{ "frames": { "00000000-0000-0000-0000-000000000301": [ { "time": 505, "source": "02:00:00:00:03:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "10.0.0.2", "targetIp": "10.0.0.1" }, { "time": 742, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "arp": 2, "senderIp": "10.0.0.1", "targetIp": "10.0.0.2" }, { "time": 746, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "icmp": 8, "icmpCode": 0, "sourceIp": "10.0.0.2", "destinationIp": "20.0.0.2", "sequence": 1 }, { "time": 3516, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 55413, "destinationPort": 80, "payload": null, "tcpFlags": "S", "sequence": 2000000, "acknowledgement": 0 }, { "time": 3743, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 55413, "payload": null, "tcpFlags": "SA", "sequence": 1000000, "acknowledgement": 2000001 }, { "time": 3744, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 55413, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000001, "acknowledgement": 1000001 }, { "time": 3811, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 55413, "destinationPort": 80, "payload": "GET / HTTP/1.1\nHost: 10.0.0.1\n", "tcpFlags": "P", "sequence": 2000001, "acknowledgement": 0 }, { "time": 4038, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 55413, "payload": null, "tcpFlags": "A", "sequence": 1000001, "acknowledgement": 2000031 }, { "time": 4094, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 55413, "payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\n\n \n Administration des Vermittlungsrechners\n \n \n\n

Firewall-Administration

Konfiguration

Log-Einträge anzeigen

\n\n

Weiterleitung/Routing

Anzeige des aktuellen Status der Weiterleitungs-/Routing-Tabelle

\n \n\n", "tcpFlags": "P", "sequence": 1000001, "acknowledgement": 0 }, { "time": 4094, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 55413, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000031, "acknowledgement": 1000436 }, { "time": 4150, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 55413, "destinationPort": 80, "payload": null, "tcpFlags": "F", "sequence": 2000031, "acknowledgement": 0 }, { "time": 4372, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 55413, "payload": null, "tcpFlags": "A", "sequence": 1000436, "acknowledgement": 2000032 }, { "time": 4428, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 55413, "payload": null, "tcpFlags": "F", "sequence": 1000436, "acknowledgement": 0 }, { "time": 4428, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 55413, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000032, "acknowledgement": 1000437 }, { "time": 7001, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 64301, "destinationPort": 80, "payload": null, "tcpFlags": "S", "sequence": 4000000, "acknowledgement": 0 }, { "time": 7224, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 64301, "payload": null, "tcpFlags": "SA", "sequence": 3000000, "acknowledgement": 4000001 }, { "time": 7225, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 64301, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 4000001, "acknowledgement": 3000001 }, { "time": 7302, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 64301, "destinationPort": 80, "payload": "GET /log HTTP/1.1\nHost: 10.0.0.1\n", "tcpFlags": "P", "sequence": 4000001, "acknowledgement": 0 }, { "time": 7524, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 64301, "payload": null, "tcpFlags": "A", "sequence": 3000001, "acknowledgement": 4000034 }, { "time": 7580, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 64301, "payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\n\n\u0009\n\u0009\u0009Log-Einträge der Firewall</titel>\n\u0009</head>\n\u0009<body>\n\u0009\u0009<h2>Log-Einträge der Firewall</h2>\n\n<br /> \nICMP-Paket verworfen: 10.0.0.2 -> 20.0.0.2 (code: 0, type: 8)<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren\n\n\u0009</body>\n</html>", "tcpFlags": "P", "sequence": 3000001, "acknowledgement": 0 }, { "time": 7580, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 64301, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 4000034, "acknowledgement": 3000461 }, { "time": 7636, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 64301, "destinationPort": 80, "payload": null, "tcpFlags": "F", "sequence": 4000034, "acknowledgement": 0 }, { "time": 7858, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 64301, "payload": null, "tcpFlags": "A", "sequence": 3000461, "acknowledgement": 4000035 }, { "time": 7914, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 64301, "payload": null, "tcpFlags": "F", "sequence": 3000461, "acknowledgement": 0 }, { "time": 7914, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 64301, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 4000035, "acknowledgement": 3000462 } ], "00000000-0000-0000-0000-000000000302": [ { "time": 628, "source": "02:00:00:00:03:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "10.0.0.2", "targetIp": "10.0.0.1" }, { "time": 630, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "arp": 2, "senderIp": "10.0.0.1", "targetIp": "10.0.0.2" }, { "time": 861, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "icmp": 8, "icmpCode": 0, "sourceIp": "10.0.0.2", "destinationIp": "20.0.0.2", "sequence": 1 }, { "time": 3629, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 55413, "destinationPort": 80, "payload": null, "tcpFlags": "S", "sequence": 2000000, "acknowledgement": 0 }, { "time": 3632, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 55413, "payload": null, "tcpFlags": "SA", "sequence": 1000000, "acknowledgement": 2000001 }, { "time": 3855, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 55413, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000001, "acknowledgement": 1000001 }, { "time": 3922, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 55413, "destinationPort": 80, "payload": "GET / HTTP/1.1\nHost: 10.0.0.1\n", "tcpFlags": "P", "sequence": 2000001, "acknowledgement": 0 }, { "time": 3923, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 55413, "payload": null, "tcpFlags": "A", "sequence": 1000001, "acknowledgement": 2000031 }, { "time": 3979, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 55413, "payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Administration des Vermittlungsrechners\n \n \n\n

