ], [ "3", "08:34:12.526", "192.168.0.20:61663", "192.168.0.10:53", "DNS", "Anwendung", "ID=26498 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" ], [ "4", "08:34:12.756", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "4", "08:34:12.756", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "4", "08:34:12.756", "192.168.0.10:53", "192.168.0.20:61663", "UDP", "Transport", "" ], [ "4", "08:34:12.756", "192.168.0.10:53", "192.168.0.20:61663", "DNS", "Anwendung", "ID=26498 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" ], [ "5", "08:34:12.760", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "5", "08:34:12.760", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ], [ "6", "08:34:12.983", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x806" ], [ "6", "08:34:12.983", "192.168.0.30", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" ], [ "7", "08:34:12.984", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "7", "08:34:12.984", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "08:34:12.984", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SYN, SEQ: 2.000.000" ], [ "8", "08:34:13.207", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "8", "08:34:13.207", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "08:34:13.207", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 2.000.001" ], [ "9", "08:34:13.208", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "9", "08:34:13.208", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "9", "08:34:13.208", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.001, ACK: 1.000.001" ], [ "10", "08:34:13.264", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "10", "08:34:13.264", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "10", "08:34:13.264", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.001" ], [ "10", "08:34:13.264", "192.168.0.20:50668", "192.168.0.30:80", "HTTP", "Anwendung", "GET /text.txt HTTP/1.1\nHost: www.filius.de\n" ], [ "11", "08:34:13.486", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "11", "08:34:13.486", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "08:34:13.486", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SEQ: 1.000.001, ACK: 2.000.044" ], [ "12", "08:34:13.542", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "12", "08:34:13.542", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "12", "08:34:13.542", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SEQ: 1.000.001" ], [ "12", "08:34:13.542", "192.168.0.30:80", "192.168.0.20:50668", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen" ], [ "13", "08:34:13.543", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "13", "08:34:13.543", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "13", "08:34:13.543", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.044, ACK: 1.000.063" ], [ "14", "08:34:13.598", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "14", "08:34:13.598", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "14", "08:34:13.598", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "FIN, SEQ: 2.000.044" ], [ "15", "08:34:13.821", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "15", "08:34:13.821", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "15", "08:34:13.821", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SEQ: 1.000.063, ACK: 2.000.045" ], [ "16", "08:34:13.877", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "16", "08:34:13.877", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "16", "08:34:13.877", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "FIN, SEQ: 1.000.063" ], [ "17", "08:34:13.878", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "17", "08:34:13.878", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "17", "08:34:13.878", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.045, ACK: 1.000.064" ] ] } }, "details": [ [ [ 0, "Nr.: 1 / Zeit: 08:34:12.286" ], [ 1, "Netzzugang" ], [ 2, "Quelle: 02:00:00:00:02:11" ], [ 2, "Ziel: FF:FF:FF:FF:FF:FF" ], [ 2, "Bemerkungen / Details: 0x806" ], [ 1, "Vermittlung" ], [ 2, "Quelle: 192.168.0.20" ], [ 2, "Ziel: 192.168.0.10" ], [ 2, "Protokoll: ARP" ], [ 2, "Bemerkungen / Details: " ], [ 3, "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ] ], [ [ 0, "Nr.: 2 / Zeit: 08:34:12.523" ], [ 1, "Netzzugang" ], [ 2, "Quelle: 02:00:00:00:02:12" ], [ 2, "Ziel: 02:00:00:00:02:11" ], [ 2, "Bemerkungen / Details: 0x806" ], [ 1, "Vermittlung" ], [ 2, "Quelle: 192.168.0.10" ], [ 2, "Ziel: 192.168.0.20" ], [ 2, "Protokoll: ARP" ], [ 2, "Bemerkungen / Details: " ], [ 3, "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" ] ], [ [ 0, "Nr.: 3 / Zeit: 08:34:12.526" ], [ 1, "Netzzugang" ], [ 2, "Quelle: 02:00:00:00:02:11" ], [ 2, "Ziel: 02:00:00:00:02:12" ], [ 2, "Bemerkungen / Details: 0x800" ], [ 1, "Vermittlung" ], [ 2, "Quelle: 192.168.0.20" ], [ 2, "Ziel: 192.168.0.10" ], [ 2, "Protokoll: IP" ], [ 2, "Bemerkungen / Details: Protokoll: 17, TTL: 64" ], [ 1, "Transport" ], [ 2, "Quelle: 61663" ], [ 2, "Ziel: 53" ], [ 2, "Protokoll: UDP" ], [ 1, "Anwendung" ], [ 2, "Protokoll: DNS" ], [ 2, "Bemerkungen / Details (83 Bytes): " ], [ 3, "ID=26498 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" ] ], [ [ 0, "Nr.: 4 / Zeit: 08:34:12.756" ], [ 1, "Netzzugang" ], [ 2, "Quelle: 02:00:00:00:02:12" ], [ 2, "Ziel: 02:00:00:00:02:11" ], [ 2, "Bemerkungen / Details: 0x800" ], [ 1, "Vermittlung" ], [ 2, "Quelle: 192.168.0.10" ], [ 2, "Ziel: 192.168.0.20" ], [ 2, "Protokoll: IP" ], [ 2, "Bemerkungen / Details: Protokoll: 17, TTL: 64" ], [ 1, "Transport" ], [ 2, "Quelle: 53" ], [ 2, "Ziel: 61663" ], [ 2, "Protokoll: UDP" ], [ 1, "Anwendung" ], [ 2, "Protokoll: DNS" ], [ 2, "Bemerkungen / Details (98 Bytes): " ], [ 3, "ID=26498 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" ] ], [ [ 0, "Nr.: 5 / Zeit: 08:34:12.760" ], [ 1, "Netzzugang" ], [ 2, "Quelle: 02:00:00:00:02:11" ], [ 2, "Ziel: FF:FF:FF:FF:FF:FF" ], [ 2, "Bemerkungen / Details: 0x806" ], [ 1, "Vermittlung" ], [ 2, "Quelle: 192.168.0.20" ], [ 2, "Ziel: 192.168.0.30" ], [ 2, "Protokoll: ARP" ], [ 2, "Bemerkungen / Details: " ], [ 3, "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ] ], [ [ 0, "Nr.: 6 / Zeit: 08:34:12.983" ], [ 1, "Netzzugang" ], [ 2, "Quelle: 02:00:00:00:02:13" ], [ 2, "Ziel: 02:00:00:00:02:11" ], [ 2, "Bemerkungen / Details: 0x806" ], [ 1, "Vermittlung" ], [ 2, "Quelle: 192.168.0.30" ], [ 2, "Ziel: 192.168.0.20" ], [ 2, "Protokoll: ARP" ], [ 2, "Bemerkungen / Details: " ], [ 3, "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" ] ], [ [ 0, "Nr.: 7 / Zeit: 08:34:12.984" ], [ 1, "Netzzugang" ], [ 2, "Quelle: 02:00:00:00:02:11" ], [ 2, "Ziel: 02:00:00:00:02:13" ], [ 2, "Bemerkungen / Details: 0x800" ], [ 1, "Vermittlung" ], [ 2, "Quelle: 192.168.0.20" ], [ 2, "Ziel: 192.168.0.30" ], [ 2, "Protokoll: IP" ], [ 2, "Bemerkungen / Details: Protokoll: 6, TTL: 64" ], [ 1, "Transport" ], [ 2, "Quelle: 50668" ], [ 2, "Ziel: 80" ], [ 2, "Protokoll: TCP" ], [ 2, "Bemerkungen / Details: SYN, SEQ: 2.000.000" ] ], [ [ 0, "Nr.: 8 / Zeit: 08:34:13.207" ], [ 1, "Netzzugang" ], [ 2, "Quelle: 02:00:00:00:02:13" ], [ 2, "Ziel: 02:00:00:00:02:11" ], [ 2, "Bemerkungen / Details: 0x800" ], [ 1, "Vermittlung" ], [ 2, "Quelle: 192.168.0.30" ], [ 2, "Ziel: 192.168.0.20" ], [ 2, "Protokoll: IP" ], [ 2, "Bemerkungen / Details: Protokoll: 