{ "arp" : { "00000000-0000-0000-0000-000000000201" : { "10.0.0.1" : "02:00:00:00:02:21" }, "00000000-0000-0000-0000-000000000202" : { "10.0.0.2" : "02:00:00:00:02:11", "20.0.0.2" : "02:00:00:00:02:13" }, "00000000-0000-0000-0000-000000000203" : { "20.0.0.1" : "02:00:00:00:02:22" } }, "devices" : { "00000000-0000-0000-0000-000000000201" : [ "10.0.0.2", "255.255.255.0", "10.0.0.1", "" ], "00000000-0000-0000-0000-000000000202" : [ "10.0.0.1", "255.255.255.0", "", "" ], "00000000-0000-0000-0000-000000000203" : [ "20.0.0.2", "255.255.255.0", "20.0.0.1", "" ] }, "dhcp" : { "blacklist" : { }, "clients" : { }, "leases" : [ ], "offers" : [ ], "servers" : { } }, "firewallDecisions" : [ { "accepted" : true, "node" : "00000000-0000-0000-0000-000000000202", "packet" : 1 }, { "accepted" : true, "node" : "00000000-0000-0000-0000-000000000202", "packet" : 2 }, { "accepted" : true, "node" : "00000000-0000-0000-0000-000000000202", "packet" : 3 }, { "accepted" : true, "node" : "00000000-0000-0000-0000-000000000202", "packet" : 4 }, { "accepted" : true, "node" : "00000000-0000-0000-0000-000000000202", "packet" : 5 }, { "accepted" : false, "node" : "00000000-0000-0000-0000-000000000202", "packet" : 6, "rule" : 0 }, { "accepted" : false, "node" : "00000000-0000-0000-0000-000000000202", "packet" : 7, "rule" : 0 }, { "accepted" : false, "node" : "00000000-0000-0000-0000-000000000202", "packet" : 8, "rule" : 0 } ], "icmpObservations" : { }, "pendingEvents" : 0, "results" : [ "00000000-0000-0000-0000-000000000001", "00000000-0000-0000-0000-000000000002", "00000000-0000-0000-0000-000000000003", "connected", true, "durch den Router", "00000000-0000-0000-0000-000000000005", "timedOut", true, false, false, false, false, "00000000-0000-0000-0000-000000000006" ], "sockets" : [ { "id" : "00000000-0000-0000-0000-000000000001", "localIp" : null, "localPort" : 80, "node" : "00000000-0000-0000-0000-000000000203", "parent" : null, "protocol" : "tcp", "queued" : 0, "remoteIp" : null, "remotePort" : null, "session" : { "assembly" : 0, "attempts" : 0, "messages" : 0, "next" : 1000000, "pending" : false, "remote" : 0 }, "tcpState" : "CLOSED" }, { "id" : "00000000-0000-0000-0000-000000000002", "localIp" : null, "localPort" : 81, "node" : "00000000-0000-0000-0000-000000000203", "parent" : null, "protocol" : "tcp", "queued" : 0, "remoteIp" : null, "remotePort" : null, "session" : { "assembly" : 0, "attempts" : 0, "messages" : 0, "next" : 2000000, "pending" : false, "remote" : 0 }, "tcpState" : "LISTEN" }, { "id" : "00000000-0000-0000-0000-000000000003", "localIp" : "10.0.0.2", "localPort" : 50299, "node" : "00000000-0000-0000-0000-000000000201", "parent" : null, "protocol" : "tcp", "queued" : 0, "remoteIp" : "20.0.0.2", "remotePort" : 80, "session" : { "assembly" : 0, "attempts" : 3, "messages" : 0, "next" : 3000025, "pending" : false, "remote" : 4000001 }, "tcpState" : "CLOSED" }, { "id" : "00000000-0000-0000-0000-000000000004", "localIp" : "20.0.0.2", "localPort" : 80, "node" : "00000000-0000-0000-0000-000000000203", "parent" : "00000000-0000-0000-0000-000000000001", "protocol" : "tcp", "queued" : 0, "remoteIp" : "10.0.0.2", "remotePort" : 50299, "session" : { "assembly" : 0, "attempts" : 1, "messages" : 0, "next" : 4000001, "pending" : false, "remote" : 3000017 }, "tcpState" : "ESTABLISHED" }, { "id" : "00000000-0000-0000-0000-000000000005", "localIp" : "10.0.0.2", "localPort" : 63015, "node" : "00000000-0000-0000-0000-000000000201", "parent" : null, "protocol" : "tcp", "queued" : 0, "remoteIp" : "20.0.0.2", "remotePort" : 81, "session" : { "assembly" : 0, "attempts" : 3, "messages" : 0, "next" : 5000001, "pending" : false, "remote" : 0 }, "tcpState" : "CLOSED" }, { "id" : "00000000-0000-0000-0000-000000000006", "localIp" : null, "localPort" : 80, "node" : "00000000-0000-0000-0000-000000000203", "parent" : null, "protocol" : "tcp", "queued" : 0, "remoteIp" : null, "remotePort" : null, "session" : { "assembly" : 0, "attempts" : 0, "messages" : 0, "next" : 6000000, "pending" : false, "remote" : 0 }, "tcpState" : "LISTEN" } ], "switchTables" : { }, "time" : 45880, "traces" : [ { "after" : [ [ "state", "LISTEN" ] ], "before" : [ [ "state", "CLOSED" ] ], "detail" : "TCP CLOSED -> LISTEN", "direction" : "local", "id" : 1, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "accepted", "time" : 0 }, { "after" : [ [ "state", "LISTEN" ] ], "before" : [ [ "state", "CLOSED" ] ], "detail" : "TCP CLOSED -> LISTEN", "direction" : "local", "id" : 2, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "accepted", "time" : 0 }, { "after" : [ [ "state", "SYN_SENT" ] ], "before" : [ [ "state", "CLOSED" ] ], "detail" : "TCP CLOSED -> SYN_SENT", "direction" : "local", "id" : 3, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "accepted", "time" : 0 }, { "after" : [ [ "sourcePort", "50299" ], [ "destinationPort", "80" ], [ "sequenceNumber", "3000000" ], [ "acknowledgementNumber", "0" ], [ "flags", "SYN" ], [ "payloadLength", "0" ] ], "before" : [ ], "detail" : "TCP SYN", "direction" : "outbound", "id" : 4, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 1, "time" : 0 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "ARP request for 10.0.0.1", "direction" : "outbound", "frame" : 1, "id" : 5, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "time" : 0 