{
  "frames": {
    "00000000-0000-0000-0000-000000000401": [
      {
        "time": 518,
        "source": "02:00:00:00:04:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.31"
      },
      {
        "time": 752,
        "source": "02:00:00:00:04:14",
        "destination": "02:00:00:00:04:11",
        "arp": 2,
        "senderIp": "192.168.0.31",
        "targetIp": "192.168.0.20"
      },
      {
        "time": 755,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:14",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.31",
        "protocol": 6,
        "sourcePort": 63658,
        "destinationPort": 55555,
        "payload": null,
        "tcpFlags": "S",
        "sequence": 4000000,
        "acknowledgement": 0
      },
      {
        "time": 982,
        "source": "02:00:00:00:04:14",
        "destination": "02:00:00:00:04:11",
        "sourceIp": "192.168.0.31",
        "destinationIp": "192.168.0.20",
        "protocol": 6,
        "sourcePort": 55555,
        "destinationPort": 63658,
        "payload": null,
        "tcpFlags": "SA",
        "sequence": 2000000,
        "acknowledgement": 4000001
      },
      {
        "time": 982,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:14",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.31",
        "protocol": 6,
        "sourcePort": 63658,
        "destinationPort": 55555,
        "payload": null,
        "tcpFlags": "A",
        "sequence": 4000001,
        "acknowledgement": 2000001
      },
      {
        "time": 2904,
        "source": "02:00:00:00:04:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.10"
      },
      {
        "time": 3127,
        "source": "02:00:00:00:04:12",
        "destination": "02:00:00:00:04:11",
        "arp": 2,
        "senderIp": "192.168.0.10",
        "targetIp": "192.168.0.20"
      },
      {
        "time": 3127,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:12",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.10",
        "protocol": 17,
        "sourcePort": 53339,
        "destinationPort": 53,
        "payload": "ID=41076 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
      },
      {
        "time": 3354,
        "source": "02:00:00:00:04:12",
        "destination": "02:00:00:00:04:11",
        "sourceIp": "192.168.0.10",
        "destinationIp": "192.168.0.20",
        "protocol": 17,
        "sourcePort": 53,
        "destinationPort": 53339,
        "payload": "ID=41076 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
      },
      {
        "time": 3355,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:12",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.10",
        "protocol": 17,
        "sourcePort": 54167,
        "destinationPort": 53,
        "payload": "ID=35450 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n"
      },
      {
        "time": 3579,
        "source": "02:00:00:00:04:12",
        "destination": "02:00:00:00:04:11",
        "sourceIp": "192.168.0.10",
        "destinationIp": "192.168.0.20",
        "protocol": 17,
        "sourcePort": 53,
        "destinationPort": 54167,
        "payload": "ID=35450 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
      },
      {
        "time": 5000,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:14",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.31",
        "protocol": 6,
        "sourcePort": 63658,
        "destinationPort": 55555,
        "payload": null,
        "tcpFlags": "F",
        "sequence": 4000001,
        "acknowledgement": 0
      },
      {
        "time": 5223,
        "source": "02:00:00:00:04:14",
        "destination": "02:00:00:00:04:11",
        "sourceIp": "192.168.0.31",
        "destinationIp": "192.168.0.20",
        "protocol": 6,
        "sourcePort": 55555,
        "destinationPort": 63658,
        "payload": null,
        "tcpFlags": "A",
        "sequence": 2000001,
        "acknowledgement": 4000002
      },
      {
        "time": 5279,
        "source": "02:00:00:00:04:14",
        "destination": "02:00:00:00:04:11",
        "sourceIp": "192.168.0.31",
        "destinationIp": "192.168.0.20",
        "protocol": 6,
        "sourcePort": 55555,
        "destinationPort": 63658,
        "payload": null,
        "tcpFlags": "F",
        "sequence": 2000001,
        "acknowledgement": 0
      },
      {
        "time": 5279,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:14",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.31",
        "protocol": 6,
        "sourcePort": 63658,
        "destinationPort": 55555,
        "payload": null,
        "tcpFlags": "A",
        "sequence": 4000002,
        "acknowledgement": 2000002
      }
    ],
    "00000000-0000-0000-0000-000000000402": [
      {
        "time": 639,
        "source": "02:00:00:00:04:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.31"
      },
      {
        "time": 3016,
        "source": "02:00:00:00:04:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.10"
      },
