{ "frames": { "00000000-0000-0000-0000-000000000301": [ { "time": 720, "source": "02:00:00:00:03:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "10.0.0.2", "targetIp": "10.0.0.1" }, { "time": 957, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "arp": 2, "senderIp": "10.0.0.1", "targetIp": "10.0.0.2" }, { "time": 959, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "20.0.0.9", "protocol": 17, "sourcePort": 55126, "destinationPort": 9, "payload": "verloren" }, { "time": 1017, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "20.0.0.2", "protocol": 17, "sourcePort": 58894, "destinationPort": 9, "payload": "dahinter" }, { "time": 6688, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "icmp": 3, "icmpCode": 1, "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "sequence": 0 } ], "00000000-0000-0000-0000-000000000302": [ { "time": 844, "source": "02:00:00:00:03:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "10.0.0.2", "targetIp": "10.0.0.1" }, { "time": 845, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "arp": 2, "senderIp": "10.0.0.1", "targetIp": "10.0.0.2" }, { "time": 1072, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "20.0.0.9", "protocol": 17, "sourcePort": 55126, "destinationPort": 9, "payload": "verloren" }, { "time": 1128, "source": "02:00:00:00:03:11", "destination": "02:00:00:00:03:21", "sourceIp": "10.0.0.2", "destinationIp": "20.0.0.2", "protocol": 17, "sourcePort": 58894, "destinationPort": 9, "payload": "dahinter" }, { "time": 6576, "source": "02:00:00:00:03:21", "destination": "02:00:00:00:03:11", "icmp": 3, "icmpCode": 1, "sourceIp": "10.0.0.1", "destinationIp": "10.0.0.2", "sequence": 0 } ], "00000000-0000-0000-0000-000000000302#1": [ { "time": 1073, "source": "02:00:00:00:03:22", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "20.0.0.1", "targetIp": "20.0.0.9" }, { "time": 3823, "source": "02:00:00:00:03:22", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "20.0.0.1", "targetIp": "20.0.0.9" }, { "time": 6576, "source": "02:00:00:00:03:22", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "20.0.0.1", "targetIp": "20.0.0.2" }, { "time": 6688, "source": "02:00:00:00:03:13", "destination": "02:00:00:00:03:22", "arp": 2, "senderIp": "20.0.0.2", "targetIp": "20.0.0.1" }, { "time": 6688, "source": "02:00:00:00:03:22", "destination": "02:00:00:00:03:13", "sourceIp": "10.0.0.2", "destinationIp": "20.0.0.2", "protocol": 17, "sourcePort": 58894, "destinationPort": 9, "payload": "dahinter" } ], "00000000-0000-0000-0000-000000000303": [ { "time": 1128, "source": "02:00:00:00:03:22", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "20.0.0.1", "targetIp": "20.0.0.9" }, { "time": 3879, "source": "02:00:00:00:03:22", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "20.0.0.1", "targetIp": "20.0.0.9" }, { "time": 6632, "source": "02:00:00:00:03:22", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "20.0.0.1", "targetIp": "20.0.0.2" }, { "time": 6632, "source": "02:00:00:00:03:13", "destination": "02:00:00:00:03:22", "arp": 2, "senderIp": "20.0.0.2", "targetIp": "20.0.0.1" }, { "time": 6744, "source": "02:00:00:00:03:22", "destination": "02:00:00:00:03:13", "sourceIp": "10.0.0.2", "destinationIp": "20.0.0.2", "protocol": 17, "sourcePort": 58894, "destinationPort": 9, "payload": "dahinter" } ] }, "rows": { "00000000-0000-0000-0000-000000000301": [ [ "1", "02:00:00:00:03:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "10.0.0.2", "10.0.0.1", "ARP", "Vermittlung", "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" ], [ "2", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x806" ], [ "2", "10.0.0.1", "10.0.0.2", "ARP", "Vermittlung", "MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]" ], [ "3", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "3", "10.0.0.2", "20.0.0.9", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "3", "10.0.0.2:55126", "20.0.0.9:9", "UDP", "Transport", "" ], [ "3", "10.0.0.2:55126", "20.0.0.9:9", "", "Anwendung", "verloren" ], [ "4", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "4", "10.0.0.2", "20.0.0.2", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "4", "10.0.0.2:58894", "20.0.0.2:9", "UDP", "Transport", "" ], [ "4", "10.0.0.2:58894", "20.0.0.2:9", "", "Anwendung", "dahinter" ], [ "5", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "5", "10.0.0.1", "10.0.0.2", "ICMP", "Vermittlung", "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1, ttl=63, protocol=17, dest=20.0.0.9, src=10.0.0.2]" ] ], "00000000-0000-0000-0000-000000000302": [ [ "1", "02:00:00:00:03:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "10.0.0.2", "10.0.0.1", "ARP", "Vermittlung", "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" ], [ "2", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x806" ], [ "2", "10.0.0.1", "10.0.0.2", "ARP", "Vermittlung", "MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]" ], [ "3", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "3", "10.0.0.2", "20.0.0.9", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "3", "10.0.0.2:55126", "20.0.0.9:9", "UDP", "Transport", "" ], [ "3", "10.0.0.2:55126", "20.0.0.9:9", "", "Anwendung", "verloren" ], [ "4", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "4", "10.0.0.2", "20.0.0.2", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "4", "10.0.0.2:58894", "20.0.0.2:9", "UDP", "Transport", "" ], [ "4", "10.0.0.2:58894", "20.0.0.2:9", "", "Anwendung", "dahinter" ], [ "5", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "5", "10.0.0.1", "10.0.0.2", "ICMP", "Vermittlung", "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1, ttl=63, protocol=17, dest=20.0.0.9, src=10.0.0.2]" ] ], "00000000-0000-0000-0000-000000000302#1": [ [ "1", "02:00:00:00:03:22", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "20.0.0.1", "20.0.0.9", "ARP", "Vermittlung", "Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]" ], [ "2", "02:00:00:00:03:22", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "2", "20.0.0.1", "20.0.0.9", "ARP", "Vermittlung", "Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]" ], [ "3", "02:00:00:00:03:22", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "3", "20.0.0.1", "20.0.0.2", "ARP", "Vermittlung", "Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]" ], [ "4", "02:00:00:00:03:13", "02:00:00:00:03:22", "", "Netzzugang", "0x806" ], [ "4", "20.0.0.2", "20.0.0.1", "ARP", "Vermittlung", "MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]" ], [ "5", "02:00:00:00:03:22", "02:00:00:00:03:13", "", "Netzzugang", "0x800" ], [ "5", "10.0.0.2", "20.0.0.2", "IP", "Vermittlung", "Protokoll: 17, TTL: 63" ], [ "5", "10.0.0.2:58894", "20.0.0.2:9", "UDP", "Transport", "" ], [ "5", "10.0.0.2:58894", "20.0.0.2:9", "", "Anwendung", "dahinter" ] ], "00000000-0000-0000-0000-000000000303": [ [ "1", "02:00:00:00:03:22", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "20.0.0.1", "20.0.0.9", "ARP", "Vermittlung", "Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]" ], [ "2", "02:00:00:00:03:22", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "2", "20.0.0.1", "20.0.0.9", "ARP", "Vermittlung", "Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]" ], [ "3", "02:00:00:00:03:22", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "3", "20.0.0.1", "20.0.0.2", "ARP", "Vermittlung", "Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]" ], [ "4", "02:00:00:00:03:13", "02:00:00:00:03:22", "", "Netzzugang", "0x806" ], [ "4", "20.0.0.2", "20.0.0.1", "ARP", "Vermittlung", "MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]" ], [ "5", "02:00:00:00:03:22", "02:00:00:00:03:13", "", "Netzzugang", "0x800" ], [ "5", "10.0.0.2", "20.0.0.2", "IP", "Vermittlung", "Protokoll: 17, TTL: 63" ], [ "5", "10.0.0.2:58894", "20.0.0.2:9", "UDP", "Transport", "" ], [ "5", "10.0.0.2:58894", "20.0.0.2:9", "", "Anwendung", "dahinter" ] ] }, "layeredRows": { "00000000-0000-0000-0000-000000000301": [ [ "1", "02:00:00:00:03:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "10.0.0.2", "10.0.0.1", "ARP", "Vermittlung", "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" ], [ "2", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x806" ], [ "2", "10.0.0.1", "10.0.0.2", "ARP", "Vermittlung", "MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]" ], [ "3", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "3", "10.0.0.2", "20.0.0.9", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "3", "55126", "9", "UDP", "Transport", "" ], [ "3", null, null, "", "Anwendung", "verloren" ], [ "4", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "4", "10.0.0.2", "20.0.0.2", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "4", "58894", "9", "UDP", "Transport", "" ], [ "4", null, null, "", "Anwendung", "dahinter" ], [ "5", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "5", "10.0.0.1", "10.0.0.2", "ICMP", "Vermittlung", "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1, ttl=63, protocol=17, dest=20.0.0.9, src=10.0.0.2]" ] ], "00000000-0000-0000-0000-000000000302": [ [ "1", "02:00:00:00:03:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "10.0.0.2", "10.0.0.1", "ARP", "Vermittlung", "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]" ], [ "2", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x806" ], [ "2", "10.0.0.1", "10.0.0.2", "ARP", "Vermittlung", "MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]" ], [ "3", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "3", "10.0.0.2", "20.0.0.9", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "3", "55126", "9", "UDP", "Transport", "" ], [ "3", null, null, "", "Anwendung", "verloren" ], [ "4", "02:00:00:00:03:11", "02:00:00:00:03:21", "", "Netzzugang", "0x800" ], [ "4", "10.0.0.2", "20.0.0.2", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "4", "58894", "9", "UDP", "Transport", "" ], [ "4", null, null, "", "Anwendung", "dahinter" ], [ "5", "02:00:00:00:03:21", "02:00:00:00:03:11", "", "Netzzugang", "0x800" ], [ "5", "10.0.0.1", "10.0.0.2", "ICMP", "Vermittlung", "ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=1, ttl=63, protocol=17, dest=20.0.0.9, src=10.0.0.2]" ] ], "00000000-0000-0000-0000-000000000302#1": [ [ "1", "02:00:00:00:03:22", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "20.0.0.1", "20.0.0.9", "ARP", "Vermittlung", "Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]" ], [ "2", "02:00:00:00:03:22", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "2", "20.0.0.1", "20.0.0.9", "ARP", "Vermittlung", "Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]" ], [ "3", "02:00:00:00:03:22", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "3", "20.0.0.1", "20.0.0.2", "ARP", "Vermittlung", "Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]" ], [ "4", "02:00:00:00:03:13", "02:00:00:00:03:22", "", "Netzzugang", "0x806" ], [ "4", "20.0.0.2", "20.0.0.1", "ARP", "Vermittlung", "MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]" ], [ "5", "02:00:00:00:03:22", "02:00:00:00:03:13", "", "Netzzugang", "0x800" ], [ "5", "10.0.0.2", "20.0.0.2", "IP", "Vermittlung", "Protokoll: 17, TTL: 63" ], [ "5", "58894", "9", "UDP", "Transport", "" ], [ "5", null, null, "", "Anwendung", "dahinter" ] ], "00000000-0000-0000-0000-000000000303": [ [ "1", "02:00:00:00:03:22", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "20.0.0.1", "20.0.0.9", "ARP", "Vermittlung", "Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]" ], [ "2", "02:00:00:00:03:22", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "2", "20.0.0.1", "20.0.0.9", "ARP", "Vermittlung", "Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]" ], [ "3", "02:00:00:00:03:22", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "3", "20.0.0.1", "20.0.0.2", "ARP", "Vermittlung", "Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]" ], [ "4", "02:00:00:00:03:13", "02:00:00:00:03:22", "", "Netzzugang", "0x806" ], [ "4", "20.0.0.2", "20.0.0.1", "ARP", "Vermittlung", "MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]" ], [ "5", "02:00:00:00:03:22", "02:00:00:00:03:13", "", "Netzzugang", "0x800" ], [ "5", "10.0.0.2", "20.0.0.2", "IP", "Vermittlung", "Protokoll: 17, TTL: 63" ], [ "5", "58894", "9", "UDP", "Transport", "" ], [ "5", null, null, "", "Anwendung", "dahinter" ] ] }, "events": [ [ 711, "senden verloren called" ], [ 715, "senden verloren returned " ], [ 716, "senden dahinter called" ], [ 959, "senden dahinter returned " ] ] }