Firewall-Administration

Konfiguration

Log-Einträge anzeigen

\n\n

Weiterleitung/Routing

Anzeige des aktuellen Status der Weiterleitungs-/Routing-Tabelle

\n \n\n", "tcpFlags": "P", "sequence": 1000001, "acknowledgement": 0 }, { "time": 4205, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 55413, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000031, "acknowledgement": 1000436 }, { "time": 4261, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 55413, "destinationPort": 80, "payload": null, "tcpFlags": "F", "sequence": 2000031, "acknowledgement": 0 }, { "time": 4261, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 55413, "payload": null, "tcpFlags": "A", "sequence": 1000436, "acknowledgement": 2000032 }, { "time": 4317, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 55413, "payload": null, "tcpFlags": "F", "sequence": 1000436, "acknowledgement": 0 }, { "time": 4540, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 55413, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000032, "acknowledgement": 1000437 }, { "time": 7113, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 64301, "destinationPort": 80, "payload": null, "tcpFlags": "S", "sequence": 4000000, "acknowledgement": 0 }, { "time": 7113, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 64301, "payload": null, "tcpFlags": "SA", "sequence": 3000000, "acknowledgement": 4000001 }, { "time": 7336, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 64301, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 4000001, "acknowledgement": 3000001 }, { "time": 7413, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 64301, "destinationPort": 80, "payload": "GET /log HTTP/1.1\nHost: 10.0.0.1\n", "tcpFlags": "P", "sequence": 4000001, "acknowledgement": 0 }, { "time": 7413, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 64301, "payload": null, "tcpFlags": "A", "sequence": 3000001, "acknowledgement": 4000034 }, { "time": 7469, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 64301, "payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\n\n\u0009\n\u0009\u0009Log-Einträge der Firewall</titel>\n\u0009</head>\n\u0009<body>\n\u0009\u0009<h2>Log-Einträge der Firewall</h2>\n\n<br /> \nICMP-Paket verworfen: 10.0.0.2 -> 20.0.0.2 (code: 0, type: 8)<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren\n\n\u0009</body>\n</html>", "tcpFlags": "P", "sequence": 3000001, "acknowledgement": 0 }, { "time": 7691, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 64301, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 4000034, "acknowledgement": 3000461 }, { "time": 7747, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 64301, "destinationPort": 80, "payload": null, "tcpFlags": "F", "sequence": 4000034, "acknowledgement": 0 }, { "time": 7747, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 64301, "payload": null, "tcpFlags": "A", "sequence": 3000461, "acknowledgement": 4000035 }, { "time": 7803, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "protocol": 6, "sourcePort": 80, "destinationPort": 64301, "payload": null, "tcpFlags": "F", "sequence": 3000461, "acknowledgement": 0 }, { "time": 8025, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "10.0.0.1", "protocol": 6, "sourcePort": 64301, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 4000035, "acknowledgement": 3000462 } ], "00000000-0000-0000-0000-000000000302#1": [], "00000000-0000-0000-0000-000000000303": [] }, "rows": { "00000000-0000-0000-0000-000000000301": [ [ "1", "02:00:00:00:03:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "10.0.0.2", "10.0.0.1", "ARP", "Vermittlung", "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" ], [ "2", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x806" ], [ "2", "10.0.0.1", "10.0.0.2", "ARP", "Vermittlung", "MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]" ], [ "3", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "3", "10.0.0.2", "20.0.0.2", "ICMP", "Vermittlung", "ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1" ], [ "4", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "4", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "4", "10.0.0.2:55413", "10.0.0.1:80", "TCP", "Transport", "SYN, SEQ: 2.000.000" ], [ "5", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "5", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "5", "10.0.0.1:80", "10.0.0.2:55413", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 2.000.001" ], [ "6", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "6", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "6", "10.0.0.2:55413", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.001, ACK: 1.000.001" ], [ "7", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "7", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "10.0.0.2:55413", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.001" ], [ "7", "10.0.0.2:55413", "10.0.0.1:80", "HTTP", "Anwendung", "GET / HTTP/1.1\nHost: 10.0.0.1\n" ], [ "8", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "8", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "10.0.0.1:80", "10.0.0.2:55413", "TCP", "Transport", "SEQ: 1.000.001, ACK: 2.000.031" ], [ "9", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "9", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "9", "10.0.0.1:80", "10.0.0.2:55413", "TCP", "Transport", "SEQ: 1.000.001" ], [ "9", "10.0.0.1:80", "10.0.0.2:55413", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Administration des Vermittlungsrechners\n \n \n\n

