{ "frames": { "00000000-0000-0000-0000-000000000201": [ { "time": 512, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.20", "targetIp": "192.168.0.10" }, { "time": 748, "source": "02:00:00:00:02:12", "destination": "02:00:00:00:02:11", "arp": 2, "senderIp": "192.168.0.10", "targetIp": "192.168.0.20" }, { "time": 750, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:12", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.10", "protocol": 17, "sourcePort": 56872, "destinationPort": 53, "payload": "ID=9680 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nseite.filius.de. A IN\n" }, { "time": 980, "source": "02:00:00:00:02:12", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.10", "destinationIp": "192.168.0.20", "protocol": 17, "sourcePort": 53, "destinationPort": 56872, "payload": "ID=9680 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nseite.filius.de. A 3600 192.168.0.30\n" }, { "time": 990, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.20", "targetIp": "192.168.0.30" }, { "time": 1212, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "arp": 2, "senderIp": "192.168.0.30", "targetIp": "192.168.0.20" }, { "time": 1213, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 51396, "destinationPort": 80, "payload": null, "tcpFlags": "S", "sequence": 2000000, "acknowledgement": 0 }, { "time": 1437, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 51396, "payload": null, "tcpFlags": "SA", "sequence": 1000000, "acknowledgement": 2000001 }, { "time": 1437, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 51396, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000001, "acknowledgement": 1000001 }, { "time": 1493, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 51396, "destinationPort": 80, "payload": "GET / HTTP/1.1\nHost: seite.filius.de\n", "tcpFlags": "P", "sequence": 2000001, "acknowledgement": 0 }, { "time": 1715, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 51396, "payload": null, "tcpFlags": "A", "sequence": 1000001, "acknowledgement": 2000038 }, { "time": 1771, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 51396, "payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\n
Eins", "tcpFlags": "P", "sequence": 1000001, "acknowledgement": 0 }, { "time": 1772, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 51396, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000038, "acknowledgement": 1000072 }, { "time": 1827, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 51396, "destinationPort": 80, "payload": null, "tcpFlags": "F", "sequence": 2000038, "acknowledgement": 0 }, { "time": 2050, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 51396, "payload": null, "tcpFlags": "A", "sequence": 1000072, "acknowledgement": 2000039 }, { "time": 2106, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 51396, "payload": null, "tcpFlags": "F", "sequence": 1000072, "acknowledgement": 0 }, { "time": 2106, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 51396, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000039, "acknowledgement": 1000073 }, { "time": 5000, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:12", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.10", "protocol": 17, "sourcePort": 51558, "destinationPort": 53, "payload": "ID=37225 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.filius.de. A IN\n" }, { "time": 5224, "source": "02:00:00:00:02:12", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.10", "destinationIp": "192.168.0.20", "protocol": 17, "sourcePort": 53, "destinationPort": 51558, "payload": "ID=37225 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nandere.filius.de. A 3600 192.168.0.30\n" }, { "time": 5225, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 64224, "destinationPort": 80, "payload": null, "tcpFlags": "S", "sequence": 4000000, "acknowledgement": 0 }, { "time": 5448, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 64224, "payload": null, "tcpFlags": "SA", "sequence": 3000000, "acknowledgement": 4000001 }, { "time": 5448, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 64224, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 4000001, "acknowledgement": 3000001 }, { "time": 5525, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 64224, "destinationPort": 80, "payload": "GET / HTTP/1.1\nHost: andere.filius.de\n", "tcpFlags": "P", "sequence": 4000001, "acknowledgement": 0 }, { "time": 5748, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 64224, "payload": null, "tcpFlags": "A", "sequence": 3000001, "acknowledgement": 4000039 }, { "time": 5803, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 64224, "payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\nZwei", "tcpFlags": "P", "sequence": 3000001, "acknowledgement": 0 }, { "time": 5803, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 64224, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 4000039, "acknowledgement": 3000072 }, { "time": 5859, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 64224, "destinationPort": 80, "payload": null, "tcpFlags": "F", "sequence": 4000039, "acknowledgement": 0 }, { "time": 6081, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 64224, "payload": null, "tcpFlags": "A", "sequence": 3000072, "acknowledgement": 4000040 }, { "time": 6137, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 64224, "payload": null, "tcpFlags": "F", "sequence": 3000072, "acknowledgement": 0 }, { "time": 6137, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 64224, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 4000040, "acknowledgement": 3000073 }, { "time": 9501, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:12", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.10", "protocol": 17, "sourcePort": 56748, "destinationPort": 53, "payload": "ID=4611 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" }, { "time": 9724, "source": "02:00:00:00:02:12", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.10", "destinationIp": "192.168.0.20", "protocol": 17, "sourcePort": 53, "destinationPort": 56748, "payload": "ID=4611 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" }, { "time": 9725, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 63781, "destinationPort": 80, "payload": null, "tcpFlags": "S", "sequence": 6000000, "acknowledgement": 0 }, { "time": 9947, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 63781, "payload": null, "tcpFlags": "SA", "sequence": 5000000, "acknowledgement": 6000001 }, { "time": 9947, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 63781, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 6000001, "acknowledgement": 5000001 }, { "time": 10025, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 63781, "destinationPort": 80, "payload": "GET /vhost1 HTTP/1.1\nHost: www.filius.de\n", "tcpFlags": "P", "sequence": 6000001, "acknowledgement": 0 }, { "time": 10247, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 63781, "payload": null, "tcpFlags": "A", "sequence": 5000001, "acknowledgement": 6000042 }, { "time": 10302, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 63781, "payload": "HTTP/1.1 