      {
        "time": 3016,
        "source": "02:00:00:00:04:12",
        "destination": "02:00:00:00:04:11",
        "arp": 2,
        "senderIp": "192.168.0.10",
        "targetIp": "192.168.0.20"
      },
      {
        "time": 3239,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:12",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.10",
        "protocol": 17,
        "sourcePort": 53339,
        "destinationPort": 53,
        "payload": "ID=41076 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
      },
      {
        "time": 3243,
        "source": "02:00:00:00:04:12",
        "destination": "02:00:00:00:04:11",
        "sourceIp": "192.168.0.10",
        "destinationIp": "192.168.0.20",
        "protocol": 17,
        "sourcePort": 53,
        "destinationPort": 53339,
        "payload": "ID=41076 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
      },
      {
        "time": 3466,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:12",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.10",
        "protocol": 17,
        "sourcePort": 54167,
        "destinationPort": 53,
        "payload": "ID=35450 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n"
      },
      {
        "time": 3468,
        "source": "02:00:00:00:04:12",
        "destination": "02:00:00:00:04:11",
        "sourceIp": "192.168.0.10",
        "destinationIp": "192.168.0.20",
        "protocol": 17,
        "sourcePort": 53,
        "destinationPort": 54167,
        "payload": "ID=35450 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
      }
    ],
    "00000000-0000-0000-0000-000000000403": [
      {
        "time": 639,
        "source": "02:00:00:00:04:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.31"
      },
      {
        "time": 3016,
        "source": "02:00:00:00:04:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.10"
      }
    ],
    "00000000-0000-0000-0000-000000000404": [
      {
        "time": 639,
        "source": "02:00:00:00:04:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.31"
      },
      {
        "time": 641,
        "source": "02:00:00:00:04:14",
        "destination": "02:00:00:00:04:11",
        "arp": 2,
        "senderIp": "192.168.0.31",
        "targetIp": "192.168.0.20"
      },
      {
        "time": 868,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:14",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.31",
        "protocol": 6,
        "sourcePort": 63658,
        "destinationPort": 55555,
        "payload": null,
        "tcpFlags": "S",
        "sequence": 4000000,
        "acknowledgement": 0
      },
      {
        "time": 870,
        "source": "02:00:00:00:04:14",
        "destination": "02:00:00:00:04:11",
        "sourceIp": "192.168.0.31",
        "destinationIp": "192.168.0.20",
        "protocol": 6,
        "sourcePort": 55555,
        "destinationPort": 63658,
        "payload": null,
        "tcpFlags": "SA",
        "sequence": 2000000,
        "acknowledgement": 4000001
      },
      {
        "time": 1093,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:14",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.31",
        "protocol": 6,
        "sourcePort": 63658,
        "destinationPort": 55555,
        "payload": null,
        "tcpFlags": "A",
        "sequence": 4000001,
        "acknowledgement": 2000001
      },
      {
        "time": 3016,
        "source": "02:00:00:00:04:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.10"
      },
      {
        "time": 5111,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:14",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.31",
        "protocol": 6,
        "sourcePort": 63658,
        "destinationPort": 55555,
        "payload": null,
        "tcpFlags": "F",
        "sequence": 4000001,
        "acknowledgement": 0
      },
      {
        "time": 5112,
        "source": "02:00:00:00:04:14",
        "destination": "02:00:00:00:04:11",
        "sourceIp": "192.168.0.31",
        "destinationIp": "192.168.0.20",
        "protocol": 6,
        "sourcePort": 55555,
        "destinationPort": 63658,
        "payload": null,
        "tcpFlags": "A",
        "sequence": 2000001,
        "acknowledgement": 4000002
      },
      {
        "time": 5167,
        "source": "02:00:00:00:04:14",
        "destination": "02:00:00:00:04:11",
        "sourceIp": "192.168.0.31",
        "destinationIp": "192.168.0.20",
        "protocol": 6,
        "sourcePort": 55555,
        "destinationPort": 63658,
        "payload": null,
        "tcpFlags": "F",
        "sequence": 2000001,
        "acknowledgement": 0
      },
      {
        "time": 5390,
        "source": "02:00:00:00:04:11",
        "destination": "02:00:00:00:04:14",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.31",
        "protocol": 6,
        "sourcePort": 63658,
        "destinationPort": 55555,
        "payload": null,
        "tcpFlags": "A",
        "sequence": 4000002,
        "acknowledgement": 2000002