Firewall-Administration

Konfiguration

Log-Einträge anzeigen

\n\n

Weiterleitung/Routing

Anzeige des aktuellen Status der Weiterleitungs-/Routing-Tabelle

\n \n\n" ], [ "10", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "10", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "10", "10.0.0.2:55413", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.031, ACK: 1.000.436" ], [ "11", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "11", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "10.0.0.2:55413", "10.0.0.1:80", "TCP", "Transport", "FIN, SEQ: 2.000.031" ], [ "12", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "12", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "12", "10.0.0.1:80", "10.0.0.2:55413", "TCP", "Transport", "SEQ: 1.000.436, ACK: 2.000.032" ], [ "13", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "13", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "13", "10.0.0.1:80", "10.0.0.2:55413", "TCP", "Transport", "FIN, SEQ: 1.000.436" ], [ "14", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "14", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "14", "10.0.0.2:55413", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.032, ACK: 1.000.437" ], [ "15", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "15", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "15", "10.0.0.2:64301", "10.0.0.1:80", "TCP", "Transport", "SYN, SEQ: 4.000.000" ], [ "16", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "16", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "16", "10.0.0.1:80", "10.0.0.2:64301", "TCP", "Transport", "SYN, SEQ: 3.000.000, ACK: 4.000.001" ], [ "17", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "17", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "17", "10.0.0.2:64301", "10.0.0.1:80", "TCP", "Transport", "SEQ: 4.000.001, ACK: 3.000.001" ], [ "18", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "18", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "18", "10.0.0.2:64301", "10.0.0.1:80", "TCP", "Transport", "SEQ: 4.000.001" ], [ "18", "10.0.0.2:64301", "10.0.0.1:80", "HTTP", "Anwendung", "GET /log HTTP/1.1\nHost: 10.0.0.1\n" ], [ "19", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "19", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "19", "10.0.0.1:80", "10.0.0.2:64301", "TCP", "Transport", "SEQ: 3.000.001, ACK: 4.000.034" ], [ "20", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "20", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "20", "10.0.0.1:80", "10.0.0.2:64301", "TCP", "Transport", "SEQ: 3.000.001" ], [ "20", "10.0.0.1:80", "10.0.0.2:64301", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/html\n\n\n\u0009\n\u0009\u0009Log-Einträge der Firewall</titel>\n\u0009</head>\n\u0009<body>\n\u0009\u0009<h2>Log-Einträge der Firewall</h2>\n\n<br /> \nICMP-Paket verworfen: 10.0.0.2 -> 20.0.0.2 (code: 0, type: 8)<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren\n\n\u0009</body>\n</html>" ], [ "21", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "21", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "21", "10.0.0.2:64301", "10.0.0.1:80", "TCP", "Transport", "SEQ: 4.000.034, ACK: 3.000.461" ], [ "22", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "22", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "22", "10.0.0.2:64301", "10.0.0.1:80", "TCP", "Transport", "FIN, SEQ: 4.000.034" ], [ "23", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "23", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "23", "10.0.0.1:80", "10.0.0.2:64301", "TCP", "Transport", "SEQ: 3.000.461, ACK: 4.000.035" ], [ "24", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "24", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "24", "10.0.0.1:80", "10.0.0.2:64301", "TCP", "Transport", "FIN, SEQ: 3.000.461" ], [ "25", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "25", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "25", "10.0.0.2:64301", "10.0.0.1:80", "TCP", "Transport", "SEQ: 4.000.035, ACK: 3.000.462" ] ], "00000000-0000-0000-0000-000000000302": [ [ "1", "02:00:00:00:03:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "10.0.0.2", "10.0.0.1", "ARP", "Vermittlung", "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" ], [ "2", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x806" ], [ "2", "10.0.0.1", "10.0.0.2", "ARP", "Vermittlung", "MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]" ], [ "3", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "3", "10.0.0.2", "20.0.0.2", "ICMP", "Vermittlung", "ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1" ], [ "4", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "4", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "4", "10.0.0.2:55413", "10.0.0.1:80", "TCP", "Transport", "SYN, SEQ: 2.000.000" ], [ "5", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "5", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "5", "10.0.0.1:80", "10.0.0.2:55413", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 2.000.001" ], [ "6", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "6", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "6", "10.0.0.2:55413", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.001, ACK: 1.000.001" ], [ "7", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "7", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "10.0.0.2:55413", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.001" ], [ "7", "10.0.0.2:55413", "10.0.0.1:80", "HTTP", "Anwendung", "GET / HTTP/1.1\nHost: 10.0.0.1\n" ], [ "8", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "8", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "10.0.0.1:80", "10.0.0.2:55413", "TCP", "Transport", "SEQ: 1.000.001, ACK: 2.000.031" ], [ "9", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "9", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "9", "10.0.0.1:80", "10.0.0.2:55413", "TCP", "Transport", "SEQ: 1.000.001" ], [ "9", "10.0.0.1:80", "10.0.0.2:55413", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Administration des Vermittlungsrechners\n \n \n\n