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 1, "id" : 6, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "time" : 0 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 1, "id" : 7, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "time" : 55 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 1, "id" : 8, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "time" : 55 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:02:11" ], [ "senderIP", "10.0.0.2" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "10.0.0.1" ] ], "direction" : "inbound", "frame" : 1, "id" : 9, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "time" : 55 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "before" : [ ], "detail" : "ARP reply for 10.0.0.1", "direction" : "outbound", "frame" : 2, "id" : 10, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "time" : 55 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 2, "id" : 11, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "time" : 55 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "direction" : "inbound", "frame" : 2, "id" : 12, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "time" : 110 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "direction" : "inbound", "frame" : 2, "id" : 13, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "time" : 110 }, { "after" : [ ], "before" : [ [ "operation", "reply" ], [ "senderMAC", "02:00:00:00:02:21" ], [ "senderIP", "10.0.0.1" ], [ "targetMAC", "02:00:00:00:02:11" ], [ "targetIP", "10.0.0.2" ] ], "direction" : "inbound", "frame" : 2, "id" : 14, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "accepted", "time" : 110 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 3, "id" : 15, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 1, "time" : 110 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 3, "id" : 16, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "packet" : 1, "time" : 110 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 3, "id" : 17, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 1, "time" : 110 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 3, "id" : 18, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 1, "time" : 165 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 3, "id" : 19, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 1, "time" : 165 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 3, "id" : 20, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 1, "time" : 165 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "detail" : "firewall default policy", "direction" : "inbound", "frame" : 3, "id" : 21, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "packet" : 1, "time" : 165 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "63" ], [ "protocol", "6" ] ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "detail" : "TTL decremented", "direction" : "outbound", "frame" : 3, "id" : 22, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "forwarded", "packet" : 1, "time" : 165 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "ARP request for 20.0.0.2", "direction" : "outbound", "frame" : 4, "id" : 23, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "time" : 165 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 4, "id" : 24, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "time" : 165 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "ARP request for 20.0.0.2", "direction" : "outbound", "frame" : 5, "id" : 25, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "time" : 165 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 5, "id" : 26, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "time" : 165 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "63" ], [ "protocol", "6" ] ], "detail" : "waiting for ARP resolution of 20.0.0.2", "direction" : "outbound", "id" : 27, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "packet" : 1, "time" : 165 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 4, "id" : 28, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "time" : 220 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 4, "id" : 29, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "time" : 220 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:02:22" ], [ "senderIP", "20.0.0.1" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "20.0.0.2" ] ], "direction" : "inbound", "frame" : 4, "id" : 30, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "accepted", "time" : 220 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "before" : [ ], "detail" : "ARP reply for 20.0.0.2", "direction" : "outbound", "frame" : 6, "id" : 31, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "created", "time" : 220 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "before" : [ ], "direction" : "outbound", "frame" : 6, "id" : 32, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "sent", "time" : 220 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 5, "id" : 33, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "time" : 220 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 5, "id" : 34, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "time" : 220 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:02:22" ], [ "senderIP", "20.0.0.1" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "20.0.0.2" ] ], "direction" : "inbound", "frame" : 