6, TTL: 64" ], [ 1, "Transport" ], [ 2, "Quelle: 80" ], [ 2, "Ziel: 50668" ], [ 2, "Protokoll: TCP" ], [ 2, "Bemerkungen / Details: SYN, SEQ: 1.000.000, ACK: 2.000.001" ] ], [ [ 0, "Nr.: 9 / Zeit: 08:34:13.208" ], [ 1, "Netzzugang" ], [ 2, "Quelle: 02:00:00:00:02:11" ], [ 2, "Ziel: 02:00:00:00:02:13" ], [ 2, "Bemerkungen / Details: 0x800" ], [ 1, "Vermittlung" ], [ 2, "Quelle: 192.168.0.20" ], [ 2, "Ziel: 192.168.0.30" ], [ 2, "Protokoll: IP" ], [ 2, "Bemerkungen / Details: Protokoll: 6, TTL: 64" ], [ 1, "Transport" ], [ 2, "Quelle: 50668" ], [ 2, "Ziel: 80" ], [ 2, "Protokoll: TCP" ], [ 2, "Bemerkungen / Details: SEQ: 2.000.001, ACK: 1.000.001" ] ], [ [ 0, "Nr.: 10 / Zeit: 08:34:13.264" ], [ 1, "Netzzugang" ], [ 2, "Quelle: 02:00:00:00:02:11" ], [ 2, "Ziel: 02:00:00:00:02:13" ], [ 2, "Bemerkungen / Details: 0x800" ], [ 1, "Vermittlung" ], [ 2, "Quelle: 192.168.0.20" ], [ 2, "Ziel: 192.168.0.30" ], [ 2, "Protokoll: IP" ], [ 2, "Bemerkungen / Details: Protokoll: 6, TTL: 64" ], [ 1, "Transport" ], [ 2, "Quelle: 50668" ], [ 2, "Ziel: 80" ], [ 2, "Protokoll: TCP" ], [ 2, "Bemerkungen / Details: SEQ: 2.000.001" ], [ 1, "Anwendung" ], [ 2, "Protokoll: HTTP" ], [ 2, "Bemerkungen / Details (43 Bytes): " ], [ 3, "GET /text.txt HTTP/1.1\nHost: www.filius.de\n" ] ], [ [ 0, "Nr.: 11 / Zeit: 08:34:13.486" ], [ 1, "Netzzugang" ], [ 2, "Quelle: 02:00:00:00:02:13" ], [ 2, "Ziel: 02:00:00:00:02:11" ], [ 2, "Bemerkungen / Details: 0x800" ], [ 1, "Vermittlung" ], [ 2, "Quelle: 192.168.0.30" ], [ 2, "Ziel: 192.168.0.20" ], [ 2, "Protokoll: IP" ], [ 2, "Bemerkungen / Details: Protokoll: 6, TTL: 64" ], [ 1, "Transport" ], [ 2, "Quelle: 80" ], [ 2, "Ziel: 50668" ], [ 2, "Protokoll: TCP" ], [ 2, "Bemerkungen / Details: SEQ: 1.000.001, ACK: 2.000.044" ] ], [ [ 0, "Nr.: 12 / Zeit: 08:34:13.542" ], [ 1, "Netzzugang" ], [ 2, "Quelle: 02:00:00:00:02:13" ], [ 2, "Ziel: 02:00:00:00:02:11" ], [ 2, "Bemerkungen / Details: 0x800" ], [ 1, "Vermittlung" ], [ 2, "Quelle: 192.168.0.30" ], [ 2, "Ziel: 192.168.0.20" ], [ 2, "Protokoll: IP" ], [ 2, "Bemerkungen / Details: Protokoll: 6, TTL: 64" ], [ 1, "Transport" ], [ 2, "Quelle: 80" ], [ 2, "Ziel: 50668" ], [ 2, "Protokoll: TCP" ], [ 2, "Bemerkungen / Details: SEQ: 1.000.001" ], [ 1, "Anwendung" ], [ 2, "Protokoll: HTTP" ], [ 2, "Bemerkungen / Details (62 Bytes): " ], [ 3, "HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen" ] ], [ [ 0, "Nr.: 13 / Zeit: 08:34:13.543" ], [ 1, "Netzzugang" ], [ 2, "Quelle: 02:00:00:00:02:11" ], [ 2, "Ziel: 02:00:00:00:02:13" ], [ 2, "Bemerkungen / Details: 0x800" ], [ 1, "Vermittlung" ], [ 2, "Quelle: 192.168.0.20" ], [ 2, "Ziel: 192.168.0.30" ], [ 2, "Protokoll: IP" ], [ 2, "Bemerkungen / Details: Protokoll: 6, TTL: 64" ], [ 1, "Transport" ], [ 2, "Quelle: 50668" ], [ 2, "Ziel: 80" ], [ 2, "Protokoll: TCP" ], [ 2, "Bemerkungen / Details: SEQ: 2.000.044, ACK: 1.000.063" ] ], [ [ 0, "Nr.: 14 / Zeit: 08:34:13.598" ], [ 1, "Netzzugang" ], [ 2, "Quelle: 02:00:00:00:02:11" ], [ 2, "Ziel: 02:00:00:00:02:13" ], [ 2, "Bemerkungen / Details: 0x800" ], [ 1, "Vermittlung" ], [ 2, "Quelle: 192.168.0.20" ], [ 2, "Ziel: 192.168.0.30" ], [ 2, "Protokoll: IP" ], [ 2, "Bemerkungen / Details: Protokoll: 6, TTL: 64" ], [ 1, "Transport" ], [ 2, "Quelle: 50668" ], [ 2, "Ziel: 80" ], [ 2, "Protokoll: TCP" ], [ 2, "Bemerkungen / Details: FIN, SEQ: 2.000.044" ] ], [ [ 0, "Nr.: 15 / Zeit: 08:34:13.821" ], [ 1, "Netzzugang" ], [ 2, "Quelle: 02:00:00:00:02:13" ], [ 2, "Ziel: 02:00:00:00:02:11" ], [ 2, "Bemerkungen / Details: 0x800" ], [ 1, "Vermittlung" ], [ 2, "Quelle: 192.168.0.30" ], [ 2, "Ziel: 192.168.0.20" ], [ 2, "Protokoll: IP" ], [ 2, "Bemerkungen / Details: Protokoll: 6, TTL: 64" ], [ 1, "Transport" ], [ 2, "Quelle: 80" ], [ 2, "Ziel: 50668" ], [ 2, "Protokoll: TCP" ], [ 2, "Bemerkungen / Details: SEQ: 1.000.063, ACK: 2.000.045" ] ], [ [ 0, "Nr.: 16 / Zeit: 08:34:13.877" ], [ 1, "Netzzugang" ], [ 2, "Quelle: 02:00:00:00:02:13" ], [ 2, "Ziel: 02:00:00:00:02:11" ], [ 2, "Bemerkungen / Details: 0x800" ], [ 1, "Vermittlung" ], [ 2, "Quelle: 192.168.0.30" ], [ 2, "Ziel: 192.168.0.20" ], [ 2, "Protokoll: IP" ], [ 2, "Bemerkungen / Details: Protokoll: 6, TTL: 64" ], [ 1, "Transport" ], [ 2, "Quelle: 80" ], [ 2, "Ziel: 50668" ], [ 2, "Protokoll: TCP" ], [ 2, "Bemerkungen / Details: FIN, SEQ: 1.000.063" ] ], [ [ 0, "Nr.: 17 / Zeit: 08:34:13.878" ], [ 1, "Netzzugang" ], [ 2, "Quelle: 02:00:00:00:02:11" ], [ 2, "Ziel: 02:00:00:00:02:13" ], [ 2, "Bemerkungen / Details: 0x800" ], [ 1, "Vermittlung" ], [ 2, "Quelle: 192.168.0.20" ], [ 2, "Ziel: 192.168.0.30" ], [ 2, "Protokoll: IP" ], [ 2, "Bemerkungen / Details: Protokoll: 6, TTL: 64" ], [ 1, "Transport" ], [ 2, "Quelle: 50668" ], [ 2, "Ziel: 80" ], [ 2, "Protokoll: TCP" ], [ 2, "Bemerkungen / Details: SEQ: 2.000.045, ACK: 1.000.064" ] ] ], "layered": [ [ "1", "08:34:12.286", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "08:34:12.286", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "08:34:12.523", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x806" ], [ "2", "08:34:12.523", "192.168.0.10", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" ], [ "3", "08:34:12.526", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "3", "08:34:12.526", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "3", "08:34:12.526", "61663", "53", "UDP", "Transport", "" ], [ "3", "08:34:12.526", null, null, "DNS", "Anwendung", "ID=26498 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" ], [ "4", "08:34:12.756", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "4", "08:34:12.756", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "4", "08:34:12.756", "53", "61663", "UDP", "Transport", "" ], [ "4", "08:34:12.756", null, null, "DNS", "Anwendung", "ID=26498 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" ], [ "5", "08:34:12.760", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "5", "08:34:12.760", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ], [ "6", "08:34:12.983", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x806" ], [ "6", "08:34:12.983", "192.168.0.30", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" ], [ "7", "08:34:12.984", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "7", "08:34:12.984", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "08:34:12.984", "50668", "80", "TCP", "Transport", "SYN, SEQ: 2.000.000" ], [ "8", "08:34:13.207", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "8", "08:34:13.207", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "08:34:13.207", "80", "50668", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 2.000.001" ], [ "9", "08:34:13.208", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "9", "08:34:13.208", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "9", "08:34:13.208", "50668", "80", "TCP", "Transport", "SEQ: 2.000.001, ACK: 1.000.001" ], [ "10", "08:34:13.264", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "10", "08:34:13.264", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "10", "08:34:13.264", "50668", "80", "TCP", "Transport", "SEQ: 2.000.001" ], [ "10", "08:34:13.264", null, null, "HTTP", "Anwendung", "GET /text.txt HTTP/1.1\nHost: www.filius.de\n" ], [ "11", "08:34:13.486", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "11", "08:34:13.486", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "08:34:13.486", "80", "50668", "TCP", "Transport", "SEQ: 