404 Not Found\n", "tcpFlags": "P", "sequence": 5000001, "acknowledgement": 0 }, { "time": 10303, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 63781, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 6000042, "acknowledgement": 5000024 }, { "time": 10358, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 63781, "destinationPort": 80, "payload": null, "tcpFlags": "F", "sequence": 6000042, "acknowledgement": 0 }, { "time": 10580, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 63781, "payload": null, "tcpFlags": "A", "sequence": 5000024, "acknowledgement": 6000043 }, { "time": 10636, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 63781, "payload": null, "tcpFlags": "F", "sequence": 5000024, "acknowledgement": 0 }, { "time": 10636, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 63781, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 6000043, "acknowledgement": 5000025 } ], "00000000-0000-0000-0000-000000000202": [ { "time": 635, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.20", "targetIp": "192.168.0.10" }, { "time": 636, "source": "02:00:00:00:02:12", "destination": "02:00:00:00:02:11", "arp": 2, "senderIp": "192.168.0.10", "targetIp": "192.168.0.20" }, { "time": 863, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:12", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.10", "protocol": 17, "sourcePort": 56872, "destinationPort": 53, "payload": "ID=9680 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nseite.filius.de. A IN\n" }, { "time": 868, "source": "02:00:00:00:02:12", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.10", "destinationIp": "192.168.0.20", "protocol": 17, "sourcePort": 53, "destinationPort": 56872, "payload": "ID=9680 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nseite.filius.de. A 3600 192.168.0.30\n" }, { "time": 1101, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.20", "targetIp": "192.168.0.30" }, { "time": 5112, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:12", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.10", "protocol": 17, "sourcePort": 51558, "destinationPort": 53, "payload": "ID=37225 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.filius.de. A IN\n" }, { "time": 5113, "source": "02:00:00:00:02:12", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.10", "destinationIp": "192.168.0.20", "protocol": 17, "sourcePort": 53, "destinationPort": 51558, "payload": "ID=37225 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nandere.filius.de. A 3600 192.168.0.30\n" }, { "time": 9612, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:12", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.10", "protocol": 17, "sourcePort": 56748, "destinationPort": 53, "payload": "ID=4611 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" }, { "time": 9613, "source": "02:00:00:00:02:12", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.10", "destinationIp": "192.168.0.20", "protocol": 17, "sourcePort": 53, "destinationPort": 56748, "payload": "ID=4611 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" } ], "00000000-0000-0000-0000-000000000203": [ { "time": 635, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.20", "targetIp": "192.168.0.10" }, { "time": 1101, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.20", "targetIp": "192.168.0.30" }, { "time": 1101, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "arp": 2, "senderIp": "192.168.0.30", "targetIp": "192.168.0.20" }, { "time": 1325, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 51396, "destinationPort": 80, "payload": null, "tcpFlags": "S", "sequence": 2000000, "acknowledgement": 0 }, { "time": 1325, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 51396, "payload": null, "tcpFlags": "SA", "sequence": 1000000, "acknowledgement": 2000001 }, { "time": 1548, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 51396, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000001, "acknowledgement": 1000001 }, { "time": 1604, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 51396, "destinationPort": 80, "payload": "GET / HTTP/1.1\nHost: seite.filius.de\n", "tcpFlags": "P", "sequence": 2000001, "acknowledgement": 0 }, { "time": 1604, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 51396, "payload": null, "tcpFlags": "A", "sequence": 1000001, "acknowledgement": 2000038 }, { "time": 1660, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 51396, "payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\nEins", "tcpFlags": "P", "sequence": 1000001, "acknowledgement": 0 }, { "time": 1883, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 51396, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000038, "acknowledgement": 1000072 }, { "time": 1938, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 51396, "destinationPort": 80, "payload": null, "tcpFlags": "F", "sequence": 2000038, "acknowledgement": 0 }, { "time": 1939, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 51396, "payload": null, "tcpFlags": "A", "sequence": 1000072, "acknowledgement": 2000039 }, { "time": 1994, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 51396, "payload": null, "tcpFlags": "F", "sequence": 1000072, "acknowledgement": 0 }, { "time": 2217, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 51396, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 2000039, "acknowledgement": 1000073 }, { "time": 5336, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 64224, "destinationPort": 80, "payload": null, "tcpFlags": "S", "sequence": 4000000, "acknowledgement": 0 }, { "time": 5336, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 64224, "payload": null, "tcpFlags": "SA", "sequence": 3000000, "acknowledgement": 4000001 }, { "time": 5559, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 64224, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 4000001, "acknowledgement": 3000001 }, { "time": 5636, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 64224, "destinationPort": 80, "payload": "GET / HTTP/1.1\nHost: andere.filius.de\n", "tcpFlags": "P", "sequence": 4000001, "acknowledgement": 0 }, { "time": 5636, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 64224, "payload": null, "tcpFlags": "A", "sequence": 3000001, "acknowledgement": 4000039 }, { "time": 5692, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 64224, "payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\nZwei", "tcpFlags": "P", "sequence": 3000001, "acknowledgement": 0 }, { "time": 5915, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 64224, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 4000039, "acknowledgement": 3000072 }, { "time": 5970, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 64224, "destinationPort": 80, "payload": null, "tcpFlags": "F", "sequence": 4000039, "acknowledgement": 0 }, { "time": 5970, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 64224, "payload": null, "tcpFlags": "A", "sequence": 3000072, "acknowledgement": 4000040 }, { "time": 6026, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 64224, "payload": null, "tcpFlags": "F", "sequence": 