      }
    ],
    "00000000-0000-0000-0000-000000000405": [
      {
        "time": 639,
        "source": "02:00:00:00:04:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.31"
      },
      {
        "time": 3016,
        "source": "02:00:00:00:04:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.10"
      }
    ],
    "00000000-0000-0000-0000-000000000405#1": [],
    "00000000-0000-0000-0000-000000000406": []
  },
  "rows": {
    "00000000-0000-0000-0000-000000000401": [
      [
        "1",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.31",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
      ],
      [
        "2",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.31",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]"
      ],
      [
        "3",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "3",
        "192.168.0.20",
        "192.168.0.31",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "3",
        "192.168.0.20:63658",
        "192.168.0.31:55555",
        "TCP",
        "Transport",
        "SYN, SEQ: 4.000.000"
      ],
      [
        "4",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "4",
        "192.168.0.31",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "4",
        "192.168.0.31:55555",
        "192.168.0.20:63658",
        "TCP",
        "Transport",
        "SYN, SEQ: 2.000.000, ACK: 4.000.001"
      ],
      [
        "5",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "5",
        "192.168.0.20",
        "192.168.0.31",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "5",
        "192.168.0.20:63658",
        "192.168.0.31:55555",
        "TCP",
        "Transport",
        "SEQ: 4.000.001, ACK: 2.000.001"
      ],
      [
        "6",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "6",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "7",
        "02:00:00:00:04:12",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "7",
        "192.168.0.10",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]"
      ],
      [
        "8",
        "02:00:00:00:04:11",
        "02:00:00:00:04:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "8",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "8",
        "192.168.0.20:53339",
        "192.168.0.10:53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "8",
        "192.168.0.20:53339",
        "192.168.0.10:53",
        "DNS",
        "Anwendung",
        "ID=41076 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
      ],
      [
        "9",
        "02:00:00:00:04:12",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "9",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "9",
        "192.168.0.10:53",
        "192.168.0.20:53339",
        "UDP",
        "Transport",
        ""
      ],
      [
        "9",
        "192.168.0.10:53",
        "192.168.0.20:53339",
        "DNS",
        "Anwendung",
        "ID=41076 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
      ],
      [
        "10",
        "02:00:00:00:04:11",
        "02:00:00:00:04:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "10",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "10",
        "192.168.0.20:54167",
        "192.168.0.10:53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "10",
        "192.168.0.20:54167",
        "192.168.0.10:53",
        "DNS",
        "Anwendung",
        "ID=35450 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n"
      ],
      [
        "11",
        "02:00:00:00:04:12",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "11",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "11",
        "192.168.0.10:53",
        "192.168.0.20:54167",
        "UDP",
        "Transport",
        ""
      ],
      [
        "11",
        "192.168.0.10:53",
        "192.168.0.20:54167",
        "DNS",
        "Anwendung",
        "ID=35450 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
      ],
      [
        "12",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "12",
        "192.168.0.20",
        "192.168.0.31",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "12",
        "192.168.0.20:63658",
        "192.168.0.31:55555",
        "TCP",
        "Transport",
        "FIN, SEQ: 4.000.001"
      ],
      [
        "13",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "13",
        "192.168.0.31",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "13",
        "192.168.0.31:55555",
        "192.168.0.20:63658",
        "TCP",
        "Transport",
        "SEQ: 2.000.001, ACK: 4.000.002"
      ],
      [
        "14",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "14",
        "192.168.0.31",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "14",
        "192.168.0.31:55555",
        "192.168.0.20:63658",
        "TCP",
        "Transport",
        "FIN, SEQ: 2.000.001"
      ],
      [
        "15",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "15",
        "192.168.0.20",
        "192.168.0.31",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "15",