1.000.001, ACK: 2.000.044" ], [ "12", "08:34:13.542", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "12", "08:34:13.542", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "12", "08:34:13.542", "80", "50668", "TCP", "Transport", "SEQ: 1.000.001" ], [ "12", "08:34:13.542", null, null, "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen" ], [ "13", "08:34:13.543", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "13", "08:34:13.543", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "13", "08:34:13.543", "50668", "80", "TCP", "Transport", "SEQ: 2.000.044, ACK: 1.000.063" ], [ "14", "08:34:13.598", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "14", "08:34:13.598", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "14", "08:34:13.598", "50668", "80", "TCP", "Transport", "FIN, SEQ: 2.000.044" ], [ "15", "08:34:13.821", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "15", "08:34:13.821", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "15", "08:34:13.821", "80", "50668", "TCP", "Transport", "SEQ: 1.000.063, ACK: 2.000.045" ], [ "16", "08:34:13.877", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "16", "08:34:13.877", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "16", "08:34:13.877", "80", "50668", "TCP", "Transport", "FIN, SEQ: 1.000.063" ], [ "17", "08:34:13.878", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "17", "08:34:13.878", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "17", "08:34:13.878", "50668", "80", "TCP", "Transport", "SEQ: 2.000.045, ACK: 1.000.064" ] ], "export": "+============+======================+======================+======================+======================+======================+==========================================+\r\n| Nr. | Zeit | Quelle | Ziel | Protokoll | Schicht | Bemerkungen / Details | \r\n+============+======================+======================+======================+======================+======================+==========================================+\r\n| 1 | 08:34:12.286 | 192.168.0.20 | 192.168.0.10 | ARP | Vermittlung | Suche nach MAC für 192.168.0.10 | \r\n| | | | | | | [op=REQUEST, | \r\n| | | | | | | sender=02:00:00:00:02:11|192.168.0.20, | \r\n| | | | | | | target=FF:FF:FF:FF:FF:FF|192.168.0.10] | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 2 | 08:34:12.523 | 192.168.0.10 | 192.168.0.20 | ARP | Vermittlung | MAC ist 02:00:00:00:02:12 [op=REPLY, | \r\n| | | | | | | sender=02:00:00:00:02:12|192.168.0.10, | \r\n| | | | | | | target=02:00:00:00:02:11|192.168.0.20] | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 3 | 08:34:12.526 | 192.168.0.20:61663 | 192.168.0.10:53 | DNS | Anwendung | ID=26498 QR=0 RCODE=0 QDCOUNT=1 | \r\n| | | | | | | ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 | \r\n| | | | | | | www.filius.de. A IN | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 4 | 08:34:12.756 | 192.168.0.10:53 | 192.168.0.20:61663 | DNS | Anwendung | ID=26498 QR=1 RCODE=0 QDCOUNT=0 | \r\n| | | | | | | ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 | \r\n| | | | | | | www.filius.de. A 3600 192.168.0.30 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 5 | 08:34:12.760 | 192.168.0.20 | 192.168.0.30 | ARP | Vermittlung | Suche nach MAC für 192.168.0.30 | \r\n| | | | | | | [op=REQUEST, | \r\n| | | | | | | sender=02:00:00:00:02:11|192.168.0.20, | \r\n| | | | | | | target=FF:FF:FF:FF:FF:FF|192.168.0.30] | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 6 | 08:34:12.983 | 192.168.0.30 | 192.168.0.20 | ARP | Vermittlung | MAC ist 02:00:00:00:02:13 [op=REPLY, | \r\n| | | | | | | sender=02:00:00:00:02:13|192.168.0.30, | \r\n| | | | | | | target=02:00:00:00:02:11|192.168.0.20] | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 7 | 08:34:12.984 | 192.168.0.20:50668 | 192.168.0.30:80 | TCP | Transport | SYN, SEQ: 2.000.000 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 8 | 08:34:13.207 | 192.168.0.30:80 | 192.168.0.20:50668 | TCP | Transport | SYN, SEQ: 1.000.000, ACK: 2.000.001 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 9 | 08:34:13.208 | 192.168.0.20:50668 | 192.168.0.30:80 | TCP | Transport | SEQ: 2.000.001, ACK: 1.000.001 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 10 | 08:34:13.264 | 192.168.0.20:50668 | 192.168.0.30:80 | HTTP | Anwendung | GET /text.txt HTTP/1.1 Host: | \r\n| | | | | | | www.filius.de | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 11 | 08:34:13.486 | 192.168.0.30:80 | 192.168.0.20:50668 | TCP | Transport | SEQ: 1.000.001, ACK: 2.000.044 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 12 | 08:34:13.542 | 192.168.0.30:80 | 192.168.0.20:50668 | HTTP | Anwendung | HTTP/1.1 200 OK Content-type: text/plain | \r\n| | | | | | | Nur Text zwei Zeilen | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 13 | 08:34:13.543 | 192.168.0.20:50668 | 192.168.0.30:80 | TCP | Transport | SEQ: 2.000.044, ACK: 1.000.063 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 14 | 08:34:13.598 | 192.168.0.20:50668 | 192.168.0.30:80 | TCP | Transport | FIN, SEQ: 2.000.044 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 15 | 08:34:13.821 | 192.168.0.30:80 | 192.168.0.20:50668 | TCP | Transport | SEQ: 1.000.063, ACK: 2.000.045 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 16 | 08:34:13.877 | 192.168.0.30:80 | 192.168.0.20:50668 | TCP | Transport | FIN, SEQ: 1.000.063 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 17 | 08:34:13.878 | 192.168.0.20:50668 | 192.168.0.30:80 | TCP | Transport | SEQ: 2.000.045, ACK: 1.000.064 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n" }, { "step": "the server's card beside it", "at": 15584, "titles": [ "Anna - 192.168.0.20", "192.168.0.30" ], "selected": 1, "visible": true, "tables": { "00000000-0000-0000-0000-000000000201": { "rows": [ [ "1", "08:34:12.286", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "08:34:12.523", "192.168.0.10", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" ], [ "3", "08:34:12.526", "192.168.0.20:61663", "192.168.0.10:53", "DNS", "Anwendung", "ID=26498 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" ], [ "4", "08:34:12.756", "192.168.0.10:53", "192.168.0.20:61663", "DNS", "Anwendung", "ID=26498 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" ], [ "5", "08:34:12.760", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ], [ "6", "08:34:12.983", "192.168.0.30", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" ], [ "7", "08:34:12.984", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SYN, SEQ: 2.000.000" ], [ "8", "08:34:13.207", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 2.000.001" ], [ "9", "08:34:13.208", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.001, ACK: 1.000.001" ], [ "10", "08:34:13.264", "192.168.0.20:50668", "192.168.0.30:80", "HTTP", "Anwendung", "GET /text.txt HTTP/1.1\nHost: www.filius.de\n" ], [ "11", "08:34:13.486", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SEQ: 1.000.001, ACK: 2.000.044" ], [ "12", "08:34:13.542", "192.168.0.30:80", "192.168.0.20:50668", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen" ], [ "13", "08:34:13.543", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.044, ACK: 1.000.063" ], [ "14", "08:34:13.598", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "FIN, SEQ: 