3000072, "acknowledgement": 0 }, { "time": 6248, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 64224, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 4000040, "acknowledgement": 3000073 }, { "time": 9836, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 63781, "destinationPort": 80, "payload": null, "tcpFlags": "S", "sequence": 6000000, "acknowledgement": 0 }, { "time": 9836, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 63781, "payload": null, "tcpFlags": "SA", "sequence": 5000000, "acknowledgement": 6000001 }, { "time": 10058, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 63781, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 6000001, "acknowledgement": 5000001 }, { "time": 10136, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 63781, "destinationPort": 80, "payload": "GET /vhost1 HTTP/1.1\nHost: www.filius.de\n", "tcpFlags": "P", "sequence": 6000001, "acknowledgement": 0 }, { "time": 10136, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 63781, "payload": null, "tcpFlags": "A", "sequence": 5000001, "acknowledgement": 6000042 }, { "time": 10192, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 63781, "payload": "HTTP/1.1 404 Not Found\n", "tcpFlags": "P", "sequence": 5000001, "acknowledgement": 0 }, { "time": 10414, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 63781, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 6000042, "acknowledgement": 5000024 }, { "time": 10469, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 63781, "destinationPort": 80, "payload": null, "tcpFlags": "F", "sequence": 6000042, "acknowledgement": 0 }, { "time": 10469, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 63781, "payload": null, "tcpFlags": "A", "sequence": 5000024, "acknowledgement": 6000043 }, { "time": 10525, "source": "02:00:00:00:02:13", "destination": "02:00:00:00:02:11", "sourceIp": "192.168.0.30", "destinationIp": "192.168.0.20", "protocol": 6, "sourcePort": 80, "destinationPort": 63781, "payload": null, "tcpFlags": "F", "sequence": 5000024, "acknowledgement": 0 }, { "time": 10747, "source": "02:00:00:00:02:11", "destination": "02:00:00:00:02:13", "sourceIp": "192.168.0.20", "destinationIp": "192.168.0.30", "protocol": 6, "sourcePort": 63781, "destinationPort": 80, "payload": null, "tcpFlags": "A", "sequence": 6000043, "acknowledgement": 5000025 } ], "00000000-0000-0000-0000-000000000204": [ { "time": 635, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.20", "targetIp": "192.168.0.10" }, { "time": 1101, "source": "02:00:00:00:02:11", "destination": "FF:FF:FF:FF:FF:FF", "arp": 1, "senderIp": "192.168.0.20", "targetIp": "192.168.0.30" } ] }, "rows": { "00000000-0000-0000-0000-000000000201": [ [ "1", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x806" ], [ "2", "192.168.0.10", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" ], [ "3", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "3", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "3", "192.168.0.20:56872", "192.168.0.10:53", "UDP", "Transport", "" ], [ "3", "192.168.0.20:56872", "192.168.0.10:53", "DNS", "Anwendung", "ID=9680 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nseite.filius.de. A IN\n" ], [ "4", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "4", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "4", "192.168.0.10:53", "192.168.0.20:56872", "UDP", "Transport", "" ], [ "4", "192.168.0.10:53", "192.168.0.20:56872", "DNS", "Anwendung", "ID=9680 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nseite.filius.de. A 3600 192.168.0.30\n" ], [ "5", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "5", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ], [ "6", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x806" ], [ "6", "192.168.0.30", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" ], [ "7", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "7", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "192.168.0.20:51396", "192.168.0.30:80", "TCP", "Transport", "SYN, SEQ: 2.000.000" ], [ "8", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "8", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "192.168.0.30:80", "192.168.0.20:51396", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 2.000.001" ], [ "9", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "9", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "9", "192.168.0.20:51396", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.001, ACK: 1.000.001" ], [ "10", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "10", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "10", "192.168.0.20:51396", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.001" ], [ "10", "192.168.0.20:51396", "192.168.0.30:80", "HTTP", "Anwendung", "GET / HTTP/1.1\nHost: seite.filius.de\n" ], [ "11", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "11", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "192.168.0.30:80", "192.168.0.20:51396", "TCP", "Transport", "SEQ: 1.000.001, ACK: 2.000.038" ], [ "12", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "12", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "12", "192.168.0.30:80", "192.168.0.20:51396", "TCP", "Transport", "SEQ: 1.000.001" ], [ "12", "192.168.0.30:80", "192.168.0.20:51396", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/html\n\nEins" ], [ "13", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "13", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "13", "192.168.0.20:51396", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.038, ACK: 1.000.072" ], [ "14", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "14", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "14", "192.168.0.20:51396", "192.168.0.30:80", "TCP", "Transport", "FIN, SEQ: 2.000.038" ], [ "15", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "15", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "15", "192.168.0.30:80", "192.168.0.20:51396", "TCP", "Transport", "SEQ: 1.000.072, ACK: 2.000.039" ], [ "16", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "16", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "16", "192.168.0.30:80", "192.168.0.20:51396", "TCP", "Transport", "FIN, SEQ: 1.000.072" ], [ "17", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "17", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "17", "192.168.0.20:51396", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.039, ACK: 1.000.073" ], [ "18", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "18", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "18", "192.168.0.20:51558", "192.168.0.10:53", "UDP", "Transport", "" ], [ "18", "192.168.0.20:51558", "192.168.0.10:53", "DNS", "Anwendung", "ID=37225 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.filius.de. A IN\n" ], [ "19", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "19", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "19", "192.168.0.10:53", "192.168.0.20:51558", "UDP", "Transport", "" ], [ "19", "192.168.0.10:53", "192.168.0.20:51558", "DNS", "Anwendung", "ID=37225 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nandere.filius.de. A 3600 