{
  "frames": {
    "00000000-0000-0000-0000-000000000101": [
      {
        "time": 727,
        "source": "02:00:00:00:01:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.10"
      },
      {
        "time": 961,
        "source": "02:00:00:00:01:12",
        "destination": "02:00:00:00:01:11",
        "arp": 2,
        "senderIp": "192.168.0.10",
        "targetIp": "192.168.0.20"
      },
      {
        "time": 963,
        "source": "02:00:00:00:01:11",
        "destination": "02:00:00:00:01:12",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.10",
        "protocol": 17,
        "sourcePort": 51710,
        "destinationPort": 53,
        "payload": "ID=39889 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
      },
      {
        "time": 1196,
        "source": "02:00:00:00:01:12",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.10",
        "targetIp": "192.168.0.11"
      },
      {
        "time": 1645,
        "source": "02:00:00:00:01:12",
        "destination": "02:00:00:00:01:11",
        "sourceIp": "192.168.0.10",
        "destinationIp": "192.168.0.20",
        "protocol": 17,
        "sourcePort": 53,
        "destinationPort": 51710,
        "payload": "ID=39889 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A 3600 192.168.0.40\n"
      }
    ],
    "00000000-0000-0000-0000-000000000102": [
      {
        "time": 848,
        "source": "02:00:00:00:01:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.10"
      },
      {
        "time": 849,
        "source": "02:00:00:00:01:12",
        "destination": "02:00:00:00:01:11",
        "arp": 2,
        "senderIp": "192.168.0.10",
        "targetIp": "192.168.0.20"
      },
      {
        "time": 1076,
        "source": "02:00:00:00:01:11",
        "destination": "02:00:00:00:01:12",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.10",
        "protocol": 17,
        "sourcePort": 51710,
        "destinationPort": 53,
        "payload": "ID=39889 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
      },
      {
        "time": 1085,
        "source": "02:00:00:00:01:12",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.10",
        "targetIp": "192.168.0.11"
      },
      {
        "time": 1308,
        "source": "02:00:00:00:01:13",
        "destination": "02:00:00:00:01:12",
        "arp": 2,
        "senderIp": "192.168.0.11",
        "targetIp": "192.168.0.10"
      },
      {
        "time": 1308,
        "source": "02:00:00:00:01:12",
        "destination": "02:00:00:00:01:13",
        "sourceIp": "192.168.0.10",
        "destinationIp": "192.168.0.11",
        "protocol": 17,
        "sourcePort": 52403,
        "destinationPort": 53,
        "payload": "ID=12187 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
      },
      {
        "time": 1533,
        "source": "02:00:00:00:01:13",
        "destination": "02:00:00:00:01:12",
        "sourceIp": "192.168.0.11",
        "destinationIp": "192.168.0.10",
        "protocol": 17,
        "sourcePort": 53,
        "destinationPort": 52403,
        "payload": "ID=12187 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A 3600 192.168.0.40\n"
      },
      {
        "time": 1534,
        "source": "02:00:00:00:01:12",
        "destination": "02:00:00:00:01:11",
        "sourceIp": "192.168.0.10",
        "destinationIp": "192.168.0.20",
        "protocol": 17,
        "sourcePort": 53,
        "destinationPort": 51710,
        "payload": "ID=39889 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A 3600 192.168.0.40\n"
      }
    ],
    "00000000-0000-0000-0000-000000000103": [
      {
        "time": 848,
        "source": "02:00:00:00:01:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.10"
      },
      {
        "time": 1196,
        "source": "02:00:00:00:01:12",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.10",
        "targetIp": "192.168.0.11"
      },
      {
        "time": 1196,
        "source": "02:00:00:00:01:13",
        "destination": "02:00:00:00:01:12",
        "arp": 2,
        "senderIp": "192.168.0.11",
        "targetIp": "192.168.0.10"
      },
      {
        "time": 1420,
        "source": "02:00:00:00:01:12",
        "destination": "02:00:00:00:01:13",
        "sourceIp": "192.168.0.10",
        "destinationIp": "192.168.0.11",
        "protocol": 17,
        "sourcePort": 52403,
        "destinationPort": 53,
        "payload": "ID=12187 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
      },
      {
        "time": 1421,
        "source": "02:00:00:00:01:13",
        "destination": "02:00:00:00:01:12",
        "sourceIp": "192.168.0.11",
        "destinationIp": "192.168.0.10",
        "protocol": 17,
        "sourcePort": 53,
        "destinationPort": 52403,
        "payload": "ID=12187 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A 3600 192.168.0.40\n"
      }
    ],
    "00000000-0000-0000-0000-000000000104": [
      {
        "time": 848,
        "source": "02:00:00:00:01:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.10"
      },
      {
        "time": 1196,
        "source": "02:00:00:00:01:12",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.10",
        "targetIp": "192.168.0.11"
      }
    ]
  },
  "events": [
    [
      716,
      "holeIPAdresse www.schule.de called"
    ],
    [
      1645,
      "holeIPAdresse www.schule.de returned 192.168.0.40"
    ]
  ]
}