2.000.044" ], [ "15", "08:34:13.821", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SEQ: 1.000.063, ACK: 2.000.045" ], [ "16", "08:34:13.877", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "FIN, SEQ: 1.000.063" ], [ "17", "08:34:13.878", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.045, ACK: 1.000.064" ] ], "layerRows": [ [ "1", "08:34:12.286", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "08:34:12.286", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "08:34:12.523", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x806" ], [ "2", "08:34:12.523", "192.168.0.10", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" ], [ "3", "08:34:12.526", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "3", "08:34:12.526", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "3", "08:34:12.526", "192.168.0.20:61663", "192.168.0.10:53", "UDP", "Transport", "" ], [ "3", "08:34:12.526", "192.168.0.20:61663", "192.168.0.10:53", "DNS", "Anwendung", "ID=26498 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" ], [ "4", "08:34:12.756", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "4", "08:34:12.756", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "4", "08:34:12.756", "192.168.0.10:53", "192.168.0.20:61663", "UDP", "Transport", "" ], [ "4", "08:34:12.756", "192.168.0.10:53", "192.168.0.20:61663", "DNS", "Anwendung", "ID=26498 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" ], [ "5", "08:34:12.760", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "5", "08:34:12.760", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ], [ "6", "08:34:12.983", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x806" ], [ "6", "08:34:12.983", "192.168.0.30", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" ], [ "7", "08:34:12.984", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "7", "08:34:12.984", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "08:34:12.984", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SYN, SEQ: 2.000.000" ], [ "8", "08:34:13.207", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "8", "08:34:13.207", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "08:34:13.207", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 2.000.001" ], [ "9", "08:34:13.208", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "9", "08:34:13.208", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "9", "08:34:13.208", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.001, ACK: 1.000.001" ], [ "10", "08:34:13.264", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "10", "08:34:13.264", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "10", "08:34:13.264", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.001" ], [ "10", "08:34:13.264", "192.168.0.20:50668", "192.168.0.30:80", "HTTP", "Anwendung", "GET /text.txt HTTP/1.1\nHost: www.filius.de\n" ], [ "11", "08:34:13.486", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "11", "08:34:13.486", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "08:34:13.486", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SEQ: 1.000.001, ACK: 2.000.044" ], [ "12", "08:34:13.542", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "12", "08:34:13.542", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "12", "08:34:13.542", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SEQ: 1.000.001" ], [ "12", "08:34:13.542", "192.168.0.30:80", "192.168.0.20:50668", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen" ], [ "13", "08:34:13.543", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "13", "08:34:13.543", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "13", "08:34:13.543", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.044, ACK: 1.000.063" ], [ "14", "08:34:13.598", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "14", "08:34:13.598", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "14", "08:34:13.598", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "FIN, SEQ: 2.000.044" ], [ "15", "08:34:13.821", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "15", "08:34:13.821", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "15", "08:34:13.821", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SEQ: 1.000.063, ACK: 2.000.045" ], [ "16", "08:34:13.877", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "16", "08:34:13.877", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "16", "08:34:13.877", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "FIN, SEQ: 1.000.063" ], [ "17", "08:34:13.878", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "17", "08:34:13.878", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "17", "08:34:13.878", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.045, ACK: 1.000.064" ] ] }, "00000000-0000-0000-0000-000000000203": { "rows": [ [ "1", "08:34:12.410", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "08:34:12.872", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ], [ "3", "08:34:12.872", "192.168.0.30", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" ], [ "4", "08:34:13.095", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SYN, SEQ: 2.000.000" ], [ "5", "08:34:13.096", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 2.000.001" ], [ "6", "08:34:13.319", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.001, ACK: 1.000.001" ], [ "7", "08:34:13.375", "192.168.0.20:50668", "192.168.0.30:80", "HTTP", "Anwendung", "GET /text.txt HTTP/1.1\nHost: www.filius.de\n" ], [ "8", "08:34:13.375", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SEQ: 1.000.001, ACK: 2.000.044" ], [ "9", "08:34:13.431", "192.168.0.30:80", "192.168.0.20:50668", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen" ], [ "10", "08:34:13.654", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.044, ACK: 1.000.063" ], [ "11", "08:34:13.709", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "FIN, SEQ: 2.000.044" ], [ "12", "08:34:13.710", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SEQ: 1.000.063, ACK: 2.000.045" ], [ "13", "08:34:13.765", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "FIN, SEQ: 1.000.063" ], [ "14", "08:34:13.989", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.045, ACK: 1.000.064" ] ], "layerRows": [ [ "1", "08:34:12.410", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "08:34:12.410", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "08:34:12.872", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "2", "08:34:12.872", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ], [ "3", "08:34:12.872", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x806" ], [ "3", "08:34:12.872", "192.168.0.30", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" ], [ "4", "08:34:13.095", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "4", "08:34:13.095", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "4", "08:34:13.095", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SYN, SEQ: 2.000.000" ], [ "5", "08:34:13.096", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "5", "08:34:13.096", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "5", "08:34:13.096", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 2.000.001" ], [ "6", "08:34:13.319", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "6", "08:34:13.319", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "6", "08:34:13.319", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.001, ACK: 