5, "id" : 35, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "accepted", "time" : 220 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "before" : [ ], "detail" : "ARP reply for 20.0.0.2", "direction" : "outbound", "frame" : 7, "id" : 36, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "created", "time" : 220 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "before" : [ ], "direction" : "outbound", "frame" : 7, "id" : 37, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "sent", "time" : 220 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "direction" : "inbound", "frame" : 6, "id" : 38, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "time" : 275 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "direction" : "inbound", "frame" : 6, "id" : 39, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "time" : 275 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "63" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 8, "id" : 40, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "forwarded", "packet" : 1, "time" : 275 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "before" : [ ], "direction" : "outbound", "frame" : 8, "id" : 41, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "packet" : 1, "time" : 275 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "before" : [ ], "direction" : "outbound", "frame" : 8, "id" : 42, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "packet" : 1, "time" : 275 }, { "after" : [ ], "before" : [ [ "operation", "reply" ], [ "senderMAC", "02:00:00:00:02:13" ], [ "senderIP", "20.0.0.2" ], [ "targetMAC", "02:00:00:00:02:22" ], [ "targetIP", "20.0.0.1" ] ], "direction" : "inbound", "frame" : 6, "id" : 43, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "time" : 275 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "direction" : "inbound", "frame" : 7, "id" : 44, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "time" : 275 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "direction" : "inbound", "frame" : 7, "id" : 45, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "time" : 275 }, { "after" : [ ], "before" : [ [ "operation", "reply" ], [ "senderMAC", "02:00:00:00:02:13" ], [ "senderIP", "20.0.0.2" ], [ "targetMAC", "02:00:00:00:02:22" ], [ "targetIP", "20.0.0.1" ] ], "direction" : "inbound", "frame" : 7, "id" : 46, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "time" : 275 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "direction" : "inbound", "frame" : 8, "id" : 47, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "packet" : 1, "time" : 330 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "direction" : "inbound", "frame" : 8, "id" : 48, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "packet" : 1, "time" : 330 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "63" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 8, "id" : 49, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "packet" : 1, "time" : 330 }, { "after" : [ ], "before" : [ [ "sourcePort", "50299" ], [ "destinationPort", "80" ], [ "sequenceNumber", "3000000" ], [ "acknowledgementNumber", "0" ], [ "flags", "SYN" ], [ "payloadLength", "0" ] ], "detail" : "TCP segment received", "direction" : "local", "id" : 50, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "accepted", "packet" : 1, "time" : 330 }, { "after" : [ [ "state", "SYN_RCVD" ] ], "before" : [ [ "state", "LISTEN" ] ], "detail" : "TCP LISTEN -> SYN_RCVD", "direction" : "local", "id" : 51, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "accepted", "time" : 330 }, { "after" : [ [ "sourcePort", "80" ], [ "destinationPort", "50299" ], [ "sequenceNumber", "4000000" ], [ "acknowledgementNumber", "3000001" ], [ "flags", "SYN+ACK" ], [ "payloadLength", "0" ] ], "before" : [ ], "detail" : "TCP SYN+ACK", "direction" : "outbound", "id" : 52, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "sent", "packet" : 2, "time" : 330 }, { "after" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 9, "id" : 53, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "sent", "packet" : 2, "time" : 330 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "before" : [ ], "direction" : "outbound", "frame" : 9, "id" : 54, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "created", "packet" : 2, "time" : 330 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "before" : [ ], "direction" : "outbound", "frame" : 9, "id" : 55, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "sent", "packet" : 2, "time" : 330 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "direction" : "inbound", "frame" : 9, "id" : 56, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 2, "time" : 385 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "direction" : "inbound", "frame" : 9, "id" : 57, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 2, "time" : 385 }, { "after" : [ ], "before" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 9, "id" : 58, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 2, "time" : 385 }, { "after" : [ ], "before" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "detail" : "established TCP traffic bypasses SYN-only filtering", "direction" : "inbound", "frame" : 9, "id" : 59, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "packet" : 2, "time" : 385 }, { "after" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "63" ], [ "protocol", "6" ] ], "before" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "detail" : "TTL decremented", "direction" : "outbound", "frame" : 9, "id" : 60, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "forwarded", "packet" : 2, "time" : 385 }, { "after" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "63" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 10, "id" : 61, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "forwarded", "packet" : 2, "time" : 385 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 10, "id" : 62, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "packet" : 2, "time" : 385 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 10, "id" : 63, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "packet" : 2, "time" : 385 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "direction" : "inbound", "frame" : 10, "id" : 64, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 2, "time" : 440 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "direction" : "inbound", "frame" : 10, "id" : 65, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 2, "time" : 440 }, { "after" : [ ], "before" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "63" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 10, "id" : 66, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 2, "time" : 440 }, { "after" : [ ], "before" : [ [ "sourcePort", "80" ], [ "destinationPort", "50299" ], [ "sequenceNumber", "4000000" ], [ "acknowledgementNumber", "3000001" ], [ "flags", "SYN+ACK" ], [ "payloadLength", "0" ] ], "detail" : "TCP segment received", "direction" : "local", "id" : 67, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "accepted", "packet" : 2, "time" : 440 }, { "after" : [ [ "state", "ESTABLISHED" ] ], "before" : [ [ "state", "SYN_SENT" ] ], "detail" : "TCP SYN_SENT -> ESTABLISHED", "direction" : "local", "id" : 68, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "accepted", "time" : 440 }, { "after" : [ [ "sourcePort", "50299" ], [ "destinationPort", "80" ], [ "sequenceNumber", "3000001" ], [ "acknowledgementNumber", "4000001" ], [ "flags", "ACK" ], [ "payloadLength", "0" ] ], "before" : [ ], "detail" : "TCP ACK", "direction" : "outbound", "id" : 69, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 3, "time" : 440 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 11, "id" : 70, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 3, "time" : 440 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 11, "id" : 71, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "packet" : 3, "time" : 440 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 11, "id" : 72, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 3, "time" : 440 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 11, "id" : 73, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 3, "time" : 495 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 11, "id" : 74, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 3, "time" : 495 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 11, "id" : 75, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 3, "time" : 495 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "detail" : "established TCP traffic bypasses SYN-only filtering", "direction" : "inbound", "frame" : 11, "id" : 76, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "packet" : 3, "time" : 495 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "63" ], [ "protocol", "6" ] ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "detail" : "TTL decremented", "direction" : "outbound", "frame" : 11, "id" : 77, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "forwarded", "packet" : 3, "time" : 495 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "63" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 12, "id" : 78, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "forwarded", "packet" : 3, "time" : 495 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "before" : [ ], "direction" : "outbound", "frame" : 12, "id" : 79, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "packet" : 3, "time" : 495 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "before" : [ ], "direction" : "outbound", "frame" : 12, "id" : 80, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "packet" : 3, "time" : 495 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "direction" : "inbound", "frame" : 12, "id" : 81, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "packet" : 3, "time" : 550 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "direction" : "inbound", "frame" : 12, "id" : 82, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "packet" : 3, "time" : 550 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "63" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 12, "id" : 83, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "packet" : 3, "time" : 550 }, { "after" : [ ], "before" : [ [ "sourcePort", "50299" ], [ "destinationPort", "80" ], [ "sequenceNumber", "3000001" ], [ "acknowledgementNumber", "4000001" ], [ "flags", "ACK" ], [ "payloadLength", "0" ] ], "detail" : "TCP segment received", "direction" : "local", "id" : 84, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "accepted", "packet" : 3, "time" : 550 }, { "after" : [ [ "state", "ESTABLISHED" ] ], "before" : [ [ "state", "SYN_RCVD" ] ], "detail" : "TCP SYN_RCVD -> ESTABLISHED", "direction" : "local", "id" : 85, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "accepted", "time" : 550 }, { "after" : [ [ "sourcePort", "50299" ], [ "destinationPort", "80" ], [ "sequenceNumber", "3000001" ], [ "acknowledgementNumber", "0" ], [ "flags", "PSH" ], [ "payloadLength", "16" ] ], "before" : [ ], "detail" : "TCP data segment 1\/1", "direction" : "outbound", "id" : 86, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 4, "time" : 550 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 13, "id" : 87, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 4, "time" : 550 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 13, "id" : 88, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "packet" : 4, "time" : 550 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 13, "id" : 89, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 4, "time" : 550 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 13, "id" : 90, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 4, "time" : 605 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 13, "id" : 91, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 4, "time" : 605 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 13, "id" : 92, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 4, "time" : 605 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "detail" : "established TCP traffic bypasses SYN-only filtering", "direction" : "inbound", "frame" : 13, "id" : 93, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "packet" : 4, "time" : 605 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "63" ], [ "protocol", "6" ] ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "detail" : "TTL decremented", "direction" : "outbound", "frame" : 13, "id" : 94, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "forwarded", "packet" : 4, "time" : 605 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "63" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 14, "id" : 95, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "forwarded", "packet" : 4, "time" : 605 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "before" : [ ], "direction" : "outbound", "frame" : 14, "id" : 96, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "packet" : 4, "time" : 605 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "before" : [ ], "direction" : "outbound", "frame" : 14, "id" : 97, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "packet" : 4, "time" : 605 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "direction" : "inbound", "frame" : 14, "id" : 98, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "packet" : 4, "time" : 660 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "direction" : "inbound", "frame" : 14, "id" : 99, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "packet" : 4, "time" : 660 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "63" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 14, "id" : 100, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "packet" : 4, "time" : 660 }, { "after" : [ ], "before" : [ [ "sourcePort", "50299" ], [ "destinationPort", "80" ], [ "sequenceNumber", "3000001" ], [ "acknowledgementNumber", "0" ], [ "flags", "PSH" ], [ "payloadLength", "16" ] ], "detail" : "TCP segment received", "direction" : "local", "id" : 101, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "accepted", "packet" : 4, "time" : 660 }, { "after" : [ [ "sourcePort", "80" ], [ "destinationPort", "50299" ], [ "sequenceNumber", "4000001" ], [ "acknowledgementNumber", "3000017" ], [ "flags", "ACK" ], [ "payloadLength", "0" ] ], "before" : [ ], "detail" : "TCP ACK", "direction" : "outbound", "id" : 102, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "sent", "packet" : 5, "time" : 660 }, { "after" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 15, "id" : 103, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "sent", "packet" : 5, "time" : 660 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "before" : [ ], "direction" : "outbound", "frame" : 15, "id" : 104, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "created", "packet" : 5, "time" : 660 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "before" : [ ], "direction" : "outbound", "frame" : 15, "id" : 105, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "sent", "packet" : 5, "time" : 660 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "direction" : "inbound", "frame" : 15, "id" : 106, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 5, "time" : 715 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "direction" : "inbound", "frame" : 15, "id" : 107, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 5, "time" : 715 }, { "after" : [ ], "before" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 15, "id" : 108, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 5, "time" : 715 }, { "after" : [ ], "before" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "detail" : "established TCP traffic bypasses SYN-only filtering", "direction" : "inbound", "frame" : 15, "id" : 109, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "packet" : 