{ "arp" : { "00000000-0000-0000-0000-000000000201" : { "10.0.0.1" : "02:00:00:00:02:21" }, "00000000-0000-0000-0000-000000000202" : { "10.0.0.2" : "02:00:00:00:02:11", "20.0.0.2" : "02:00:00:00:02:13" }, "00000000-0000-0000-0000-000000000203" : { "20.0.0.1" : "02:00:00:00:02:22" } }, "devices" : { "00000000-0000-0000-0000-000000000201" : [ "10.0.0.2", "255.255.255.0", "10.0.0.1", "" ], "00000000-0000-0000-0000-000000000202" : [ "10.0.0.1", "255.255.255.0", "", "" ], "00000000-0000-0000-0000-000000000203" : [ "20.0.0.2", "255.255.255.0", "20.0.0.1", "" ] }, "dhcp" : { "blacklist" : { }, "clients" : { }, "leases" : [ ], "offers" : [ ], "servers" : { } }, "firewallDecisions" : [ { "accepted" : true, "node" : "00000000-0000-0000-0000-000000000202", "packet" : 1 }, { "accepted" : false, "node" : "00000000-0000-0000-0000-000000000202", "packet" : 2, "rule" : 0 }, { "accepted" : true, "node" : "00000000-0000-0000-0000-000000000202", "packet" : 3 }, { "accepted" : true, "node" : "00000000-0000-0000-0000-000000000202", "packet" : 4 } ], "icmpObservations" : { }, "pendingEvents" : 0, "results" : [ "00000000-0000-0000-0000-000000000001", "00000000-0000-0000-0000-000000000002", "00000000-0000-0000-0000-000000000003", "00000000-0000-0000-0000-000000000004", { "node" : "00000000-0000-0000-0000-000000000201", "packet" : 1, "type" : "delivered" }, { "at" : 330, "destinationPort" : 5000, "payload" : "durch den Router", "receiver" : "20.0.0.2", "sender" : "10.0.0.2", "sourcePort" : 54899 }, { "node" : "00000000-0000-0000-0000-000000000201", "packet" : 2, "type" : "delivered" }, null, { "node" : "00000000-0000-0000-0000-000000000201", "packet" : 3, "type" : "delivered" }, { "at" : 940, "destinationPort" : 5000, "payload" : "Broadcast", "receiver" : "255.255.255.255", "sender" : "10.0.0.2", "sourcePort" : 54899 }, null, { "node" : "00000000-0000-0000-0000-000000000203", "packet" : 4, "type" : "delivered" }, { "at" : 1550, "destinationPort" : 54899, "payload" : "zurueck", "receiver" : "10.0.0.2", "sender" : "20.0.0.2", "sourcePort" : 5000 } ], "sockets" : [ { "id" : "00000000-0000-0000-0000-000000000001", "localIp" : null, "localPort" : 5000, "node" : "00000000-0000-0000-0000-000000000203", "parent" : null, "protocol" : "udp", "queued" : 0, "remoteIp" : "10.0.0.2", "remotePort" : 54899, "session" : null, "tcpState" : null }, { "id" : "00000000-0000-0000-0000-000000000002", "localIp" : null, "localPort" : 5001, "node" : "00000000-0000-0000-0000-000000000203", "parent" : null, "protocol" : "udp", "queued" : 0, "remoteIp" : null, "remotePort" : null, "session" : null, "tcpState" : null }, { "id" : "00000000-0000-0000-0000-000000000003", "localIp" : null, "localPort" : 54899, "node" : "00000000-0000-0000-0000-000000000201", "parent" : null, "protocol" : "udp", "queued" : 0, "remoteIp" : "20.0.0.2", "remotePort" : 5000, "session" : null, "tcpState" : null }, { "id" : "00000000-0000-0000-0000-000000000004", "localIp" : null, "localPort" : 5000, "node" : "00000000-0000-0000-0000-000000000202", "parent" : null, "protocol" : "udp", "queued" : 0, "remoteIp" : "10.0.0.2", "remotePort" : 54899, "session" : null, "tcpState" : null } ], "switchTables" : { }, "time" : 1550, "traces" : [ { "after" : [ [ "sourcePort", "54899" ], [ "destinationPort", "5000" ], [ "payloadLength", "16" ] ], "before" : [ ], "direction" : "outbound", "id" : 1, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 1, "time" : 0 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "ARP request for 10.0.0.1", "direction" : "outbound", "frame" : 1, "id" : 2, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "time" : 0 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 1, "id" : 3, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "time" : 0 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 1, "id" : 4, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "time" : 55 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 1, "id" : 5, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "time" : 55 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:02:11" ], [ "senderIP", "10.0.0.2" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "10.0.0.1" ] ], "direction" : "inbound", "frame" : 1, "id" : 6, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "time" : 55 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "before" : [ ], "detail" : "ARP reply for 10.0.0.1", "direction" : "outbound", "frame" : 2, "id" : 7, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "time" : 55 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 2, "id" : 8, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "time" : 55 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "direction" : "inbound", "frame" : 2, "id" : 9, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "time" : 110 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "direction" : "inbound", "frame" : 2, "id" : 10, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "time" : 110 }, { "after" : [ ], "before" : [ [ "operation", "reply" ], [ "senderMAC", "02:00:00:00:02:21" ], [ "senderIP", "10.0.0.1" ], [ "targetMAC", "02:00:00:00:02:11" ], [ "targetIP", "10.0.0.2" ] ], "direction" : "inbound", "frame" : 2, "id" : 11, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "accepted", "time" : 110 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "17" ] ], "before" : [ ], "direction" : "outbound", "frame" : 3, "id" : 12, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 1, "time" : 110 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 3, "id" : 13, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "packet" : 1, "time" : 110 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 3, "id" : 14, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 1, "time" : 110 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 3, "id" : 15, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 1, "time" : 165 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 3, "id" : 16, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 1, "time" : 165 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "17" ] ], "direction" : "inbound", "frame" : 3, "id" : 17, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 1, "time" : 165 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "17" ] ], "detail" : "firewall default policy", "direction" : "inbound", "frame" : 