{
  "frames": {
    "00000000-0000-0000-0000-000000000101": [
      {
        "time": 726,
        "source": "02:00:00:00:01:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.10"
      },
      {
        "time": 961,
        "source": "02:00:00:00:01:12",
        "destination": "02:00:00:00:01:11",
        "arp": 2,
        "senderIp": "192.168.0.10",
        "targetIp": "192.168.0.20"
      },
      {
        "time": 964,
        "source": "02:00:00:00:01:11",
        "destination": "02:00:00:00:01:12",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.10",
        "protocol": 17,
        "sourcePort": 62914,
        "destinationPort": 53,
        "payload": "ID=4538 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
      },
      {
        "time": 1193,
        "source": "02:00:00:00:01:12",
        "destination": "02:00:00:00:01:11",
        "sourceIp": "192.168.0.10",
        "destinationIp": "192.168.0.20",
        "protocol": 17,
        "sourcePort": 53,
        "destinationPort": 62914,
        "payload": "ID=4538 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
      }
    ],
    "00000000-0000-0000-0000-000000000102": [
      {
        "time": 849,
        "source": "02:00:00:00:01:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.10"
      },
      {
        "time": 850,
        "source": "02:00:00:00:01:12",
        "destination": "02:00:00:00:01:11",
        "arp": 2,
        "senderIp": "192.168.0.10",
        "targetIp": "192.168.0.20"
      },
      {
        "time": 1077,
        "source": "02:00:00:00:01:11",
        "destination": "02:00:00:00:01:12",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.10",
        "protocol": 17,
        "sourcePort": 62914,
        "destinationPort": 53,
        "payload": "ID=4538 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
      },
      {
        "time": 1082,
        "source": "02:00:00:00:01:12",
        "destination": "02:00:00:00:01:11",
        "sourceIp": "192.168.0.10",
        "destinationIp": "192.168.0.20",
        "protocol": 17,
        "sourcePort": 53,
        "destinationPort": 62914,
        "payload": "ID=4538 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
      }
    ],
    "00000000-0000-0000-0000-000000000103": [
      {
        "time": 849,
        "source": "02:00:00:00:01:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.10"
      }
    ],
    "00000000-0000-0000-0000-000000000104": [
      {
        "time": 849,
        "source": "02:00:00:00:01:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.10"
      }
    ]
  },
  "rows": {
    "00000000-0000-0000-0000-000000000101": [
      [
        "1",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "2",
        "02:00:00:00:01:12",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.10",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
      ],
      [
        "3",
        "02:00:00:00:01:11",
        "02:00:00:00:01:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "3",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "3",
        "192.168.0.20:62914",
        "192.168.0.10:53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "3",
        "192.168.0.20:62914",
        "192.168.0.10:53",
        "DNS",
        "Anwendung",
        "ID=4538 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
      ],
      [
        "4",
        "02:00:00:00:01:12",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "4",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "4",
        "192.168.0.10:53",
        "192.168.0.20:62914",
        "UDP",
        "Transport",
        ""
      ],
      [
        "4",
        "192.168.0.10:53",
        "192.168.0.20:62914",
        "DNS",
        "Anwendung",
        "ID=4538 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
      ]
    ],
    "00000000-0000-0000-0000-000000000102": [
      [
        "1",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "2",
        "02:00:00:00:01:12",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.10",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
      ],
      [
        "3",
        "02:00:00:00:01:11",
        "02:00:00:00:01:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "3",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "3",
        "192.168.0.20:62914",
        "192.168.0.10:53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "3",
        "192.168.0.20:62914",
        "192.168.0.10:53",
        "DNS",
        "Anwendung",
        "ID=4538 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
      ],
      [
        "4",
        "02:00:00:00:01:12",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "4",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "4",
        "192.168.0.10:53",
        "192.168.0.20:62914",
        "UDP",
        "Transport",
        ""
      ],
      [
        "4",
        "192.168.0.10:53",
        "192.168.0.20:62914",
        "DNS",
        "Anwendung",
        "ID=4538 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
      ]
    ],
    "00000000-0000-0000-0000-000000000103": [
      [
        "1",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ]
    ],
    "00000000-0000-0000-0000-000000000104": [
      [
        "1",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ]
    ]
  },
  "layeredRows": {
    "00000000-0000-0000-0000-000000000101": [
      [
        "1",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "2",
        "02:00:00:00:01:12",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.10",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
      ],
      [
        "3",
        "02:00:00:00:01:11",
        "02:00:00:00:01:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "3",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "3",
        "62914",
        "53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "3",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=4538 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
      ],
      [
        "4",
        "02:00:00:00:01:12",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "4",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "4",
        "53",
        "62914",
        "UDP",
        "Transport",
        ""
      ],
      [
        "4",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=4538 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
      ]
    ],
    "00000000-0000-0000-0000-000000000102": [
      [
        "1",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "2",
        "02:00:00:00:01:12",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.10",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
      ],
      [
        "3",
        "02:00:00:00:01:11",
        "02:00:00:00:01:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "3",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "3",
        "62914",
        "53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "3",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=4538 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX IN\n"
      ],
      [
        "4",
        "02:00:00:00:01:12",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "4",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "4",
        "53",
        "62914",
        "UDP",
        "Transport",
        ""
      ],
      [
        "4",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=4538 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nfilius.de. MX 3600 mail.filius.de.\nmail.filius.de. A 3600 192.168.0.31\n"
      ]
    ],
    "00000000-0000-0000-0000-000000000103": [
      [
        "1",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ]
    ],
    "00000000-0000-0000-0000-000000000104": [
      [
        "1",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ]
    ]
  },
  "events": [
    [
      715,
      "holeIPAdresseMailServer filius.de called"
    ],
    [
      1194,
      "holeIPAdresseMailServer filius.de returned 192.168.0.31"
    ]
  ]
}