5, "time" : 715 }, { "after" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "63" ], [ "protocol", "6" ] ], "before" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "detail" : "TTL decremented", "direction" : "outbound", "frame" : 15, "id" : 110, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "forwarded", "packet" : 5, "time" : 715 }, { "after" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "63" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 16, "id" : 111, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "forwarded", "packet" : 5, "time" : 715 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 16, "id" : 112, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "packet" : 5, "time" : 715 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 16, "id" : 113, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "packet" : 5, "time" : 715 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "direction" : "inbound", "frame" : 16, "id" : 114, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 5, "time" : 770 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "direction" : "inbound", "frame" : 16, "id" : 115, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 5, "time" : 770 }, { "after" : [ ], "before" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "63" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 16, "id" : 116, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 5, "time" : 770 }, { "after" : [ ], "before" : [ [ "sourcePort", "80" ], [ "destinationPort", "50299" ], [ "sequenceNumber", "4000001" ], [ "acknowledgementNumber", "3000017" ], [ "flags", "ACK" ], [ "payloadLength", "0" ] ], "detail" : "TCP segment received", "direction" : "local", "id" : 117, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "accepted", "packet" : 5, "time" : 770 }, { "after" : [ [ "state", "SYN_SENT" ] ], "before" : [ [ "state", "CLOSED" ] ], "detail" : "TCP CLOSED -> SYN_SENT", "direction" : "local", "id" : 118, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "accepted", "time" : 770 }, { "after" : [ [ "sourcePort", "63015" ], [ "destinationPort", "81" ], [ "sequenceNumber", "5000000" ], [ "acknowledgementNumber", "0" ], [ "flags", "SYN" ], [ "payloadLength", "0" ] ], "before" : [ ], "detail" : "TCP SYN", "direction" : "outbound", "id" : 119, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 6, "time" : 770 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 17, "id" : 120, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 6, "time" : 770 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 17, "id" : 121, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "packet" : 6, "time" : 770 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 17, "id" : 122, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 6, "time" : 770 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 17, "id" : 123, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 6, "time" : 825 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 17, "id" : 124, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 6, "time" : 825 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 17, "id" : 125, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 6, "time" : 825 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "detail" : "TCP matched rule #1", "direction" : "inbound", "frame" : 17, "id" : 126, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "dropped", "packet" : 6, "time" : 825 }, { "after" : [ [ "sourcePort", "63015" ], [ "destinationPort", "81" ], [ "sequenceNumber", "5000000" ], [ "acknowledgementNumber", "0" ], [ "flags", "SYN" ], [ "payloadLength", "0" ] ], "before" : [ ], "detail" : "TCP SYN retransmission attempt 2", "direction" : "outbound", "id" : 127, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "retransmitted", "packet" : 7, "time" : 8325 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 18, "id" : 128, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 7, "time" : 8325 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 18, "id" : 129, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "packet" : 7, "time" : 8325 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 18, "id" : 130, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 7, "time" : 8325 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 18, "id" : 131, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 7, "time" : 8380 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 18, "id" : 132, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 7, "time" : 8380 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 18, "id" : 133, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 7, "time" : 8380 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "detail" : "TCP matched rule #1", "direction" : "inbound", "frame" : 18, "id" : 134, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "dropped", "packet" : 7, "time" : 8380 }, { "after" : [ [ "sourcePort", "63015" ], [ "destinationPort", "81" ], [ "sequenceNumber", "5000000" ], [ "acknowledgementNumber", "0" ], [ "flags", "SYN" ], [ "payloadLength", "0" ] ], "before" : [ ], "detail" : "TCP SYN retransmission attempt 3", "direction" : "outbound", "id" : 135, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "retransmitted", "packet" : 