{
  "frames": {
    "00000000-0000-0000-0000-000000000101": [
      {
        "time": 731,
        "source": "02:00:00:00:01:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.10"
      },
      {
        "time": 967,
        "source": "02:00:00:00:01:12",
        "destination": "02:00:00:00:01:11",
        "arp": 2,
        "senderIp": "192.168.0.10",
        "targetIp": "192.168.0.20"
      },
      {
        "time": 969,
        "source": "02:00:00:00:01:11",
        "destination": "02:00:00:00:01:12",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.10",
        "protocol": 17,
        "sourcePort": 64893,
        "destinationPort": 53,
        "payload": "ID=54574 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
      },
      {
        "time": 1199,
        "source": "02:00:00:00:01:12",
        "destination": "02:00:00:00:01:11",
        "sourceIp": "192.168.0.10",
        "destinationIp": "192.168.0.20",
        "protocol": 17,
        "sourcePort": 53,
        "destinationPort": 64893,
        "payload": "ID=54574 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
      }
    ],
    "00000000-0000-0000-0000-000000000102": [
      {
        "time": 853,
        "source": "02:00:00:00:01:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.10"
      },
      {
        "time": 855,
        "source": "02:00:00:00:01:12",
        "destination": "02:00:00:00:01:11",
        "arp": 2,
        "senderIp": "192.168.0.10",
        "targetIp": "192.168.0.20"
      },
      {
        "time": 1083,
        "source": "02:00:00:00:01:11",
        "destination": "02:00:00:00:01:12",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.10",
        "protocol": 17,
        "sourcePort": 64893,
        "destinationPort": 53,
        "payload": "ID=54574 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
      },
      {
        "time": 1088,
        "source": "02:00:00:00:01:12",
        "destination": "02:00:00:00:01:11",
        "sourceIp": "192.168.0.10",
        "destinationIp": "192.168.0.20",
        "protocol": 17,
        "sourcePort": 53,
        "destinationPort": 64893,
        "payload": "ID=54574 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
      }
    ],
    "00000000-0000-0000-0000-000000000103": [
      {
        "time": 853,
        "source": "02:00:00:00:01:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.10"
      }
    ],
    "00000000-0000-0000-0000-000000000104": [
      {
        "time": 853,
        "source": "02:00:00:00:01:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.10"
      }
    ]
  },
  "rows": {
    "00000000-0000-0000-0000-000000000101": [
      [
        "1",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "2",
        "02:00:00:00:01:12",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.10",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
      ],
      [
        "3",
        "02:00:00:00:01:11",
        "02:00:00:00:01:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "3",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "3",
        "192.168.0.20:64893",
        "192.168.0.10:53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "3",
        "192.168.0.20:64893",
        "192.168.0.10:53",
        "DNS",
        "Anwendung",
        "ID=54574 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
      ],
      [
        "4",
        "02:00:00:00:01:12",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "4",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "4",
        "192.168.0.10:53",
        "192.168.0.20:64893",
        "UDP",
        "Transport",
        ""
      ],
      [
        "4",
        "192.168.0.10:53",
        "192.168.0.20:64893",
        "DNS",
        "Anwendung",
        "ID=54574 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
      ]
    ],
    "00000000-0000-0000-0000-000000000102": [
      [
        "1",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "2",
        "02:00:00:00:01:12",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.10",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
      ],
      [
        "3",
        "02:00:00:00:01:11",
        "02:00:00:00:01:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "3",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "3",
        "192.168.0.20:64893",
        "192.168.0.10:53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "3",
        "192.168.0.20:64893",
        "192.168.0.10:53",
        "DNS",
        "Anwendung",
        "ID=54574 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
      ],
      [
        "4",
        "02:00:00:00:01:12",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "4",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "4",
        "192.168.0.10:53",
        "192.168.0.20:64893",
        "UDP",
        "Transport",
        ""
      ],
      [
        "4",
        "192.168.0.10:53",
        "192.168.0.20:64893",
        "DNS",
        "Anwendung",
        "ID=54574 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
      ]
    ],
    "00000000-0000-0000-0000-000000000103": [
      [
        "1",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ]
    ],
    "00000000-0000-0000-0000-000000000104": [
      [
        "1",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ]
    ]
  },
  "layeredRows": {
    "00000000-0000-0000-0000-000000000101": [
      [
        "1",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "2",
        "02:00:00:00:01:12",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.10",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
      ],
      [
        "3",
        "02:00:00:00:01:11",
        "02:00:00:00:01:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "3",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "3",
        "64893",
        "53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "3",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=54574 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
      ],
      [
        "4",
        "02:00:00:00:01:12",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "4",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "4",
        "53",
        "64893",
        "UDP",
        "Transport",
        ""
      ],
      [
        "4",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=54574 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
      ]
    ],
    "00000000-0000-0000-0000-000000000102": [
      [
        "1",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "2",
        "02:00:00:00:01:12",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.10",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
      ],
      [
        "3",
        "02:00:00:00:01:11",
        "02:00:00:00:01:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "3",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "3",
        "64893",
        "53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "3",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=54574 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A IN\n"
      ],
      [
        "4",
        "02:00:00:00:01:12",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "4",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "4",
        "53",
        "64893",
        "UDP",
        "Transport",
        ""
      ],
      [
        "4",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=54574 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nweb.filius.de. A 3600 192.168.0.30\n"
      ]
    ],
    "00000000-0000-0000-0000-000000000103": [
      [
        "1",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ]
    ],
    "00000000-0000-0000-0000-000000000104": [
      [
        "1",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ]
    ]
  },
  "events": [
    [
      720,
      "holeIPAdresse web.filius.de called"
    ],
    [
      1200,
      "holeIPAdresse web.filius.de returned 192.168.0.30"
    ]
  ]
}