        "192.168.0.20:63658",
        "192.168.0.31:55555",
        "TCP",
        "Transport",
        "SEQ: 4.000.002, ACK: 2.000.002"
      ]
    ],
    "00000000-0000-0000-0000-000000000402": [
      [
        "1",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.31",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
      ],
      [
        "2",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "3",
        "02:00:00:00:04:12",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "3",
        "192.168.0.10",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]"
      ],
      [
        "4",
        "02:00:00:00:04:11",
        "02:00:00:00:04:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "4",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "4",
        "192.168.0.20:53339",
        "192.168.0.10:53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "4",
        "192.168.0.20:53339",
        "192.168.0.10:53",
        "DNS",
        "Anwendung",
        "ID=41076 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
      ],
      [
        "5",
        "02:00:00:00:04:12",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "5",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "5",
        "192.168.0.10:53",
        "192.168.0.20:53339",
        "UDP",
        "Transport",
        ""
      ],
      [
        "5",
        "192.168.0.10:53",
        "192.168.0.20:53339",
        "DNS",
        "Anwendung",
        "ID=41076 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
      ],
      [
        "6",
        "02:00:00:00:04:11",
        "02:00:00:00:04:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "6",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "6",
        "192.168.0.20:54167",
        "192.168.0.10:53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "6",
        "192.168.0.20:54167",
        "192.168.0.10:53",
        "DNS",
        "Anwendung",
        "ID=35450 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n"
      ],
      [
        "7",
        "02:00:00:00:04:12",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "7",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "7",
        "192.168.0.10:53",
        "192.168.0.20:54167",
        "UDP",
        "Transport",
        ""
      ],
      [
        "7",
        "192.168.0.10:53",
        "192.168.0.20:54167",
        "DNS",
        "Anwendung",
        "ID=35450 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
      ]
    ],
    "00000000-0000-0000-0000-000000000403": [
      [
        "1",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.31",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
      ],
      [
        "2",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ]
    ],
    "00000000-0000-0000-0000-000000000404": [
      [
        "1",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.31",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
      ],
      [
        "2",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.31",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]"
      ],
      [
        "3",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "3",
        "192.168.0.20",
        "192.168.0.31",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "3",
        "192.168.0.20:63658",
        "192.168.0.31:55555",
        "TCP",
        "Transport",
        "SYN, SEQ: 4.000.000"
      ],
      [
        "4",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "4",
        "192.168.0.31",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "4",
        "192.168.0.31:55555",
        "192.168.0.20:63658",
        "TCP",
        "Transport",
        "SYN, SEQ: 2.000.000, ACK: 4.000.001"
      ],
      [
        "5",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "5",
        "192.168.0.20",
        "192.168.0.31",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "5",
        "192.168.0.20:63658",
        "192.168.0.31:55555",
        "TCP",
        "Transport",
        "SEQ: 4.000.001, ACK: 2.000.001"
      ],
      [
        "6",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "6",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "7",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "7",
        "192.168.0.20",
        "192.168.0.31",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "7",
        "192.168.0.20:63658",
        "192.168.0.31:55555",
        "TCP",
        "Transport",
        "FIN, SEQ: 4.000.001"
      ],
      [
        "8",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "8",
        "192.168.0.31",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "8",
        "192.168.0.31:55555",
        "192.168.0.20:63658",
        "TCP",
        "Transport",
        "SEQ: 2.000.001, ACK: 4.000.002"
      ],
      [
        "9",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "9",
        "192.168.0.31",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "9",
        "192.168.0.31:55555",
        "192.168.0.20:63658",