3, "id" : 18, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "packet" : 1, "time" : 165 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "63" ], [ "protocol", "17" ] ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "17" ] ], "detail" : "TTL decremented", "direction" : "outbound", "frame" : 3, "id" : 19, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "forwarded", "packet" : 1, "time" : 165 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "ARP request for 20.0.0.2", "direction" : "outbound", "frame" : 4, "id" : 20, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "time" : 165 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 4, "id" : 21, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "time" : 165 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "ARP request for 20.0.0.2", "direction" : "outbound", "frame" : 5, "id" : 22, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "time" : 165 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 5, "id" : 23, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "time" : 165 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "63" ], [ "protocol", "17" ] ], "detail" : "waiting for ARP resolution of 20.0.0.2", "direction" : "outbound", "id" : 24, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "packet" : 1, "time" : 165 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 4, "id" : 25, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "time" : 220 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 4, "id" : 26, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "time" : 220 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:02:22" ], [ "senderIP", "20.0.0.1" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "20.0.0.2" ] ], "direction" : "inbound", "frame" : 4, "id" : 27, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "accepted", "time" : 220 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "before" : [ ], "detail" : "ARP reply for 20.0.0.2", "direction" : "outbound", "frame" : 6, "id" : 28, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "created", "time" : 220 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "before" : [ ], "direction" : "outbound", "frame" : 6, "id" : 29, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "sent", "time" : 220 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 5, "id" : 30, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "time" : 220 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 5, "id" : 31, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "time" : 220 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:02:22" ], [ "senderIP", "20.0.0.1" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "20.0.0.2" ] ], "direction" : "inbound", "frame" : 5, "id" : 32, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "accepted", "time" : 220 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "before" : [ ], "detail" : "ARP reply for 20.0.0.2", "direction" : "outbound", "frame" : 7, "id" : 33, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "created", "time" : 220 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "before" : [ ], "direction" : "outbound", "frame" : 7, "id" : 34, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "sent", "time" : 220 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "direction" : "inbound", "frame" : 6, "id" : 35, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "time" : 275 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "direction" : "inbound", "frame" : 6, "id" : 36, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "time" : 275 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "63" ], [ "protocol", "17" ] ], "before" : [ ], "direction" : "outbound", "frame" : 8, "id" : 37, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "forwarded", "packet" : 1, "time" : 275 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "before" : [ ], "direction" : "outbound", "frame" : 8, "id" : 38, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "packet" : 1, "time" : 275 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "before" : [ ], "direction" : "outbound", "frame" : 8, "id" : 39, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "packet" : 1, "time" : 275 }, { "after" : [ ], "before" : [ [ "operation", "reply" ], [ "senderMAC", "02:00:00:00:02:13" ], [ "senderIP", "20.0.0.2" ], [ "targetMAC", "02:00:00:00:02:22" ], [ "targetIP", "20.0.0.1" ] ], "direction" : "inbound", "frame" : 6, "id" : 40, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "time" : 275 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "direction" : "inbound", "frame" : 7, "id" : 41, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "time" : 275 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "direction" : "inbound", "frame" : 7, "id" : 42, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "time" : 275 }, { "after" : [ ], "before" : [ [ "operation", "reply" ], [ "senderMAC", "02:00:00:00:02:13" ], [ "senderIP", "20.0.0.2" ], [ "targetMAC", "02:00:00:00:02:22" ], [ "targetIP", "20.0.0.1" ] ], "direction" : "inbound", "frame" : 7, "id" : 43, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "time" : 275 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "direction" : "inbound", "frame" : 8, "id" : 44, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "packet" : 1, "time" : 330 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "direction" : "inbound", "frame" : 8, "id" : 45, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "packet" : 1, "time" : 330 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "63" ], [ "protocol", "17" ] ], "direction" : "inbound", "frame" : 8, "id" : 46, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "packet" : 1, "time" : 330 }, { "after" : [ ], "before" : [ [ "sourcePort", "54899" ], [ "destinationPort", "5000" ], [ "payloadLength", "16" ] ], "detail" : "UDP queued", "direction" : "local", "id" : 47, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "accepted", "packet" : 1, "time" : 330 }, { "after" : [ [ "sourcePort", "54899" ], [ "destinationPort", "5001" ], [ "payloadLength", "8" ] ], "before" : [ ], "direction" : "outbound", "id" : 48, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 2, "time" : 330 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "17" ] ], "before" : [ ], "direction" : "outbound", "frame" : 9, "id" : 49, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 2, "time" : 330 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 9, "id" : 50, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "packet" : 2, "time" : 330 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 9, "id" : 51, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 2, "time" : 330 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 9, "id" : 52, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 2, "time" : 385 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 9, "id" : 53, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 2, "time" : 385 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "17" ] ], "direction" : "inbound", "frame" : 9, "id" : 54, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 2, "time" : 385 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "17" ] ], "detail" : "UDP matched rule #1", "direction" : "inbound", "frame" : 9, "id" : 55, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "dropped", "packet" : 2, "time" : 385 }, { "after" : [ [ "sourcePort", "54899" ], [ "destinationPort", "5000" ], [ "payloadLength", "9" ] ], "before" : [ ], "direction" : "outbound", "id" : 56, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 3, "time" : 885 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "255.255.255.255" ], [ "ttl", "1" ], [ "protocol", "17" ] ], "before" : [ ], "direction" : "outbound", "frame" : 10, "id" : 57, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 3, "time" : 885 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 10, "id" : 58, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "packet" : 3, "time" : 885 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 10, "id" : 59, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 3, "time" : 885 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 10, "id" : 60, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 3, "time" : 940 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 10, "id" : 61, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 3, "time" : 940 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "255.255.255.255" ], [ "ttl", "1" ], [ "protocol", "17" ] ], "direction" : "inbound", "frame" : 10, "id" : 62, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 3, "time" : 940 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "255.255.255.255" ], [ "ttl", "1" ], [ "protocol", "17" ] ], "detail" : "firewall default policy", "direction" : "inbound", "frame" : 10, "id" : 63, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "packet" : 3, "time" : 940 }, { "after" : [ ], "before" : [ [ "sourcePort", "54899" ], [ "destinationPort", "5000" ], [ "payloadLength", "9" ] ], "detail" : "UDP queued", "direction" : "local", "id" : 64, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "packet" : 3, "time" : 940 }, { "after" : [ [ "sourcePort", "5000" ], [ "destinationPort", "54899" ], [ "payloadLength", "7" ] ], "before" : [ ], "direction" : "outbound", "id" : 65, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "sent", "packet" : 4, "time" : 1440 }, { "after" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "17" ] ], "before" : [ ], "direction" : "outbound", "frame" : 11, "id" : 66, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "sent", "packet" : 4, "time" : 1440 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "before" : [ ], "direction" : "outbound", "frame" : 11, "id" : 67, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "created", "packet" : 4, "time" : 1440 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "before" : [ ], "direction" : "outbound", "frame" : 11, "id" : 68, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "sent", "packet" : 4, "time" : 1440 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "direction" : "inbound", "frame" : 11, "id" : 69, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 4, "time" : 1495 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "direction" : "inbound", "frame" : 11, "id" : 70, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 4, "time" : 1495 }, { "after" : [ ], "before" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "17" ] ], "direction" : "inbound", "frame" : 11, "id" : 71, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 4, "time" : 1495 }, { "after" : [ ], "before" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "17" ] ], "detail" : "firewall default policy", "direction" : "inbound", "frame" : 11, "id" : 72, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "packet" : 4, "time" : 1495 }, { "after" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "63" ], [ "protocol", "17" ] ], "before" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "17" ] ], "detail" : "TTL decremented", "direction" : "outbound", "frame" : 11, "id" : 73, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "forwarded", "packet" : 4, "time" : 1495 }, { "after" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "63" ], [ "protocol", "17" ] ], "before" : [ ], "direction" : "outbound", "frame" : 12, "id" : 74, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "forwarded", "packet" : 4, "time" : 1495 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 12, "id" : 75, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "packet" : 4, "time" : 1495 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 12, "id" : 76, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "packet" : 4, "time" : 1495 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "direction" : "inbound", "frame" : 12, "id" : 77, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 4, "time" : 1550 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "direction" : "inbound", "frame" : 12, "id" : 78, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 4, "time" : 1550 }, { "after" : [ ], "before" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "63" ], [ "protocol", "17" ] ], "direction" : "inbound", "frame" : 12, "id" : 79, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 4, "time" : 1550 }, { "after" : [ ], "before" : [ [ "sourcePort", "5000" ], [ "destinationPort", "54899" ], [ "payloadLength", "7" ] ], "detail" : "UDP queued", "direction" : "local", "id" : 80, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "accepted", "packet" : 4, "time" : 1550 } ] }