Firewall-Administration

Konfiguration

Log-Einträge anzeigen

\n\n

Weiterleitung/Routing

Anzeige des aktuellen Status der Weiterleitungs-/Routing-Tabelle

\n \n\n" ], [ "10", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "10", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "10", "10.0.0.2:55413", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.031, ACK: 1.000.436" ], [ "11", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "11", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "10.0.0.2:55413", "10.0.0.1:80", "TCP", "Transport", "FIN, SEQ: 2.000.031" ], [ "12", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "12", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "12", "10.0.0.1:80", "10.0.0.2:55413", "TCP", "Transport", "SEQ: 1.000.436, ACK: 2.000.032" ], [ "13", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "13", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "13", "10.0.0.1:80", "10.0.0.2:55413", "TCP", "Transport", "FIN, SEQ: 1.000.436" ], [ "14", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "14", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "14", "10.0.0.2:55413", "10.0.0.1:80", "TCP", "Transport", "SEQ: 2.000.032, ACK: 1.000.437" ], [ "15", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "15", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "15", "10.0.0.2:64301", "10.0.0.1:80", "TCP", "Transport", "SYN, SEQ: 4.000.000" ], [ "16", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "16", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "16", "10.0.0.1:80", "10.0.0.2:64301", "TCP", "Transport", "SYN, SEQ: 3.000.000, ACK: 4.000.001" ], [ "17", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "17", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "17", "10.0.0.2:64301", "10.0.0.1:80", "TCP", "Transport", "SEQ: 4.000.001, ACK: 3.000.001" ], [ "18", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "18", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "18", "10.0.0.2:64301", "10.0.0.1:80", "TCP", "Transport", "SEQ: 4.000.001" ], [ "18", "10.0.0.2:64301", "10.0.0.1:80", "HTTP", "Anwendung", "GET /log HTTP/1.1\nHost: 10.0.0.1\n" ], [ "19", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "19", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "19", "10.0.0.1:80", "10.0.0.2:64301", "TCP", "Transport", "SEQ: 3.000.001, ACK: 4.000.034" ], [ "20", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "20", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "20", "10.0.0.1:80", "10.0.0.2:64301", "TCP", "Transport", "SEQ: 3.000.001" ], [ "20", "10.0.0.1:80", "10.0.0.2:64301", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/html\n\n\n\u0009\n\u0009\u0009Log-Einträge der Firewall</titel>\n\u0009</head>\n\u0009<body>\n\u0009\u0009<h2>Log-Einträge der Firewall</h2>\n\n<br /> \nICMP-Paket verworfen: 10.0.0.2 -> 20.0.0.2 (code: 0, type: 8)<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren\n\n\u0009</body>\n</html>" ], [ "21", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "21", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "21", "10.0.0.2:64301", "10.0.0.1:80", "TCP", "Transport", "SEQ: 4.000.034, ACK: 3.000.461" ], [ "22", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "22", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "22", "10.0.0.2:64301", "10.0.0.1:80", "TCP", "Transport", "FIN, SEQ: 4.000.034" ], [ "23", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "23", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "23", "10.0.0.1:80", "10.0.0.2:64301", "TCP", "Transport", "SEQ: 3.000.461, ACK: 4.000.035" ], [ "24", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "24", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "24", "10.0.0.1:80", "10.0.0.2:64301", "TCP", "Transport", "FIN, SEQ: 3.000.461" ], [ "25", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "25", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "25", "10.0.0.2:64301", "10.0.0.1:80", "TCP", "Transport", "SEQ: 4.000.035, ACK: 3.000.462" ] ], "00000000-0000-0000-0000-000000000302#1": [], "00000000-0000-0000-0000-000000000303": [] }, "layeredRows": { "00000000-0000-0000-0000-000000000301": [ [ "1", "02:00:00:00:03:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "10.0.0.2", "10.0.0.1", "ARP", "Vermittlung", "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" ], [ "2", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x806" ], [ "2", "10.0.0.1", "10.0.0.2", "ARP", "Vermittlung", "MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]" ], [ "3", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "3", "10.0.0.2", "20.0.0.2", "ICMP", "Vermittlung", "ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1" ], [ "4", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "4", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "4", "55413", "80", "TCP", "Transport", "SYN, SEQ: 2.000.000" ], [ "5", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "5", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "5", "80", "55413", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 2.000.001" ], [ "6", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "6", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "6", "55413", "80", "TCP", "Transport", "SEQ: 2.000.001, ACK: 1.000.001" ], [ "7", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "7", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "55413", "80", "TCP", "Transport", "SEQ: 2.000.001" ], [ "7", null, null, "HTTP", "Anwendung", "GET / HTTP/1.1\nHost: 10.0.0.1\n" ], [ "8", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "8", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "80", "55413", "TCP", "Transport", "SEQ: 1.000.001, ACK: 2.000.031" ], [ "9", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "9", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "9", "80", "55413", "TCP", "Transport", "SEQ: 1.000.001" ], [ "9", null, null, "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Administration des Vermittlungsrechners\n \n \n\n