        "TCP",
        "Transport",
        "FIN, SEQ: 2.000.001"
      ],
      [
        "10",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "10",
        "192.168.0.20",
        "192.168.0.31",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "10",
        "192.168.0.20:63658",
        "192.168.0.31:55555",
        "TCP",
        "Transport",
        "SEQ: 4.000.002, ACK: 2.000.002"
      ]
    ],
    "00000000-0000-0000-0000-000000000405": [
      [
        "1",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.31",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
      ],
      [
        "2",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ]
    ],
    "00000000-0000-0000-0000-000000000405#1": [],
    "00000000-0000-0000-0000-000000000406": []
  },
  "layeredRows": {
    "00000000-0000-0000-0000-000000000401": [
      [
        "1",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.31",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
      ],
      [
        "2",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.31",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]"
      ],
      [
        "3",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "3",
        "192.168.0.20",
        "192.168.0.31",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "3",
        "63658",
        "55555",
        "TCP",
        "Transport",
        "SYN, SEQ: 4.000.000"
      ],
      [
        "4",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "4",
        "192.168.0.31",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "4",
        "55555",
        "63658",
        "TCP",
        "Transport",
        "SYN, SEQ: 2.000.000, ACK: 4.000.001"
      ],
      [
        "5",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "5",
        "192.168.0.20",
        "192.168.0.31",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "5",
        "63658",
        "55555",
        "TCP",
        "Transport",
        "SEQ: 4.000.001, ACK: 2.000.001"
      ],
      [
        "6",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "6",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "7",
        "02:00:00:00:04:12",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "7",
        "192.168.0.10",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]"
      ],
      [
        "8",
        "02:00:00:00:04:11",
        "02:00:00:00:04:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "8",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "8",
        "53339",
        "53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "8",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=41076 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
      ],
      [
        "9",
        "02:00:00:00:04:12",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "9",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "9",
        "53",
        "53339",
        "UDP",
        "Transport",
        ""
      ],
      [
        "9",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=41076 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
      ],
      [
        "10",
        "02:00:00:00:04:11",
        "02:00:00:00:04:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "10",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "10",
        "54167",
        "53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "10",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=35450 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n"
      ],
      [
        "11",
        "02:00:00:00:04:12",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "11",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "11",
        "53",
        "54167",
        "UDP",
        "Transport",
        ""
      ],
      [
        "11",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=35450 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
      ],
      [
        "12",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "12",
        "192.168.0.20",
        "192.168.0.31",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "12",
        "63658",
        "55555",
        "TCP",
        "Transport",
        "FIN, SEQ: 4.000.001"
      ],
      [
        "13",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "13",
        "192.168.0.31",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "13",
        "55555",
        "63658",
        "TCP",
        "Transport",
        "SEQ: 2.000.001, ACK: 4.000.002"
      ],
      [
        "14",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "14",
        "192.168.0.31",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "14",
        "55555",
        "63658",
        "TCP",
        "Transport",
        "FIN, SEQ: 2.000.001"
      ],
      [
        "15",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "15",
        "192.168.0.20",
        "192.168.0.31",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "15",
        "63658",
        "55555",
        "TCP",
        "Transport",