192.168.0.30\n" ], [ "20", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "20", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "20", "192.168.0.20:64224", "192.168.0.30:80", "TCP", "Transport", "SYN, SEQ: 4.000.000" ], [ "21", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "21", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "21", "192.168.0.30:80", "192.168.0.20:64224", "TCP", "Transport", "SYN, SEQ: 3.000.000, ACK: 4.000.001" ], [ "22", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "22", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "22", "192.168.0.20:64224", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.001, ACK: 3.000.001" ], [ "23", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "23", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "23", "192.168.0.20:64224", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.001" ], [ "23", "192.168.0.20:64224", "192.168.0.30:80", "HTTP", "Anwendung", "GET / HTTP/1.1\nHost: andere.filius.de\n" ], [ "24", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "24", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "24", "192.168.0.30:80", "192.168.0.20:64224", "TCP", "Transport", "SEQ: 3.000.001, ACK: 4.000.039" ], [ "25", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "25", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "25", "192.168.0.30:80", "192.168.0.20:64224", "TCP", "Transport", "SEQ: 3.000.001" ], [ "25", "192.168.0.30:80", "192.168.0.20:64224", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/html\n\nZwei" ], [ "26", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "26", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "26", "192.168.0.20:64224", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.039, ACK: 3.000.072" ], [ "27", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "27", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "27", "192.168.0.20:64224", "192.168.0.30:80", "TCP", "Transport", "FIN, SEQ: 4.000.039" ], [ "28", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "28", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "28", "192.168.0.30:80", "192.168.0.20:64224", "TCP", "Transport", "SEQ: 3.000.072, ACK: 4.000.040" ], [ "29", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "29", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "29", "192.168.0.30:80", "192.168.0.20:64224", "TCP", "Transport", "FIN, SEQ: 3.000.072" ], [ "30", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "30", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "30", "192.168.0.20:64224", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.040, ACK: 3.000.073" ], [ "31", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "31", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "31", "192.168.0.20:56748", "192.168.0.10:53", "UDP", "Transport", "" ], [ "31", "192.168.0.20:56748", "192.168.0.10:53", "DNS", "Anwendung", "ID=4611 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" ], [ "32", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "32", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "32", "192.168.0.10:53", "192.168.0.20:56748", "UDP", "Transport", "" ], [ "32", "192.168.0.10:53", "192.168.0.20:56748", "DNS", "Anwendung", "ID=4611 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" ], [ "33", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "33", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "33", "192.168.0.20:63781", "192.168.0.30:80", "TCP", "Transport", "SYN, SEQ: 6.000.000" ], [ "34", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "34", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "34", "192.168.0.30:80", "192.168.0.20:63781", "TCP", "Transport", "SYN, SEQ: 5.000.000, ACK: 6.000.001" ], [ "35", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "35", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "35", "192.168.0.20:63781", "192.168.0.30:80", "TCP", "Transport", "SEQ: 6.000.001, ACK: 5.000.001" ], [ "36", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "36", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "36", "192.168.0.20:63781", "192.168.0.30:80", "TCP", "Transport", "SEQ: 6.000.001" ], [ "36", "192.168.0.20:63781", "192.168.0.30:80", "HTTP", "Anwendung", "GET /vhost1 HTTP/1.1\nHost: www.filius.de\n" ], [ "37", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "37", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "37", "192.168.0.30:80", "192.168.0.20:63781", "TCP", "Transport", "SEQ: 5.000.001, ACK: 6.000.042" ], [ "38", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "38", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "38", "192.168.0.30:80", "192.168.0.20:63781", "TCP", "Transport", "SEQ: 5.000.001" ], [ "38", "192.168.0.30:80", "192.168.0.20:63781", "HTTP", "Anwendung", "HTTP/1.1 404 Not Found\n" ], [ "39", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "39", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "39", "192.168.0.20:63781", "192.168.0.30:80", "TCP", "Transport", "SEQ: 6.000.042, ACK: 5.000.024" ], [ "40", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "40", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "40", "192.168.0.20:63781", "192.168.0.30:80", "TCP", "Transport", "FIN, SEQ: 6.000.042" ], [ "41", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "41", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "41", "192.168.0.30:80", "192.168.0.20:63781", "TCP", "Transport", "SEQ: 5.000.024, ACK: 6.000.043" ], [ "42", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "42", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "42", "192.168.0.30:80", "192.168.0.20:63781", "TCP", "Transport", "FIN, SEQ: 5.000.024" ], [ "43", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "43", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "43", "192.168.0.20:63781", "192.168.0.30:80", "TCP", "Transport", "SEQ: 6.000.043, ACK: 5.000.025" ] ], "00000000-0000-0000-0000-000000000202": [ [ "1", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x806" ], [ "2", "192.168.0.10", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" ], [ "3", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "3", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "3", "192.168.0.20:56872", "192.168.0.10:53", "UDP", "Transport", "" ], [ "3", "192.168.0.20:56872", "192.168.0.10:53", "DNS", "Anwendung", "ID=9680 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nseite.filius.de. A IN\n" ], [ "4", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "4", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "4", "192.168.0.10:53", "192.168.0.20:56872", "UDP", "Transport", "" ], [ "4", "192.168.0.10:53", "192.168.0.20:56872", "DNS", "Anwendung", "ID=9680 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nseite.filius.de. A 3600 192.168.0.30\n" ], [ "5", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "5", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ], [ "6", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "6", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "6", "192.168.0.20:51558", "192.168.0.10:53", "UDP", "Transport", "" ], [ "6", "192.168.0.20:51558", "192.168.0.10:53", "DNS", "Anwendung", "ID=37225 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.filius.de. A IN\n" ], [ "7", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "7", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "7", "192.168.0.10:53", "192.168.0.20:51558", "UDP", "Transport", "" ], [ "7", "192.168.0.10:53", "192.168.0.20:51558", "DNS", "Anwendung", "ID=37225 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nandere.filius.de. A 3600 192.168.0.30\n" ], [ "8", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "8", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "8", "192.168.0.20:56748", "192.168.0.10:53", "UDP", "Transport", "" ], [ "8", "192.168.0.20:56748", "192.168.0.10:53", "DNS", "Anwendung", "ID=4611 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" ], [ "9", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "9", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "9", "192.168.0.10:53", "192.168.0.20:56748", "UDP", "Transport", "" ], [ "9", "192.168.0.10:53", "192.168.0.20:56748", "DNS", "Anwendung", "ID=4611 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" ] ], "00000000-0000-0000-0000-000000000203": [ [ "1", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "2", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ], [ "3", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x806" ], [ "3", "192.168.0.30", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" ], [ "4", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "4", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "4", "192.168.0.20:51396", "192.168.0.30:80", "TCP", "Transport", "SYN, SEQ: 2.000.000" ], [ "5", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "5", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "5", "192.168.0.30:80", "192.168.0.20:51396", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 2.000.001" ], [ "6", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "6", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "6", "192.168.0.20:51396", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.001, ACK: 1.000.001" ], [ "7", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "7", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "192.168.0.20:51396", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.001" ], [ "7", "192.168.0.20:51396", "192.168.0.30:80", "HTTP", "Anwendung", "GET / HTTP/1.1\nHost: seite.filius.de\n" ], [ "8", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "8", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "192.168.0.30:80", "192.168.0.20:51396", "TCP", "Transport", "SEQ: 1.000.001, ACK: 2.000.038" ], [ "9", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "9", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "9", "192.168.0.30:80", "192.168.0.20:51396", "TCP", "Transport", "SEQ: 1.000.001" ], [ "9", "192.168.0.30:80", "192.168.0.20:51396", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/html\n\nEins" ], [ "10", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "10", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "10", "192.168.0.20:51396", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.038, ACK: 1.000.072" ], [ "11", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "11", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "192.168.0.20:51396", "192.168.0.30:80", "TCP", "Transport", "FIN, SEQ: 2.000.038" ], [ "12", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "12", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "12", "192.168.0.30:80", "192.168.0.20:51396", "TCP", "Transport", "SEQ: 1.000.072, ACK: 2.000.039" ], [ "13", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "13", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "13", "192.168.0.30:80", "192.168.0.20:51396", "TCP", "Transport", "FIN, SEQ: 1.000.072" ], [ "14", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "14", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "14", "192.168.0.20:51396", "192.168.0.30:80", "TCP", "Transport", "SEQ: 2.000.039, ACK: 1.000.073" ], [ "15", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "15", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "15", "192.168.0.20:64224", "192.168.0.30:80", "TCP", "Transport", "SYN, SEQ: 4.000.000" ], [ "16", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "16", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "16", "192.168.0.30:80", "192.168.0.20:64224", "TCP", "Transport", "SYN, SEQ: 3.000.000, ACK: 4.000.001" ], [ "17", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "17", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "17", "192.168.0.20:64224", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.001, ACK: 3.000.001" ], [ "18", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "18", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "18", "192.168.0.20:64224", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.001" ], [ "18", "192.168.0.20:64224", "192.168.0.30:80", "HTTP", "Anwendung", "GET / HTTP/1.1\nHost: andere.filius.de\n" ], [ "19", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "19", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "19", "192.168.0.30:80", "192.168.0.20:64224", "TCP", "Transport", "SEQ: 3.000.001, ACK: 4.000.039" ], [ "20", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "20", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "20", "192.168.0.30:80", "192.168.0.20:64224", "TCP", "Transport", "SEQ: 3.000.001" ], [ "20", "192.168.0.30:80", "192.168.0.20:64224", "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/html\n\nZwei" ], [ "21", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "21", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "21", "192.168.0.20:64224", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.039, ACK: 3.000.072" ], [ "22", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "22", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "22", "192.168.0.20:64224", "192.168.0.30:80", "TCP", "Transport", "FIN, SEQ: 4.000.039" ], [ "23", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "23", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "23", "192.168.0.30:80", "192.168.0.20:64224", "TCP", "Transport", "SEQ: 3.000.072, ACK: 4.000.040" ], [ "24", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "24", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "24", "192.168.0.30:80", "192.168.0.20:64224", "TCP", "Transport", "FIN, SEQ: 3.000.072" ], [ "25", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "25", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "25", "192.168.0.20:64224", "192.168.0.30:80", "TCP", "Transport", "SEQ: 4.000.040, ACK: 3.000.073" ], [ "26", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "26", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "26", "192.168.0.20:63781", "192.168.0.30:80", "TCP", "Transport", "SYN, SEQ: 6.000.000" ], [ "27", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "27", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "27", "192.168.0.30:80", "192.168.0.20:63781", "TCP", "Transport", "SYN, SEQ: 5.000.000, ACK: 6.000.001" ], [ "28", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "28", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "28", "192.168.0.20:63781", "192.168.0.30:80", "TCP", "Transport", "SEQ: 6.000.001, ACK: 5.000.001" ], [ "29", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "29", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "29", "192.168.0.20:63781", "192.168.0.30:80", "TCP", "Transport", "SEQ: 6.000.001" ], [ "29", "192.168.0.20:63781", "192.168.0.30:80", "HTTP", "Anwendung", "GET /vhost1 HTTP/1.1\nHost: www.filius.de\n" ], [ "30", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "30", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "30", "192.168.0.30:80", "192.168.0.20:63781", "TCP", "Transport", "SEQ: 5.000.001, ACK: 6.000.042" ], [ "31", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "31", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "31", "192.168.0.30:80", "192.168.0.20:63781", "TCP", "Transport", "SEQ: 5.000.001" ], [ "31", "192.168.0.30:80", "192.168.0.20:63781", "HTTP", "Anwendung", "HTTP/1.1 404 Not Found\n" ], [ "32", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "32", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "32", "192.168.0.20:63781", "192.168.0.30:80", "TCP", "Transport", "SEQ: 6.000.042, ACK: 5.000.024" ], [ "33", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "33", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "33", "192.168.0.20:63781", "192.168.0.30:80", "TCP", "Transport", "FIN, SEQ: 6.000.042" ], [ "34", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "34", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "34", "192.168.0.30:80", "192.168.0.20:63781", "TCP", "Transport", "SEQ: 5.000.024, ACK: 6.000.043" ], [ "35", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "35", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "35", "192.168.0.30:80", "192.168.0.20:63781", "TCP", "Transport", "FIN, SEQ: 5.000.024" ], [ "36", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "36", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "36", "192.168.0.20:63781", "192.168.0.30:80", "TCP", "Transport", "SEQ: 6.000.043, ACK: 5.000.025" ] ], "00000000-0000-0000-0000-000000000204": [ [ "1", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "2", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ] ] }, "layeredRows": { "00000000-0000-0000-0000-000000000201": [ [ "1", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x806" ], [ "2", "192.168.0.10", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" ], [ "3", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "3", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "3", "56872", "53", "UDP", "Transport", "" ], [ "3", null, null, "DNS", "Anwendung", "ID=9680 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nseite.filius.de. A IN\n" ], [ "4", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "4", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "4", "53", "56872", "UDP", "Transport", "" ], [ "4", null, null, "DNS", "Anwendung", "ID=9680 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nseite.filius.de. A 3600 192.168.0.30\n" ], [ "5", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "5", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ], [ "6", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x806" ], [ "6", "192.168.0.30", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" ], [ "7", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "7", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "51396", "80", "TCP", "Transport", "SYN, SEQ: 2.000.000" ], [ "8", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "8", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "80", "51396", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 2.000.001" ], [ "9", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "9", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "9", "51396", "80", "TCP", "Transport", "SEQ: 2.000.001, ACK: 1.000.001" ], [ "10", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "10", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "10", "51396", "80", "TCP", "Transport", "SEQ: 2.000.001" ], [ "10", null, null, "HTTP", "Anwendung", "GET / HTTP/1.1\nHost: seite.filius.de\n" ], [ "11", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "11", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "80", "51396", "TCP", "Transport", "SEQ: 1.000.001, ACK: 2.000.038" ], [ "12", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "12", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "12", "80", "51396", "TCP", "Transport", "SEQ: 1.000.001" ], [ "12", null, null, "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/html\n\nEins" ], [ "13", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "13", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "13", "51396", "80", "TCP", "Transport", "SEQ: 2.000.038, ACK: 1.000.072" ], [ "14", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "14", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "14", "51396", "80", "TCP", "Transport", "FIN, SEQ: 2.000.038" ], [ "15", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "15", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "15", "80", "51396", "TCP", "Transport", "SEQ: 1.000.072, ACK: 2.000.039" ], [ "16", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "16", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "16", "80", "51396", "TCP", "Transport", "FIN, SEQ: 1.000.072" ], [ "17", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "17", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "17", "51396", "80", "TCP", "Transport", "SEQ: 2.000.039, ACK: 1.000.073" ], [ "18", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "18", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "18", "51558", "53", "UDP", "Transport", "" ], [ "18", null, null, "DNS", "Anwendung", "ID=37225 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.filius.de. A IN\n" ], [ "19", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "19", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "19", "53", "51558", "UDP", "Transport", "" ], [ "19", null, null, "DNS", "Anwendung", "ID=37225 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nandere.filius.de. A 3600 192.168.0.30\n" ], [ "20", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "20", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "20", "64224", "80", "TCP", "Transport", "SYN, SEQ: 4.000.000" ], [ "21", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "21", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "21", "80", "64224", "TCP", "Transport", "SYN, SEQ: 3.000.000, ACK: 4.000.001" ], [ "22", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "22", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "22", "64224", "80", "TCP", "Transport", "SEQ: 4.000.001, ACK: 3.000.001" ], [ "23", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "23", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "23", "64224", "80", "TCP", "Transport", "SEQ: 4.000.001" ], [ "23", null, null, "HTTP", "Anwendung", "GET / HTTP/1.1\nHost: andere.filius.de\n" ], [ "24", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "24", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "24", "80", "64224", "TCP", "Transport", "SEQ: 3.000.001, ACK: 4.000.039" ], [ "25", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "25", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "25", "80", "64224", "TCP", "Transport", "SEQ: 3.000.001" ], [ "25", null, null, "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/html\n\nZwei" ], [ "26", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "26", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "26", "64224", "80", "TCP", "Transport", "SEQ: 4.000.039, ACK: 3.000.072" ], [ "27", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "27", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "27", "64224", "80", "TCP", "Transport", "FIN, SEQ: 4.000.039" ], [ "28", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "28", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "28", "80", "64224", "TCP", "Transport", "SEQ: 3.000.072, ACK: 4.000.040" ], [ "29", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "29", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "29", "80", "64224", "TCP", "Transport", "FIN, SEQ: 3.000.072" ], [ "30", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "30", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "30", "64224", "80", "TCP", "Transport", "SEQ: 4.000.040, ACK: 3.000.073" ], [ "31", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "31", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "31", "56748", "53", "UDP", "Transport", "" ], [ "31", null, null, "DNS", "Anwendung", "ID=4611 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" ], [ "32", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "32", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "32", "53", "56748", "UDP", "Transport", "" ], [ "32", null, null, "DNS", "Anwendung", "ID=4611 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" ], [ "33", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "33", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "33", "63781", "80", "TCP", "Transport", "SYN, SEQ: 6.000.000" ], [ "34", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "34", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "34", "80", "63781", "TCP", "Transport", "SYN, SEQ: 5.000.000, ACK: 6.000.001" ], [ "35", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "35", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "35", "63781", "80", "TCP", "Transport", "SEQ: 6.000.001, ACK: 5.000.001" ], [ "36", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "36", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "36", "63781", "80", "TCP", "Transport", "SEQ: 6.000.001" ], [ "36", null, null, "HTTP", "Anwendung", "GET /vhost1 HTTP/1.1\nHost: www.filius.de\n" ], [ "37", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "37", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "37", "80", "63781", "TCP", "Transport", "SEQ: 5.000.001, ACK: 6.000.042" ], [ "38", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "38", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "38", "80", "63781", "TCP", "Transport", "SEQ: 5.000.001" ], [ "38", null, null, "HTTP", "Anwendung", "HTTP/1.1 404 Not Found\n" ], [ "39", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "39", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "39", "63781", "80", "TCP", "Transport", "SEQ: 6.000.042, ACK: 5.000.024" ], [ "40", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "40", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "40", "63781", "80", "TCP", "Transport", "FIN, SEQ: 6.000.042" ], [ "41", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "41", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "41", "80", "63781", "TCP", "Transport", "SEQ: 5.000.024, ACK: 6.000.043" ], [ "42", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "42", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "42", "80", "63781", "TCP", "Transport", "FIN, SEQ: 5.000.024" ], [ "43", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "43", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "43", "63781", "80", "TCP", "Transport", "SEQ: 6.000.043, ACK: 5.000.025" ] ], "00000000-0000-0000-0000-000000000202": [ [ "1", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x806" ], [ "2", "192.168.0.10", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]" ], [ "3", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "3", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "3", "56872", "53", "UDP", "Transport", "" ], [ "3", null, null, "DNS", "Anwendung", "ID=9680 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nseite.filius.de. A IN\n" ], [ "4", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "4", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "4", "53", "56872", "UDP", "Transport", "" ], [ "4", null, null, "DNS", "Anwendung", "ID=9680 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nseite.filius.de. A 3600 192.168.0.30\n" ], [ "5", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "5", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ], [ "6", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "6", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "6", "51558", "53", "UDP", "Transport", "" ], [ "6", null, null, "DNS", "Anwendung", "ID=37225 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nandere.filius.de. A IN\n" ], [ "7", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "7", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "7", "53", "51558", "UDP", "Transport", "" ], [ "7", null, null, "DNS", "Anwendung", "ID=37225 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nandere.filius.de. A 3600 192.168.0.30\n" ], [ "8", "02:00:00:00:02:11", "02:00:00:00:02:12", "", "Netzzugang", "0x800" ], [ "8", "192.168.0.20", "192.168.0.10", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "8", "56748", "53", "UDP", "Transport", "" ], [ "8", null, null, "DNS", "Anwendung", "ID=4611 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n" ], [ "9", "02:00:00:00:02:12", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "9", "192.168.0.10", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 17, TTL: 64" ], [ "9", "53", "56748", "UDP", "Transport", "" ], [ "9", null, null, "DNS", "Anwendung", "ID=4611 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n" ] ], "00000000-0000-0000-0000-000000000203": [ [ "1", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "2", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ], [ "3", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x806" ], [ "3", "192.168.0.30", "192.168.0.20", "ARP", "Vermittlung", "MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]" ], [ "4", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "4", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "4", "51396", "80", "TCP", "Transport", "SYN, SEQ: 2.000.000" ], [ "5", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "5", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "5", "80", "51396", "TCP", "Transport", "SYN, SEQ: 1.000.000, ACK: 2.000.001" ], [ "6", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "6", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "6", "51396", "80", "TCP", "Transport", "SEQ: 