Firewall-Administration

Konfiguration

Log-Einträge anzeigen

\n\n

Weiterleitung/Routing

Anzeige des aktuellen Status der Weiterleitungs-/Routing-Tabelle

\n \n\n" ], [ "10", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "10", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "10", "55413", "80", "TCP", "Transport", "SEQ: 2.000.031, ACK: 1.000.436" ], [ "11", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "11", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "55413", "80", "TCP", "Transport", "FIN, SEQ: 2.000.031" ], [ "12", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "12", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "12", "80", "55413", "TCP", "Transport", "SEQ: 1.000.436, ACK: 2.000.032" ], [ "13", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "13", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "13", "80", "55413", "TCP", "Transport", "FIN, SEQ: 1.000.436" ], [ "14", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "14", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "14", "55413", "80", "TCP", "Transport", "SEQ: 2.000.032, ACK: 1.000.437" ], [ "15", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "15", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "15", "64301", "80", "TCP", "Transport", "SYN, SEQ: 4.000.000" ], [ "16", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "16", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "16", "80", "64301", "TCP", "Transport", "SYN, SEQ: 3.000.000, ACK: 4.000.001" ], [ "17", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "17", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "17", "64301", "80", "TCP", "Transport", "SEQ: 4.000.001, ACK: 3.000.001" ], [ "18", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "18", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "18", "64301", "80", "TCP", "Transport", "SEQ: 4.000.001" ], [ "18", null, null, "HTTP", "Anwendung", "GET /log HTTP/1.1\nHost: 10.0.0.1\n" ], [ "19", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "19", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "19", "80", "64301", "TCP", "Transport", "SEQ: 3.000.001, ACK: 4.000.034" ], [ "20", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "20", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "20", "80", "64301", "TCP", "Transport", "SEQ: 3.000.001" ], [ "20", null, null, "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/html\n\n\n\u0009\n\u0009\u0009Log-Einträge der Firewall</titel>\n\u0009</head>\n\u0009<body>\n\u0009\u0009<h2>Log-Einträge der Firewall</h2>\n\n<br /> \nICMP-Paket verworfen: 10.0.0.2 -> 20.0.0.2 (code: 0, type: 8)<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren\n\n\u0009</body>\n</html>" ], [ "21", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "21", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "21", "64301", "80", "TCP", "Transport", "SEQ: 4.000.034, ACK: 3.000.461" ], [ "22", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "22", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "22", "64301", "80", "TCP", "Transport", "FIN, SEQ: 4.000.034" ], [ "23", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "23", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "23", "80", "64301", "TCP", "Transport", "SEQ: 3.000.461, ACK: 4.000.035" ], [ "24", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "24", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "24", "80", "64301", "TCP", "Transport", "FIN, SEQ: 3.000.461" ], [ "25", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "25", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "25", "64301", "80", "TCP", "Transport", "SEQ: 