        "SEQ: 4.000.002, ACK: 2.000.002"
      ]
    ],
    "00000000-0000-0000-0000-000000000402": [
      [
        "1",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.31",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
      ],
      [
        "2",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "3",
        "02:00:00:00:04:12",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "3",
        "192.168.0.10",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]"
      ],
      [
        "4",
        "02:00:00:00:04:11",
        "02:00:00:00:04:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "4",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "4",
        "53339",
        "53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "4",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=41076 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
      ],
      [
        "5",
        "02:00:00:00:04:12",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "5",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "5",
        "53",
        "53339",
        "UDP",
        "Transport",
        ""
      ],
      [
        "5",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=41076 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
      ],
      [
        "6",
        "02:00:00:00:04:11",
        "02:00:00:00:04:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "6",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "6",
        "54167",
        "53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "6",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=35450 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n"
      ],
      [
        "7",
        "02:00:00:00:04:12",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "7",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "7",
        "53",
        "54167",
        "UDP",
        "Transport",
        ""
      ],
      [
        "7",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=35450 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
      ]
    ],
    "00000000-0000-0000-0000-000000000403": [
      [
        "1",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.31",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
      ],
      [
        "2",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ]
    ],
    "00000000-0000-0000-0000-000000000404": [
      [
        "1",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.31",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
      ],
      [
        "2",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.31",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]"
      ],
      [
        "3",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "3",
        "192.168.0.20",
        "192.168.0.31",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "3",
        "63658",
        "55555",
        "TCP",
        "Transport",
        "SYN, SEQ: 4.000.000"
      ],
      [
        "4",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "4",
        "192.168.0.31",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "4",
        "55555",
        "63658",
        "TCP",
        "Transport",
        "SYN, SEQ: 2.000.000, ACK: 4.000.001"
      ],
      [
        "5",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "5",
        "192.168.0.20",
        "192.168.0.31",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "5",
        "63658",
        "55555",
        "TCP",
        "Transport",
        "SEQ: 4.000.001, ACK: 2.000.001"
      ],
      [
        "6",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "6",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "7",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "7",
        "192.168.0.20",
        "192.168.0.31",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "7",
        "63658",
        "55555",
        "TCP",
        "Transport",
        "FIN, SEQ: 4.000.001"
      ],
      [
        "8",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "8",
        "192.168.0.31",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "8",
        "55555",
        "63658",
        "TCP",
        "Transport",
        "SEQ: 2.000.001, ACK: 4.000.002"
      ],
      [
        "9",
        "02:00:00:00:04:14",
        "02:00:00:00:04:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "9",
        "192.168.0.31",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "9",
        "55555",
        "63658",
        "TCP",
        "Transport",
        "FIN, SEQ: 2.000.001"
      ],
      [
        "10",
        "02:00:00:00:04:11",
        "02:00:00:00:04:14",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "10",
        "192.168.0.20",
        "192.168.0.31",
        "IP",
        "Vermittlung",
        "Protokoll: 6, TTL: 64"
      ],
      [
        "10",
        "63658",
        "55555",
        "TCP",
        "Transport",
        "SEQ: 4.000.002, ACK: 2.000.002"
      ]
    ],
    "00000000-0000-0000-0000-000000000405": [
      [