2.000.001, ACK: 1.000.001" ], [ "7", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "7", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "7", "51396", "80", "TCP", "Transport", "SEQ: 2.000.001" ], [ "7", null, null, "HTTP", "Anwendung", "GET / HTTP/1.1\nHost: seite.filius.de\n" ], [ "8", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "8", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "8", "80", "51396", "TCP", "Transport", "SEQ: 1.000.001, ACK: 2.000.038" ], [ "9", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "9", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "9", "80", "51396", "TCP", "Transport", "SEQ: 1.000.001" ], [ "9", null, null, "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/html\n\nEins" ], [ "10", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "10", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "10", "51396", "80", "TCP", "Transport", "SEQ: 2.000.038, ACK: 1.000.072" ], [ "11", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "11", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "11", "51396", "80", "TCP", "Transport", "FIN, SEQ: 2.000.038" ], [ "12", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "12", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "12", "80", "51396", "TCP", "Transport", "SEQ: 1.000.072, ACK: 2.000.039" ], [ "13", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "13", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "13", "80", "51396", "TCP", "Transport", "FIN, SEQ: 1.000.072" ], [ "14", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "14", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "14", "51396", "80", "TCP", "Transport", "SEQ: 2.000.039, ACK: 1.000.073" ], [ "15", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "15", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "15", "64224", "80", "TCP", "Transport", "SYN, SEQ: 4.000.000" ], [ "16", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "16", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "16", "80", "64224", "TCP", "Transport", "SYN, SEQ: 3.000.000, ACK: 4.000.001" ], [ "17", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "17", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "17", "64224", "80", "TCP", "Transport", "SEQ: 4.000.001, ACK: 3.000.001" ], [ "18", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "18", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "18", "64224", "80", "TCP", "Transport", "SEQ: 4.000.001" ], [ "18", null, null, "HTTP", "Anwendung", "GET / HTTP/1.1\nHost: andere.filius.de\n" ], [ "19", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "19", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "19", "80", "64224", "TCP", "Transport", "SEQ: 3.000.001, ACK: 4.000.039" ], [ "20", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "20", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "20", "80", "64224", "TCP", "Transport", "SEQ: 3.000.001" ], [ "20", null, null, "HTTP", "Anwendung", "HTTP/1.1 200 OK\nContent-type: text/html\n\nZwei" ], [ "21", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "21", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "21", "64224", "80", "TCP", "Transport", "SEQ: 4.000.039, ACK: 3.000.072" ], [ "22", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "22", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "22", "64224", "80", "TCP", "Transport", "FIN, SEQ: 4.000.039" ], [ "23", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "23", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "23", "80", "64224", "TCP", "Transport", "SEQ: 3.000.072, ACK: 4.000.040" ], [ "24", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "24", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "24", "80", "64224", "TCP", "Transport", "FIN, SEQ: 3.000.072" ], [ "25", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "25", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "25", "64224", "80", "TCP", "Transport", "SEQ: 4.000.040, ACK: 3.000.073" ], [ "26", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "26", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "26", "63781", "80", "TCP", "Transport", "SYN, SEQ: 6.000.000" ], [ "27", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "27", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "27", "80", "63781", "TCP", "Transport", "SYN, SEQ: 5.000.000, ACK: 6.000.001" ], [ "28", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "28", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "28", "63781", "80", "TCP", "Transport", "SEQ: 6.000.001, ACK: 5.000.001" ], [ "29", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "29", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "29", "63781", "80", "TCP", "Transport", "SEQ: 6.000.001" ], [ "29", null, null, "HTTP", "Anwendung", "GET /vhost1 HTTP/1.1\nHost: www.filius.de\n" ], [ "30", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "30", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "30", "80", "63781", "TCP", "Transport", "SEQ: 5.000.001, ACK: 6.000.042" ], [ "31", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "31", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "31", "80", "63781", "TCP", "Transport", "SEQ: 5.000.001" ], [ "31", null, null, "HTTP", "Anwendung", "HTTP/1.1 404 Not Found\n" ], [ "32", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "32", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "32", "63781", "80", "TCP", "Transport", "SEQ: 6.000.042, ACK: 5.000.024" ], [ "33", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "33", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "33", "63781", "80", "TCP", "Transport", "FIN, SEQ: 6.000.042" ], [ "34", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "34", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "34", "80", "63781", "TCP", "Transport", "SEQ: 5.000.024, ACK: 6.000.043" ], [ "35", "02:00:00:00:02:13", "02:00:00:00:02:11", "", "Netzzugang", "0x800" ], [ "35", "192.168.0.30", "192.168.0.20", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "35", "80", "63781", "TCP", "Transport", "FIN, SEQ: 5.000.024" ], [ "36", "02:00:00:00:02:11", "02:00:00:00:02:13", "", "Netzzugang", "0x800" ], [ "36", "192.168.0.20", "192.168.0.30", "IP", "Vermittlung", "Protokoll: 6, TTL: 64" ], [ "36", "63781", "80", "TCP", "Transport", "SEQ: 6.000.043, ACK: 5.000.025" ] ], "00000000-0000-0000-0000-000000000204": [ [ "1", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "1", "192.168.0.20", "192.168.0.10", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]" ], [ "2", "02:00:00:00:02:11", "FF:FF:FF:FF:FF:FF", "", "Netzzugang", "0x806" ], [ "2", "192.168.0.20", "192.168.0.30", "ARP", "Vermittlung", "Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]" ] ] }, "events": [ [ 213, "browser", "update" ], [ 214, "server", "null" ], [ 500, "browser", "call holeWebseite seite.filius.de" ], [ 1616, "server", "Verbindung zu 192.168.0.20:51396 hergestellt" ], [ 1617, "server", ">>GET / HTTP/1.1\nHost: seite.filius.de\n" ], [ 1790, "browser", "page 200 text/html\nEins" ], [ 1883, "server", "<