4.000.035, ACK: 3.000.462" ] ], "00000000-0000-0000-0000-000000000302": [ [ "1", "02:00:00:00:03:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "10.0.0.2", "10.0.0.1", "ARP", "Vermittlung", "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" ], [ "2", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x806" ], [ "2", "10.0.0.1", "10.0.0.2", "ARP", "Vermittlung", "MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]" ], [ "3", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "3", "10.0.0.2", "20.0.0.2", "ICMP", "Vermittlung", "ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1" ], [ "4", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "4", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "4", "55413", "80", "TCP", "Transport", "SYN, SEQ: 2.000.000" ], [ "5", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "5", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "5", "80", "55413", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 2.000.001" ], [ "6", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "6", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "6", "55413", "80", "TCP", "Transport", "SEQ: 2.000.001, ACK: 1.000.001" ], [ "7", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "7", "10.0.0.2", "10.0.0.1", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "55413", "80", "TCP", "Transport", "SEQ: 2.000.001" ], [ "7", null, null, "HTTP", "Anwendung", "GET / HTTP/1.1\nHost: 10.0.0.1\n" ], [ "8", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "8", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "80", "55413", "TCP", "Transport", "SEQ: 1.000.001, ACK: 2.000.031" ], [ "9", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "9", "10.0.0.1", "10.0.0.2", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "9", "80", "55413", "TCP", "Transport", "SEQ: 1.000.001" ], [ "9", null, null, "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Administration des Vermittlungsrechners\n \n \n\n

Firewall-Administration

Konfiguration

Log-Einträge anzeigen

\n\n

Weiterleitung/Routing

Anzeige des aktuellen Status der Weiterleitungs-/Routing-Tabelle

Firewall-Administration

Konfiguration

Log-Einträge anzeigen

\n\n

Weiterleitung/Routing

Anzeige des aktuellen Status der Weiterleitungs-/Routing-Tabelle

\n \n" ], [ 4206, "server", "<\n \n Administration des Vermittlungsrechners\n \n \n\n

Firewall-Administration

Konfiguration

Log-Einträge anzeigen

\n\n

Weiterleitung/Routing

Anzeige des aktuellen Status der Weiterleitungs-/Routing-Tabelle

\n \n\n" ], [ 4261, "server", "Socket zu 10.0.0.2:55413 geschlossen" ], [ 7000, "browser", "call holeWebseite 10.0.0.1/log" ], [ 7425, "server", "Verbindung zu 10.0.0.2:64301 hergestellt" ], [ 7425, "server", ">>GET /log HTTP/1.1\nHost: 10.0.0.1\n" ], [ 7581, "browser", "page 200 text/html\n\n\u0009\n\u0009\u0009Log-Einträge der Firewall</titel>\n\u0009</head>\n\u0009<body>\n\u0009\u0009<h2>Log-Einträge der Firewall</h2>\n\n<br /> \nICMP-Paket verworfen: 10.0.0.2 -> 20.0.0.2 (code: 0, type: 8)<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren\n\n\u0009</body>\n</html>" ], [ 7692, "server", "<<HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n\u0009<head>\n\u0009\u0009<title>Log-Einträge der Firewall</titel>\n\u0009</head>\n\u0009<body>\n\u0009\u0009<h2>Log-Einträge der Firewall</h2>\n\n<br /> \nICMP-Paket verworfen: 10.0.0.2 -> 20.0.0.2 (code: 0, type: 8)<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren\n\n\u0009</body>\n</html>" ], [ 7747, "server", "Socket zu 10.0.0.2:64301 geschlossen" ] ] }