1.000.001" ], [ "7", "08:34:13.375", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "7", "08:34:13.375", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "08:34:13.375", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.001" ], [ "7", "08:34:13.375", "192.168.0.20:50668", "192.168.0.30:80", "HTTP", "Anwendung", "GET /text.txt HTTP/1.1\nHost: www.filius.de\n" ], [ "8", "08:34:13.375", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "8", "08:34:13.375", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "08:34:13.375", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SEQ: 1.000.001, ACK: 2.000.044" ], [ "9", "08:34:13.431", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "9", "08:34:13.431", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "9", "08:34:13.431", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SEQ: 1.000.001" ], [ "9", "08:34:13.431", "192.168.0.30:80", "192.168.0.20:50668", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen" ], [ "10", "08:34:13.654", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "10", "08:34:13.654", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "10", "08:34:13.654", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.044, ACK: 1.000.063" ], [ "11", "08:34:13.709", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "11", "08:34:13.709", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "08:34:13.709", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "FIN, SEQ: 2.000.044" ], [ "12", "08:34:13.710", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "12", "08:34:13.710", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "12", "08:34:13.710", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SEQ: 1.000.063, ACK: 2.000.045" ], [ "13", "08:34:13.765", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "13", "08:34:13.765", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "13", "08:34:13.765", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "FIN, SEQ: 1.000.063" ], [ "14", "08:34:13.989", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "14", "08:34:13.989", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "14", "08:34:13.989", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.045, ACK: 1.000.064" ] ] } } }, { "step": "the browser's card again", "at": 15889, "titles": [ "Anna - 192.168.0.20", "192.168.0.30" ], "selected": 0, "visible": true, "tables": { "00000000-0000-0000-0000-000000000201": { "rows": [ [ "1", "08:34:12.286", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "08:34:12.523", "192.168.0.10", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" ], [ "3", "08:34:12.526", "192.168.0.20:61663", "192.168.0.10:53", "DNS", "Anwendung", "ID=26498 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" ], [ "4", "08:34:12.756", "192.168.0.10:53", "192.168.0.20:61663", "DNS", "Anwendung", "ID=26498 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" ], [ "5", "08:34:12.760", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ], [ "6", "08:34:12.983", "192.168.0.30", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" ], [ "7", "08:34:12.984", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SYN, SEQ: 2.000.000" ], [ "8", "08:34:13.207", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 2.000.001" ], [ "9", "08:34:13.208", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.001, ACK: 1.000.001" ], [ "10", "08:34:13.264", "192.168.0.20:50668", "192.168.0.30:80", "HTTP", "Anwendung", "GET /text.txt HTTP/1.1\nHost: www.filius.de\n" ], [ "11", "08:34:13.486", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SEQ: 1.000.001, ACK: 2.000.044" ], [ "12", "08:34:13.542", "192.168.0.30:80", "192.168.0.20:50668", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen" ], [ "13", "08:34:13.543", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.044, ACK: 1.000.063" ], [ "14", "08:34:13.598", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "FIN, SEQ: 2.000.044" ], [ "15", "08:34:13.821", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SEQ: 1.000.063, ACK: 2.000.045" ], [ "16", "08:34:13.877", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "FIN, SEQ: 1.000.063" ], [ "17", "08:34:13.878", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.045, ACK: 1.000.064" ] ], "layerRows": [ [ "1", "08:34:12.286", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "08:34:12.286", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "08:34:12.523", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x806" ], [ "2", "08:34:12.523", "192.168.0.10", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" ], [ "3", "08:34:12.526", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "3", "08:34:12.526", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "3", "08:34:12.526", "192.168.0.20:61663", "192.168.0.10:53", "UDP", "Transport", "" ], [ "3", "08:34:12.526", "192.168.0.20:61663", "192.168.0.10:53", "DNS", "Anwendung", "ID=26498 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" ], [ "4", "08:34:12.756", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "4", "08:34:12.756", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "4", "08:34:12.756", "192.168.0.10:53", "192.168.0.20:61663", "UDP", "Transport", "" ], [ "4", "08:34:12.756", "192.168.0.10:53", "192.168.0.20:61663", "DNS", "Anwendung", "ID=26498 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" ], [ "5", "08:34:12.760", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "5", "08:34:12.760", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ], [ "6", "08:34:12.983", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x806" ], [ "6", "08:34:12.983", "192.168.0.30", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" ], [ "7", "08:34:12.984", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "7", "08:34:12.984", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "08:34:12.984", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SYN, SEQ: 2.000.000" ], [ "8", "08:34:13.207", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "8", "08:34:13.207", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "08:34:13.207", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 2.000.001" ], [ "9", "08:34:13.208", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "9", "08:34:13.208", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "9", "08:34:13.208", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.001, ACK: 1.000.001" ], [ "10", "08:34:13.264", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "10", "08:34:13.264", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "10", "08:34:13.264", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.001" ], [ "10", "08:34:13.264", "192.168.0.20:50668", "192.168.0.30:80", "HTTP", "Anwendung", "GET /text.txt HTTP/1.1\nHost: www.filius.de\n" ], [ "11", "08:34:13.486", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "11", "08:34:13.486", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "08:34:13.486", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SEQ: 1.000.001, ACK: 2.000.044" ], [ "12", "08:34:13.542", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "12", "08:34:13.542", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "12", "08:34:13.542", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SEQ: 