8, "time" : 15825 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 19, "id" : 136, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 8, "time" : 15825 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 19, "id" : 137, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "packet" : 8, "time" : 15825 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 19, "id" : 138, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 8, "time" : 15825 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 19, "id" : 139, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 8, "time" : 15880 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 19, "id" : 140, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 8, "time" : 15880 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "direction" : "inbound", "frame" : 19, "id" : 141, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 8, "time" : 15880 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "detail" : "TCP matched rule #1", "direction" : "inbound", "frame" : 19, "id" : 142, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "dropped", "packet" : 8, "time" : 15880 }, { "after" : [ [ "state", "CLOSED" ] ], "before" : [ [ "state", "SYN_SENT" ] ], "detail" : "TCP SYN_SENT -> CLOSED", "direction" : "local", "id" : 143, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "accepted", "time" : 23325 }, { "after" : [ [ "sourcePort", "50299" ], [ "destinationPort", "80" ], [ "sequenceNumber", "3000017" ], [ "acknowledgementNumber", "0" ], [ "flags", "PSH" ], [ "payloadLength", "8" ] ], "before" : [ ], "detail" : "TCP data segment 1\/1", "direction" : "outbound", "id" : 144, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 9, "time" : 23325 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 20, "id" : 145, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 9, "time" : 23325 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 20, "id" : 146, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "packet" : 9, "time" : 23325 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 20, "id" : 147, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 9, "time" : 23325 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "detail" : "global packet-loss simulation", "direction" : "inbound", "frame" : 20, "id" : 148, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "dropped", "packet" : 9, "time" : 23380 }, { "after" : [ [ "sourcePort", "50299" ], [ "destinationPort", "80" ], [ "sequenceNumber", "3000017" ], [ "acknowledgementNumber", "0" ], [ "flags", "PSH" ], [ "payloadLength", "8" ] ], "before" : [ ], "detail" : "TCP data retransmission attempt 2", "direction" : "outbound", "id" : 149, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "retransmitted", "packet" : 10, "time" : 30880 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 21, "id" : 150, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 10, "time" : 30880 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 21, "id" : 151, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "packet" : 10, "time" : 30880 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 21, "id" : 152, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 10, "time" : 30880 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "detail" : "global packet-loss simulation", "direction" : "inbound", "frame" : 21, "id" : 153, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "dropped", "packet" : 10, "time" : 30935 }, { "after" : [ [ "sourcePort", "50299" ], [ "destinationPort", "80" ], [ "sequenceNumber", "3000017" ], [ "acknowledgementNumber", "0" ], [ "flags", "PSH" ], [ "payloadLength", "8" ] ], "before" : [ ], "detail" : "TCP data retransmission attempt 3", "direction" : "outbound", "id" : 154, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "retransmitted", "packet" : 11, "time" : 38380 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "6" ] ], "before" : [ ], "direction" : "outbound", "frame" : 22, "id" : 155, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 11, "time" : 38380 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 22, "id" : 156, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "packet" : 11, "time" : 38380 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 22, "id" : 157, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 11, "time" : 38380 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "detail" : "global packet-loss simulation", "direction" : "inbound", "frame" : 22, "id" : 158, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "dropped", "packet" : 11, "time" : 38435 }, { "after" : [ [ "state", "CLOSED" ] ], "before" : [ [ "state", "ESTABLISHED" ] ], "detail" : "TCP ESTABLISHED -> CLOSED", "direction" : "local", "id" : 159, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "accepted", "time" : 45880 }, { "after" : [ [ "state", "CLOSED" ] ], "before" : [ [ "state", "LISTEN" ] ], "detail" : "TCP LISTEN -> CLOSED", "direction" : "local", "id" : 160, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "accepted", "time" : 45880 }, { "after" : [ [ "state", "LISTEN" ] ], "before" : [ [ "state", "CLOSED" ] ], "detail" : "TCP CLOSED -> LISTEN", "direction" : "local", "id" : 161, "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "accepted", "time" : 45880 } ] }