        "1",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.31",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
      ],
      [
        "2",
        "02:00:00:00:04:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ]
    ],
    "00000000-0000-0000-0000-000000000405#1": [],
    "00000000-0000-0000-0000-000000000406": []
  },
  "acts": [
    [
      2500,
      "00000000-0000-0000-0000-000000000401",
      "netstat"
    ],
    [
      2700,
      "00000000-0000-0000-0000-000000000404",
      "netstat"
    ],
    [
      2900,
      "00000000-0000-0000-0000-000000000401",
      "host www.filius.de"
    ],
    [
      4500,
      "00000000-0000-0000-0000-000000000402",
      "netstat"
    ],
    [
      4700,
      "00000000-0000-0000-0000-000000000403",
      "netstat"
    ],
    [
      4900,
      "00000000-0000-0000-0000-000000000401",
      "netstat x"
    ],
    [
      5000,
      "00000000-0000-0000-0000-000000000401",
      "disconnect"
    ],
    [
      8000,
      "00000000-0000-0000-0000-000000000401",
      "netstat"
    ],
    [
      8200,
      "00000000-0000-0000-0000-000000000404",
      "netstat"
    ]
  ],
  "events": [
    [
      500,
      "00000000-0000-0000-0000-000000000401",
      "call",
      "connect 192.168.0.31:55555"
    ],
    [
      2500,
      "00000000-0000-0000-0000-000000000401",
      "call",
      "netstat"
    ],
    [
      2502,
      "00000000-0000-0000-0000-000000000401",
      "text",
      "| Proto   | Lokale Adresse        | Entfernte Adresse     | Zustand      |\n--------------------------------------------------------------------------\n| TCP     |    192.168.0.20:63658 |    192.168.0.31:55555 | ESTABLISHED  |\n"
    ],
    [
      2700,
      "00000000-0000-0000-0000-000000000404",
      "call",
      "netstat"
    ],
    [
      2701,
      "00000000-0000-0000-0000-000000000404",
      "text",
      "| Proto   | Lokale Adresse        | Entfernte Adresse     | Zustand      |\n--------------------------------------------------------------------------\n| TCP     |         0.0.0.0:55555 |               -:-     | LISTEN       |\n| TCP     |    192.168.0.31:55555 |    192.168.0.20:63658 | ESTABLISHED  |\n"
    ],
    [
      2900,
      "00000000-0000-0000-0000-000000000401",
      "call",
      "host www.filius.de"
    ],
    [
      2900,
      "00000000-0000-0000-0000-000000000401",
      "busy",
      "true"
    ],
    [
      3355,
      "00000000-0000-0000-0000-000000000401",
      "text",
      "www.filius.de. hat die IP-Adresse 192.168.0.30\n"
    ],
    [
      3580,
      "00000000-0000-0000-0000-000000000401",
      "busy",
      "false"
    ],
    [
      4500,
      "00000000-0000-0000-0000-000000000402",
      "call",
      "netstat"
    ],
    [
      4501,
      "00000000-0000-0000-0000-000000000402",
      "text",
      "| Proto   | Lokale Adresse        | Entfernte Adresse     | Zustand      |\n--------------------------------------------------------------------------\n| TCP     |         0.0.0.0:55555 |               -:-     | LISTEN       |\n| UDP     |         0.0.0.0:53    |               -:-     | LISTEN       |\n| UDP     |    192.168.0.10:53    |    192.168.0.20:53339 | CONNECTED    |\n| UDP     |    192.168.0.10:53    |    192.168.0.20:54167 | CONNECTED    |\n"
    ],
    [
      4700,
      "00000000-0000-0000-0000-000000000403",
      "call",
      "netstat"
    ],
    [
      4701,
      "00000000-0000-0000-0000-000000000403",
      "text",
      "| Proto   | Lokale Adresse        | Entfernte Adresse     | Zustand      |\n--------------------------------------------------------------------------\n"
    ],
    [
      4900,
      "00000000-0000-0000-0000-000000000401",
      "call",
      "netstat x"
    ],
    [
      4900,
      "00000000-0000-0000-0000-000000000401",
      "text",
      "| Proto   | Lokale Adresse        | Entfernte Adresse     | Zustand      |\n--------------------------------------------------------------------------\n| TCP     |    192.168.0.20:63658 |    192.168.0.31:55555 | ESTABLISHED  |\n"
    ],
    [
      5000,
      "00000000-0000-0000-0000-000000000401",
      "call",
      "disconnect"
    ],
    [
      8000,
      "00000000-0000-0000-0000-000000000401",
      "call",
      "netstat"
    ],
    [
      8000,
      "00000000-0000-0000-0000-000000000401",
      "text",
      "| Proto   | Lokale Adresse        | Entfernte Adresse     | Zustand      |\n--------------------------------------------------------------------------\n| TCP     |    192.168.0.20:63658 |    192.168.0.31:55555 | TIME_WAIT    |\n"
    ],
    [
      8200,
      "00000000-0000-0000-0000-000000000404",
      "call",
      "netstat"
    ],
    [
      8200,
      "00000000-0000-0000-0000-000000000404",
      "text",
      "| Proto   | Lokale Adresse        | Entfernte Adresse     | Zustand      |\n--------------------------------------------------------------------------\n| TCP     |         0.0.0.0:55555 |               -:-     | LISTEN       |\n"
    ]
  ]
}