1.000.001" ], [ "12", "08:34:13.542", "192.168.0.30:80", "192.168.0.20:50668", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen" ], [ "13", "08:34:13.543", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "13", "08:34:13.543", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "13", "08:34:13.543", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.044, ACK: 1.000.063" ], [ "14", "08:34:13.598", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "14", "08:34:13.598", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "14", "08:34:13.598", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "FIN, SEQ: 2.000.044" ], [ "15", "08:34:13.821", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "15", "08:34:13.821", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "15", "08:34:13.821", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SEQ: 1.000.063, ACK: 2.000.045" ], [ "16", "08:34:13.877", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "16", "08:34:13.877", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "16", "08:34:13.877", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "FIN, SEQ: 1.000.063" ], [ "17", "08:34:13.878", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "17", "08:34:13.878", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "17", "08:34:13.878", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.045, ACK: 1.000.064" ] ] }, "00000000-0000-0000-0000-000000000203": { "rows": [ [ "1", "08:34:12.410", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "08:34:12.872", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ], [ "3", "08:34:12.872", "192.168.0.30", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" ], [ "4", "08:34:13.095", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SYN, SEQ: 2.000.000" ], [ "5", "08:34:13.096", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 2.000.001" ], [ "6", "08:34:13.319", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.001, ACK: 1.000.001" ], [ "7", "08:34:13.375", "192.168.0.20:50668", "192.168.0.30:80", "HTTP", "Anwendung", "GET /text.txt HTTP/1.1\nHost: www.filius.de\n" ], [ "8", "08:34:13.375", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SEQ: 1.000.001, ACK: 2.000.044" ], [ "9", "08:34:13.431", "192.168.0.30:80", "192.168.0.20:50668", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen" ], [ "10", "08:34:13.654", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.044, ACK: 1.000.063" ], [ "11", "08:34:13.709", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "FIN, SEQ: 2.000.044" ], [ "12", "08:34:13.710", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SEQ: 1.000.063, ACK: 2.000.045" ], [ "13", "08:34:13.765", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "FIN, SEQ: 1.000.063" ], [ "14", "08:34:13.989", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.045, ACK: 1.000.064" ] ], "layerRows": [ [ "1", "08:34:12.410", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "08:34:12.410", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "08:34:12.872", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "2", "08:34:12.872", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ], [ "3", "08:34:12.872", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x806" ], [ "3", "08:34:12.872", "192.168.0.30", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" ], [ "4", "08:34:13.095", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "4", "08:34:13.095", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "4", "08:34:13.095", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SYN, SEQ: 2.000.000" ], [ "5", "08:34:13.096", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "5", "08:34:13.096", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "5", "08:34:13.096", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 2.000.001" ], [ "6", "08:34:13.319", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "6", "08:34:13.319", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "6", "08:34:13.319", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.001, ACK: 1.000.001" ], [ "7", "08:34:13.375", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "7", "08:34:13.375", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "08:34:13.375", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.001" ], [ "7", "08:34:13.375", "192.168.0.20:50668", "192.168.0.30:80", "HTTP", "Anwendung", "GET /text.txt HTTP/1.1\nHost: www.filius.de\n" ], [ "8", "08:34:13.375", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "8", "08:34:13.375", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "08:34:13.375", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SEQ: 1.000.001, ACK: 2.000.044" ], [ "9", "08:34:13.431", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "9", "08:34:13.431", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "9", "08:34:13.431", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SEQ: 1.000.001" ], [ "9", "08:34:13.431", "192.168.0.30:80", "192.168.0.20:50668", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen" ], [ "10", "08:34:13.654", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "10", "08:34:13.654", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "10", "08:34:13.654", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.044, ACK: 1.000.063" ], [ "11", "08:34:13.709", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "11", "08:34:13.709", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "08:34:13.709", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "FIN, SEQ: 2.000.044" ], [ "12", "08:34:13.710", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "12", "08:34:13.710", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "12", "08:34:13.710", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "SEQ: 1.000.063, ACK: 2.000.045" ], [ "13", "08:34:13.765", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "13", "08:34:13.765", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "13", "08:34:13.765", "192.168.0.30:80", "192.168.0.20:50668", "TCP", "Transport", "FIN, SEQ: 1.000.063" ], [ "14", "08:34:13.989", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "14", "08:34:13.989", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "14", "08:34:13.989", "192.168.0.20:50668", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.045, ACK: 1.000.064" ] ] } } }, { "step": "cleared", "at": 16192, "titles": [ "Anna - 192.168.0.20", "192.168.0.30" ], "selected": 0, "visible": true, "tables": { "00000000-0000-0000-0000-000000000201": { "rows": [], "layerRows": [] }, "00000000-0000-0000-0000-000000000203": { "rows": [], "layerRows": [] } }, "menu": [ "Tabellen löschen", "Als Textdatei exportieren", "Automatisches Scrollen" ] }, { "step": "fetched again", "at": 25192, "titles": [ "Anna - 192.168.0.20", "192.168.0.30" ], "selected": 0, "visible": true, "tables": { "00000000-0000-0000-0000-000000000201": { "rows": [ [ "1", "08:34:27.391", "192.168.0.20:49509", "192.168.0.10:53", "DNS", "Anwendung", "ID=10916 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" ], [ "2", "08:34:27.615", "192.168.0.10:53", "192.168.0.20:49509", "DNS", "Anwendung", "ID=10916 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" ], [ "3", "08:34:27.616", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SYN, SEQ: 4.000.000" ], [ "4", "08:34:27.838", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "SYN, SEQ: 3.000.000, ACK: 4.000.001" ], [ "5", "08:34:27.839", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.001, ACK: 3.000.001" ], [ "6", "08:34:27.916", "192.168.0.20:60031", "192.168.0.30:80", "HTTP", "Anwendung", "GET /text.txt HTTP/1.1\nHost: www.filius.de\n" ], [ "7", "08:34:28.139", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "SEQ: 3.000.001, ACK: 4.000.044" ], [ "8", "08:34:28.194", "192.168.0.30:80", "192.168.0.20:60031", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen" ], [ "9", "08:34:28.195", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.044, ACK: 3.000.063" ], [ "10", "08:34:28.250", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "FIN, SEQ: 4.000.044" ], [ "11", "08:34:28.473", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "SEQ: 3.000.063, ACK: 4.000.045" ], [ "12", "08:34:28.528", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "FIN, SEQ: 3.000.063" ], [ "13", "08:34:28.529", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.045, ACK: 3.000.064" ] ], "layerRows": [ [ "1", "08:34:27.391", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "1", "08:34:27.391", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "1", "08:34:27.391", "192.168.0.20:49509", "192.168.0.10:53", "UDP", "Transport", "" ], [ "1", "08:34:27.391", "192.168.0.20:49509", "192.168.0.10:53", "DNS", "Anwendung", "ID=10916 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" ], [ "2", "08:34:27.615", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "2", "08:34:27.615", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "2", "08:34:27.615", "192.168.0.10:53", "192.168.0.20:49509", "UDP", "Transport", "" ], [ "2", "08:34:27.615", "192.168.0.10:53", "192.168.0.20:49509", "DNS", "Anwendung", "ID=10916 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" ], [ "3", "08:34:27.616", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "3", "08:34:27.616", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "3", "08:34:27.616", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SYN, SEQ: 4.000.000" ], [ "4", "08:34:27.838", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "4", "08:34:27.838", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "4", "08:34:27.838", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "SYN, SEQ: 3.000.000, ACK: 4.000.001" ], [ "5", "08:34:27.839", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "5", "08:34:27.839", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "5", "08:34:27.839", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.001, ACK: 3.000.001" ], [ "6", "08:34:27.916", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "6", "08:34:27.916", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "6", "08:34:27.916", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.001" ], [ "6", "08:34:27.916", "192.168.0.20:60031", "192.168.0.30:80", "HTTP", "Anwendung", "GET /text.txt HTTP/1.1\nHost: www.filius.de\n" ], [ "7", "08:34:28.139", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "7", "08:34:28.139", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "08:34:28.139", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "SEQ: 3.000.001, ACK: 4.000.044" ], [ "8", "08:34:28.194", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "8", "08:34:28.194", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "08:34:28.194", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "SEQ: 3.000.001" ], [ "8", "08:34:28.194", "192.168.0.30:80", "192.168.0.20:60031", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen" ], [ "9", "08:34:28.195", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "9", "08:34:28.195", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "9", "08:34:28.195", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.044, ACK: 3.000.063" ], [ "10", "08:34:28.250", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "10", "08:34:28.250", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "10", "08:34:28.250", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "FIN, SEQ: 4.000.044" ], [ "11", "08:34:28.473", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "11", "08:34:28.473", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "08:34:28.473", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "SEQ: 3.000.063, ACK: 4.000.045" ], [ "12", "08:34:28.528", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "12", "08:34:28.528", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "12", "08:34:28.528", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "FIN, SEQ: 3.000.063" ], [ "13", "08:34:28.529", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "13", "08:34:28.529", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "13", "08:34:28.529", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.045, ACK: 3.000.064" ] ] }, "00000000-0000-0000-0000-000000000203": { "rows": [ [ "1", "08:34:27.726", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SYN, SEQ: 4.000.000" ], [ "2", "08:34:27.727", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "SYN, SEQ: 3.000.000, ACK: 4.000.001" ], [ "3", "08:34:27.950", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.001, ACK: 3.000.001" ], [ "4", "08:34:28.027", "192.168.0.20:60031", "192.168.0.30:80", "HTTP", "Anwendung", "GET /text.txt HTTP/1.1\nHost: www.filius.de\n" ], [ "5", "08:34:28.028", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "SEQ: 3.000.001, ACK: 4.000.044" ], [ "6", "08:34:28.083", "192.168.0.30:80", "192.168.0.20:60031", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen" ], [ "7", "08:34:28.306", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.044, ACK: 3.000.063" ], [ "8", "08:34:28.362", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "FIN, SEQ: 4.000.044" ], [ "9", "08:34:28.362", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "SEQ: 3.000.063, ACK: 4.000.045" ], [ "10", "08:34:28.418", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "FIN, SEQ: 3.000.063" ], [ "11", "08:34:28.640", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.045, ACK: 3.000.064" ] ], "layerRows": [ [ "1", "08:34:27.726", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "1", "08:34:27.726", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "1", "08:34:27.726", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SYN, SEQ: 4.000.000" ], [ "2", "08:34:27.727", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "2", "08:34:27.727", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "2", "08:34:27.727", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "SYN, SEQ: 3.000.000, ACK: 4.000.001" ], [ "3", "08:34:27.950", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "3", "08:34:27.950", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "3", "08:34:27.950", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.001, ACK: 3.000.001" ], [ "4", "08:34:28.027", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "4", "08:34:28.027", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "4", "08:34:28.027", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.001" ], [ "4", "08:34:28.027", "192.168.0.20:60031", "192.168.0.30:80", "HTTP", "Anwendung", "GET /text.txt HTTP/1.1\nHost: www.filius.de\n" ], [ "5", "08:34:28.028", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "5", "08:34:28.028", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "5", "08:34:28.028", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "SEQ: 3.000.001, ACK: 4.000.044" ], [ "6", "08:34:28.083", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "6", "08:34:28.083", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "6", "08:34:28.083", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "SEQ: 3.000.001" ], [ "6", "08:34:28.083", "192.168.0.30:80", "192.168.0.20:60031", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen" ], [ "7", "08:34:28.306", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "7", "08:34:28.306", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "08:34:28.306", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.044, ACK: 3.000.063" ], [ "8", "08:34:28.362", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "8", "08:34:28.362", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "08:34:28.362", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "FIN, SEQ: 4.000.044" ], [ "9", "08:34:28.362", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "9", "08:34:28.362", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "9", "08:34:28.362", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "SEQ: 3.000.063, ACK: 4.000.045" ], [ "10", "08:34:28.418", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "10", "08:34:28.418", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "10", "08:34:28.418", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "FIN, SEQ: 3.000.063" ], [ "11", "08:34:28.640", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "11", "08:34:28.640", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "08:34:28.640", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.045, ACK: 3.000.064" ] ] } } }, { "step": "started again without the server", "at": 26499, "titles": [ "Anna - 192.168.0.20" ], "selected": 0, "visible": true, "tables": { "00000000-0000-0000-0000-000000000201": { "rows": [ [ "1", "08:34:27.391", "192.168.0.20:49509", "192.168.0.10:53", "DNS", "Anwendung", "ID=10916 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" ], [ "2", "08:34:27.615", "192.168.0.10:53", "192.168.0.20:49509", "DNS", "Anwendung", "ID=10916 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" ], [ "3", "08:34:27.616", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SYN, SEQ: 4.000.000" ], [ "4", "08:34:27.838", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "SYN, SEQ: 3.000.000, ACK: 4.000.001" ], [ "5", "08:34:27.839", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.001, ACK: 3.000.001" ], [ "6", "08:34:27.916", "192.168.0.20:60031", "192.168.0.30:80", "HTTP", "Anwendung", "GET /text.txt HTTP/1.1\nHost: www.filius.de\n" ], [ "7", "08:34:28.139", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "SEQ: 3.000.001, ACK: 4.000.044" ], [ "8", "08:34:28.194", "192.168.0.30:80", "192.168.0.20:60031", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen" ], [ "9", "08:34:28.195", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.044, ACK: 3.000.063" ], [ "10", "08:34:28.250", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "FIN, SEQ: 4.000.044" ], [ "11", "08:34:28.473", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "SEQ: 3.000.063, ACK: 4.000.045" ], [ "12", "08:34:28.528", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "FIN, SEQ: 3.000.063" ], [ "13", "08:34:28.529", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.045, ACK: 3.000.064" ] ], "layerRows": [ [ "1", "08:34:27.391", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "1", "08:34:27.391", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "1", "08:34:27.391", "192.168.0.20:49509", "192.168.0.10:53", "UDP", "Transport", "" ], [ "1", "08:34:27.391", "192.168.0.20:49509", "192.168.0.10:53", "DNS", "Anwendung", "ID=10916 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" ], [ "2", "08:34:27.615", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "2", "08:34:27.615", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "2", "08:34:27.615", "192.168.0.10:53", "192.168.0.20:49509", "UDP", "Transport", "" ], [ "2", "08:34:27.615", "192.168.0.10:53", "192.168.0.20:49509", "DNS", "Anwendung", "ID=10916 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" ], [ "3", "08:34:27.616", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "3", "08:34:27.616", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "3", "08:34:27.616", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SYN, SEQ: 4.000.000" ], [ "4", "08:34:27.838", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "4", "08:34:27.838", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "4", "08:34:27.838", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "SYN, SEQ: 3.000.000, ACK: 4.000.001" ], [ "5", "08:34:27.839", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "5", "08:34:27.839", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "5", "08:34:27.839", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.001, ACK: 3.000.001" ], [ "6", "08:34:27.916", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "6", "08:34:27.916", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "6", "08:34:27.916", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.001" ], [ "6", "08:34:27.916", "192.168.0.20:60031", "192.168.0.30:80", "HTTP", "Anwendung", "GET /text.txt HTTP/1.1\nHost: www.filius.de\n" ], [ "7", "08:34:28.139", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "7", "08:34:28.139", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "08:34:28.139", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "SEQ: 3.000.001, ACK: 4.000.044" ], [ "8", "08:34:28.194", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "8", "08:34:28.194", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "08:34:28.194", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "SEQ: 3.000.001" ], [ "8", "08:34:28.194", "192.168.0.30:80", "192.168.0.20:60031", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen" ], [ "9", "08:34:28.195", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "9", "08:34:28.195", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "9", "08:34:28.195", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.044, ACK: 3.000.063" ], [ "10", "08:34:28.250", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "10", "08:34:28.250", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "10", "08:34:28.250", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "FIN, SEQ: 4.000.044" ], [ "11", "08:34:28.473", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "11", "08:34:28.473", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "08:34:28.473", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "SEQ: 3.000.063, ACK: 4.000.045" ], [ "12", "08:34:28.528", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "12", "08:34:28.528", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "12", "08:34:28.528", "192.168.0.30:80", "192.168.0.20:60031", "TCP", "Transport", "FIN, SEQ: 3.000.063" ], [ "13", "08:34:28.529", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "13", "08:34:28.529", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "13", "08:34:28.529", "192.168.0.20:60031", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.045, ACK: 3.000.064" ] ] } } } ] }